1.

Solve : Internet redirection persists.?

Answer»

I went through all of the steps and still I am getting redirected. I downloaded and installed Firefox to see if IE was corrupted, but the redirection happens on Firefox also. The computer also seems to run slow, and I hear a lot of hard disk activity. Here are my logs.

Thanks in advance.

Regnistep

[Saving space, attachment deleted by admin]1. Go to start run, TYPE %temp% , ok , del all the folders/files in that folder
2. Go to start run, type prefetch , ok then del all the folders/files in that folder
3. Empty recycling bin
4. Download and install spybot http://download.cnet.com/Spybot-Search-amp-Destroy/3000-8022_4-10122137.html . scan for updates, then check for problems and then remove what it has found. (watch the video for more info
5. Restart Computer
6. Download and install regsofts http://www.regsofts.com/ (do a full scan, then click fix errors) then restart computer

If that still does not fix your problem install an antivirus scanner (if you do not already have one). Avast or avg is recommended and are both free. (Remember only one antvirus scanner per computer)

If steps 1-6 did not fix your problem, i will help you with the next steps.I got as far as teh Spybot step, and now the computer is turning itself off and offering me 30 seconds to select safe mode, and then it shuts down and restarts the whole process again. I turned the power off to stop this endless cycle. Any clue on what to do now?Hello regnistep!! I will be handling your case under the supervision of Malware Removal Expert Evilfantasy.

A few things before we start....
1. Please Read All Instructions Carefully.
2. If you don't understand something, stop and ask! Don't keep going on.
3. Please do not run any other tools or scans whilst I am helping you.
4. If you have to go away for an extended period of time, let me know.
5. Please continue to respond until I give you the "All Clear".
(Just because you can't see a problem doesn't mean it isn't there)



1) Have "HijackThis" fix the following items in the list below by placing a check in the appropriate boxes.Confirm that you have only the listed ones checked, then press <Fix checked> and close"HijackThis".Please close any open programs before doing this fix.


Quote

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =


2) Malwarebyte Antimalware is already installed in your system.Perform a full scan with it as follows.Make sure it is updated before performing a scan.


* Open Malwarebyte Antimalware.Under the "Scanner" tab, select "Perform Full Scan" and click "Scan".In the dialog box place a tick mark next to all your local drives (Earlier you scanned only C drive.Malware can reside in other drives as well.)

* Now click "Start Scan".

* The scan may take some time to finish,so please be patient.

* When the scan is complete, click OK, then Show Results to view the results.

* Make sure that everything is checked, and click Remove Selected.

* When disinfection is completed, a log will open in NOTEPAD and you may be prompted to Restart.(See Extra Note)

* The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.

* Copy&Paste the entire report in your next reply.

PLEASE NOTE:
If MBAM encounters a file that is difficult to remove, you may be asked to reboot your computer so it can proceed with the disinfection process. Regardless if prompted to restart the computer or not, please do so immediately.


3) Next download RootRepeal.rar and unzip it to your Desktop. You'll need WinRAR to extract it

* Double click RootRepeal.exe to start the program
* Click on the Report tab at the bottom of the program window
* Click the Scan button
* In the Select Scan dialog, check:
o Drivers
o Files
o Processes
o SSDT
o Stealth Objects
o Hidden SERVICES
* Click the OK button
* In the next dialog, select all drives showing
* Click OK to start the scan


The scan can take some time. DO NOT run any other programs while the scan is RUNNING
* When the scan is complete, the Save Report button will become available
* Click this and save the report to your Desktop as RootRepeal.txt
* Go to File, then Exit to close the program
*Attach this log in your next post.

4) Download[ DDS by sUBs to your desktop.
Your antivirus software might question the file. If it does, allow it.

* Double click DDS.scr to run it and wait for the scan to finish
* When finished DDS.txt will open
* A small while later, a prompt will open. Answer Yes
* DDS will continue scanning
* When done, Attach.txt will open

Copy and paste the DDS.txt and attach Attach.txt



Discussion

No Comment Found