Windows 7: Need help removing redirect virus

karlsnooks · 01 Aug 2012

LenovoJon,

WIN | type MSCONFIG | ENTER | STARTUP tab |
Uncheck ALL except for:

Script:

      MSC    REG_SZ    "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
    SynTPEnh    REG_EXPAND_SZ    %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
    Sidebar    REG_SZ    C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
    SUPERAntiSpyware    REG_SZ    C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

REBOOT!

You have just told Win 7 to not run unchecked programs at start up time.

You have not disabled the programs. They will be run when needed.

WIN = key with the Microsoft logo on top

karlsnooks · 01 Aug 2012

CCLEANER | TOOLS icon | STARTUP tab | SCHEDULED TASKS tab |
Use DISABLE button to disable ALL except for:

Script:

  the three Google-related taske

Close CCleaner.

REBOOT!

You have not disabled any programs. You have disabled the scheduled running.
Later, after your system is running smoothly, you may reenable desired programs.

lenovojon · 01 Aug 2012

It is a crack for an older version of Adobe software (long story short I'm a student and I have a legal version of Adobe but my school runs an older version so for compatibility this makes it easier) I have had that file on my computer for 6+ months with no problem, do you think it could be the problem now?

karlsnooks · 01 Aug 2012

UNINSTALL

Script:

  Disable AMT Profile Synchronization Pop-up for Windows XP/Vista/7            1.00                                      
Registry Patch to Enable Maximum Power Saving on WiFi Adapters for Windows 7 1.00                                      
Lenovo ThinkVantage Toolbox                                                  6.0.5849.23           PC-Doctor, Inc.     
                                                                             6.0.93.2              Conexant Systems    
RapidBoot                                                                    1.12                  Lenovo              
Bonjour                                                                      3.0.0.10              Apple Inc.          
SUPERAntiSpyware                                                             5.5.1012              SUPERAntiSpyware.com

REBOOT

Leave those programs uninstalled while your system is being diagnosed.

After you have a solid system, then you may want to try to reinstall programs, one program at a time.

karlsnooks · 01 Aug 2012

Golden,

Good advice because somehow he is reinfecting himself.

karl

karlsnooks · 01 Aug 2012

Quote: Originally Posted by lenovojon

It is a crack for an older version of Adobe software (long story short I'm a student and I have a legal version of Adobe but my school runs an older version so for compatibility this makes it easier) I have had that file on my computer for 6+ months with no problem, do you think it could be the problem now?

YES! Remove that crack and any other cracked software you have.

We do not assist people in using cracked, illegal, non-purchased, non-licensed software.

lenovojon · 02 Aug 2012

Karlsnooks,

I followed all the steps you listed then followed Golden's advise and flushed the DNS cache and restored host file. I then ran ESET and everything came back clean! It seems to be running better now, is there anything else I need to do to complete the diagnostic?

Thanks guys so much for your help!!

karlsnooks · 02 Aug 2012

If all is running well, then our work is done!

Golden · 02 Aug 2012

Don't forget to keep Java updated if you plan to reinstall it:

Java Technology Help - Installing Java

Regards,
Golden

lenovojon · 02 Aug 2012

Awesome, thanks again guys!!

Windows 7: Need help removing redirect virus

Need help removing redirect virus problems?