"apuntinstall" Malware and Google-linked Malware

[sarah.catherine]

Hi there,

I am a brand new malwarebytes user and I could really use someone's help. I think I have two problems (although they may be related):

First, I have some kind of malware that acts up when I am using google. If I click on a website through the google search page, I am re-directed to another website (beginning with seek.ind) and usually another one after that. Neither Spybot nor McAfee seem to be able to catch it. I have read about this problem on this forum and it seems that the only way to get rid of it is with help!

My second problem disturbs me more, although it is likely related to the first. A fake windows security center popped up on the right-hand side of my tool bar today (called "Antiviri" or something like that). It shut down my anti-virus program and then prevented me from doing anything else on my computer - whenever I tried to do something, a fake security warning would pop-up and prevent me. I have read about someone else with this problem who tried both Combofix and Rootkit Buster but neither worked (although with the help with someone on this forum, combofix seemed to work). I started my computer in safe-mode a few times and things seemed okay. At this point it is running in regular mode and the "Antiviri" program has disappeared from the toolbar. Nonetheless, there is definitely still something wrong. I believe I found the problem, a file called:

c:\windows\$NtUninstallMTF1011$\apUninstall.exe (I have attached a photo of the icon here - it looks like a white dog on a black rectangle on the side of a garbage bin).

I attempted to uninstall the "program" while in safe mode, but was given an error message. When I started again in regular mode, I managed to find the location of the file and delete it, but of course when I attempted to "delete forever" from my recycling bin, I was told that the file is still in use somewhere.

This may be irrelevant, but I ran a Spybot check an hour ago and while it was scanning a message popped up saying that it probably wouldn't be able to catch all viruses and I should run Spybot during a restart - I've never had that happen before. I went for it and during my start-up Spybot scanned over 613,000 files (one of which was virtumonde.sdn which I believe is a virus, so it seemed legit). Anyway, I only mentioned it because it was so out of the ordinary.

One final thing: my Internet Explorer is no longer working. I typically use Modzilla but I just tried to run a free virus scan from McAfee and got an error message saying that I would need to run it through IE. When I tried to use IE, however, the browser showed that it could not load the page and that I would need to update my security settings. I went to the security settings and set them to default but the problem persists. I don't use IE often, but I've NEVER had a problem before.

Thank you so much for any help you can provide! I have a lot faith in you guys - both of these problems seem to have been solved for others via this forum before me!

[Firefox]

Hi sarah.catherine, and Welcome to Malwarebytes!

You have come to the right place for help, just follow the instructions below:

Please read the following so that you can begin the cleaning process:

As we don't deal with malware removal in the General Malwarebytes' Anti-Malware Forum, you need to start a topic in the Malware Removal forum so a qualified helper can help you fix any malware related problems/infections you may have.

• Please read and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here.
  
• After posting your new post, make sure under options, you select Track this topic and choose Immediate Email Notification, so that you're alerted when someone has replied to your post.
  
• One of the expert helpers there will give you one-on-one assistance when one becomes available.
  
• Please refrain from making any further changes to your computer (Install/Uninstall programs, use special fix tools, delete files, edit the registry, etc...) unless advised by a malware removal helper. Doing so can result in system changes which may hinder the attempts by a helper to clean your machine.
  

NOTE: Please DO NOT post back to (bump) your topic within the first 48 hours.

Replying to your own posts changes the post count and helpers are looking for topics with zero replies. If you reply to your own post helpers may think that you're already being helped and thus overlook your post.

• • If there is no reply from any experts after 48 hours, you can reply to the topic, asking for help again.
    Or
    
  • You may send a Private Message to a Moderator asking for assistance.
    

Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org or here.

Please be patient, someone will assist you as soon as it is possible.

PS: Please use the "ADDREPLY" button instead of other ones when you start replying.