Damit ive got a virus, any help please

[Duderino]

Fookin dloaded a exe file and i watched it vanish in front of my eyes. Now when i search google i get redirected to pop up sites instead of where i wish to go.

 

So ive dloaded firefox so i can surf but google in ie is rite on the turn

 

I keep seeing this ip at the top 64.156.192.117 so it must have something to do with this ?

 

Any way ive used spybot, AVG ,ccleaner and i am just running malwarebytes i have also done a system restore but the problem is still there. I will run panda scan next but i am hoping someone on here may be able to help me.

 

Any ideas.

 

Sorry about the spelling but ive got no checker now as it was on ie.

[crut]

Re-install. Sounds like your system has been compromised.

[Duderino]

Nah there must be a way b4 the dreaded re install, there must be !!

[Timmy1599968758]

tryed to remove the virus in safe mode? have you googled the IP address to see its sources?

[Duderino]

Oh ye i forgot about safemode, will do that when malwarebytes has finished (picked up 8 things up to now)...

Im thinkin its a dodgy file in the google folder as its fine on firefox. Good idea to delete the google file ??

[beth1974uk]

cant you just restore from a previous saved back up?

[Duderino]

Tried that beth me love but it still brings the problem back up in ie. Booo

[lazarus]

Another 2 apps that are handy for this are Hijackthis and Unhackme. bother need a bit more know how than just pressing the scan button however and if you get to carried away you can remove stuff you actually need. The ols sysinternals process explorer is another handy tool as it will let you see which dll's and application is calling. again need a bit of know how to make use of the info but you can't do any damage with it.

[Capt Slog]

I don't think it will get the problem, but C-Cleaner is good for mopping up registry entries that are wrong, worth a go before the complete re-instal.

 

LINKY=> CCleaner - Home

[beth1974uk]

Tried that beth me love but it still brings the problem back up in ie. Booo

 

ah ok.. well try a good dose of paracetamol, plenty of fluids and plenty of rest

 

thats my only 2 pieces of advice re viruses!

[Duderino]

Cheers for the advice team. I'm running all my virus software in safemode right now one at a time and it has picked a lot of things. I will know how good its been when I reboot later on. Also I will try the programs sugested. Bloody nightmare.

[Hillside]

Have you tried turning it off and on again?:D

 

You could try smitfraud fix, which seems to get rid of quite a number of persistent nasties

Can be downloaded from here:

 

SmitFraudFix

 

Have a read at the instructions before running it though.

 

Good luck.

[cookie121]

I can tell you where it came from!!

 

http://i75.photobucket.com/albums/i302/cookie121god/Capture-12.jpg

[Nick1599968727]

dont forget when running the virus killers in safe mode to switch off back up restore on all drives! another two things that should always be to hand are a windows live dvd and hyrens boot disc. the xplive dvd loads a fully working copy of xp into ram so you can do anything to the system files on the hd!!, and hyren is a boot sisc that has every utility you can think of, again all run in ram so you can work on the hd

If you dont switch off system restore it will just keep reinstalling itself !

[Birdman]

First recover your hosts file

[Duderino]

well every free scanner there is has been used and its still fookin there, dam that bitch. Its a thing called go.google and its a problem for a lot of people so it seems.

 

Its a redirecting thing that sends you to shite websites and stuff.

 

Face fookin palm.

[Hillside]

Just had a look at go.google. As you say loads of people have had probs getting shot of it. In view of the time you've spent trying to get rid of it, it may now be easier to just do a clean install.

[Duderino]

I suppose its looking that way but i didnt really want to so soon as there may be a fix in the pipes.

Firefox is google loaded so ive droped that and resorted to bing as my search engine for now as im still in hope.

Double buble boooooo

[Capt Slog]

Have you seen this one.......

 

Remove Virus Which Redirects to go.google.com | go.google.com Redirect Virus Removal tool for Windows

[Duderino]

Hey slog, yeh i tried them both last night, then tried malwarebytes with no joy. Ive looked for the hidden file in the device manager but the file TDSSserv.sys isnt showing itself. Will try again when ive regained the will to live, lol. Even girls rnt this much trouble. Thing is i would usually just re install but if i get it again im just back to square1 so i might as well stick to it and try to suss this critter out.

Cheers sloggy

[Duderino]

Talkin of black books with poems in, here is mine

 

Ive got a go go virus and im wondering what to do

Ive tried every malware fixer but now im turning blue

so i sent a mail to google and they fooked me off right there

and if it wont go quietly im guna have grey hair

[Capt Slog]

Okay...

 

When I was young, and I had hair

i didn't have a 'puter.

If I had just some grey hairs now,

I'm sure I'd be more cuter.

[oOTomOo]

If you know what files are the problem, get yourself a linux boot disk, boot into linux from the cd, mount the hard drive, delete the infected files and clear out your various temp folders for good measure

 

Reboot (and remove boot cd) Oh, and delete the system restore files, (i forget where they live) because they will be infected too.

[Kiteboyza]

see if its running in startup hit msconfig, might be able to shut the fooker down like that