Hi, I have a google redirect virus which sends me to different pages, example yellowpages.com After trying to solve the issue at bleepingcomputers forums I was not able to. They told me that the virus was recognized by malware bytes, but they had submitted it to your database. As of yesterday MB detects it but the virus always come back. 1. Malware bytes Log Malwarebytes' Anti-Malware 1.51.1.1800 www.malwarebytes.org Database version: 7332 Windows 6.1.7600 Internet Explorer 8.0.7600.16385 8/1/2011 10:59:31 AM mbam-log-2011-08-01 (10-59-31).txt Scan type: Quick scan Objects scanned: 164689 Time elapsed: 7 minute(s), 26 second(s) Memory Processes Infected: 2 Memory Modules Infected: 0 Registry Keys Infected: 4 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 6 Memory Processes Infected: c:\Windows\SysWOW64\dot3dlg32.exe (Trojan.Agent) -> 1880 -> Unloaded process successfully. c:\programdata\api-ms-win-core-memory-l1-1-032.exe (Trojan.Agent) -> 1920 -> Unloaded process successfully. Memory Modules Infected: (No malicious items detected) Registry Keys Infected: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\THREADORDER32 (Trojan.Agent) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{2FC6FD73-ECCB-4416-B0CF-142A78D01B7e} (Trojan.Agent) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2FC6FD73-ECCB-4416-B0CF-142A78D01B7E} (Trojan.Agent) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\.fsharproj (Trojan.BHO) -> Quarantined and deleted successfully. Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: c:\Windows\SysWOW64\dot3dlg32.exe (Trojan.Agent) -> Quarantined and deleted successfully. c:\programdata\api-ms-win-core-memory-l1-1-032.exe (Trojan.Agent) -> Quarantined and deleted successfully. c:\Windows\System32\dot3dlg32.exe (Trojan.Agent) -> Quarantined and deleted successfully. c:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-032.dll (Trojan.Agent) -> Quarantined and deleted successfully. c:\Windows\System32\api-ms-win-core-memory-l1-1-032.dll (Trojan.Agent) -> Quarantined and deleted successfully. c:\Users\2Sik\AppData\Local\Temp\tmph4297533055122394561.tmp (Trojan.Agent) -> Quarantined and deleted successfully.
