Google Redirecting Virus

[Acousticx]

I have searched and searched on the internet to find a solution to the problem but none have worked. So, twcenter what are your solutions to get rid of this tiresome virus?

So far, I have:

Flushed my DNS and reset my router
Searched with malawarebytes and spyware programs and removed things
I have tried tdss rootkiller but I can never get it to start

I need help

[The_Fan]

By tdss rootkiller I am assuming you are referring to the kaspersky product. Did you follow their instructions (see link below)?

http://support.kaspersky.com/viruses...4#FeedBackForm

Also it would help to know which OS you are using and which browser.

[Acousticx]

Windows 32 bit and Firefox

I have tried renaming the file but it still gets to 80% and says it has stopped working.

[The_Fan]

Try downloading the program, rebooting in safe mode and running it.

[Acousticx]

Tried, did the same thing.

[The_Fan]

Have you tried these two things:
http://www.microsoft.com/en-us/secur...s/default.aspx
and
http://www.microsoft.com/security/pc...e-removal.aspx
make sure you run the full scan and not quick.

[Acousticx]

I have tried a full malawarebytes anti-malaware full scan and a superantispyware full scan. Both came up with objects that I deleted. This hasn't changed anything though.

[Bolkonsky]

I strongly recommend MSE, but the malicious software removal tool has always crapped out on me.

Have you run malwarebytes in safe mode?

[Acousticx]

I strongly recommend MSE, but the malicious software removal tool has always crapped out on me.

Have you run malwarebytes in safe mode?

No, both in normal. Most say that this virus is in the registry.. will these 2 programs I spoke of go into the registry?

[The_Fan]

Ok, I am almost as desperate as you must be.....
I found a similar case that got resolved and am including the link. I apologize for the mass of information that you are about to see (3 pages worth) but it is manageable if you ignore all the log files and just focus on the tech support guys instructions.
http://www.bleepingcomputer.com/forums/topic321818.html

Edit: as Bolkonsky said above try running malwarebytes in safe mode first.

[Acousticx]

That is a lot...

One thing I remembered, whenever I had to reboot my machine for malaware and spybot, it wouldn't do it normally. It would bluescreen first. Will doing malaware through safe mode fix that?

[The_Fan]

It very well might. Clearly the virus is hitting you right from the bootup process.
Safe mode allows malware removal tools a bit more freedom to kill things.

[wupwup]

id say full reinstall. you cant be sure its gone completely and i wouldnt risk internet banking and such on an infected pc. maybe im paranoid though

[Acousticx]

I restarted in safe mode and no viruses were found through malaware. When I restarted from there it still gave me a blue screen. This is very irritating and I honestly do not want to do a full reinstall.

[Bolkonsky]

If it stops doing it, chances are it's gone.

Are you sure that your virus definitions are up-to-date?

[Acousticx]

Yes they are and no it's sadly not gone. I tried hitman pro 3 and got rid of a lot of things but it still happens.

[The_Fan]

Hey, to all those who may still have trouble with Google Redirect, I had aa usual fix. With the help and suggestion of a friend (son inlaw) we went into my router and rebooted it to factory settings and the Google Redirect has dissappeared. I than had to reset my password, the old password was too easy to guess. My daughter had brought a brand new laptop and within five minutes of logging on, she got the Google Direct virus, that was the tip off. It had to be in the router.
Google Redirect had attack my router and with the help of a Verizon technician, I am virus clean after about two weeks and so many different virus, malware, spy ware you name, I used them all. So if the virus programs\spyware\malware can't find Google Direct on your computer, than maybe its embedded on your router.


I pulled the above from:
http://answers.microsoft.com/en-us/w...4-5d1c04211a52
If you are able to browse keep searching around on this site and perhaps you can strike on something that will work.
Besides reformatting and reinstalling I can't think of anything else to try. Sorry.

[Bolkonsky]

Flushed my DNS and reset my router

This must be a different..."strain" of it. I'd Google the virus, but I'm a little paranoid to, after hearing these horror stories.

[PoleCat]

You could try this - RKill.

Copperknickers here on the board had a similar virus and this was the suggested fix. It might also work for you. I have no experience with it though so you use it at your own risk.

Here's the thread - http://www.twcenter.net/forums/showthread.php?t=442130

Good luck!

[Acousticx]

Every time I attempt to use rkill it gives me a blue screen and crashes.