Expert: Lorry - 10/27/2010

Question
QUESTION: Lorry,
I have an issue with my pc (running XP and Firefox as my browser) where a search result is selected the page is redirected to another page.  For a brief moment, I see that the page being redirected reads a page with gnrooentghia.com before it the page opens.
I have run a number of anti-malware and anti-rootkit tools and everything comes out clean as does HijackThis.

Thank you for your time,
Bob

ANSWER: Hi Bob,

Not knowing which programs you have used, I would suggest downloading Malwarebytes from:

http://download.cnet.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html

Check for updates before running a full scan.

If that doesn't solve the problem, using Internet Explorer, go to:

http://security.symantec.com/sscv6/WelcomePage.asp

Click on Continue to Symantec Security Check. Under Virus Detection, click Start, accept the End-User Agreement. It will ask you a few times to permission to install Active X Controls, answer yes. Once you see that the program is actually scanning, leave the computer alone until the scan is finished.

Once the scan is done, write down exactly anything it finds, then go to:

http://www.symantec.com/search/  

and do a search for what was found. Symantec usually has a removal tool and/or directions for removing manually. Make sure that you follow the instructions for removal, step by step, especially the part regarding disabling System Restore.

An fairly certain that Malwarebytes will take care of it.

Hope this helps!
Lorry



---------- FOLLOW-UP ----------

QUESTION: Lorry,
The http://security.symantec.com/sscv6/WelcomePage.asp scan did not reveal anything.
I have run Malwarebytes and AVAST!, MS Security Essentials, SUPERAntiSpyware, Spybot Search & Destroy, HijackThis and a few rootkit removers as well but I cannot get rid of this nasty that is redirecting my browser.  

Bob


Answer
Hi Bob,

If you have updated Makwarebytes and then run a scan and it didn't find anything, at this point I would suggest bringing it to the local repair shop to have them remove the threat or to reformat and reinstall Windows.

If you have a named brand computer, you should have a Restore partition to use. Backup anything of importance first.

Hope this helps!
Lorry