Internet problem- have I got a virus?

charlishae

Just wondering if anyone can help..

since yesterday whenever i type something into google and click on the link I want, instead of taking me to the right website it will take me to either ebay or some random site.

Im not sure whats happened and its getting pretty annoying now!

Anyone have any ideas?

Thanks

ninja2302

Sounds like some kind of virus.

Go to malwarebytes[dot]org and download and run the free version. Thats assuming you can get to a site by typing in a URL.

waddler_8

As well as the above. Download this and save it to your desktop. It should give an indication of what you are infected with.

http://public.avast.com/~gmerek/aswMBR.exe

When you've downloaded it...

• Double click aswMBR.exe to run it (XP), or right click & choose "Run as Administrator" (Vista, Win7)
• Click yes to the prompt to download Avast! virus definitions.
• Set the AVscan to Quick Scan, & click the Scan button.
• When the scan reports "Scan finished successfully", click Save log & save the log to your desktop.
• Click OK when prompted. aswMBR.txt & MBR.dat will be appear on your desktop.
• Click EXIT.
• Copy & paste the contents of aswMBR.txt & post it here.

Don't click to fix anything yet, just post the log.

charlishae

Thanks for the replies. Im currently downloading what has been suggested although my internet is very slow so might take a while!

waddler_8

Post the logs - I'll be back to work shortly (till later), but someone else should be able to take a look.

charlishae

Ive finished downloading malwarebytes and ran a scan and it came up with 8 objects found which look like trojans? Do I just click on remove selected?

debitcardmayhem

charlishae wrote: »

Ive finished downloading malwarebytes and ran a scan and it came up with 8 objects found which look like trojans? Do I just click on remove selected?

Yes , and post the log here too

charlishae

Thanks,

Malwarebytes Anti-Malware 1.60.0.1800
www.malwarebytes.org

12/01/2012 14:40:41
mbam-log-2012-01-12 (14-40-41).txt
Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 179527
Time elapsed: 5 minute(s), 47 second(s)
Memory Processes Detected: 2
C:\Users\charli\AppData\Roaming\Zekyq\sydaaf.exe (Trojan.FakeAlert) -> 3744 -> Delete on reboot.
C:\Windows\Temp\qenwgp\setup.exe (Trojan.Downloader.CBCGen) -> 5360 -> Delete on reboot.
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 1
HKLM\SYSTEM\CurrentControlSet\Services\AMService (Trojan.Downloader.CBCGen) -> Quarantined and deleted successfully.
Registry Values Detected: 1
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|{4288F4CB-00B7-494C-5B82-7C0641FE8C99} (Trojan.FakeAlert) -> Data: C:\Users\charli\AppData\Roaming\Zekyq\sydaaf.exe -> Quarantined and deleted successfully.
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 4
C:\Users\charli\AppData\Roaming\Zekyq\sydaaf.exe (Trojan.FakeAlert) -> Delete on reboot.
C:\Windows\Temp\qenwgp\setup.exe (Trojan.Downloader.CBCGen) -> Delete on reboot.
C:\Users\charli\AppData\Local\Temp\0.7519360182385341golda.exe (Trojan.Downloader.bh) -> Quarantined and deleted successfully.
C:\Users\charli\AppData\Local\Temp\0.8576161118596953fdrgs.exe (Trojan.Downloader.bh) -> Quarantined and deleted successfully.
(end)

closed

reboot, then do a full malwarebytes scan (not quick)

and post a hijackthis log

charlishae

closed wrote: »

reboot, then do a full malwarebytes scan (not quick)

and post a hijackthis log

I rebooted after the quick scan and the problem is still there. Will try that thanks.

charlishae

Anybody have the website url for hijackthis? Cant search for it with this problem