View Single Post
Old 05-09-2008, 06:48 AM   #6 (permalink)
amateur
Moderator, Analyst, Security Team
 
amateur's Avatar
 
Join Date: Jun 2006
Location: Rhode Island, USA
Posts: 2,504
OS: XP Home SP3, XP Media Center Edition SP3


Re: google search redirects to adsites

Hi,
That's great.
Quote:
another problem i discovered was that when i tried to reboot windows in safe mode, i only had one option, and that was to start windows in normal mode after pressing F8 at start up
That's normal with this infection. We'll fix that. But first, current infections tend to patch a lot of critical system files now, these often result in multiple problems, and sometimes, they can cause unbootable machines. Having Window's Recovery Console installed on your machine will help you and I in case something goes wrong while we are in the process of cleaning your machine.:

Quote:
WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
Go to Microsoft's website => http://support.microsoft.com/kb/310994
Select the download that's appropriate for your Operating System



Download the file & save it as it's originally named, next to ComboFix.exe.



Now close all open windows and programs, including all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
  • Drag the setup package onto ComboFix.exe and drop it.
  • Follow the prompts to start ComboFix and when prompted, agree to the End-User License Agreement to install the Microsoft Recovery Console.
  • At the next prompt, click 'Yes' to run the full ComboFix scan.


  • When the tool is finished, it will produce a report for you.
Please post the C:\ComboFix.txt along with a new HijackThis log for further review.
__________________
My services are free. However, you can donate to TSF to help keep it running and prospering.
ASAP


Last edited by amateur : 05-09-2008 at 06:50 AM. Reason: punctuation correction
amateur is offline   Reply With Quote