[Active] No Scans Work and Google Links Redirected
-
Re: [Active] No Scans Work and Google Links Redirected
Did you run AVG Remover?
If not, please do so, and after that re-run Combofix.
Did you uninstall, reinstall HJT?
-
Ah, I did not think to try running AVG Remover after that restart.
So I ran it and it asked me to reboot the computer. After that, I tried to run Combofix but it still detected that AVG was running. After those prompts, it seems as if nothing happens and Combofix does not continue. I've been waiting for a bit now.
Also, with HJT, I am still unable to run it as administrator and unable to uninstall it because I don't have sufficient access.
-
Uninstall Combofix:
Go Start > Run
Type in:
combofix /u
Note the space between the "combofix" and the "/u"
Restart computer.
Go to C:\Program Files, and delete Trend Micro folder (I assume, HJT installed there, its default location).
Download Dr.Web CureIt to the desktop:
ftp://ftp.drweb.com/pub/drweb/cureit/drweb-cureit.exe- Doubleclick the drweb-cureit.exe file and click Scan to run express scan. Click OK in pop-up window to allow scan.
- This will scan the files currently running in memory and when something is found, click the Yes button when it asks you if you want to cure it. This is only a short scan.
- Once the short scan has finished, select Complete scan.
- Click the green arrow
at the right, and the scan will start. - Click Yes to all if it asks if you want to cure/move the file.
- When the scan has finished, in the menu, click File and choose Save report list
- Save the report to your desktop. The report will be called DrWeb.csv
- Close Dr.Web Cureit.
- Important! Reboot your computer because it could be possible that files in use will be moved/deleted during reboot.
- Copy and paste that log in the next reply. You can use Notepad to open the DrWeb.cvs report.
NOTE. During the scan, pop-up window will open asking for full version purchase. Simply close the window by clicking on X in upper right corner.
Download HijackThis:
HijackThis - Trend Micro USA
by clicking on Download HijackThis Installer
Install, and run it.
Post HijackTHis log.
Do NOT attempt to fix anything!
NOTE. If you're using Vista, right click on HijackThis, and click Run as Administrator
-
When I run the uninstall command for Combofix, the same thing happens as when I try to run it normally. Combofix starts and a prompt appears saying that AVG is running. After clicking OK, another prompt appears saying that Combofix will continue despite AVG being active. After clicking OK again, nothing seems to happen.
I did find a txt file called Bug that seems to be created or modified at the time this happens. Here are its contents:
[Unnecessary log removed - Broni]
Last edited by broni; 01-09-2009 at 12:15 AM.
-
You need to follow instruction and not do anything else.
Delete Combofix manually:
Delete Combofix, Qoobox folders,and Combofix.txt file from C:
Delete Combofix from your desktop
Please, follow other steps from my reply #13.