When I click on links in search engines it takes me to dodgy website
Hi Guys,
I recently contracted a virus similar to the one detailed on this trend micro website.
http://about-threats.trendmicro.com/Malware.aspx?language=us&name=TROJ_FAKEAV.ORT
The differences are:
- Mine reported that my disk had an error and told me to reboot, there was no branding to the message but the images used were clearly not a Microsoft standard error message (I didn't reboot and there is no error on my disk)
- Clicking on any link, from all search engine results, in any browser, will take me to a dodgy website
When I got the virus I quickly ran Procmon and Autoruns from Sysinternals and was able to remove the random file name from starting up and killed it from memory, then deleted the file.
I was able to repair the hidden Start Menu and Desktop items fairly easily.
I then ran Spybot SD which repaired some of the registry changes outlined on the trend micro website, I have then manually repaired the others listed.
I then ran Malwarebytes Anti-Malware but this did not find anything further.
Everything seemed fixed and normal after this.
I have since noticed whenever I search for something in any search engine and click on one of the results, it will start to load the website but then takes me to some random dodgy website. This happens in any browser.
I thought the Winsocks may have been modified and have run the application WinSockXP Fix but this has not helped.
I have run HiJackThis and the DDS but I can't see anything at all that looks suspicious, this problem does seem quite hidden. I can post the results if you still want them.
Thanks
Rich