Jump to content

svchost trojan - search redirects


Recommended Posts

  • Replies 60
  • Created
  • Last Reply

Top Posters In This Topic

Please find this folder C:\TDSSKiller_Quarantine and rename it to C:\quarantine

Please download TDSSKiller to your desktop.

Press the Windows logo key + R to bring up the "run box"

Copy and paste next command in the field:

"%userprofile%\desktop\TDSSKiller.exe" -qmbr

Hit OK or Enter to start TDSSKiller running.

It's only going to run about 5 seconds to copy some info into the TDSSKiller_Quarantine folder which is located in C:\TDSSKiller_Quarantine.

Please zip the folder up and attach it to your next post.

Thanks......MrC

Link to post
Share on other sites

Good News! :)

We got it sorted with the help of B-boy/StyLe/ and farbar.

Turns out......

Mbr is not infected, it is forged by legal software (some recovery software).

So you're OK

-----------------------------------------

Please Uninstall ComboFix:

Press the Windows logo key + R to bring up the "run box"

Copy and paste next command in the field:

ComboFix /uninstall

Make sure there's a space between Combofix and /

cf2.jpg

Then hit enter.

This will uninstall Combofix, delete its related folders and files, hide file extensions, hide the system/hidden files and clears System Restore cache and create new Restore point

-----------------------------------

Run OTL and hit the CleanUp button. (This will cleanup the tools and logs used including itself)

Any other programs or logs you can manually delete.

--------------------------------

You have out date Java on the system, older versions are vulnerable to malware.

Please go to your control panels add/remove programs and uninstall these:

Java™ 6 Update 22

Then download and install the latest version Java™ 6 Update 31.

http://www.java.com/...load/manual.jsp <---latest version

http://www.java.com/...d/installed.jsp <---verify your Java

-----------------------------------

Any questions...please post back.

If you think I've helped you, please leave a comment > click on my avatar picture > click Profile Feed.

Take a look at My Preventive Maintenance to avoid being infected again.

Good Luck and Thanks for using the forum, MrC

Link to post
Share on other sites

ok, great... one more issue. my excel and word starter 2010 are not working now. they say "microsoft excel starter 2010 cannot be opened. try again or repair product in control panel" when you click to open them. any ideas... probably been a week or more since i used them and they worked fine then.

thanks,

scott

Link to post
Share on other sites

Glad we could help. :)

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.