Wrong website opens when I click on a link

[xixo_12]

Hi ,
Let's proceed,

First,
ATF by Atribune
Please download HERE and save to the desktop. Double-click ATF Cleaner.exe to open it.
Under Main choose:

choose: Select All
Click the Empty Selected button.

if you use Firefox:

Click Firefox at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click NO at the prompt.

if you use Opera:

Click Opera at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click NO at the prompt.

Click Exit on the Main menu to close the program

Next,
ESET Online Scanner
Go here to run an online scannner from ESET.

• Note: You will need to use Internet explorer for this scan
• Turn off the real time scanner of any existing antivirus program while performing the online scan
• Tick the box next to YES, I accept the Terms of Use.
• Click Start
• When asked, allow the activex control to install
• Click Start
• Make sure that the option Remove found threats is unticked and the Scan Archives option is ticked
• Click on Advanced Settings, ensure the options Scan for potentially unwanted applications, Scan for potentially unsafe applications, and Enable Anti-Stealth Technology are ticked
• Click Scan
• Wait for the scan to finish
• Use notepad to open the logfile located at C:\Program Files\Eset\Eset Online Scanner\log.txt
• Copy and paste that log as a reply to this topic

Next,
Checklist.
Please post.

• Content of log.txt (Find in C:\Program Files\Eset\Eset Online Scanner\)
• Post any question/problem ?

[nesster]

Hi,

I tried to run ESET Online Scanner got the attached error message. I uninstalled the software and tried again and continued to get the same error message.

[xixo_12]

Hi,
Let's try another online scanner.

Please temporary disable your Anti-malware/Anti-virus/Firewall by refer to HERE

First,
Java SE Runtime Environment (JRE).
Please download from HERE.

• Find Java SE Runtime Environment (JRE) 6 Update 17.
• Click on Download.
• Choose the correct Platform and Multi-language. Next, check the box that says I agree to the Java SE Runtime Environment 6 License Agreement.
• Click the Continue button.
• Click on the filename under Windows Offline Installation and save it to your desktop.
• Close all active windows.
• Install the program.

Next,
Kaspersky Online AV Scan
Note: Internet Explorer should be used.
Please go to Kaspersky website and perform an online antivirus scan.

• Read through the requirements and privacy statement and click on Accept button.
• It will start downloading and installing the scanner and virus definitions. You will be prompted to install an application from Kaspersky. Click Run.
• When the downloads have finished, click on Settings.
• Make sure these boxes are checked (ticked). If they are not, please tick them and click on the Save button:
  • Spyware, Adware, Dialers, and other potentially dangerous programs
  • Archives
  • Mail databases
• Click on My Computer under Scan and then put the kettle on!
• Once the scan is complete, it will display the results. Click on View Scan Report.
• You will see a list of infected items there. Click on Save Report As....
• Save this report to a convenient place like your Desktop. Change the Files of type to Text file (.txt) before clicking on the Save button.
• Copy and paste the report into your next.

Next,
Checklist.
Please post.

• Content of kaspersky's scan log
• Post any problem/question ?

[nesster]

Hello,

Attached are the results from the Kaspersky scan. I took a long time to finish!

--------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER 7.0: scan report
Saturday, November 28, 2009
Operating system: Microsoft Windows XP Professional Service Pack 3 (build 2600)
Kaspersky Online Scanner version: 7.0.26.13
Last database update: Saturday, November 28, 2009 04:54:42
Records in database: 3303409
--------------------------------------------------------------------------------

Scan settings:
scan using the following database: extended
Scan archives: yes
Scan e-mail databases: yes

Scan area - My Computer:
A:\
C:\
D:\
E:\
G:\

Scan statistics:
Objects scanned: 122961
Threats found: 1
Infected objects found: 1
Suspicious objects found: 0
Scan duration: 05:10:40


File name / Threat / Threats count
C:\Qoobox\Quarantine\C\WINDOWS\SYSTEM32\DRIVERS\atapi.sys.vir Infected: Rootkit.Win32.TDSS.u 1

Selected area has been scanned.

[xixo_12]

Hi,

I took a long time to finish!

Does you feel it's worth now?

Good!
Your system now is clean.
Let's do some cleaning and management.

First,
Uninstall Combofix

• Click on Start >> Run...
• Now type in ComboFix /Uninstall into the and click OK.
• Note the space between the X and the /Uninstall, it needs to be there.
  

Next,
OTC by Old Timer.

• Please download HERE and save it to the desktop.
• Double click on OTC.exe. Click on CleanUp!.
• You will receive a prompt that it needs to restart the computer to remove the files. Click Yes.
• It will restart your computer automatically. If it doesn't, please restart your computer manually.

Next,
Disable hidden files/folder.
Windows XP

• Click Start.
• Open My Computer.
• Select the Tools menu and click Folder Options.
• Select the View Tab. Under the Hidden files and folders heading select Do not show hidden files and folders.
• Check the Hide protected operating system files (recommended) option.
• Click Yes to confirm.
• Click OK.

Next,
SpywareBlaster.

• SpywareBlaster help your Internet Explorer more strong as it will help to block known malicious ActiveX
• A tutorial on installing & using this product can be found HERE

WinPatrol.

• Unwanted things always occur behind your knowledge. Let's this software take the snapshot of it.
• For more information and installation can be found HERE

Next,
Windows/Program Update.
Please make sure to have your Windows Automatic Update turn ON or use the following.

Windows XP
Important : Make sure you use the Internet Exporer 5 and above

• Please download Update for windows at HERE
• This site required ActiveX controls. Allow it to install at your system.
• Click Express button and let the web checking the lastest update.
• Follow the instruction by the web until updating process finish

You always can refer at both website to check either any updates are needed for your system.

• Secunia Software Inspector
• F-secure Health Check

Next,
Information.

• Please check out Tony Klein's article "How did I get infected in the first place?"
• Read some information here how to prevent Malware.
• Is your pc running slow? Read What to do if your Computer is running slowly

Happy safe surfing!

[nesster]

Thanks you soooooooooo much! I've read the other links and info you sent and it was very helpful. It looks like most of the software is for Internet Explorer; I use Firefox so I didn't download the software.

Thanks you again for everything!!!!!!!!!

[xixo_12]

You're welcome

[NonSuch]

As this issue appears to be resolved, this topic is now closed.

We are pleased we could help you resolve your computer's malware issues.

If you would like to make a comment or leave a compliment regarding the help you have received, please see Feedback for Our Helpers - Say "Thanks" Here.