[Redirect Virus]

Sorry about the delay...

Here is the contents of checkup.txt

Results of screen317's Security Check version 0.99.57

Windows 7 Service Pack 1 x64 (UAC is enabled)

Internet Explorer 9

``````````````Antivirus/Firewall Check:``````````````

Windows Firewall Enabled!

Microsoft Security Essentials

Antivirus up to date!

`````````Anti-malware/Other Utilities Check:`````````

Malwarebytes Anti-Malware version 1.70.0.1100

Java 6 Update 31

Java version out of Date!

Adobe Reader 9 Adobe Reader out of Date!

````````Process Check: objlist.exe by Laurent````````

Microsoft Security Essentials MSMpEng.exe

Microsoft Security Essentials msseces.exe

Smith Desktop Malware Virus Information SecurityCheck.exe

`````````````````System Health check`````````````````

Total Fragmentation on Drive C: 0%

````````````````````End of Log``````````````````````

[Redirect Virus]

I finally got back on the computer and ran MBAR. I scanned Drivers, Sectors and System. It reported "No malware found" and cleaning was unnecessary. So appears this PC is fine. Thanks for your support. Recommendations for staying virus free in the future? I was surprised that my other pc (a laptop) was so badly infected with a backdoor trojan. Made me lose faith in my current methods.

[Redirect Virus]

Attached are the 3 files from the scans

attach.txt

dds.txt

RKreport1_S_01142013_02d0551.txt

[Redirect Virus]

Thanks!! Sounds like I should format and reinstall OS. I have another PC on same network. Seems like it would be worth checking that one out. Would it be possible to run same test on that pc?

[Redirect Virus]

Hi MrCharlie - RogueKiller file attached

RKreport1_S_01122013_02d1627.txt

[Redirect Virus]

Hi - Have had issues with redirect virus for some time now. Previously have tried many ways to clean but unable to. Had McAfee installed, but did not catch. Removed Mcafee yesterday while trying to clean. Before joining this forum, ran malwarebytes Anti-Malware. Had to use Chameleon in order to bypass virus'. Also ran ESET scanner (again, prior to joining forum). Received following log from ESET.

C:\Users\All Users\Microsoft\Windows\DRM\2278.tmp Win64/Olmarik.AH trojan unable to clean

C:\$Recycle.Bin\S-1-5-21-882486847-2889839346-2862130119-1001\$RJJ0M9Q.exe a variant of Win32/Adware.RegGenie application cleaned by deleting - quarantined

C:\ProgramData\Microsoft\Windows\DRM\2278.tmp Win64/Olmarik.AH trojan cleaned by deleting - quarantined

C:\Users\Smith\AppData\Local\Google\Chrome\User Data\Default\Default\aadagbdggfdhdedegggfgcdddedddgdd\background.html Win32/BHO.OEI trojan cleaned by deleting - quarantined

C:\Users\Smith\AppData\Local\Google\Chrome\User Data\Default\Default\aafplmideflpimfbhkcpmenkhdnjjchg\background.html Win32/BHO.OEI trojan cleaned by deleting - quarantined

C:\Users\Smith\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6ZWX5AER\cat-and-dolphin-playing-together[1].htm HTML/ScrInject.B.Gen virus deleted - quarantined

C:\Users\Smith\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\72OHR9MJ\bengal-cat-investigating-halloween-prop[1].htm HTML/ScrInject.B.Gen virus deleted - quarantined

C:\Users\Smith\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7Z5N7PD9\kitty-goes-crazy-for-laser[1].htm HTML/ScrInject.B.Gen virus deleted - quarantined

C:\Users\Smith\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\96LM2QCT\talking[1].htm HTML/Iframe.B.Gen virus deleted - quarantined

C:\Users\Smith\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E6C11ATI\cat-and-dolphin-playing-together[1].htm HTML/ScrInject.B.Gen virus deleted - quarantined

C:\Users\Smith\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PQD3J0M8\kitty-goes-crazy-for-laser[1].htm HTML/ScrInject.B.Gen virus deleted - quarantined

C:\Users\Smith\AppData\Local\{3b99f81f-31d5-dbab-1bcf-87d0107a285a}\U\80000064.@ Win64/Sirefef.AN trojan cleaned by deleting - quarantined

C:\Users\Smith\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\8\3f9ad788-5ba3c134 a variant of Win32/Kryptik.ARSI trojan cleaned by deleting - quarantined

Hope I didn't do too much cleaning prior to current forum recommendation.

dds.txt

attach.txt