redirecting me to other websites

sungiggs1

were will that be is that the icon on the desktop

waddler_8

sungiggs1 wrote: »

I have right clicked and ran as administrator and then allowed it to make changes but nothing seems to be happening :S

Then it could be the infection stopping it. That points to the new variant of the TDL4 bootkit.

sungiggs1 wrote: »

should something be happening?

You should see screens like this:
http://public.avast.com/~gmerek/aswMBR.htm

sungiggs1

cannot see that screen

macman

sungiggs1 wrote: »

were will that be is that the icon on the desktop

Yes, or wherever you downloaded it to.

sungiggs1

its on the desktop but isnt doing anthing, it also is not showing in control panel programs either

macman

That's becauseyou haven't yet installed it yet. Double click the installer and run it.

sungiggs1

waddler_8 wrote: »

Then it could be the infection stopping it. That points to the new variant of the TDL4 bootkit.

You should see screens like this:
http://public.avast.com/~gmerek/aswMBR.htm

what can I do to fix it :={

waddler_8

The infection must be stopping it.

Try this instead.


Download MBRCheck from here and save it to your Desktop.

• Right click MBRCheck.exe and choose "Run as Administrator"
• A black command type window will open
• After a short while, a text file will appear on your desktop named MBRCheck_Date_Time.txt
• press 'N' on your keyboard, then press 'enter'
• Click enter again on your keyboard and the window will close.
• Copy/paste the contents of MBRCheck_Date_Time.txt in your next reply

waddler_8

macman wrote: »

That's becauseyou haven't yet installed it yet. Double click the installer and run it.

aswMBR? It's a standalone executable - nothing installs.

I think this is the TDL4 variant that creates a new partition and makes it the active partiton.

http://blog.eset.com/2011/10/18/tdl4-rebooted

It has been known to prevent tools that may remove it from running.

waddler_8

sungiggs1 wrote: »

what can I do to fix it :={

Unfortunately, if it is what I think it is then it could be quite complicated to remove. Also there's a real chance of data loss so I would back up anything precious to you - Photo's etc