How to fix the damned google redirector virus !!!!

[Farfrumhumpn]

Okay, I had a thread up over the past week about surfing for porn then all the sudden my PC kept getting redirected. Well, long story short, I was going to give up and reload my PC but due to lack of time I gave it a few more whacks then I found this:

TDSSKiller from Kaspernsky and I'll be damned if after running it that I don't get redirected or any pop ups at all now

As a result of this porn induced infection I'd like to list all the toys I tried for future infectees to take a whack with after they whack off to the stuff that nearly gets thier OS whacked.

Most of these can be downloaded from www.filehippo.com

#1. TDSSKILLER

#2. CCleaner ( This is a must have before, between and after all scans, run the normal cleaner AND the registry cleaner )

#3. Combofix

#4. GMER

#5. Avast ( does not play well with others so make sure its the only program installed that actively runs before using this one, I found out the hard way, repeatedly )
--- Avast has a built in rootkit scanner which helps find stuff most others won't/can't---

#6. Avira ( this did find some problems the others didn't )

#7. SuperAntiSpyware

#8. MalwreBytes

#9. Panda Anti-Rootkit

Thread moved from Software For Windows, to Security.

AnandTech Moderator
mechBgon

 

[sivart]

Easier way to fix this:

A) Don't surf porn
or
B) Use a Linux OS

 

[Pretty Cool]

TDSSKILLER seemed to work great. Thanks. On the other hand, I have little faith that any of the other 8 programs would have fixed the problem.

 

[olds]

My wife got a Firefox. Google redirect virus on her laptop. Nothing seemed to work except for Format c:
Now I can't find the driver disk and none of the drivers on Dell Support work. I bought a disk off Ebay and I am waiting for it to get here.

 

[Caladin2]

good info thanks

 

[snikt]

Use a limited account for day-to-day computer activity. In IE, disable Active Scripting; in Firefox try No-Script. Just some steps to help mitigate breaches and infections. These, among other things, are steps I use and my home rig has never, unintentionally, been hit, even when I visit less than reputable sites to test it.

 

[Vette73]

My wife got a Firefox. Google redirect virus on her laptop. Nothing seemed to work except for Format c:
Now I can't find the driver disk and none of the drivers on Dell Support work. I bought a disk off Ebay and I am waiting for it to get here.

That is what I was about to do to my computer.

The program the OP linked to seems to have worked when NOTHING else would. Norton, Microsofts new security one, ad-aware, spybot, avira, etc..

Hope it holds.

 

[jimhsu]

Generally though when fixing other people's computers, I just perform a reformat (if it's a hardware problem, "buy another computer"). If they have anything valuable at all (usually no, or "it's online"), back that up to an external hard drive. I really don't even bother installing antivirus solutions after (because the user will always find a way to disable/override/accidentally uninstall it). My computers are triply backed up (external, backblaze, custom SVN solution) so infections aren't an issue, but I do keep Microsoft Security Essentials running just because it comes with Windows 7.

That's tech support for you.

 

[tzdk]

TDSSkiller is really good but also check Hitman Pro http://www.surfright.nl/en/hitmanpro and perhaps Dr. Web cure-It http://www.freedrweb.com/cureit/ (their live-cd is also great for this) Hitman mentions this particular problem in changelog/whats new, may be too late but at least they try. Have to look for alternative tools when something is "new" or change rapidly. Most mainstream tools will probably not jump at restoring system file automatically solution Was it not this atapi.sys problem that caused ComboFix to be taken off air? Not like that is a bad tool! Potentially risky to script this and make everyone a rootkit -killer. Once prevention has failed everything is possible...

 

[Modelworks]

Use sandboxie.
When you get malware or scripts or virus while browsing you just close it and they are all gone.
http://sandboxie.com/

They just added 64 bit support too. You need to use the forums there to get the beta.