Search:

Hey, sorry about the delayed reply. I was out of town a few days. I ran malware bytes and im not getting the redirects anymore. Thank you for your help. Much appreciated.

yeah, i rebooted. I'll run Malware Bytes now.

15:24:47.0014 3952 TDSS rootkit removing tool 2.7.0.0 Jan 10 2012 09:14:26
15:24:49.0016 3952 ============================================================
15:24:49.0016 3952 Current date / time:...

Hello,

Yes, I'm still getting a redirect on search engines. If you wouldn't mind, I'd greatly appreciate it.

Thank you

Hello,

I keep getting a redirect to something called supersearches.net or something like it off and on when I search through google or bing. Since I've noticed it, I've run Malwarebytes, AVG...

Everything looks good so far. Ran all the stuff you said. If I run into any issues, I'll throw it up here. Really preciate all your help.

Also, should I re-enable AVG, Spybot tea timer & resident thing, as well as all the other stuff now?

None that I know of. No pop-ups or anything. I have kept the computer off in between your postings though.

This is what I got from the quarantine.

c:\qoobox\quarantine\d\Autorun.inf.vir -> d:\Autorun.inf ( 53 bytes )


Also, i just realized I had some oversight on my part. I saw that my windows...

And yeah, D: drive is a recovery partition.

Here is the Combofix log

ComboFix 09-11-26.01 - Donna 11/27/2009 16:20.2.2 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2047.1623 [GMT -6:00]
Running from: c:\documents and...

Side note, when I am doing the Hijackthis one, I am still getting issues saying that a host is preventing something. I just click through it to make the program work.

Done, this is the combofix one.

ComboFix 09-11-26.01 - Donna 11/26/2009 18:00.1.2 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2047.1625 [GMT -6:00]
Running from:...

I can't get this stupid thing off one of my computers. I have ran spybot, gmer, rsit, malwarebytes, and avg8.5 with little to no effect. I have done the erunt and the hijackthis. I did try the...