Solved Browser Redirect - SpringFiles?

[TwinHeadedEagle]

Yes, something is recreating it. In order to see what recreates it, we need to use bigger hammer

Please download Process Monitor

Extract and run Procmon.exe as Administrator, that is important.

Let it run minimized, it needs to stay active in order to catch how this happens.

Run Zemana and remove this entry. Don't close process monitor. After some time, when Zemana finds it again in its scan, click on process monitor, click on File Save and save the Process Monitor Log file so some location you can find. Then zip fhat file up and upload it here: Free large file hosting. Send big files the easy way!

Then copy download link to me.

 

[Calibrate]

Here is the link, but it is only about 40% of the procmon file because my laptop shut down after that due to an error. I'm trying the process again now.

Logfile.zip (259.87MB) - SendSpace.com

 

[Calibrate]

It was too large for that site so I used Google drive instead. Here's the link
Logfile2.zip

 

[TwinHeadedEagle]

System File Checker

• Press
  
  + R on your keyboard at the same time. Type cmd and click OK.
• Copy/Enter the command below and press Enter:

• sfc /scannow

• Windows will begin with system scan.
• When done, please reboot your system.

System File Checker report:

• Press
  
  + R on your keyboard at the same time. Type cmd and click OK.
• Copy/Enter the command below and press Enter:

• findstr /c:"[SR]" %windir%\Logs\CBS\CBS.log >"%userprofile%\Desktop\sfcdetails.txt"

• Attach sfcdetails.txt from your Desktop in your next reply.

Scan with Malwarebytes' Anti-Malware

Please download Malwarebytes Anti-Malware and save it to your desktop.

• Install the progam and select update.
• Once updated, click the Settings tab, in the left panel choose Detection & Protection and tick Scan for rootkits.
• In the same tab, under PUP and PUM detections make sure it is set to Treat detections as malware.
• Click the Scan tab, choose Threat Scan is checked and click Start Scan.
• If threats are detected, click the Apply Actions button. You will now be prompted to reboot. Click Yes.
• Upon completion of the scan (or after the reboot), click the History tab.
• Click Application Logs and double-click the Scan Log.
• At the bottom click Export and choose Text file.

Save the file to your desktop and include its content in your next reply.

 

[Calibrate]

There they are

 

[TwinHeadedEagle]

Okay, how is your PC behaving now?

 

[Calibrate]

Still redirecting on some websites

 

[TwinHeadedEagle]

Does Zemana detect the same thing now?

 

[Calibrate]

No. Zemana is not detecting anything.

 

[TwinHeadedEagle]

Do you still have problems?

 

[Calibrate]

Seems to be OK at the moment. I am running Malwarebytes again to see if it picks anything up.

 

[Calibrate]

Malwarebytes is still picking up an issue. Only 1 registry issue but it's the same one that has been plaguing me for a week now.

 

[TwinHeadedEagle]

This is benign remnant, no need to worry about it.

 

[Calibrate]

It seems to be ok.

 

[Calibrate]

Thank you very much for your help. Invaluable!