PDA

View Full Version : Fake antivirus, and web redirects. Need help!



Wildman0420
2010-03-13, 20:12
Hey guys, need some of your ninja like skills to help me out here. The problem lies here with my 80 year old grandfathers computer. He's pretty internet savvy for an old man, but seems to have gotten his pc pretty screwed up, dispite running AVGFree and Spybot S&D.
The first sign of any problems was when searching, he would be redirected to another page, and forced to research to get to the page he was searching for. Thas was annoying, but didn't stop him all together. However, last night a fake antivirus popped up called "Security Tool". He was smart enough to know that this wasn't his antivirus so he tried to run AVG scan to find that everyhing was locked out on him. When I got here to look at it I found that even taskmgr and regedit were blocked. This fake AV kept calling all .exe's viruses. Safe mode when I attempted it, just going into a reboot loop. Luckily after a short while, AVG seems to have noticed that this malicious program was running, and has stopped it from running. However I belive there is still something wrong here, as the web redirects still happen, and the fake AV is still listed in my start menu. I await your skilled advice guru's, please help a grandson help his grandpa!
HJT Log attached

tashi
2010-03-13, 22:15
Hello Wildman0420, :)

What happened in your previous four page topic, closed due to inactivity: http://forums.spybot.info/showthread.php?p=329753#post329753

Best regards.

Wildman0420
2010-03-13, 22:38
Yes thank you. That computer ended up being completely fixed. Thank you very much to Blade81 for all he did, I do really appreciate his time. However this is my grandfathers compuyter, and therefore a different computer altogether. If you want I'll make a new account and post under his name, but I figured this would be easier.

tashi
2010-03-13, 22:51
Hello Wildman0420,


Yes thank you. That computer ended up being completely fixed. Thank you very much to Blade81 for all he did, I do really appreciate his time. However this is my grandfathers compuyter, and therefore a different computer altogether. If you want I'll make a new account and post under his name, but I figured this would be easier.

It's always a good idea to follow up, volunteer analysts give freely of their time. :)

Please see "BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance) (http://forums.spybot.info/showthread.php?t=288) start a new topic and copy paste the log into it, do not attach. An analyst will advise you when available.

Best regards.

-------------------
http://forums.spybot.info/showthread.php?t=56166