Google searches redirected

[RoyBoy]

Hello,

I have precisely the same issue with a service laptop (one that travels the world), no joy with Dr. Web, but a very nice tool to have as an option with an OS not cooperating, thx!

Kapersky found infections a plenty. The primary one with .exe's is:

*** Virus.Win32.Nimnul.a

Other include:

• Backdoor.Win32.IRCNite.anj
  
• Heur:Trojan.Dropper.Script.Generic
  
• Packed.Win32.Krap.ao
  
• not-a-virus:Adware.WinLNK.Agent.a
  

While scan is not complete, if the system is stable after reboot, I'm confident there will be no more hits with MalwareBytes on these:

*Spyware.Passwords

*Trojan.Agent

If there is anything further I will update today, thank you again. If you want samples of the desktop.exe and a USB virus process calling itself bluetooth.exe, let me know.

[RoyBoy]

In Safe mode, had to kill iexplorer.exe in taskmanager (it was running desktoplayer.exe), then ran Kapersky scanner listed above.

Found lots of Virus.Win32.Nimnul.a, and some others.

Reboot system was stable and MalwareBytes was no longer quaranteeing *srv.exe everytime we opened a program. So system is now clean, and occasional redirect no longer happening. Thanks!

[RoyBoy]

Unsure how it this was listed as a new topic, should be moved to this thread:

http://forums.malwarebytes.org/index.php?s...c=62674&hl=

Sorry.

[Gammo]

Hi,

Unsure how it this was listed as a new topic, should be moved to this thread:

http://forums.malwarebytes.org/index.php?s...c=62674&hl=

No, that is jnutsy's topic. You need a topic of your own.

Download ComboFix from one of these locations:

Link 1

Link 2

* IMPORTANT !!! Save ComboFix.exe to your Desktop

• Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. Here is a guide on how to disable them:
  Click me
  If you can't disable them then just continue on.
  
• Double click on ComboFix.exe & follow the prompts.
  
• As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
  
• Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.
  

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

Click on Yes, to continue scanning for malware.

When finished, it shall produce a log for you. Please include the C:\ComboFix.txt log in your next reply.

[Maurice Naggar]

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!