ABnow.com Google redirect infection

Hi rockmypunkk,

just need to remove stopzilla and defrag so it's not so slow
Good idea, stopzilla is not a prgram I would recommend. Lets remove it now along with some other out of date programs

  • Click on start
  • Then Run
  • In the open text entry box please copy/paste appwiz.cpl Then click enter.
  • Press the "Remove" or "Change/Remove"...button to uninstall the programs listed below.
    • Adobe Flash Player 10 ActiveX
    • Adobe Reader 9.3.4
    • Adobe Reader 9.5.0
    • Java(TM) 6 Update 31
    • STOPzilla
    • Viewpoint Media Player
  • Take care when answering any questions posed by an uninstaller. Some questions may be worded to deceive you into keeping the program.
You can reinstall the latest versions of Flash, Reader and Java using the links below.
http://get.adobe.com/flashplayer/
http://get.adobe.com/uk/reader/
http://www.java.com/en/download/index.jsp


ATF Cleaner
Please download ATF Cleaner to your desktop.
  • Double-click ATF-Cleaner.exe to run the program.
  • Under Main choose: Select All
  • Click the Empty Selected button.
If you use Firefox browser
  • Click Firefox at the top and choose: Select All
  • Click the Empty Selected button.
  • NOTE: If you would like to keep your saved passwords, please click No at the prompt.
If you use Opera browser
  • Click Opera at the top and choose: Select All
  • Click the Empty Selected button.
  • NOTE: If you would like to keep your saved passwords, please click No at the prompt.
Click Exit on the Main menu to close the program.


Security Check
  • Please download Security Check by screen317 from one of the links below:
  • Save it to your Desktop.
  • Double click SecurityCheck.exeand follow the onscreen instructions inside of the black box.
  • A Notepad document should open automatically called checkup.txt
  • Please post the contents of that document.
 
Couldn't remove Adobe Reader 9.3.4 received the notification
This patch package could not be opened. Verify that the patch package exists and that you can access it, or contact the application vendor to verify that this is a valid Windows Installer patch package.
 
Results of screen317's Security Check version 0.99.32
Windows XP Service Pack 3 x86
Internet Explorer 6 Out of date!
``````````````````````````````
Antivirus/Firewall Check:

Windows Firewall Enabled!
avast! Free Antivirus
```````````````````````````````
Anti-malware/Other Utilities Check:

Spybot - Search & Destroy
McAfee SiteAdvisor
Java(TM) 6 Update 31
Adobe Flash Player 11.2.202.228
Adobe Reader 9 Adobe Reader out of date!
Adobe Reader X (10.1.3)
Mozilla Firefox (11.0.)
````````````````````````````````
Process Check:
objlist.exe by Laurent

Malwarebytes' Anti-Malware mbamservice.exe
Malwarebytes' Anti-Malware mbamgui.exe
AVAST Software Avast AvastSvc.exe
AVAST Software Avast avastUI.exe
``````````End of Log````````````
 
Hi rockmypunkk,

You can try removing Adobe Reader with Revo Uninstaller

Just install the Program and run it. Select the program you want to remove (Adobe) and select the Uninstallation mode you want. I would suggest using the moderate setting.

Securitycheck shows that you still have IE6 installed. This poses a huge security risk. Even if you do not use Internet Explorer I would urge you to upgrade it to the latest version. You should be able to do this using Windows Update.

Congratulations your PC is now feee from infection 8) Follow the below steps to clean up the tools we used to fix your PC.

Clean up with OTL

  • Double-click OTL.exe to start the program. This will remove all the tools we used to clean your pc.
  • Close all other programs apart from OTL as this step will require a reboot
  • On the OTL main screen, press the CleanUp! button
  • Say Yes to the prompt and then allow the program to reboot your computer.


Uninstall Combofix
  • Click on Start >> Run...
  • Now type in ComboFix /Uninstall into the box and click OK.
  • Note the space between the X and the /Uninstall, it needs to be there.
    CF-Uninstall.png
The above procedure will reset your System Restore and clear out the backups and quarantines created during the course of this fix.


Additional Security Tips.
Update your Antivirus programs and other programs regularly.
Secunia Personal Software Inspector - Copyright © Secunia. This app will monitor programs on your computer for known vulnerabilities. You can set it to auto-update for you, or just prompt you if an update is available. I highly recommend it.
F-secure Health Check - Copyright © F-Secure Corporation. F-Secure Health Check is a free application that tells you if your computer is protected and helps you fix possible security issues.

Visit Microsoft often
Keep on top of critical updates, as well as other updates for your computer.
How to configure and use Automatic Updates in Windows XP
Using Windows Update for Windows XP
Microsoft Update Home


Please let me know that you completed the cleanup steps and reviewed the rest of the post. Once I receive your reply, unless there are other malware questions or concerns, I will have this topic closed as resolved.
 
I had actually removed internet explorer over a year ago but combofix brought it back, I'll just remove it again. Revo was unable to remove adobe it came up with the same notification about the patch package, was unable to remove combofix, the command came up with the error, windows cannot find combofix
 
I had actually removed internet explorer over a year ago but combofix brought it back, I'll just remove it again.
Combofix would not have added this back. I would recommend leaving it installed and updating it to the latest version.
Revo was unable to remove adobe it came up with the same notification about the patch package,
Try just installing the latest version of Adobe Reader from here. Run the securitycheck again and see it it still reports that version 9 is installed.
was unable to remove combofix, the command came up with the error, windows cannot find combofix
Is the combofix icon still on your desktop?
 
Excellent you should be all set now then. Just make sure you have updated Adobe Reader to the latest version.

Safe Surfin!
 
Since this issue appears to be resolved ... this Topic has been closed. Glad we could
help.

Note: If it has been three days or more since your last post, and the helper assisting
you posted a response to that post to which you did not reply, your topic will not be
reopened. At that point, if you still require help, please start a new topic and include
a fresh DDS log and a link to your previous thread.

If it has been less than three days since your last response and you need the thread
re-opened, please send me or your helper a private message (pm). A valid, working link to
the closed topic is required.
 
Back
Top