Redirecting problems - Free Antivirus Forum

Redirecting problems

BullGuard Antivirus Forum > Virus Removal > Removal Help > Redirecting problems

Forum Quick Jump

[ << Previous Thread | Next Thread >> ]

james115511
New Member

Date Joined Nov 2008
Total Posts : 3

Posted 11-19-2008 5:06 (GMT +1)

I have recently been having problems with getting redirected with just about every link i click. It happens when i click i link from any site, it sometimes redirects or just wont load the page.

(running windows xp)

Touch
Forum Moderator

Date Joined Jun 2004
Total Posts : 14350

Posted 11-19-2008 7:52 (GMT +1)

Hello

Download this program: http://www.ctrlaltdel.dk/Fix_download.exe

and save it on the desktop. Then double click on it (Fix_download.exe).

You may have to allow the program to download files from the web!

The program download the necessary cleaning programs. Once the program
is downloaded, there will be a folder on your desktop named
Fix. – if the instructions not automatically opens, so
double-click "FIX_manual.htm" in Fix folder.

Please follow the instructions and copy the logs here, in this Topic.

Note : Fix_download.exe is detected by some antivirus programs as a "RiskTool" /infection; it is not a virus. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.

If necessary, temporarily disable your anti-virus, real-time protection before downloading

Do NOT post your problem in someone elses thread.

Member of - Alliance of Security Analysis Professionals

A non-profit, volunteer network.

james115511
New Member

Date Joined Nov 2008
Total Posts : 3

Posted 11-19-2008 8:07 (GMT +1)

i downloaded it and installed and it didn't download any of the 4 programs it said in the manual. I downloaded Malwarebytes on my own now and when i click Run nothing happens.

Post Edited (james115511) : 19-11-2008 19:09:44 GMT

Touch
Forum Moderator

Date Joined Jun 2004
Total Posts : 14350

Posted 11-20-2008 6:47 (GMT +1)

Ok.

Download malwarebyte

http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html?tag=mncol;pop&cdlPid=10878968
Rename the file to setup.exe
Run the setup.exe file
Rename the directory it's installing to as Malware and rename the folder as Malware too in the installation setup screen
When it gets to the final step of the installation it will seem like it froze....it hasn't but it will take anywhere from 15mins to an hour to get through that step so just let it do its thing.
Go into the Malware folder in through Program Files
Rename the mbam.exe or what not file to mab.exe and run it.
Do a full computer scan
Check all and remove/fix/delete them.

Restart your computer and post the log

Do NOT post your problem in someone elses thread.

Member of - Alliance of Security Analysis Professionals

A non-profit, volunteer network.

james115511
New Member

Date Joined Nov 2008
Total Posts : 3

Posted 11-20-2008 4:20 (GMT +1)

Problem solved! Malwarebytes took care of everything. Here is my log, not sure if you still wanted to see it.

Malwarebytes' Anti-Malware 1.30
Database version: 1306
Windows 5.1.2600 Service Pack 3

11/20/2008 9:54:40 AM
mbam-log-2008-11-20 (09-54-02).txt

Scan type: Full Scan (C:\|)
Objects scanned: 64102
Time elapsed: 7 minute(s), 26 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 3
Registry Values Infected: 1
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 7

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\tdssdata (Trojan.Agent) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\tdss (Trojan.Agent) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\xpre (Trojan.Downloader) -> No action taken.

Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{a26503fe-b3b8-4910-a9dc-9cbd25c6b8d6} (Trojan.BHO) -> No action taken.

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\WINDOWS\system32\TDSSfcof.dll (Rootkit.Agent) -> No action taken.
C:\WINDOWS\system32\TDSSjriv.dll (Rootkit.Agent) -> No action taken.
C:\WINDOWS\system32\TDSSkdrm.dll (Rootkit.Agent) -> No action taken.
C:\WINDOWS\system32\TDSSqyaa.log (Trojan.TDSS) -> No action taken.
C:\WINDOWS\system32\TDSSxbad.dll (Rootkit.Agent) -> No action taken.
C:\WINDOWS\system32\TDSSxnaq.dll (Rootkit.Agent) -> No action taken.
C:\WINDOWS\system32\drivers\TDSSrftc.sys (Rootkit.Agent) -> No action taken.

Touch
Forum Moderator

Date Joined Jun 2004
Total Posts : 14350

Posted 11-20-2008 5:38 (GMT +1)

I´ll suggest you post a combofix log ;-)

Do NOT post your problem in someone elses thread.

Member of - Alliance of Security Analysis Professionals

A non-profit, volunteer network.

Forum Information

Currently it is Friday, January 09, 2009 11:54 PM (GMT +1)
There are a total of 66.009 posts in 16.187 threads.
In the last 3 days there were 18 new threads and 108 reply posts. View Active Threads