[Resolved] lost google / now "searchqu.com

After i rebooted the first time all the icons that were not previously showing appeared, one was windows defender, i think that was disabled when i first started using AVG some 15 months ago, i omitted to say that one of the new icons was Windows Defender, i had already disabled this at the start, i have now set win-def to Automatic as suggested, will restart and see what happens, Now restarted and the Windows box with 0x800106ba not initializing has not appeared, although i notice the return of Widows Defender re-enabled and Icon back in the system tray,

Okay.

So the error message is no longer present correct?

yes correct, have also disabled all protection again, changing over to automatic after disabling Win defender, do you think i should check and do another restart? as that's how it showed 0x800106ba not initializing in the beginning? when i rebooted after disabling win defender, what i am getting at is disabling Windows Defender now will alter the automatic setting you asked me to try, no?

If it was disabled manually then most likely it will. Try and go ahead and see if you can download ComboFix to your computer. If your still not able to have any luck with it then we will try something else.

Right done another attempt on downloading "Combo-fix", and after disabling the resident shield, the On-line shield and the Link scanner in AVG (nothing else i can disable in AVG without completely removing / uninstalling it, disabling Ad-Aware, Windows Defender etc has found the following, again on clicking on the desk top icon of Combo-fix and clicking open, the following AVG alerts appear, ironically more this time!, AVG - Mal-ware Detected….. File name…………………..Tool-NirCmd Security Alert…………..level 5 (Highest) Category…………………Potentially Unwanted Application, Details…………………….This programme has an impact on the security and privacy of your system etc etc……. Removed, 13 Process's, 1 File, …………………………………………………………………….. …………………………………………………………………….. . …………………………………. Second alert after AVG Quarantined and removed threat detected a second, File name, c/Docs&settings/ etc etc -MBOFIX.Exe Threat,…………………………….Unknown. Security level…………………..5 (highest) Description……………………..Not Available Removed, 18 Processes 55 Files, …………………………………………………………………….. …………………………………………………………………….. . ………………………………….. (Then detected a third) There was 2 more AVG Mal-ware alerts which i haven't bothered to list, so just the one download showed up 4 Mal-ware threat's, and that was from the first link you recommended, (you say they are free of Mal-ware)? the second link takes you directly to i think a Spanish site called "InfoSpyware.com"! the first link with the malware was from a site called "BleepingComputer.com" Lastly, when i downloaded Combo-fix from your link another Windows Alert box opened, "error" Copying file box appears, Access copy denied, Now what?

Scanning with GMER

Please download GMER from one of the following locations and save it to your desktop:

• Main Mirror
  This version will download a randomly named file (Recommended)
• Zipped Mirror
  This version will download a zip file you will need to extract first. If you use this mirror, please extract the zip file to your desktop.

• Disconnect from the Internet and close all running programs.
• Temporarily disable any real-time active protection so your security programs will not conflict with gmer's driver.
• Double-click on the randomly named GMER file (i.e. n7gmo46c.exe) and allow the gmer.sys driver to load if asked.
• Note: If you downloaded the zipped version, extract the file to its own folder such as C:\gmer and then double-click on gmer.exe.
  
  [external image: Posted Image]
  
• GMER will open to the Rootkit/Malware tab and perform an automatic quick scan when first run. (do not use the computer while the scan is in progress)
• If you receive a WARNING!!! about rootkit activity and are asked to fully scan your system…click NO.
• Now click the Scan button. If you see a rootkit warning window, click OK.
• When the scan is finished, click the Save… button to save the scan results to your Desktop. Save the file as gmer.log.
• Click the Copy button and paste the results into your next reply.
• Exit GMER and be sure to re-enable your anti-virus, Firewall and any other security programs you had disabled.

– If you encounter any problems, try running GMER in safe mode.
– If GMER crashes or keeps resulting in a BSODs, uncheck Devices on the right side before scanning.

Hi, Not had much luck, tried turning of Internet connection and disabling all of the virus and spy-ware protection, opened the GMER scan tool and noticed that there were two check box's because there are two hard drives in my PC, checked the second so now both hard drives scanned, anyway ran the scan and all seemed well, the bottom pane showed the scan running very fast, then after about 3 hours! it seemed to stop, i thought it had finished but as i was trying to save etc, i noticed it running again, so left it after another couple of hours i noticed nothing more was being added to the list thought i must of somehow restarted the scan, anyway i shut the scan down and tried to save it, wouldn't have it so decided to start again, shut the programme down, re-opened it and started another scan this time just leaving c/drive box checked and the second hard drive D:/ drive unchecked, clicked scan and it started after about 15 minutes noticed the pane showing the scan results in bottom tray running at crawling speed, just flicking from one to another every minute or so, as if it was starting to freeze up, aborted the scan restarted a third and same problem, so closed down once more and decided i would have one last try, clicked on to start the forth, and got a blue screen message, Windows Detects a problem and is shutting down to prevent damage, have listed the following, FWNORPOC.SYS. PAGE_FAULT_IN_NONPAGE_AREA fwnorpoc.sys-address, BOF89C3E BASE AT bof89000, date stamp 4b274f8d tech info,0x00000050 (0xe43d5000 0x00000000 OxBOF89C3E / 0x00000001 So i again closed GMER down and started in safe mode as recommended if there are problems, done the safe mode start up and tried again, opened GMER and all seemed OK it opened and initialized with the momentary few second scan before you click run, and nothing, what i mean by nothing the box appears with all of the components and it initializes its 4 or 45 second first scan but does not load its results, just finishes the 5 second first scan and then appears blank, nothing showing, so i am up to here, last night when i was trying to do the scans the computer started getting slower and slower, today it seems to be running quicker so not sure why, have enabled security until i here what you suggest, this Bandoo that caused all the trouble in the first place, why cant their site be closed down so as to stop the headache they cause people, i await your reply. think i read there is another way to try but staying up till 5am i am fast giving up hope, before this bandoo carp** things were fine, Bandoo appears or seems to be gone now but the pc seems slower,

It should appear on your desktop as a .zip file. You will then need to unzip the file.

Thanks SweetTech, will close everything and give it a go, will post the log when finished, fingers crossed lol.

ok, unzipped and run the "rootkit", now has finished but cannot find the log file for you, but i have re scanned it and the results are as follows, scanned services 0/0/0 and Scanned drivers are 0/0/0 does this help or do you want the results found and posted,? ifso i put them to docs and settings, but nothing there when i checked docs and setting's!",?