Search:

Awesome, thanks for all of your help.

:thanks: :thanks: :thanks:

Hi,

I ran OTL with the code given, the log is at the bottom of the post.

Everything seems to be running fine now. No re-directs and the computer does seem quicker.

Here is the log:

All...

Hi,

So I have run OTL as requested, it only opened up the OTL.txt log. I did a search on all drives for the extras.txt file (inlcuding all non-indexed, hidden and system files) but couldn't find...

Hi ,

I deleted the directory.

The computer seems to running fine, no re-directs. Also it does seem to be running quicker, but that be all in my mind!

Thanks

Hi,

I ran the scan and it has found 1 issue. The log is below:

C:\_OTL\MovedFiles\12032011_000537\C_Windows\csauie1.ocx probably a variant of Win32/Agent.EBBYIBO trojan

Thanks

Morning,

Ran the scan and there was nothing found by it. Here is the log:

Malwarebytes Anti-Malware 1.60.0.1800
www.malwarebytes.org

Database version: v2012.01.24.02

Windows Vista...

It seems to running ok now :eek:

No re-direct search results.

Thanks so much for all of your help

:thanks: :thanks: :thanks: :thanks:

Hi,

Done that now, TDSSKiller didn't find anything this time. New log is here:


22:36:33.0044 3164 TDSS rootkit removing tool 2.7.6.0 Jan 19 2012 13:09:04
22:36:35.0044...

Hi,

Ran TDSSKiller and it did find something, so selected cure as directed. Here is the log:


21:35:14.0077 4072 TDSS rootkit removing tool 2.7.6.0 Jan 19 2012 13:09:04
21:35:14.0238...

Hi,

No worries about closing the thread, understand you need to keep the forum tidy.

I did as requested below, although as a quick aside as I don't know if it is relevant or not all the...

Hi,

I was previously getting help in this thread but due to circumstances beyond my control I couldn't reply before it was moved to the archive.

The issue still exists with the computer so if...

Hi,

Sorry for the slow reply this time around, have been away for a couple of days.

I tried both of the actions aswMBR has the same issues as last time, I run the application and nothing...

Something of a problem.... The re-direct appears to have, well, re-appeared. I just googled something (actually how to find the run box in Vista) and now all links are re-directing from the google...

Hey no worries, thanks for all the help you have given me!

I deleted the files, re-booted and everything appears fine (poked around a little bit and tried a few applications).

Hi,

I uploaded the file to VirusTotal, here is the result:

Antivirus results
AhnLab-V3 - 2011.12.07.00 - 2011.12.07 - -
AntiVir - 7.11.19.14 - 2011.12.07 - -
Antiy-AVL - 2.0.3.7 -...

Hi,

No idea what those files are.... :confused:

I ran system look, here is the log result:

SystemLook 30.07.11 by jpshortstuff
Log created at 08:25 on 07/12/2011 by Sandra
Administrator -...

Hi,

Here is the result of latest run of OTL...


OTL logfile created on: 06/12/2011 11:47:01 - Run 5
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\Sandra\Desktop
Windows Vista Home...

Hi,

Not that I can tell everything seems to be working as normal.

Thanks again for all of your help.

Hi,

I ran OTL (log at the end), on reboot I tested google search results and the random re-direct appears to have stopped!

:thanks::thanks::thanks:

Please let me know if there is anything...

Hi,

ESET scan run, log below...

C:\Windows\csauie1.ocx probably a variant of Win32/Agent.EBBYIBO trojan


Thanks

Ok, I ran malwarebytes, the log file is below.

Thanks again for your assitance.

Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org

Database version: 8291

Windows 6.0.6002...

Hi,

Sorry when I referred to the system32 folder in my previous post i meant the system32/drivers folder. I still can't find the files. Sorry if I missing something obvious??

Hi,

I tried to locate the files indicated but can't find them anywhere in the system32 directory, also carried out a search across all drives (incl. hidden and system files with no result). Have...

Hi,

Sorry about this, I tried running Combofix again in Normal Mode and it worked this time (I must have forgotten to run as admin I guess). Log is below:

ComboFix 11-11-29.04 - Sandra...

Hi,

Sorry about the delayed reply, was away from the machine in question today.

I tried running Combofix in safe mode with the same result (it starts up gets to the screen that says scan should...

Ok, so I have run OLT as directed and also started the ComboFix program (making sure all anti-virus and firewalls were disabled). However the ComboFix program has been running for around 5 hours,...

OTL logfile created on: 29/11/2011 13:29:23 - Run 4
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\Sandra\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) -...

I tried to locate the file you indicated, however I am not able to locate it in the directory. I made sure hidden and system files were visible as per the guide and also carried out a search across...

OTL logfile created on: 29/11/2011 11:17:05 - Run 3
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\Sandra\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) -...

OTL Extras logfile created on: 29/11/2011 10:11:44 - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\Sandra\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version =...

OTL logfile created on: 29/11/2011 10:11:44 - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\Sandra\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) -...

Thanks for the reminder about running as administrator. I tried DDS and aswMBR running as admin in both normal and safemodes with the same results as before.

I such I moved on to the other...

Afternoon,

Thanks for the rapid reply.

Tried to run in safe mode and the exact same issue, aswMEB.exe shows in the process list for around 2 seconds before just shutting down again....

Are...

Thanks for the reply.

I tried running aswMBR as described, however it won’t start up. When I double click it no GUI runs or anything like that. I checked the processes running in the task list...

Hi,

My computer (running Vista) has started to re-direct Google results to seemingly random websites. I have backed up the registry using ERUNT, when I try and run DDS however it runs for a while...