acwild

I have a Windows XP SP2 system that has a google link hijack. Any google search returns correct however, once a link is clicked the webpage seek.ind.in appears, then after a quick redirect, I'm taken to any number of random advertising sites. Sometimes the links allow me to get to the correct page most other times I am redirected. I have Symantec Endpoint AV installed, I have updated malwarebytes however; it does not remove the google link hijack. I have also tried 2 other popular ant-spyware/adware apps. The newest update from malwarebytes found 3 "fake alert" keys although I haven't seen any fake antivirus alerts in months, perhaps they were left over from a previous infection. Log is below and thanks for your assistance!!! LOG: Malwarebytes' Anti-Malware 1.46 www.malwarebytes.org Database version: 4097 Windows 5.1.2600 Service Pack 3 Internet Explorer 6.0.2900.5512 5/13/2010 4:15:24 PM mbam-log-2010-05-13 (16-15-24).txt Scan type: Quick scan Objects scanned: 120714 Time elapsed: 15 minute(s), 55 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 3 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: HKEY_CLASSES_ROOT\CLSID\{35a5b43b-cb8a-49ca-a9f4-d3b308d2e3cc} (Trojan.FakeAlert) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{35a5b43b-cb8a-49ca-a9f4-d3b308d2e3cc} (Trojan.FakeAlert) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{35a5b43b-cb8a-49ca-a9f4-d3b308d2e3cc} (Trojan.FakeAlert) -> Quarantined and deleted successfully. Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected) DDS.txt Attach.zip

I have a Windows XP SP2 system that has a google link hijack. Any google search returns correct however, once a link is clicked the webpage seek.ind.in appears, then after a quick redirect, I'm taken to any number of random advertising sites. Sometimes the links allow me to get to the correct page most other times I am redirected. I have Symantec Endpoint AV installed, I have updated malwarebytes however; it does not remove the google link hijack. I have also tried 2 other popular ant-spyware/adware apps. The newest update from malwarebytes found 3 "fake alert" keys although I haven't seen any fake antivirus alerts in months, perhaps they were left over from a previous infection. Log is below and thanks for your assistance!!! LOG: Malwarebytes' Anti-Malware 1.46 www.malwarebytes.org Database version: 4097 Windows 5.1.2600 Service Pack 3 Internet Explorer 6.0.2900.5512 5/13/2010 4:15:24 PM mbam-log-2010-05-13 (16-15-24).txt Scan type: Quick scan Objects scanned: 120714 Time elapsed: 15 minute(s), 55 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 3 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: HKEY_CLASSES_ROOT\CLSID\{35a5b43b-cb8a-49ca-a9f4-d3b308d2e3cc} (Trojan.FakeAlert) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{35a5b43b-cb8a-49ca-a9f4-d3b308d2e3cc} (Trojan.FakeAlert) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{35a5b43b-cb8a-49ca-a9f4-d3b308d2e3cc} (Trojan.FakeAlert) -> Quarantined and deleted successfully. Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected)