Mike "Wuzzy121". Rest in peace, brother

Go Back   Tacoma World Forums > Off-Topic > Technology

Notices

Google Redirect virus

Reply
 
Thread Tools Search this Thread
Old 03-21-2012, 01:45 PM   #1
macgyver [OP] macgyver is offline
Senior Member
macgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shed
 
macgyver's Avatar
Name: Brad
Joined: Aug 2009, #21173
Location: Canton, GA
Gender: Male
Posts: 3,566
macgyver's Tacoma Gallery
Google Redirect virus

Hey guys,

My home desktop has been infected with a google redirect virus in the last week or so that I can't seem to get rid of. The last 3 night's I've been trying to get rid of it and can't.

Essentially when I do a google search and click on the returned links, it re-directs me to random pages. Very annoying.

So far I've run:
AVG (My primary anti-virus)
CCleaner,
Adaware,
Spybot S&D,
Malwarebytes (3 times),
TDSS Killer (twice),
Combofix (twice),
Norton fixTDss,
Minitoolbox (I think that's the name),
and a few others..honestly, I've lost count at this point. None of them have fixed it.

I'm tempted to just dump my pictures and music on my networked external hard drive and go buy a new laptop tonight (I've been needing a new one anyways). Supposedly it doesn't affect pictures, documents, music, etc so I should be ok moving those. It only affects drivers and system files.

It's probably time to ditch the desktop anyways...it's an old Dell with a Pentium 4 processor, 1G ram, and a 60G hard drive, running XP. But it works great for what I use it for up until I got the virus. I only use it for the internet, listening to music, and excel spreadsheets for my business.

Any ideas on how to get rid of this thing before I give up? I've been reading posts on bleepingcomputer.com and various tutorials I've googled and nothing has worked yet. It keeps coming back. GRRRRRR It's so frustrating.
  Reply With Quote
Old 03-21-2012, 01:47 PM   #2
Senior Member
STLTaco09 has a spectacular aura aboutSTLTaco09 has a spectacular aura aboutSTLTaco09 has a spectacular aura about
Joined: Dec 2008, #11281
Gender: Male
Posts: 361
STLTaco09's Tacoma Gallery
SuperAntiSpyware, but if those you already listed didn't clean it, I dont have high hopes in general.
  Reply With Quote
Old 03-21-2012, 01:49 PM   #3
That one guy
Aw9d is one of the sharper tools in the shedAw9d is one of the sharper tools in the shedAw9d is one of the sharper tools in the shedAw9d is one of the sharper tools in the shedAw9d is one of the sharper tools in the shedAw9d is one of the sharper tools in the shedAw9d is one of the sharper tools in the shedAw9d is one of the sharper tools in the shedAw9d is one of the sharper tools in the shedAw9d is one of the sharper tools in the shedAw9d is one of the sharper tools in the shed
 
Aw9d's Avatar
Name: Colby
Joined: Nov 2011, #66635
Location: Az
Posts: 8,605
Aw9d's Tacoma Gallery
You need to boot into safe mode and run these or boot up in diagnostic mode.

start-run-msconfig
choose diagnostic mode.. this will only load Microsoft services. Then do your run with antvirus.

People just run these which is great and all, but if its a service, it won't try and stop it to remove it. So you need to have all non-essential services stopped.
  Reply With Quote
Old 03-21-2012, 01:50 PM   #4
macgyver [OP] macgyver is offline
Senior Member
macgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shed
 
macgyver's Avatar
Name: Brad
Joined: Aug 2009, #21173
Location: Canton, GA
Gender: Male
Posts: 3,566
macgyver's Tacoma Gallery
Quote:
Originally Posted by Idaholandho View Post
Damn porn
I don't use the desktop for that...

Either my sister or my girlfriend are probably the culprits. I am very very cautious about what I download and the links I click on. The is the first virus I've had on this computer.
  Reply With Quote
Old 03-21-2012, 01:51 PM   #5
macgyver [OP] macgyver is offline
Senior Member
macgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shed
 
macgyver's Avatar
Name: Brad
Joined: Aug 2009, #21173
Location: Canton, GA
Gender: Male
Posts: 3,566
macgyver's Tacoma Gallery
Quote:
Originally Posted by Aw9d View Post
You need to boot into safe mode and run these or boot up in diagnostic mode.

start-run-msconfig
choose diagnostic mode.. this will only load Microsoft services. Then do your run with antvirus.

People just run these which is great and all, but if its a service, it won't try and stop it to remove it. So you need to have all non-essential services stopped.

