Redirect Virus?

**RhysJD3** · 01-03-14, 12:02 AM

It's best if you have another computer to scan your drive.

Two computers
1 clean computer (if it has malware or viruses, rather pointless)

1. install malwarebytes or other anti-malware software on clean computer
2. update virus scanner on clean computer
3. shutdown both pc's
4. remove infected drive from malware infected PC
5. insert drive as a secondary drive into clean computer
6. turn clean computer on
7. scan using malwarebytes and clean it
8. scan using virus scanner and clean it
9. copy malwarebytes, virus scanner or update virus scanner files onto secondary drive
10. turn off computer
11. remove drive and install back into other computer
12. start computer in safe mode
13. update virus scanner
14. run malwarebytes and clean computer
15. run virus scanner
16. restart computer in normal mode
17. run malwarebytes again (yes, again)
18. run virus scanner (yes, again)

If you keep getting alerts after all of this, backup the contents of your computer. Wipe the drive using something like wipedisk if standard drive (puts 0's across entire drive) or a secure wipe program for an SSD. Then reinstall your OS and applications.

Personally, if I have malware or viruses, I'll wipe it regardless and start again. Doesn't happen to me often but if it does, it gets wiped, cleaned and rebuilt.
12.

**nihilanth311** · 01-03-14, 12:19 AM

Originally Posted by RhysJD3

It's best if you have another computer to scan your drive.

This works best if you can mount the offline registry hives of the drive you intend to clean. This not only cleans files, but scrubs windows settings in the registry. Some PE discs (Pre-installation Environment) can load a virtual OS from disc and mount your C:\ drive and scan/remove without hindrance.

A good process regardless of method:
TDSSKiller (from kaspersky)
Norton power eraser
Malware Bytes

**Mr_Blonde_OPS** · 01-03-14, 01:14 AM

Ugh so much work. Thank you so much for taking the time to help. I'll keep working on this and get back to you all.

**deputyfestus** · 01-03-14, 06:33 AM

I would recommend physically unplugging the affected pc from internet service and run any or all cleaners repeatedly until you have zero returns or ultimately format and fresh install. ( as others have mentioned get rid of toolbar ext's or addons)

**Phyrelight** · 01-03-14, 06:58 AM

Originally Posted by Mr_Blonde_OPS

Just got done running SuperAntiSpyware...216 threats found and removed...yikes. lol Though bad news, it's still happening. Phyre you had some suggestions, but I need a little more explanation if you would be so kind.

These guys are spot on with their explanations, you still have questions?

**BuddyLee.** · 01-03-14, 10:11 AM

I'd suggest reinstalling windows at this point. Sure fix.

BL

**Mr_Blonde_OPS** · 01-03-14, 04:27 PM

HiJackThis Log

**iLLusioN** · 01-04-14, 08:57 PM

Your HijackThis log looks clean. Ignore all the missing file stuff...that's because you have a 64 bit OS. That means(most likely) your host file is clean and your browsers don't have anything attached to them. It does look like you might have a proxy enabled in IE...lots of mal-ware will set one for you...check your internet settings in all browsers that you have installed and verify that anything to do with a proxy server is unchecked. Are you still having issues after all the scans went through?

**Mr_Blonde_OPS** · 01-04-14, 09:33 PM

Originally Posted by iLLusioN

Your HijackThis log looks clean. Ignore all the missing file stuff...that's because you have a 64 bit OS. That means(most likely) your host file is clean and your browsers don't have anything attached to them. It does look like you might have a proxy enabled in IE...lots of mal-ware will set one for you...check your internet settings in all browsers that you have installed and verify that anything to do with a proxy server is unchecked. Are you still having issues after all the scans went through?

I uninstalled google chrome completely and installed Firefox instead. Zero problems thus far.

**iLLusioN** · 01-04-14, 11:54 PM

Originally Posted by Mr_Blonde_OPS

I uninstalled google chrome completely and installed Firefox instead. Zero problems thus far.

Cool. If all your scans run clean, then based on that and your hijack log I'd say you are good. Hit me up if you start having issues again..there are a couple other things that can be done without resorting to formatting.