This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Malware Removal Forums

I've been Goored

1 min read

This thread's last reply is from December 30, 2008, 5:53 AM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

I'm using an XP latop and i'm getting the redirects. I went ahead and ran goorfix scan, here is the log:

GooredFix v1.6 by jpshortstuff
Log created at 16:39 on 29/12/2008 running Option #1
Firefox version 3.0.5 (en-US)

=====Suspect Goored Entries=====

[HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\extensions]
"{259971C2-E1DA-4D75-9F77-F46F5CDD6AEE}"="C:\Documents and Settings\Jeff\Local Settings\Application Data\{259971C2-E1DA-4D75-9F77-F46F5CDD6AEE}"

=====Dumping Registry Values=====

[HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Mozilla Firefox 3.0.5\extensions]
"Plugins"="C:\Program Files\Mozilla Firefox\plugins"

[HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Mozilla Firefox 3.0.5\extensions]
"Components"="C:\Program Files\Mozilla Firefox\components"

[HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\extensions]
"[removed]"="C:\Program Files\Java\jre6\lib\deploy\jqs\ff"

[HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\extensions]
"{259971C2-E1DA-4D75-9F77-F46F5CDD6AEE}"="C:\Documents and Settings\Jeff\Local Settings\Application Data\{259971C2-E1DA-4D75-9F77-F46F5CDD6AEE}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\extensions]
"{3f963a5b-e555-4543-90e2-c3908898db71}"="C:\Program Files\AVG\AVG8\Firefox"


Thanks for the help!
In order for us to help you it is necessary that you provide us with a HijackThis log. Please follow the guideline at the link below to start a new topic and post your HijackThis log.

This topic is now closed. Please start a new topic by following the HijackThis Guideline posted here: >Guideline for posting your HijackThis log<