Browser Redirects

[Dell Christopher]

I've done a pretty thorough cleaning of my WinXP system using the following
tools:

Spywareblaster
Spybot S&D
AVG 9.0
Malwarebytes
CCleaner

I've also turned System Restore OFF and back ON, and reset Internet
Explorer. Nevertheless, I'm still getting browser pop-ups and redirects
with both IE and Firefox. I'm at a loss as to how there is still something
bad in there that I can't get to. If there is another good tool out there,
I'd love to hear about it.

All feedback is greatly appreciated. Thanks!

[Buffalo]

Dell Christopher wrote:
> I've done a pretty thorough cleaning of my WinXP system using the
> following tools:
>
> Spywareblaster
> Spybot S&D
> AVG 9.0
> Malwarebytes
> CCleaner
>
> I've also turned System Restore OFF and back ON, and reset Internet
> Explorer. Nevertheless, I'm still getting browser pop-ups and
> redirects with both IE and Firefox. I'm at a loss as to how there is
> still something bad in there that I can't get to. If there is
> another good tool out there, I'd love to hear about it.
>
> All feedback is greatly appreciated. Thanks!

Until you get other answers, try the free version of SuperAntiSpyware which
can be found on the webpage of the same name.
Be sure to update it before you run it. It does not ask you to pay to
eliminate what it finds.
Buffalo

[siljaline]

Dell Christopher wrote:
> I've done a pretty thorough cleaning of my WinXP system using the following
> tools:
>
> Spywareblaster
> Spybot S&D
> AVG 9.0
> Malwarebytes
> CCleaner
>
> I've also turned System Restore OFF and back ON, and reset Internet
> Explorer. Nevertheless, I'm still getting browser pop-ups and redirects
> with both IE and Firefox. I'm at a loss as to how there is still something
> bad in there that I can't get to. If there is another good tool out there,
> I'd love to hear about it.
>
> All feedback is greatly appreciated. Thanks!

Have you issue fixed here >
<http://www.smokey-services.eu/forums/index.php/board,5.0.html>

Tell them siljaline sent you.

Good luck !

Silj


--
"Arguing with anonymous strangers on the Internet is a sucker's game
because they almost always turn out to be -- or to be indistinguishable from
-- self-righteous sixteen-year-olds possessing infinite amounts of free time."
- Neil Stephenson, _Cryptonomicon_

[Dell Christopher]

I will try SAS. In the meantime, I came across ComboFix and it identified
some rootkit activity. After completing its scan on a reboot, the browser
is behaving normally.

Many thanks for the replies.


"Buffalo" <Eric@nada.com.invalid> wrote in message
news:i2ag6a$hk9$1@news.eternal-september.org...
>
>
> Dell Christopher wrote:
>> I've done a pretty thorough cleaning of my WinXP system using the
>> following tools:
>>
>> Spywareblaster
>> Spybot S&D
>> AVG 9.0
>> Malwarebytes
>> CCleaner
>>
>> I've also turned System Restore OFF and back ON, and reset Internet
>> Explorer. Nevertheless, I'm still getting browser pop-ups and
>> redirects with both IE and Firefox. I'm at a loss as to how there is
>> still something bad in there that I can't get to. If there is
>> another good tool out there, I'd love to hear about it.
>>
>> All feedback is greatly appreciated. Thanks!
>
> Until you get other answers, try the free version of SuperAntiSpyware
> which
> can be found on the webpage of the same name.
> Be sure to update it before you run it. It does not ask you to pay to
> eliminate what it finds.
> Buffalo
>
>

[smurf]

Dell Christopher wrote:
> I've done a pretty thorough cleaning of my WinXP system using the
> following tools:
>
> Spywareblaster
> Spybot S&D
> AVG 9.0
> Malwarebytes
> CCleaner
>
> I've also turned System Restore OFF and back ON, and reset Internet
> Explorer. Nevertheless, I'm still getting browser pop-ups and
> redirects with both IE and Firefox. I'm at a loss as to how there is
> still something bad in there that I can't get to. If there is
> another good tool out there, I'd love to hear about it.
>
> All feedback is greatly appreciated. Thanks!

tdds killer and combofix might be in order

[smurf]

Dell Christopher wrote:
> I will try SAS. In the meantime, I came across ComboFix and it
> identified some rootkit activity. After completing its scan on a
> reboot, the browser is behaving normally.
>
> Many thanks for the replies.

Combofix is pretty amazing when it comes to new infections...

[David Kaye]

"Dell Christopher" <dellc99@aim.com> wrote:

>I've also turned System Restore OFF and back ON, and reset Internet
>Explorer. Nevertheless, I'm still getting browser pop-ups and redirects
>with both IE and Firefox. I'm at a loss as to how there is still something
>bad in there that I can't get to. If there is another good tool out there,
>I'd love to hear about it.

It's likely a rootkit that loads from a hidden part of the HD, so Windows
doesn't see it. Get a rootkit detector.

TDSSKiller from Kaspersky Labs is really excellent for most of these.

[Dell Christopher]

Would that also explain why the other programs I listed didn't see it
either?


"David Kaye" <sfdavidkaye2@yahoo.com> wrote in message
news:i2aps5$nd6$2@news.eternal-september.org...
> "Dell Christopher" <dellc99@aim.com> wrote:
>
>>I've also turned System Restore OFF and back ON, and reset Internet
>>Explorer. Nevertheless, I'm still getting browser pop-ups and redirects
>>with both IE and Firefox. I'm at a loss as to how there is still
>>something
>>bad in there that I can't get to. If there is another good tool out
>>there,
>>I'd love to hear about it.
>
> It's likely a rootkit that loads from a hidden part of the HD, so Windows
> doesn't see it. Get a rootkit detector.
>
> TDSSKiller from Kaspersky Labs is really excellent for most of these.

[David H. Lipman]

From: "smurf" <smurf@smurf.com>

| Dell Christopher wrote:
>> I will try SAS. In the meantime, I came across ComboFix and it
>> identified some rootkit activity. After completing its scan on a
>> reboot, the browser is behaving normally.

>> Many thanks for the replies.

| Combofix is pretty amazing when it comes to new infections...


It's nothing compared to Malwarebytes' Anti Malware.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

[David H. Lipman]

From: "Dell Christopher" <dellc99@aim.com>

| Would that also explain why the other programs I listed didn't see it
| either?

It is only an assumption that you may have a TDL3 RootKit.

Have you used Malwarebytes' Anti-Malware ?
http://www.malwarebytes.org/mbam/program/mbam-setup.exe



--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp