Solved still being lead down primrose path afterKaspersky said all's well

[rmh.english]

If Kaspersky TDSSKiller didn't detect malware I guess the question is if my browsers still redirect then there is some malware somewhere. Would that be correct?
Really appreciate the help.
Thanks.
R

 

[TwinHeadedEagle]

Hello,


Please download Zemana AntiMalware and save it to your Desktop.

• Install the program and once the installation is complete it will start automatically.
• Without changing any options, press Scan to begin.
• After the short scan is finished, if threats are detected press Next to remove them.

Note: If restart is required to finish the cleaning process, you should click Reboot. If reboot isn't required, please restart your computer manually.​

• Open Zemana AntiMalware again.
• Click on
  
  icon and double click the latest report.
• Now click File > Save As and choose your Desktop before pressing Save.
• The only left thing is to attach saved report in your next message.

 

[rmh.english]

Woke up finding this post. What a great way to start the day! Zemana was downloaded and run, found the problem, which is detailed in attached report per your post. Many thanks.

 

[TwinHeadedEagle]

Problem solved?

 

[rmh.english]

Hi TwinheadedEagle,
Yes the redirect isn't happening now. Thanks again.

 

[rmh.english]

Hi TwinheadedEagle,

OOOPS spoke to soon the redirect is happening again.

 

[TwinHeadedEagle]

Can you reinstall your browsers?

Scan with Farbar Recovery Scan Tool

Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• Make sure that Addition.txt option is checked.
  
  
  
  
  
• Press Scan button and wait.
• The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.

Please attach report into your next reply.

 

[rmh.english]

Hi TwinheadedEagle,

I reinstalled the browsers, Opera and Firefox, I then ran FRST, see attached logfiles per instructions. Thanks.

 

[TwinHeadedEagle]

Do you still have redirects?

 

[rmh.english]

Hi TwinHeadedEagle,

No I don't, I ran Zemana after FRST and it found one remaining suspect which was then dealt with. Thanks again for the assist. Really appreciate your diligence. RMH

 

[TwinHeadedEagle]

Since there are no more problems, we can declare this PC clean

Now, we can proceed with post-cleanup procedures. Let's remove my tools and create a new, non infected restore point concurrently deleting old ones.


Step 1. - Creation of system restore point and tools removal.


Download DelFix by Xplode and save it to your desktop.

• Run the tool by right click on the
  
  icon and Run as administrator option.
• Make sure that these ones are checked:
  • Remove disinfection tools
  • Purge system restore
  • Reset system settings
• Push Run and wait until the tool completes his work.
• All tools we used should be gone. Tool will create an report for you (C:\DelFix.txt). I don't need it for review.

Tool deletes old system restore points and creates a fresh system restore point after cleaning.


Step 2. - Tips and tricks to keep your computer clean, safe and in a good shape.


Security tips - highly recommended reading:

• Simple and easy ways to keep your computer safe and secure on the Internet

Maintenance tips:

• Optimize Windows for better performance

Additional software that I personally use and install on all my clients devices:

• Zemana AntiMalware (paid version highly recommended) - to work as a supplement for your antivirus but with excellent remediation and protection
• Zemana AntiLogger - keep everything you type on keyboard out of sight of bad guys trying to steal your credantials
• Malwarebytes' Anti-Exploit - to prevent plenty of mostly exploited vulnerabilities.
• McShield - to prevent infections spread by removable media.
• Unchecky - to prevent from installing additional foistware, implemented in legitimate installations.
• CryptoPrevent - tool for protection against Cryptolocker and similar ransomware infections.
• Adblock - to surf the web without annoying ads!
• Qualys BrowserCheck - cloud service that scans your browsers and plugins to see if they’re all up-to-date.

My help is free for everybody.
If you're happy with the help provided and/or wish to show your appreciaton, please consider a donation:
Thank you!​

Stay safe,
TwinHeadedEagle

 

[rmh.english]

Hi TwinheadedEagle,
I waited for a day before coming back to follow you latest instructions. Unfortunately, I have been redirected. argh. So I'm thinking I should try the tools again, do you have any other suggestions. Thanks again and sorry for the bother.