Windows 7: Need help removing redirect virus

PatrickGSR94 · 02 Aug 2012

Same issue is happening on my home XP Pro machine, and my dad's Windows 7 laptop. Both of ours started exhibiting this redirect behavior after we both had that "Security Shield" fake AV software pop up. We both removed it with MBAM run in safe mode, but this redirect behavior on Google searches still exists. Have scanned with MBAM, Spybot S&D, Symantec AV Corporate, all in safe mode, and none of them find any problems.

May have to just break down and reformat the darn thing. It's probably about time to do it again anyway.

lenovojon · 02 Aug 2012

Well that was short lived, I ran another Malwarebytes scan today to make sure I was clear and Rootkit.Necurs popped up, will malwarebytes remove it sufficiently or will other steps need to be taken?

spikey2k9 · 02 Aug 2012

if you can get in too windows normally open malwarebytes again update it restart boot in to safe mode and rerun the scan make sure you do the full scan and not the quick i would also recomend trying spybot search and destroy

Golden · 02 Aug 2012

Quote: Originally Posted by lenovojon

Rootkit.Necurs

Hi,

Time for a cleam install I think - this is often the best technique to clean rootkits.

Regards,
Golden

PatrickGSR94 · 03 Aug 2012

What about running TDSSKiller? Supposedly it can clean out root kits.

lenovojon · 03 Aug 2012

I was affraid of that, ok thanks.

lenovojon · 03 Aug 2012

When doing the clean install should I be worried about any of my backup files reinfecting my system?

Golden · 03 Aug 2012

Hi,

No, I don't think so - best to check though by backing up your files to an external device, and then scanning that.

Regards,
Golden

Windows 7: Need help removing redirect virus

Need help removing redirect virus problems?