Url added to websites (virus?)

[MarianaJW]

I have Kaspersky Internet Security 2015 running on my PC.
Nothing has been found by any tool, there's also no weird program installed in my list.

If someone could direct me into a solution I'd be very grateful.

 

[TwinHeadedEagle]

Hello,


Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them.
Only one of them will run on your system, that will be the right version.

• Double-click to run it. When the tool opens click Yes to disclaimer.
• Press Scan button.
  
  
  
  
  
• It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
• The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

 

[MarianaJW]

Hi,
Thanks for your reply, attached are the files.

 

[TwinHeadedEagle]

Multiple Resident Protection warning!

Always have one (and no more than one!) AntiVirus program! In this case having more of them will not provide you with better protection - instead they may cause slowness, lock-ups and even mark another ones as harmful, leading to leave your system unstable and even damaged. Please choose only one from the listed below to stay with and uninstall the others:

• Kaspersky
• Ad-Aware

Uninstallation procedure:

• Press the
  
  + R on your keyboard at the same time. Type appwiz.cpl and click OK.
• Search for each uninstalled entry, right-click it and select Uninstall.

This should be done until any other steps will be taken.

Fix with Farbar Recovery Scan Tool

This fix was created for this user for use on that particular machine.

Running it on another one may cause damage and render the system unstable.

​

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• Press the Fix button just once and wait.
• If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
• When finished FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.

 

[MarianaJW]

Yeah I appreciate the help, but Ad-Aware was installed after I got the virus or whatever... I installed it to do an extra scan, in fact I already uninstalled it. That has nothing to do with what's going on.

 

[TwinHeadedEagle]

Okay, then skip the first part of instructions.

 

[MarianaJW]

Hi again,
Did run the fixlist.txt and it didn't work. Whenever I visit a new website that hasn't had that url added it happens.
This one the website today: http://www.hbo.com/google.ru

Thanks though!

 

[TwinHeadedEagle]

Can you attach Fixlog.txt per my review?

 

[MarianaJW]

Hi, sorry for the delayed answer. Thanks for your help THE.

 

[TwinHeadedEagle]

How is your PC behaving now?

 

[MarianaJW]

It still does it, I usually browse through the same websites, but whenever I open a new one that I haven't visited before it adds the '/google.ru' thing.
My workaround has just to re access the website and it won't happen again for that url.

 

[Ink]

Unauthorised posts removed.

Groups authorized to help with malware removal logs

 

[TwinHeadedEagle]

Scan with Farbar Recovery Scan Tool

Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• Make sure that Addition.txt option is checked.
  
  
  
  
  
• Press Scan button and wait.
• The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.

Please attach report into your next reply.