OT: Some kind of google search virus.

[JD Austin]

Download the iso image below and burn it to a disk.
Boot from it and run scans your from it (super antispyware/kaspersky):
http://www.twingeckos.com/TGBootCD.iso
When you run kaspersky change the path to 'install it' to c:\ instead of the
path it chooses on the ramdisk.

When it is done then boot normally and go to malwarebytes.com and download
the free version of malwarebytes and run it.  When that is done see where
you are and if it isn't fixed I'll give you a link to a more aggressive
clean up tool.

JD


On Tue, Jan 25, 2011 at 12:33, Thomas Gail Haws <tom.haws at gmail.com> wrote:

> It reminds me of a problem that I was able to solve using the help of
> bleepingcomputer.com and malwarebytes.org forums.  I don't remember the
> name of the issue, but I do remember the search redirection.
>
> Basically, the fix involved the rkill, gmer, and mbam tools at the least.
> If you search from a safe computer for your issue and go by the instructions
> at either of those forums, you will be in good hands.  I want to hear how it
> goes.
>
> Tom
>
>
> --
> "To forgive is the highest, most beautiful form of love. In return, you
> will receive untold peace and happiness." - Dr. Robert Muller
>
>
> On Tue, Jan 25, 2011 at 12:29 PM, keith smith <klsmith2020 at yahoo.com>wrote:
>
>>
>> Hi,
>>
>> I went though an evening of struggling with viruses that took over two
>> computers.  I've removed everything and am back to normal.... almost.
>>
>> I have some kind of virus I am not able to identify and have no idea how
>> to search for a fix.
>>
>> What is happening, is on occasion, when searching google, and I click on a
>> link I am routed to some unrelated sales site.  The destination is rarely
>> the same site.  And sometimes the site I am re-routed to will not let me
>> backup so I have to close the tab and start over.
>>
>> Anyone have any idea what I might be dealing with here?
>>
>> Thanks!
>>
>> ------------------------
>> Keith Smith
>>
>> ---------------------------------------------------
>> PLUG-discuss mailing list - PLUG-discuss at lists.plug.phoenix.az.us
>> To subscribe, unsubscribe, or to change your mail settings:
>> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
>>
>
>
> ---------------------------------------------------
> PLUG-discuss mailing list - PLUG-discuss at lists.plug.phoenix.az.us
> To subscribe, unsubscribe, or to change your mail settings:
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.PLUG.phoenix.az.us/pipermail/plug-discuss/attachments/20110125/d1f2efae/attachment.html>