I've tried that already though... I've run a few of them in Safe Mode (No networking)
  Reply With Quote
Old 03-21-2012, 01:51 PM   #6
KF5TUQ
BERTHDZ has much to be proud ofBERTHDZ has much to be proud ofBERTHDZ has much to be proud ofBERTHDZ has much to be proud ofBERTHDZ has much to be proud ofBERTHDZ has much to be proud ofBERTHDZ has much to be proud ofBERTHDZ has much to be proud of
 
BERTHDZ's Avatar
Name: Bert
Joined: Feb 2011, #52059
Location: Pharr, TX - RGV
Age: 33
Gender: Male
Posts: 293
BERTHDZ's Tacoma Gallery
slave the drive if you can to another computer and do a full scan using Malwarebytes
  Reply With Quote
Old 03-21-2012, 01:54 PM   #7
Banned
arrrghhh is one of the sharper tools in the shedarrrghhh is one of the sharper tools in the shedarrrghhh is one of the sharper tools in the shedarrrghhh is one of the sharper tools in the shedarrrghhh is one of the sharper tools in the shedarrrghhh is one of the sharper tools in the shedarrrghhh is one of the sharper tools in the shedarrrghhh is one of the sharper tools in the shedarrrghhh is one of the sharper tools in the shedarrrghhh is one of the sharper tools in the shedarrrghhh is one of the sharper tools in the shed
Joined: Jan 2009, #12748
Location: Denver, CO
Gender: Male
Posts: 2,076
arrrghhh's Tacoma Gallery
Quote:
Originally Posted by BERTHDZ View Post
slave the drive if you can to another computer and do a full scan using Malwarebytes
Malwarebytes is good.

I've had this same virus, and the ONLY thing that removed it was ComboFix...
  Reply With Quote
Old 03-21-2012, 01:54 PM   #9
macgyver [OP] macgyver is offline
Senior Member
macgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shed
 
macgyver's Avatar
Name: Brad
Joined: Aug 2009, #21173
Location: Canton, GA
Gender: Male
Posts: 3,566
macgyver's Tacoma Gallery
Quote:
Originally Posted by BERTHDZ View Post
slave the drive if you can to another computer and do a full scan using Malwarebytes
I don't have another computer to try that with other than my old laptop. Good idea though. Maybe my next door neighbor has one I can try that with. He's a computer programmer by profession.
  Reply With Quote
Old 03-21-2012, 01:55 PM   #10
macgyver [OP] macgyver is offline
Senior Member
macgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shed
 
macgyver's Avatar
Name: Brad
Joined: Aug 2009, #21173
Location: Canton, GA
Gender: Male
Posts: 3,566
macgyver's Tacoma Gallery
Quote:
Originally Posted by arrrghhh View Post
Malwarebytes is good.

I've had this same virus, and the ONLY thing that removed it was ComboFix...
I've run combofix twice now... No luck. Is it possible to run combofix in safe mode? When I booted in safe mode, I didn't see it.
  Reply With Quote
Old 03-21-2012, 02:00 PM   #11
Banned
arrrghhh is one of the sharper tools in the shedarrrghhh is one of the sharper tools in the shedarrrghhh is one of the sharper tools in the shedarrrghhh is one of the sharper tools in the shedarrrghhh is one of the sharper tools in the shedarrrghhh is one of the sharper tools in the shedarrrghhh is one of the sharper tools in the shedarrrghhh is one of the sharper tools in the shedarrrghhh is one of the sharper tools in the shedarrrghhh is one of the sharper tools in the shedarrrghhh is one of the sharper tools in the shed
Joined: Jan 2009, #12748
Location: Denver, CO
Gender: Male
Posts: 2,076
arrrghhh's Tacoma Gallery
Quote:
Originally Posted by macgyver View Post
I've run combofix twice now... No luck. Is it possible to run combofix in safe mode? When I booted in safe mode, I didn't see it.
Crap. I'll look around, I swear that was the way I fixed it.

I *think* you can run it in safe mode... make sure you do safe mode w/networking.

Edit - I forgot, this is a rootkit. You need something like TDSSKiller. IIRC, TDSSKiller got it no problemo. Either way, you might want to consider a complete wipe of the OS & restore of your OS and all your applications. A pain, but as with any virus/malware, there's always the question of "did I really get it all...?" - and unfortunately there's no way to know for sure.

http://pctechnotes.com/how-to-easily...edirect-virus/
  Reply With Quote
Old 03-21-2012, 02:02 PM   #12
That one guy
Aw9d is one of the sharper tools in the shedAw9d is one of the sharper tools in the shedAw9d is one of the sharper tools in the shedAw9d is one of the sharper tools in the shedAw9d is one of the sharper tools in the shedAw9d is one of the sharper tools in the shedAw9d is one of the sharper tools in the shedAw9d is one of the sharper tools in the shedAw9d is one of the sharper tools in the shedAw9d is one of the sharper tools in the shedAw9d is one of the sharper tools in the shed
 
