certified. toolbar redirect of IE

[thejules]

OOOPPS Sorry about that -- here you go!
theJules

 

[kuttus]

Noting wrong showing in this one also... So now the home page is Google.com right?

 

[thejules]

No it still goes to that certified toolbar search
theJules

 

[kuttus]

Do you Change the Default Search Engine to Google or yahoo?

Now Close all the Internet Explorer and Open a new Internet Explorer. Click On Tools --> Manage Add-ons --> Now Click on Search Providers

Now you can see a list of Search Providers there. Make Google or Yahoo as your Default Search Provider.... After that Close your Internet Explorer and reopen it...

Now check if you are facing any such issues on the Internet Explorer....

 

[thejules]

Kuttus
google is the only one and marked as default
theJules

 

[kuttus]

Okay... Please Run Ccleaner once again with following settings and reboot the computer.

Let me know the status after the reboot........

 

[thejules]

While waiting for your response I went to run the CC cleaner again and noticed that my options are different from the ones pictured. Does this matter? I have attached a pic
theJules

never mind - I didn't attach a pic b/c I have reached my quota.

 

[kuttus]

Tomorrow morning when you woke up try this steps and update me the status...

STEP 1: Run the below OTL fix
<ol><li>Start <>OTL.exe</></li>
<li>Copy/paste the following text written <>inside of the code box</> into the <>Custom Scans/Fixes</> box located at the bottom of OTL

:OTL
IE - HKLM\..\SearchScopes\{6BD2A697-FF75-46B7-9026-6DA29258069D}: "URL" = http://www.ask.com/web?q={searchterms}&l=dis&o=ushpl
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D590CC13-834B-4AAF-8FCD-A7469ADD44C2}: DhcpNameServer = 10.61.32.1 1.1.1.1
[2012/08/10 19:31:20 | 000,027,520 | ---- | C] () -- C:\Users\donald\AppData\Local\dt.dat
[2013/01/16 19:15:53 | 000,015,360 | ---- | C] () -- C:\Windows\Launcher.exe
@Alternate Data Stream - 146 bytes -> C:\ProgramData\Temp:0B4227B4


:Files
C:\Users\donald\AppData\Local\dt.dat
C:\Windows\Launcher.exe

:commands
[emptytemp]
[reboot]

<>NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system</></li>
<li>Then click the <>Run Fix</> button at the top</li>
<li>Let the program run unhindered, reboot when it is done</li>
<li>Attach the new log produced by OTL (C:\_OTL)</li>
</ol>

<hr />

 

[thejules]

Hi Kuttus,

I ran the CC cleaner and rebooted -- IE still goes to Certified toolbar site.

I ran the OTL fix and rebooted -- IE still goes to certified toolbar site.

It takes a long time for the certified toolbar site to come up and I notice that while it is loading at the bottom where it says waiting on...
the site it is waiting on is different each time -- don't know if that matters just thought I would mention it.
theJules

 

[kuttus]

1. Open Internet Explorer. Go to Tools → Manage Add-ons.
   
   
2. Select Toolbars and Extensions. Remove Certified Toolbar by Simply Tech Ltd. There might be two or more add-ons installed with the same name. Remove all of them.
   
   
3. Remove Web Search web search provider. Close the window.
   
   
4. Now restart the computer and see what's happening...

<hr />

Please run the following utility so that I can get a log of your system...
STEP 2 : Run a scan with Combofix

Please read and follow very carefully the below instructions​

Download ComboFix from one of the following locations:

COMBOFIX DOWNLOAD LINK #1 (This link will automatically download Combofix on your computer)
COMBOFIX DOWNLOAD LINK #2 (This link will automatically download Combofix on your computer)
----------------------------------------------------------------
VERY IMPORTANT !!! Save ComboFix.exe to your Desktop

<ul>
<li>Close any open browsers.</li>
<li>Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
<>Very Important!</> Temporarily <>disable</> your <>anti-virus</>, <>script blocking</> and any <>anti-malware</> real-time protection <em><>before</></em> performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause <em>"unpredictable results"</em>.</li>
<li><>WARNING: Combofix will disconnect your machine from the Internet as soon as it starts</>.Please do not attempt to re-connect your machine back to the Internet until Combofix has completely finished.
If there is no internet connection after running Combofix, then restart your computer to restore back your connection.</li>
</ul>
-----------------------------------------------------------------

How to run the Combofix scan :

1. Double click on ComboFix.exe & follow the prompts.
2. Accept the disclaimer and allow to update if it asks
3. When finished, it shall produce a log for you.
   [*]Please include the C:\ComboFix.txt in your next reply.

