Jump to content

Goggle Redirect Virus

Recommended Posts


Well i've somehow contracted some sort of google redirect virus. ive had it for about 5 days now and it's now starting to get annoying.. i've suffered nothing other than the occasional google redirect.

I've done some searching around and scanning with multiple programs (malwarebytes, norton power eraser, ComboFix, TDSSKiller). Some found nothing. and some found various threats. However no program has successfully erased the virus from the computer. It always seems to come back after a restart.

I've done some research and i believe the problems resides in C:\ProgramData\api-ms-win-core-memory-l1-1-032.exe. There is also a similar process running in task manager.

I have some computer understanding, but i have had no luck getting rid of this thing. Thanks to anyone who can help!

Here's my MalwareBytes Scan:

(Found nothing)


Malwarebytes' Anti-Malware


Database version: 7359

Windows 6.1.7600

Internet Explorer 8.0.7600.16385

8/2/2011 5:00:13 PM

mbam-log-2011-08-02 (17-00-13).txt

Scan type: Quick scan

Objects scanned: 171367

Time elapsed: 3 minute(s), 44 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 0

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

(No malicious items detected)

Link to post
Share on other sites

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.