Jump to content

Google redirect Virus

Recommended Posts

Hi, I have a google redirect virus which sends me to different pages, example yellowpages.com

After trying to solve the issue at bleepingcomputers forums I was not able to. They told me that the virus was recognized by malware bytes, but they had submitted it to your database. As of yesterday MB detects it but the virus always come back.

1. Malware bytes Log

Malwarebytes' Anti-Malware


Database version: 7332

Windows 6.1.7600

Internet Explorer 8.0.7600.16385

8/1/2011 10:59:31 AM

mbam-log-2011-08-01 (10-59-31).txt

Scan type: Quick scan

Objects scanned: 164689

Time elapsed: 7 minute(s), 26 second(s)

Memory Processes Infected: 2

Memory Modules Infected: 0

Registry Keys Infected: 4

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 6

Memory Processes Infected:

c:\Windows\SysWOW64\dot3dlg32.exe (Trojan.Agent) -> 1880 -> Unloaded process successfully.

c:\programdata\api-ms-win-core-memory-l1-1-032.exe (Trojan.Agent) -> 1920 -> Unloaded process successfully.

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\THREADORDER32 (Trojan.Agent) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\CLSID\{2FC6FD73-ECCB-4416-B0CF-142A78D01B7e} (Trojan.Agent) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2FC6FD73-ECCB-4416-B0CF-142A78D01B7E} (Trojan.Agent) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\.fsharproj (Trojan.BHO) -> Quarantined and deleted successfully.

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

c:\Windows\SysWOW64\dot3dlg32.exe (Trojan.Agent) -> Quarantined and deleted successfully.

c:\programdata\api-ms-win-core-memory-l1-1-032.exe (Trojan.Agent) -> Quarantined and deleted successfully.

c:\Windows\System32\dot3dlg32.exe (Trojan.Agent) -> Quarantined and deleted successfully.

c:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-032.dll (Trojan.Agent) -> Quarantined and deleted successfully.

c:\Windows\System32\api-ms-win-core-memory-l1-1-032.dll (Trojan.Agent) -> Quarantined and deleted successfully.

c:\Users\2Sik\AppData\Local\Temp\tmph4297533055122394561.tmp (Trojan.Agent) -> Quarantined and deleted successfully.

Link to post
Share on other sites

  • Staff

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.