mihalakj

example of a site it redirects to at random: hxxps://publisherhub.plaimedia.com/nlp/index.php?pid=8&kw=buy&sid=4444444&f=click&bu=https%3A%2F%2Fpublisherhub.plaimedia.com%2Fclick.php%3Fkey%3Djhjpdjv0t8ees62n2wdu%26%26t1%3D{t1}%26t2%3Dbacktrafffromxml&url=https://feed.myadsbro.com/ Note, the site never successfully loads.

For some reason when I have yahoo.com open in internet explorer, it will be fine for minutes, hours, but after a while it randomly redirects to some other site. Often the site doesn't load, but sometimes it does. When I use firefox, malwarebytes has sometimes put up a page saying it blocked the page from loading because its malicious. When I run my malwarebytes scanner, no malware is found.

i also forgot to mention that the advanced setting that makes malware bytes delay start up keeps getting its check mark back after every reboot. I believe whatever malware i have is installing itself at start up. also on reboot, a windows message asking if WKUfind.exe pops up. I usually click no, but i notice after leaving the prompt up for about 1 minute it goes away automatically and i'm pretty sure it shouldn't just go away. i've searched my c: drive for wkufind.exe and it never finds it during a search. help!

I've installed Malware bytes because my browsers keep getting like 10 conduitsearch.org search pages coming back and other search pages I didn't sign up for. I ran malware bytes and it found a bunch of non malware that I removed, didn't find anything. I tried Avast, malwarebytes anti root kit, malware bytes chamelon and I haven't found anything besides non malware. The browser search pages keep getting cleaned up but come back on reboot. The computer seems to be slower than it should to. Whatever I seem to have isn't being detected? Any ideas how to find whats on the system so I can begin the process of removal?

I'll check out the preventative maintenance post. thanks for your help MrC

Output pasted below: Results of screen317's Security Check version 0.99.71 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 10 ``````````````Antivirus/Firewall Check:`````````````` Windows Firewall Enabled! WMI entry may not exist for antivirus; attempting automatic update. `````````Anti-malware/Other Utilities Check:````````` Malwarebytes Anti-Malware version 1.75.0.1300 Java 6 Update 22 Java 6 Update 37 Java 7 Update 21 Java version out of Date! Adobe Flash Player 11.7.700.224 Adobe Reader 10.1.7 Adobe Reader out of Date! Mozilla Firefox 16.0.2 Firefox out of Date! Google Chrome 28.0.1500.71 Google Chrome 28.0.1500.72 Google Chrome plugins... ````````Process Check: objlist.exe by Laurent```````` Malwarebytes Anti-Malware mbamservice.exe Malwarebytes Anti-Malware mbamgui.exe Malwarebytes' Anti-Malware mbamscheduler.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: 0% ````````````````````End of Log``````````````````````

It immediately said "Unsupported operating system. Aborting now". I am using Win7 x64.

yes it re-enables now!

Junkware Removal Tool output attached. JRT.txt

Adware search log & adware delete log attached AdwCleanerR3.txt AdwCleanerS2.txt

here's the adware removal log. I reviewed all the folders, none of which are needed. AdwCleanerR1.txt

ok. combo fix done. log is attached. ComboFix.txt

ok you posted before I completed my last post, so just for clarification, combo fix has not been run yet.

btw the first scan found 9 instance of Trojan.sirefef.c . everything was good after the 2nd scan. I've run windows update and it seems to work. Internet works. I don't use the windows firewall, so not sure how to test that. I rebooted after that just the check things out. I attempted to open malware bytes and I got a UAC prompt asking me if malware bytes could make changes to my system. I allowed it. enable malicious website checking is automatically checked now. Everything looks good... what is next?