This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Malware Removal Forums

I've been Goored

1 min read

✨ The volunteers who helped with this thread aren't active anymore, but you can still get a personalized answer — click Ask AI below.

This thread's last reply is from December 30, 2008, 5:53 AM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

Jeffs
December 30, 2008, 1:59 AM UTC
I'm using an XP latop and i'm getting the redirects. I went ahead and ran goorfix scan, here is the log:

GooredFix v1.6 by jpshortstuff
Log created at 16:39 on 29/12/2008 running Option #1
Firefox version 3.0.5 (en-US)

=====Suspect Goored Entries=====

[HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\extensions]
"{259971C2-E1DA-4D75-9F77-F46F5CDD6AEE}"="C:\Documents and Settings\Jeff\Local Settings\Application Data\{259971C2-E1DA-4D75-9F77-F46F5CDD6AEE}"

=====Dumping Registry Values=====

[HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Mozilla Firefox 3.0.5\extensions]
"Plugins"="C:\Program Files\Mozilla Firefox\plugins"

[HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Mozilla Firefox 3.0.5\extensions]
"Components"="C:\Program Files\Mozilla Firefox\components"

[HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\extensions]
"[redacted]"="C:\Program Files\Java\jre6\lib\deploy\jqs\ff"

[HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\extensions]
"{259971C2-E1DA-4D75-9F77-F46F5CDD6AEE}"="C:\Documents and Settings\Jeff\Local Settings\Application Data\{259971C2-E1DA-4D75-9F77-F46F5CDD6AEE}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\extensions]
"{3f963a5b-e555-4543-90e2-c3908898db71}"="C:\Program Files\AVG\AVG8\Firefox"


Thanks for the help!
NonSuch Administrator
December 30, 2008, 5:53 AM UTC
In order for us to help you it is necessary that you provide us with a HijackThis log. Please follow the guideline at the link below to start a new topic and post your HijackThis log.

This topic is now closed. Please start a new topic by following the HijackThis Guideline posted here: >Guideline for posting your HijackThis log<

✨ Ask AI about this thread

No ads, no affiliate links — generated on request from this thread's own archived content, not written by forum staff. Never run a scan/removal tool as a self-service step if the original thread describes it being done under a helper's direct supervision, and don't include your name, email, or other personal details in a follow-up question. See our privacy page for details on how this works.