Additional notes:
<ol><li> Do not mouse-click Combofix's window while it is running. That may cause it to stall.</li>
<li> Do not "re-run" Combofix. If you have a problem, reply back for further instructions.</li>
<li> If after the reboot you get errors about programms being marked for deletion then reboot, that will cure it.</li></ol>



<hr />

 

[thejules]

Kuttus,

Step 1 -- the Certified toolbar is not listed under toolbars so cannot delete it -- I think I deleted that before I ever looked for help. Internet Explorer still redirects to the search-certified-toolbar site

Step 2 -- I ran Combofix and restarted with no apparent problems. The log is attached.

 

[kuttus]

Kuttus,

I got it fixed!! I am so happy! I went to the short cuts to IE and right clicked on properties and deleted the part after the iexplorer.exe that had the address to search.certified-toolbar.com...... and it worked!! Now IE goes to the homepage like it's supposed to.

Do you think the computer is ok now? Let me know!
theJules

Great to hear that you are able to fix it... All of those logs seems to be good only.. There is no other Sign of infections found on your computer... Are you facing any other issues on the computer?

 

[kuttus]

Are you facing any other issues on the computer now???

Double click on OTL to run it

• Click on the Cleanup button at the top.
• You will be asked to reboot the machine to finish the Cleanup process. Choose Yes
• This will remove itself and other tools we may have used.

---

Now that your PC is clean, I recommend you to create a new System Restore point then purge the old ones after.

For XP
How to create a Restore Point in XP
Delete all restore points except the most recent one

For Vista
Create a restore point
Delete all but the most recent restore point

For Windows 7
Create a restore point
Delete all but the most recent restore point - Click the Delete all but the most recent restore point link

---

Keep your system updated

• Keeping your programs (especially Adobe and Java products) updated is essential. Update Checker will notify you if any of your programs require an update.
• Microsoft releases patches for Windows and Office products regularly to patch up Windows and Office product bugs and vulnerabilities.
• Please ensure you update your system regularly and have automatic updates on. You can learn how to turn Automatic Updates on here

---

I also recommend you to switch your antivirus program to a better one. Here are some suggestions:

• avast! 7 Home Edition - Don't use it with Online Armor
• Avira AntiVir Personal
• Microsoft Security Essentials

In addition to your antivirus, you need additional protection such as a firewall and behavioural blocker.

• Online Armor
• Comodo Firewall - If you are an advance user

Here are only a few suggestions that will improve your system security. Should you wish to allow us to make full recommendations and set your PC up with maximum security, please start a thread here. Our community of PC enthusiasts and experts will give you feedback and help you secure your system from future malware infections.

---

Internet Explorer may be the most popular browser but it's definitely not the most secure browser. Consider using other browsers with addition add-ons to safeguard your system while browsing the internet.

Firefox is a more secure, faster browser than Internet Explorer. Firefox contains less vulnerabilities, reducing the risk of drive-by downloads. In addition, you can add the following add-ons to increase security.

• KeyScramber - Encrypts your keystrokes to protect you against keyloggers that steals personal & banking information
• AdBlock - Disable/blocks advertisements on websites so you won't accidentally click on a malicious ad.
• NoScript - Disables Flash & Java contents to avoid exploits or drive-by attacks
• Web of Trust - Shows the website rating by other users and blocks dangerous and poor-rated sites

Google Chrome is another good browser that is faster and more secure than Internet Explorer by having a sandbox feature. Additionally, you can add the following add-on to Chrome to heighten security.

• AdBlock

---

Lastly, it is important to perform system maintenance on a regular basis. Here are a few tools and on-demand scanners that you should keep & use every 1-2 weeks to keep your system healthy.

• CCleaner
• Malwarebytes Anti-Malware
• Temp File Cleaner by OldTimer

Other than that, stay safe out there! If you have any other questions or concerns, feel free to ask

<hr />
What's next?

1. Bulild up your malware defenses by starting a new thread in Security Configuration Wizard forum.
2. Learn how to avoid malware by reading this article <a href="http://malwaretips.com/blogs/how-to-easily-avoid-pc-infections/">How to easily avoid malware</a>
3. Be an active member in the MalwareTips community!

 

[kuttus]

This thread is now closed.​

Reason:&nbsp;<span style="color: #ff0000;">Resolved</span>​

<span style="color: #ff0000;"><>The procedures contained in this thread are for this user and this user only.&nbsp;&nbsp;Attempting to use the instructions in this thread on your system could result in damaging the Operating System beyond repair.&nbsp;&nbsp;</></span>

<span style="color: #ff0000;"><>DO NOT use any of the tools mentioned in this thread without the supervision of a Malware Removal Specialist.</></span>

All members requesting Malware Removal Assistance are required to follow all procedures in the thread