Malware Removal Forums

Possible Malware/Hijacking

Ferretman · 2008-11-08T20:56:55+00:00

Howdy All: I noticed over the past couple of weeks that I'd been unable to get to Microsoft Update at all, and whenever I clicked on various Google searches directly I got directed to some oddball search site rather than the site I wanted. (I had to cut and paste the http link below the clickable link to get to the page I wanted.) I also found (when I began to suspect malware) that I was unable to go to any of the malware forums at all--I was being stopped. A quick check via a different machine confirmed that the site was fine, but something on my computer was preventing my accessing the site. I downloaded ComboFix and ran it this afternoon. It generated the attached logs. Any advice on what I should do? Steve Attachments: 📎 ComboFix.txt 📎 ComboFix-quarantined-files.txt

13 min read

✨ The volunteers who helped with this thread aren't active anymore, but you can still get a personalized answer — click Ask AI below.

Ferretman

November 23, 2008, 4:14 AM UTC

"katana" wrote:
"Ferretman" wrote:I'll give the Combfix run a try to be sure.

I'm sorry, I don't understand you.

A word of warning: Neither I nor sUBs are responsible for any damage you may cause your machine by running ComboFix on your own.
This tool is not a toy and not for everyday use.
ComboFix SHOULD NOT be used unless requested by a forum helper

You suggested running "Combofix /u", which appears to have uninstalled it.

A good idea really...don't want to leave that lying around.

Steve

Katana MRU Teacher Emeritus

November 23, 2008, 2:37 PM UTC

"Ferretman" wrote:You suggested running "Combofix /u", which appears to have uninstalled it.

Yes, it uninstalls Combofix and all the files it quarantined as well as removing old restore points and creating a new clean one.

Ferretman

November 23, 2008, 2:44 PM UTC

"katana" wrote:
"Ferretman" wrote:You suggested running "Combofix /u", which appears to have uninstalled it.

Yes, it uninstalls Combofix and all the files it quarantined as well as removing old restore points and creating a new clean one.

Excellent.

Working on the various updates now. Turns out some of them are spurious listings from an old backup of my mother's computer, so after updating the locals I'm re-running the software update scan.

Ferretman

November 27, 2008, 12:04 AM UTC

And here's my final report!

In a (couple of) words: Looking good.

I've re-run all of the malware scanners and antivirus and whatnot again just prior to this post, and they all came up negative. A couple of the suggested ones fight with each other a bit (now I remember why I got rid of Scotty) but it's nothing major. No anomalous behaviors have been noted in any of my surfing or whatnot, which is what prompted me to note the problem in the first place.

Looks good. Thanks for the assist, katana!

Steve

NonSuch Administrator

November 29, 2008, 8:48 AM UTC

As this issue is resolved,

✨ Ask AI about this thread

No ads, no affiliate links — generated on request from this thread's own archived content, not written by forum staff. Never run a scan/removal tool as a self-service step if the original thread describes it being done under a helper's direct supervision, and don't include your name, email, or other personal details in a follow-up question. See our privacy page for details on how this works.