fsharproj issue, with a twist

[GreenZombieBrains]

Running Malwarebytes in Safe Mode enabled me to get my system clean. The redirecting has stopped UNLESS I use Google to get to the two or three webpages it redirected me from before I dealt with malware.

In my case I Googled xbox so I could look at my xbox live account (after the malware was gone (according to Malwarebytes and Microsoft Security Essentials) clicking on the link that had been redirected before I was redirected once again and Malwarebytes stopped the redirect before anything nasty could happen.

I am not being redirected on any other Google searches.

I have deleted my history, all of my temp files, and all cookies.

What should I do now?

Thanks!

-Dave

Malwarebytes' Anti-Malware 1.51.2.1300

www.malwarebytes.org

Database version: 7766

Windows 6.0.6002 Service Pack 2

Internet Explorer 8.0.6001.19120

9/21/2011 5:43:32 PM

mbam-log-2011-09-21 (17-43-32).txt

Scan type: Quick scan

Objects scanned: 178329

Time elapsed: 1 minute(s), 59 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 0

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

(No malicious items detected)

_____________________________

Additional Log

15:58:01 David R Thrush MESSAGE Protection started successfully

15:58:05 David R Thrush MESSAGE IP Protection started successfully

16:03:23 David R Thrush IP-BLOCK 208.87.32.69 (Type: outgoing, Port: 49520, Process: firefox.exe)

16:03:40 David R Thrush IP-BLOCK 208.87.32.69 (Type: outgoing, Port: 49526, Process: firefox.exe)

16:17:26 David R Thrush IP-BLOCK 208.87.32.69 (Type: outgoing, Port: 50089, Process: firefox.exe)

16:18:06 David R Thrush IP-BLOCK 208.87.32.69 (Type: outgoing, Port: 50131, Process: firefox.exe)

16:18:14 David R Thrush IP-BLOCK 208.87.32.69 (Type: outgoing, Port: 50198, Process: firefox.exe)

16:21:28 David R Thrush IP-BLOCK 208.87.32.69 (Type: outgoing, Port: 50305, Process: firefox.exe)

16:36:06 David R Thrush MESSAGE Protection started successfully

16:36:10 David R Thrush MESSAGE IP Protection started successfully

17:00:52 David R Thrush IP-BLOCK 66.7.179.198 (Type: outgoing, Port: 49479, Process: firefox.exe)

17:02:29 David R Thrush IP-BLOCK 208.87.32.69 (Type: outgoing, Port: 49604, Process: firefox.exe)

17:02:45 David R Thrush IP-BLOCK 208.87.32.69 (Type: outgoing, Port: 49612, Process: firefox.exe)

17:07:50 David R Thrush IP-BLOCK 208.87.32.69 (Type: outgoing, Port: 49629, Process: firefox.exe)

Okay, it's back. Google search results are all redirecting again.

[screen317]

Hi and welcome to Malwarebytes.

Please update MBAM, run a Quick Scan, and post its log.

Next, download DDS by sUBs and save it to your Desktop.

Double-click on the DDS icon and let the scan run. When it has run two logs will be produced, please post only DDS.txt directly into your reply.

[AdvancedSetup]

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!