This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Browser Redirect virus [Solved]

5 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Download MiniToolBox and save it to your desktop,  right click on it and select RUN AS ADMINISTRATOR
 
Checkmark the following boxes:
  •  
  • Flush DNS 
  • Reset FF Proxy Settings
 
 
Click Go and post the result (Result.txt) that pops up. A copy of result.txt will be saved in the same directory the tool is run.
 
 
 
I am going to attach a FIXLIST file, you need to download it to the desktop where you have FRST64 or the fix wont work, after you download it drag it with your mouse right next to FRST64, either above or below it or on either side but not right on top of it, then open up FRST64 and click on FIX (Not Scan) It wont take long, after your computer reboots you will see a FIXLOG ( note the spelling ) on your desktop, post it please and let me know how your system is behaving now
 
 

Attachments:

MiniToolBox by Farbar  Version: 09-03-2015
Ran by [removed] (administrator) on 08-04-2015 at 20:25:06
Running from "C:\Users\Shirley\Desktop"
Microsoft Windows 8.1 Pro  (X64)
Model: 2568 Manufacturer: LENOVO
Boot Mode: Normal
***************************************************************************

========================= Flush DNS: ===================================

Windows-IP-Konfiguration

Der DNS-Aufl�sungscache wurde geleert.

"Reset FF Proxy Settings": Firefox Proxy settings were reset.


**** End of log ****

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 11-03-2015
Ran by [removed] at 2015-04-08 20:28:00 Run:1
Running from C:\Users\[removed]\Desktop
[removed] Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
CreateRestorePoint:
CloseProcesses:
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
Toolbar: HKU\S-1-5-21-4216991579-408556834-1651255799-1002 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Handler: WSWSVCUchrome - {1CA93FF0-A218-44F1 -  No File
FF NetworkProxy: "gopher", ""
FF NetworkProxy: "gopher_port", 0
CMD: ipconfig /flushdns
Hosts:
EmptyTemp:
End










*****************

Error: (0) Failed to create a restore point.
Processes closed successfully.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-21-4216991579-408556834-1651255799-1002\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => value deleted successfully.
HKCR\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => Key not found.
"HKCR\PROTOCOLS\Handler\WSWSVCUchrome" => Key deleted successfully.
Firefox Proxy settings were reset.
Firefox Proxy settings were reset.

=========  ipconfig /flushdns =========


Windows-IP-Konfiguration

Der DNS-Aufl�sungscache wurde geleert.

========= End of CMD: =========

C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
EmptyTemp: => Removed 5.8 GB temporary data.


The system needed a reboot.

==== End of Fixlog 20:29:14 ====

[external image: cool.gif]

 

Use your computer for a day or two and post back and let me know how is working, if the redirect comes back we can dig deeper if need be

 

 

 

Ken :)

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI