google redirect virus and suspicious outgoing activity to 106.236.82.107

[MrCharlie]

Are any browsers being redirected ?? MrC

[abracadabra]

Not any more! This is great. Still my internet explorer is messed up. It says that there is an "incomplete uninstallation of some browser add-ons. It says to click "complete manual uninstallation" to reset all related browser settings. When I try to reset it gives the error message.

[abracadabra]

Is there anything that I can do about that? Also, do you have advice about how to not get infected again and what software do you recommend to mitigate my risk? Thanks.

[MrCharlie]

You can reset IE back to defaults:

http://www.mostiwant...7-8-9-settings/ <----IE reset

-----------------------------------

Lets check your computers security before you go and we have a little cleanup to do also:

Download Security Check by screen317 from HERE or HERE.

• Save it to your Desktop.
  
• Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
  
• A Notepad document should open automatically called checkup.txt.
  
• Please Post the contents of that document.
  
• Do Not Attach It!!!
  

MrC

[abracadabra]

Results of screen317's Security Check version 0.99.64

Windows 7 x64 (UAC is enabled)

Out of date service pack!!

``````````````Antivirus/Firewall Check:``````````````

Windows Firewall Enabled!

Windows Firewall Disabled!

WMI entry may not exist for antivirus; attempting automatic update.

`````````Anti-malware/Other Utilities Check:`````````

Malwarebytes Anti-Malware version 1.75.0.1300

AVG PC Tuneup

Eusing Free Registry Cleaner

Java 7 Update 21

Adobe Flash Player 11.7.700.169

Adobe Reader XI

Mozilla Firefox (21.0)

Google Chrome 26.0.1410.64

Google Chrome 27.0.1453.94

Google Chrome plugins...

````````Process Check: objlist.exe by Laurent````````

Malwarebytes Anti-Malware mbamservice.exe

Malwarebytes Anti-Malware mbamgui.exe

Malwarebytes' Anti-Malware mbamscheduler.exe

`````````````````System Health check`````````````````

Total Fragmentation on Drive C: 0%

````````````````````End of Log``````````````````````

[abracadabra]

The avast-browser cleanup is still reporting errors for IE. Does this matter?

[MrCharlie]

The avast-browser cleanup is still reporting errors for IE. Does this matter?

No.....

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Eusing Free Registry Cleaner <-------reg cleaners aren't recommended to use.

Google Chrome 26.0.1410.64 <-----OLD

Google Chrome 27.0.1453.94<-----OK

You have traces of old versions of Google Chrome on the system.

Please download and run OldChromeRemover.

@Windows Vista/Windows 7-8 users must use “Run As Administrator.”

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

A little clean up to do....

Please Uninstall ComboFix: (if you used it)

Press the Windows logo key + R to bring up the "run box"

Copy and paste next command in the field:

ComboFix /uninstall

Make sure there's a space between Combofix and /

Then hit enter.

This will uninstall Combofix, delete its related folders and files, hide file extensions, hide the system/hidden files and clears System Restore cache and create new Restore point

(If that doesn't work.....you can simply rename ComboFix.exe to Uninstall.exe and double click it to complete the uninstall)

---------------------------------

If you used DeFogger to disable your CD Emulation drivers, please re-enable them.

-------------------------------

Please download OTC to your desktop.

http://oldtimer.geekstogo.com/OTC.exe

Double-click OTC to run it. (Vista and up users, please right click on OTC and select "Run as an Administrator")

Click on the CleanUp! button and follow the prompts.

(If you get a warning from your firewall or other security programs regarding OTC attempting to contact the Internet, please allow the connection.)

You will be asked to reboot the machine to finish the Cleanup process, choose Yes.

After the reboot all the tools we used should be gone.

Note: Some more recently created tools may not yet be removed by OTC. Feel free to manually delete any tools it leaves behind.

Any other programs or logs you can manually delete.

IE: RogueKiller.exe, RKreport.txt, RK_Quarantine folder, C:\FRST, MBAR, etc....AdwCleaner > just run the program and click uninstall.

-------------------------------

Any questions...please post back.

If you think I've helped you, please leave a comment > click on my avatar picture > click Profile Feed.

Take a look at My Preventive Maintenance to avoid being infected again.

Good Luck and Thanks for using the forum, MrC

[abracadabra]

How do I manually uninstall these programs? Sorry, I don't quite understand. Thank you.

[MrCharlie]

Right click on it and choose "Delete"

MrC

[LDTate]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!