[aacm]

sjpritch25

I will close this case... and thanks so much for your effort... thanks a lot...

[aacm]

SJPRITCH25 ..hello again ... I install FF and same problem happen again... could you please help me again... ????

[aacm]

My problem back again... sorry

[sjpritch25]

Download Combofix from this webpage: http://www.bleepingcomputer.com/comb...o-use-combofix

**Note: It is important that it is saved directly to your desktop**

--------------------------------------------------------------------

1. Close any open browsers.

2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

--------------------------------------------------------------------

Double click on combofix.exe & follow the prompts.

• When finished, it will produce a report for you.
• Please post the "C:\ComboFix.txt" along with a new HijackThis log for further review.

Note:
Do not mouseclick combofix's window while it's running. That may cause it to stall

[aacm]

Thanks so much...
Here is your request..

[sjpritch25]

what's going on?

Using Internet Explorer or Firefox, visit Kaspersky Online Scanner

1. Click Accept, when prompted to download and install the program files and database of malware definitions.

2. To optimize scanning time and produce a more sensible report for review:

• Close any open programs
• Turn off the real time scanner of any existing antivirus program while performing the online scan. Click HERE to see how to disable the most common antivirus programs.

3. Click Run at the Security prompt.

The program will then begin downloading and installing and will also update the database.
Please be patient as this can take quite a long time to download.

• Once the update is complete, click on Settings.
• Make sure these boxes are checked (ticked). If they are not, please tick them and click on the Save button:
  • Spyware, adware, dialers, and other riskware
  • Archives
  • E-mail databases
• Click on My Computer under the green Scan bar to the left to start the scan.
• Once the scan is complete, it will display if your system has been infected. It does not provide an option to clean/disinfect. We only require a report from it.
• Do NOT be alarmed by what you see in the report. Many of the finds have likely been quarantined.
• Click View report... at the bottom.
• Click the Save report... button.
  
  
  
  
• Change the Files of type dropdown box to Text file (.txt) and name the file KasReport.txt to save the file to your desktop so that you may post it in your next reply

[aacm]

I using safari because firefox give me that problem, so I use sometimes IE for updates and for comunnicated with you now.. however IF you want me to continue use FF I will and stop using Safari.. well I have big HD so tomorrow I will send you those results.. OK and Thanks for everything.... Problably Kasp.. will take time to scan my HD..

[sjpritch25]

i doesn't matter. Just can't use safari for kaspersky scan.

[aacm]

Took 11 hours... uhuhuh !!!
here is report

[sjpritch25]

What's the deal with these?

G:\Downloads\RW.Wasp.crostuff.net\keygen.exe Infected: Virus.Win32.Induc.a 1
G:\Downloads\RW.Wasp.crostuff.net\RW.Wasp.crostuff.net\keygen.exe

These violate rule IV
http://www.techguy.org/rules.html

[aacm]

In my G: disk is my second hard drive is for storage... I help a indivual to save his contents of his Hard Drive... I probably forgot to erase his folders one of them is that one.... so sorry I know about the rules... also if you found more files in there sorry I delete it... need to be more careful in this "folders"... sorry about that... I look for more of this ??$$%% things... my G drive is big too, 500g, I warned him about that in the day I move his data. Thanks for the advice...

[aacm]

sjpritch25
Did I created something against you??... If so sorry, but I don't think I did nothing wrong,
The reason I say that is because I didn't receive any answer about the scan, and I think you forget about me. Or we finish with my case?? Please I would like to know what happen with this problem, let me know.

Thanks

AACM

[sjpritch25]

Are you still getting re-directed?

[aacm]

Yes and now I uninstalled sjpritch25 that reason I uninstalled FF because program start scanning my system... so I made that descion. What are your thoughts???

[sjpritch25]

the re-directs aren't going to be browser specific.

Download GMER Antirootkit Here, click on Download EXE and save to your Desktop

• Disconnect from the internet and disable all active protection so your security program drivers will not conflict with gmer's driver
• Double-click Gmer.exe to run the program.
• When the program opens, click the "Rootkit" Tab
• On the right-side, check all the items to be scanned, but leave "Show All" unchecked
• Select all drives that are connected to your system to be scanned
• Click the Scan button
• When the scan is finished, click Copy to save the scan log to the Windows clipboard
• Open Notepad or a similar text editor
• Paste the clipboard contents into a text file by clicking Edit | Paste or Ctl V
• Save the gmer scan log and post it in your next reply.
• Close Gmer
• Open a command prompt (Start | run |type cmd and hit Enter)
  • Type or paste the following to unload the gmer driver:
  • net stop gmer
  • Hit Enter
  • Exit the command prompt.
• Re-enable all active protection.