Jump to content

xkhanx

Members
  • Posts

    1
  • Joined

  • Last visited

Everything posted by xkhanx

  1. I had initially had an issue with every google search I made resulted in a redirect to an IP address based search page. I installed and registered MBam and ran it and it found the following. Registry Keys Detected: 1 HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\ (Hijack.Zones) -> Quarantined and deleted successfully. Registry Values Detected: 2 HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|ocascl (Trojan.RedirRdll2.Gen) -> Data: rundll32.exe "C:\Users\khan.TCHHS\AppData\Roaming\ocascl.dll",HrFindInetTimeZone -> Quarantined and deleted successfully. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations|bak_Application (Hijacker.Application) -> Data: http://go.microsoft.com/fwlink/?LinkId=57426&Ext=%s -> Quarantined and deleted successfully. Registry Data Items Detected: 1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations|Application (Hijacker.Application) -> Bad: (http://www.helpmeopen.com/?n=app&ext=%s) Good: (http://shell.windows.com/fileassoc/%04x/xml/redir.asp?Ext=%s) -> Quarantined and repaired successfully. Afterwards, everytime I would do a google search I would get the notification that Mbam had blocked access to the IP of the site that was initially taking over the search function. Everything went along fine and then yesterday it started happening again, yet it was going to a different address, this one did not cause a notification message nor did it get blocked. I ran an update and it updated to 1.65.0.1400 and I updated the .db this morning. I am unabel to duplicate it today, but if this does happen again, where is the proper place to post the results to?
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.