Aw9d's Avatar
Name: Colby
Joined: Nov 2011, #66635
Location: Az
Posts: 8,605
Aw9d's Tacoma Gallery
Quote:
Originally Posted by macgyver View Post
I've tried that already though... I've run a few of them in Safe Mode (No networking)
Did you try diagnostic mode? A lot of AV won't run right in safe mode.
  Reply With Quote
Old 03-21-2012, 02:05 PM   #13
Easily Replaceable Member
elmo7 is one of the sharper tools in the shedelmo7 is one of the sharper tools in the shedelmo7 is one of the sharper tools in the shedelmo7 is one of the sharper tools in the shedelmo7 is one of the sharper tools in the shedelmo7 is one of the sharper tools in the shedelmo7 is one of the sharper tools in the shedelmo7 is one of the sharper tools in the shedelmo7 is one of the sharper tools in the shedelmo7 is one of the sharper tools in the shedelmo7 is one of the sharper tools in the shed
Joined: Aug 2011, #61553
Location: SC
Gender: Male
Posts: 713
elmo7's Tacoma Gallery
Copy data off and boot from the Install/restore disk and start fresh and clean. Gotta be easier than loading and running a bunch of stuff that doesn't clean it up. You benefit from that too performance-wise.

After that, create users on the PC - yourself and Others. Give the Others piddly rights so they can't install crap.
  Reply With Quote
Old 03-21-2012, 02:09 PM   #14
Banned
arrrghhh is one of the sharper tools in the shedarrrghhh is one of the sharper tools in the shedarrrghhh is one of the sharper tools in the shedarrrghhh is one of the sharper tools in the shedarrrghhh is one of the sharper tools in the shedarrrghhh is one of the sharper tools in the shedarrrghhh is one of the sharper tools in the shedarrrghhh is one of the sharper tools in the shedarrrghhh is one of the sharper tools in the shedarrrghhh is one of the sharper tools in the shedarrrghhh is one of the sharper tools in the shed
Joined: Jan 2009, #12748
Location: Denver, CO
Gender: Male
Posts: 2,076
arrrghhh's Tacoma Gallery
Quote:
Originally Posted by elmo7 View Post
After that, create users on the PC - yourself and Others. Give the Others piddly rights so they can't install crap.
Never a bad idea.

Or Linux - have a dual-boot setup just for stupid people that use your computer. This way, no chance of viruses when others are using it .

Seriously tho, rootkits are bad news. TDSSKiller should get rid of the actual Google redirect issue... but like I and others have said... pillaging and starting over is sometimes easier & quicker.
  Reply With Quote
Old 03-21-2012, 02:09 PM   #15
macgyver [OP] macgyver is offline
Senior Member
macgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shed
 
macgyver's Avatar
Name: Brad
Joined: Aug 2009, #21173
Location: Canton, GA
Gender: Male
Posts: 3,566
macgyver's Tacoma Gallery
Quote:
Originally Posted by elmo7 View Post
Copy data off and boot from the Install/restore disk and start fresh and clean. Gotta be easier than loading and running a bunch of stuff that doesn't clean it up. You benefit from that too performance-wise.

After that, create users on the PC - yourself and Others. Give the Others piddly rights so they can't install crap.
I don't know where my windows disk is lol. I think it's buried in a cabinet somewhere. But that was going to be my last resort.
  Reply With Quote
Old 03-21-2012, 02:10 PM   #16
Derp
Derpy Derek is one of the sharper tools in the shedDerpy Derek is one of the sharper tools in the shedDerpy Derek is one of the sharper tools in the shedDerpy Derek is one of the sharper tools in the shedDerpy Derek is one of the sharper tools in the shedDerpy Derek is one of the sharper tools in the shedDerpy Derek is one of the sharper tools in the shedDerpy Derek is one of the sharper tools in the shedDerpy Derek is one of the sharper tools in the shedDerpy Derek is one of the sharper tools in the shedDerpy Derek is one of the sharper tools in the shed
 
Derpy Derek's Avatar
Name: Derek
Joined: May 2010, #36868
Location: Scottsdale, Az
Age: 22
Gender: Male
Posts: 5,483
Derpy Derek's Tacoma Gallery
Take this as a sign that the computer gods are telling you to ditch the dell
  Reply With Quote
Old 03-21-2012, 02:11 PM   #17
macgyver [OP] macgyver is offline
Senior Member
macgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shedmacgyver is one of the sharper tools in the shed
 
macgyver's Avatar
Name: Brad
Joined: Aug 2009, #21173
Location: Canton, GA
Gender: Male
Posts: 3,566
macgyver's Tacoma Gallery
Quote:
Originally Posted by arrrghhh View Post
Crap. I'll look around, I swear that was the way I fixed it.

