First time posting to this forum, so I'm just going to copy/paste from the questions above to summarize the problem:
Based on browser history, Dec. 4 is the first day the virus hit. Symptoms are that after clicking legit links in both IE and Chrome, the browser redirects to random sites unrelated to any of the site content. When the browser redirects, the URLs "find-all-you-want.com", "search.beesq.net", or "rd-direct.com" are seen before being redirected to the random site. The redirect always seems to happen when clicking on a legit link on any site (including malwaretips.com), but it only happens every 5-10 clicks.
To give the full backstory, we first saw this behavior while we were in the middle of a separate malware removal process due to a Cryptowall / Poweliks infection we got in Novemeber. That process is now complete (worked with Quads from qmalwareremoval.freeforums.net), but the browser hijacker still remains. Before creating this post, I completed all steps in the "Remove BeesQ.net redirect (Virus Removal Guide)" post (http://malwaretips.com/blogs/beesq-net-removal/), but the symptoms remain. We also have Webroot Secure Anywhere antivirus installed (admittedly AFTER the Cryptowall/Poweliks debacle) as well as the free version of MalwareBytes AntiMalware.
The scan logs for FRST, AdwCleaner, and aswMBR are attached to this post. Thank you in advance for your help with this browser hijacker virus!
Based on browser history, Dec. 4 is the first day the virus hit. Symptoms are that after clicking legit links in both IE and Chrome, the browser redirects to random sites unrelated to any of the site content. When the browser redirects, the URLs "find-all-you-want.com", "search.beesq.net", or "rd-direct.com" are seen before being redirected to the random site. The redirect always seems to happen when clicking on a legit link on any site (including malwaretips.com), but it only happens every 5-10 clicks.
To give the full backstory, we first saw this behavior while we were in the middle of a separate malware removal process due to a Cryptowall / Poweliks infection we got in Novemeber. That process is now complete (worked with Quads from qmalwareremoval.freeforums.net), but the browser hijacker still remains. Before creating this post, I completed all steps in the "Remove BeesQ.net redirect (Virus Removal Guide)" post (http://malwaretips.com/blogs/beesq-net-removal/), but the symptoms remain. We also have Webroot Secure Anywhere antivirus installed (admittedly AFTER the Cryptowall/Poweliks debacle) as well as the free version of MalwareBytes AntiMalware.
The scan logs for FRST, AdwCleaner, and aswMBR are attached to this post. Thank you in advance for your help with this browser hijacker virus!