Google problem - taking me to wrong site

wadewade

Over the last few days I have noticed that when I google something like BBC News I am taken first to a website called http://co.uk and then on to sites like a.chtah.com and superfi.co.uk

I have done a complete scan and this came up with 1 threat (resolved) and 15 Browser cookies deleted. But the next day the problem reappears.

The resolved threat is shown as "windows iLivid Toolbar\Datamngr\Toolbar\uninstall.exe" Could this be anything to do with my problem or is there another cause?

John_Gray

A complete scan with what? I'd suggest downloading, installing updating and running the free version of Malwarebytes Anti-Malware...

waddler_8

If that doesn't resolve your problem download this and save it to your desktop.

http://public.avast.com/~gmerek/aswMBR.exe

When you've downloaded it...

• Double click aswMBR.exe to run it (XP), or right click & choose "Run as Administrator" (Vista, Win7)
• Click Yes when prompted to scan with Avast virus definitions
  
• With the AVscan set to Quick Scan, click the Scan button.
  
  
• When the scan reports "Scan finished successfully", click Save log & save the log to your desktop.
• Click OK when prompted. aswMBR.txt & MBR.dat will be appear on your desktop.
• Click EXIT.
• Copy & paste the contents of aswMBR.txt & post it here.

Don't click to fix anything yet, just post the log.

wadewade

Waddler_8

I'm a bit of an idiot doing things with the computer but is this what you were expecting, please?

One other possible clue is that I have run a scan on my computer several times this week and each time it tells me there was one problem which has been resolved but each time it is the same file, so it never goes away. It is:

c:\Program Files\Windows iLivid Toolbar\Datamngr\ ToolBar\uninstall.exe

On the other hand it could just be a red herring!!

aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
Run date: 2012-03-15 13:45:12

---

13:45:12.332 OS Version: Windows 6.1.7601 Service Pack 1
13:45:12.332 Number of processors: 2 586 0x170A
13:45:12.445 ComputerName: MARJORY-PC UserName: Marjory
13:45:14.777 Initialize success
13:46:28.215 AVAST engine defs: 12031401
13:46:47.251 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0
13:46:47.253 Disk 0 Vendor: WDC_WD6400AAKS-75A7B2 01.03B01 Size: 610480MB BusType: 3
13:46:47.255 Disk 1 \Device\Harddisk1\DR1 -> \Device\0000006a
13:46:47.257 Disk 1 Vendor: Size: 610480MB BusType: 0
13:46:47.260 Disk 2 \Device\Harddisk2\DR2 -> \Device\0000006b
13:46:47.262 Disk 2 Vendor: Size: 610480MB BusType: 0
13:46:47.265 Disk 3 \Device\Harddisk3\DR3 -> \Device\0000006c
13:46:47.267 Disk 3 Vendor: Size: 610480MB BusType: 0
13:46:47.270 Disk 4 \Device\Harddisk4\DR4 -> \Device\0000006d
13:46:47.273 Disk 4 Vendor: Size: 610480MB BusType: 0
13:46:47.287 Disk 0 MBR read successfully
13:46:47.290 Disk 0 MBR scan
13:46:47.299 Disk 0 Windows 7 default MBR code
13:46:47.628 Disk 0 Partition 1 00 DE Dell Utility Dell 8.0 78 MB offset 63
13:46:47.646 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 15360 MB offset 161792
13:46:47.668 Disk 0 Partition 3 80 (A) 07 HPFS/NTFS NTFS 595040 MB offset 31619072
13:46:47.680 Disk 0 scanning sectors +1250260992
13:46:47.749 Disk 0 scanning C:\Windows\system32\drivers
13:47:08.797 Service scanning
13:47:39.839 Modules scanning
13:47:49.195 Disk 0 trace - called modules:
13:47:49.210 ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys halmacpi.dll ataport.SYS pciide.sys PCIIDEX.SYS atapi.sys
13:47:49.214 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x86335720]
13:47:49.219 3 CLASSPNP.SYS[8bd8559e] -> nt!IofCallDriver -> [0x86207918]
13:47:49.223 5 ACPI.sys[8b8943d4] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-0[0x855a1908]
13:47:50.757 AVAST engine scan C:\Windows
13:47:54.382 AVAST engine scan C:\Windows\system32
13:53:04.569 AVAST engine scan C:\Windows\system32\drivers
13:53:44.409 AVAST engine scan C:\Users\Marjory
14:34:02.421 AVAST engine scan C:\ProgramData
14:37:04.473 Scan finished successfully
14:40:12.072 Disk 0 MBR has been saved successfully to "C:\Users\Marjory\Desktop\MBR.dat"
14:40:12.078 The log file has been saved successfully to "C:\Users\Marjory\Desktop\aswMBR.txt"
14:40:33.031 Disk 0 MBR has been saved successfully to "C:\Users\Marjory\Documents\Brian\MBR.dat"
14:40:33.038 The log file has been saved successfully to "C:\Users\Marjory\Documents\Brian\aswMBR.txt"

waddler_8

That looks ok. Did you run malwarebytes - did it find anything?

This should take 2 - 3 minutes.

Download DDS from the link below and save it to your desktop:

Link

After you've downloaded it and saved it to your desktop:

• Double click DDS to run it.
• When it's finished, DDS will open two logs:

1. DDS.txt
2. Attach.txt

Save both reports to your desktop.

Copy & paste the contents of just DDS.txt for now and post it here (you may need to split the log over separate posts)

wadewade

A friend suggested I should try System Restore. It seems to have worked so I can only assume we downloaded something that upset one of our programs. At least the check you gave me has reassured me there are no other major problems. I'd like to thank you very much for your help. Regards