I *think* you can run it in safe mode... make sure you do safe mode w/networking.

Edit - I forgot, this is a rootkit. You need something like TDSSKiller. IIRC, TDSSKiller got it no problemo. Either way, you might want to consider a complete wipe of the OS & restore of your OS and all your applications. A pain, but as with any virus/malware, there's always the question of "did I really get it all...?" - and unfortunately there's no way to know for sure.

http://pctechnotes.com/how-to-easily...edirect-virus/
TDSS Killer didn't work It did find a few things but when I re-booted it was back.
  Reply With Quote
Old 03-21-2012, 02:12 PM   #18
Thread killer
LBtaco is one of the sharper tools in the shedLBtaco is one of the sharper tools in the shedLBtaco is one of the sharper tools in the shedLBtaco is one of the sharper tools in the shedLBtaco is one of the sharper tools in the shedLBtaco is one of the sharper tools in the shedLBtaco is one of the sharper tools in the shedLBtaco is one of the sharper tools in the shedLBtaco is one of the sharper tools in the shedLBtaco is one of the sharper tools in the shedLBtaco is one of the sharper tools in the shed
 
LBtaco's Avatar
Joined: Jan 2009, #12893
Location: Long Beach , CA
Gender: Male
Posts: 1,221
LBtaco's Tacoma Gallery
Quote:
Originally Posted by elmo7 View Post
Copy data off and boot from the Install/restore disk and start fresh and clean. Gotta be easier than loading and running a bunch of stuff that doesn't clean it up. You benefit from that too performance-wise.

After that, create users on the PC - yourself and Others. Give the Others piddly rights so they can't install crap.

This is a good plan.
Move your files to the old laptop and just restore the PC if you have the disk(or if it has the recovery partition)
you'll be up and running in a few hours
  Reply With Quote
Old 03-21-2012, 02:13 PM   #19
Easily Replaceable Member
elmo7 is one of the sharper tools in the shedelmo7 is one of the sharper tools in the shedelmo7 is one of the sharper tools in the shedelmo7 is one of the sharper tools in the shedelmo7 is one of the sharper tools in the shedelmo7 is one of the sharper tools in the shedelmo7 is one of the sharper tools in the shedelmo7 is one of the sharper tools in the shedelmo7 is one of the sharper tools in the shedelmo7 is one of the sharper tools in the shedelmo7 is one of the sharper tools in the shed
Joined: Aug 2011, #61553
Location: SC
Gender: Male
Posts: 713
elmo7's Tacoma Gallery
Quote:
Originally Posted by macgyver View Post
I don't know where my windows disk is lol. I think it's buried in a cabinet somewhere. But that was going to be my last resort.
Dig that thing out! You'll have a fresh defragged HDD in 1 hr! Reinstall a couple of apps and reload your data - done!
  Reply With Quote
Old 03-21-2012, 02:15 PM   #20
Thread killer
LBtaco is one of the sharper tools in the shedLBtaco is one of the sharper tools in the shedLBtaco is one of the sharper tools in the shedLBtaco is one of the sharper tools in the shedLBtaco is one of the sharper tools in the shedLBtaco is one of the sharper tools in the shedLBtaco is one of the sharper tools in the shedLBtaco is one of the sharper tools in the shedLBtaco is one of the sharper tools in the shedLBtaco is one of the sharper tools in the shedLBtaco is one of the sharper tools in the shed
 
LBtaco's Avatar
Joined: Jan 2009, #12893
Location: Long Beach , CA
Gender: Male
Posts: 1,221
LBtaco's Tacoma Gallery
Quote:
Originally Posted by elmo7 View Post
Dig that thing out! You'll have a fresh defragged HDD in 1 hr! Reinstall a couple of apps and reload your data - done!
or borrow or d/l the version of Windoze you need
just use your cd-key usually on the sticker on your PC
  Reply With Quote
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Similar Threads
Thread Thread Starter Forum Replies Last Post
Google Redirect virus thing jpneely Technology 0 01-08-2012 09:27 AM
Here you have/Just for you/Here it is....... Virus surfsupl Technology 0 12-06-2010 06:26 PM
Virus? solus Technology 28 10-16-2010 05:15 PM
Virus MAXTacoma Technology 13 04-05-2010 07:54 PM
Computer Virus! HELP!!! BigBawlzTaco Technology 10 12-17-2009 06:58 PM


Copyright © 2014 Tacoma Forum. Tacoma World is not owned by, or affiliated with Toyota Motor Corporation.