Download the iso image below and burn it to a disk. 
Boot from it and run scans your from it (super antispyware/kaspersky):
http://www.twingeckos.com/TGBootCD.iso
When you run kaspersky change the path to 'install it' to c:\ instead of the path it chooses on the ramdisk.

When it is done then boot normally and go to malwarebytes.com and download the free version of malwarebytes and run it.  When that is done see where you are and if it isn't fixed I'll give you a link to a more aggressive clean up tool.

JD


On Tue, Jan 25, 2011 at 12:33, Thomas Gail Haws <tom.haws@gmail.com> wrote:
It reminds me of a problem that I was able to solve using the help of bleepingcomputer.com and malwarebytes.org forums.  I don't remember the name of the issue, but I do remember the search redirection.

Basically, the fix involved the rkill, gmer, and mbam tools at the least.  If you search from a safe computer for your issue and go by the instructions at either of those forums, you will be in good hands.  I want to hear how it goes.

Tom


--
"To forgive is the highest, most beautiful form of love. In return, you will receive untold peace and happiness." - Dr. Robert Muller


On Tue, Jan 25, 2011 at 12:29 PM, keith smith <klsmith2020@yahoo.com> wrote:

Hi,

I went though an evening of struggling with viruses that took over two computers.  I've removed everything and am back to normal.... almost.

I have some kind of virus I am not able to identify and have no idea how to search for a fix.

What is happening, is on occasion, when searching google, and I click on a link I am routed to some unrelated sales site.  The destination is rarely the same site.  And sometimes the site I am re-routed to will not let me backup so I have to close the tab and start over.

Anyone have any idea what I might be dealing with here?

Thanks!

------------------------
Keith Smith


---------------------------------------------------
PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
To subscribe, unsubscribe, or to change your mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss


---------------------------------------------------
PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
To subscribe, unsubscribe, or to change your mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss