« previous next »
Pages: 1 [2] 3   Go Down

Author Topic: Another person with a the Google redirect malware.  (Read 14108 times)

0 Members and 1 Guest are viewing this topic.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Another person with a the Google redirect malware.
« Reply #15 on: July 30, 2011, 09:28:58 PM »
OK time to check the MBR

Download aswMBR.exe ( 1.8mb ) to your desktop.
 
Double click the aswMBR.exe to run it
 
Click the "Scan" button to start scan
 
 
On completion of the scan click save log, save it to your desktop and post in your next reply


Logged

CGriswald309B

  • Guest
Re: Another person with a the Google redirect malware.
« Reply #16 on: July 31, 2011, 01:44:47 AM »
Should I close all programs and disable my anti-virus before running it?
Logged

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>> Avast Forum - Deutschsprachiger Bereich <<<
Re: Another person with a the Google redirect malware.
« Reply #17 on: July 31, 2011, 01:50:46 AM »
Quote from: CGriswald309B on July 31, 2011, 01:44:47 AM
Should I close all programs and disable my anti-virus before running it?

Not needed.
Logged
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

CGriswald309B

  • Guest
Re: Another person with a the Google redirect malware.
« Reply #18 on: July 31, 2011, 02:11:27 AM »
aswMBR version 0.9.8.978 Copyright(c) 2011 AVAST Software
Run date: 2011-07-30 18:52:42
-----------------------------
18:52:42.157    OS Version: Windows 6.0.6002 Service Pack 2
18:52:42.157    Number of processors: 2 586 0xF0A
18:52:42.157    ComputerName: BRENTPC  UserName: Barbara
18:52:48.693    Initialize success
18:52:49.785    AVAST engine defs: 11073001
18:52:52.500    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-0
18:52:52.500    Disk 0 Vendor: TOSHIBA_ DL02 Size: 152627MB BusType: 3
18:52:52.500    Disk 1  \Device\Harddisk1\DR1 -> \Device\0000005d
18:52:52.500    Disk 1 Vendor: (  Size: 152627MB BusType: 0
18:52:52.500    Disk 2  \Device\Harddisk2\DR2 -> \Device\0000005e
18:52:52.515    Disk 2 Vendor: (  Size: 152627MB BusType: 0
18:52:52.531    Disk 0 MBR read successfully
18:52:52.531    Disk 0 MBR scan
18:52:52.546    Disk 0 Windows VISTA default MBR code
18:52:52.546    Disk 0 scanning sectors +312579760
18:52:52.624    Disk 0 scanning C:\Windows\system32\drivers
18:53:12.031    Service scanning
18:53:17.271    Modules scanning
18:53:48.424    Disk 0 trace - called modules:
18:53:48.455    ntkrnlpa.exe CLASSPNP.SYS disk.sys acpi.sys hal.dll iaStor.sys
18:53:48.455    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x8651dac8]
18:53:48.471    3 CLASSPNP.SYS[88da08b3] -> nt!IofCallDriver -> [0x85a0b768]
18:53:48.471    5 acpi.sys[8069f6bc] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-0[0x85a15030]
18:53:49.719    AVAST engine scan C:\Windows
18:53:55.663    AVAST engine scan C:\Windows\system32
18:56:20.696    AVAST engine scan C:\Windows\system32\drivers
18:56:31.397    AVAST engine scan C:\Users\Barbara
19:04:21.638    Disk 0 MBR has been saved successfully to "C:\Users\Barbara\Desktop\MBR.dat"
19:04:21.716    The log file has been saved successfully to "C:\Users\Barbara\Desktop\aswMBR.txt"
19:04:48.137    AVAST engine scan C:\ProgramData
19:07:48.723    Scan finished successfully
19:09:05.428    Disk 0 MBR has been saved successfully to "C:\Users\Barbara\Desktop\MBR.dat"
19:09:05.444    The log file has been saved successfully to "C:\Users\Barbara\Desktop\aswMBR.txt"


Logged

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Another person with a the Google redirect malware.
« Reply #19 on: July 31, 2011, 11:34:11 AM »
Is this redirect continuous, or restricted to just one site ?
Logged

CGriswald309B

  • Guest
Re: Another person with a the Google redirect malware.
« Reply #20 on: July 31, 2011, 07:29:53 PM »
It happened that one time. It hasn't happened since (and I've been online and using the search function a lot) but it was continuous.
Logged

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Another person with a the Google redirect malware.
« Reply #21 on: July 31, 2011, 10:32:37 PM »
So it was just one site ?

Run for a day or so and if it doesn't recur I will remove my tools
Logged

CGriswald309B

  • Guest
Re: Another person with a the Google redirect malware.
« Reply #22 on: August 01, 2011, 12:41:14 AM »
Will do. Thanks again!
Logged

CGriswald309B

  • Guest
Re: Another person with a the Google redirect malware.
« Reply #23 on: August 01, 2011, 05:37:05 AM »
It happened twice in the past 10 minutes. Once I was checking my email on hotmail and the other time I was checking my yahoo account. Both times it redirected me to some odd yahoo search engine site.

The weird thing is I've been online all day and used the search function numerous time.  ???
Logged

CGriswald309B

  • Guest
Re: Another person with a the Google redirect malware.
« Reply #24 on: August 01, 2011, 05:41:25 AM »
So it seems it is redirecting me but not when I use the search function. It just happens when I click on a link. Strange.
Logged

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Another person with a the Google redirect malware.
« Reply #25 on: August 01, 2011, 07:48:17 PM »
Could you post a link where this happens but use HXXP instead of HTTP so it is not clickable
Logged

CGriswald309B

  • Guest
Re: Another person with a the Google redirect malware.
« Reply #26 on: August 01, 2011, 08:33:59 PM »
If/when it happens I sure will. Thanks.
Logged

CGriswald309B

  • Guest
Re: Another person with a the Google redirect malware.
« Reply #27 on: August 03, 2011, 11:30:48 PM »
Nothing so far. Thank you, thank you, thank you for all of your help   ;D
Logged

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Another person with a the Google redirect malware.
« Reply #28 on: August 05, 2011, 09:00:40 PM »
Let me know tomorrow if all is well and I will remove my tools
Logged

CGriswald309B

  • Guest
Re: Another person with a the Google redirect malware.
« Reply #29 on: August 06, 2011, 03:34:02 AM »
Everything seems to be fine. Thank you, thank you, thank you!!!
Logged
Pages: 1 [2] 3   Go Up
« previous next »