Hello,
I hope I'm doing this right but here goes. Beginning in June of this year, whenever I tried going to my homepage, I would be redirected to "www.searchqu.com/406." Whatever this 'thing' is. It seems to be pretty resistant strain. After going to: Tools > Manage Add-ons, I saw the creepy thing listed under "Bandoo Media, Inc.," and I disabled it. Since then, the redirects have stopped completely. However, for some reason, I'm not sure if my "problem" waq resolved. I might just be paranoid, but my system seems to be gradually slowing down (not drastically, but noticeably). Also, I ran a full scan using Malwarebytes' Anti-Malware on 08/03/11. The scan results were as follows:
- Memory Processes Infected: 0
- Memory Modules Infected: 0
- Registry Keys Infected: 4
- Registry Values Infected: 3
- Registry Data Items Infected: 0
- Folders Infected: 0
- Files Infected: 1
Nowhere in the log text was any reference made to "Bandoo Media, Inc., or to "searchqu.com/406 and ultimately, all affected items were "Quarantined and deleted successfully." Since then, I ran same scan about 10 more times and the results have been negative for everything in all instances (I have all corresponding logs). Just now, I ran a complete scan using the free edition of SUPERAntiSpyware and about 80 cookies were also "Quarantined and deleted successfully."
In addition to running Norton 360 full time, I use Uniblue's "Power Suite (registry cleaner)." I don't know if it does anything, but it makes me feel good.
Bottom Line: I'm not sure that simply disabling the searchqu.com Add-on was enough to get things back to normal. I'd like to think so, but it seemed a little too simple.
So, anyone who can help me clear this up will be my new best friend forever.
Many thanks,
GDF
Malware Logs can sometimes take a lot of time to research and interpret.
Please be patient while I try to assist with your problem. If at any time you do not understand what is required, please ask for
further explanation.
Please note that there is no "Quick Fix" to modern malware infections and we may need to use several different approaches to
get your system clean.
Read every reply you receive carefully and thoroughly before carrying out the instructions. You may also find it helpful to print out
the instructions you receive, as in some instances you may have to disconnect your computer from the Internet.
PLEASE NOTE: If you do not reply after 3 days your thread will be closed.
Please be aware that I am still in training, and all of my replies to you will be checked for accuracy by one of our experts to
ensure that I am giving you the best possible advice.
This may cause a delay in response time, but I will do my best to keep it as short as possible.
Please be advised, as I am still in training, all my replies to you will be checked for accuracy by one of our experts to ensure that I am giving you the best possible advise, this will be a team effort.
This may cause a delay, but I will do my best to keep it as short as possible. Please bear with me, I will post back to you as soon as I can.
IMPORTANT NOTE : Please do not delete anything unless instructed to. DO NOT use any TOOLS such as Combofix or HijackThis fixes without supervision.
Doing so could make your system inoperable and could require a full reinstall of your Operating System and losing all your programs and data.
Vista and Windows 7 users:
These tools MUST be run from the executable. (.exe) every time you run them
with Admin Rights (Right click, choose "Run as Administrator")
===================== IMPORTANT NOTE : Please do not delete anything unless instructed to. DO NOT use any TOOLS such as Combofix or HijackThis fixes without supervision.
Doing so could make your system inoperable and could require a full reinstall of your Operating System and losing all your programs and data. ========================
Download OTL to your desktop.
Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
When the window appears, underneath Output at the top change it to Minimal Output.
Check the boxes beside LOP Check and Purity Check.
Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt.
Note:These logs can be located in the OTL. folder on you C:\ drive if they fail to open automatically.
Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post it with your next reply. You may need two posts to fit them both in.
======================= NEXT
Please download aswMBR ( 511KB ) to your desktop.
Double click the aswMBR.exe icon to run it
Click the Scan button to start the scan
On completion of the scan, click the save log button, save it to your desktop and post it in your next reply.
======================= Please include in your next reply:
1. Any problem executing the instructions?
2. OTL log and Extras.Txt
3. aswMBR log
Hi Gail,
Thank you for asking. Yes, I believe so. I'm sorry I haven't responded yet to your last email…got terribly busy all of a sudden. I'll try to act on your instructions later today or tomorrow. Thanks for your help.
George
