How do i get rid of this redirecting virus?

xboxconnect64

New member
Local time
6:01 PM
Messages
9
Location
Texas
Being a computer noob, i recently got quite a bit of trojans. i believe i eventually figured out how to delete all but one which gives me the message "The Module C:Users\Lane XD\AppData\Local\Iwlpsoft\nacl64.dll failed to load blah blah blah" on startup as well as shifting me to random websites when using chrome. Most of which are from find-all-you-want.com which is really frustrating and the only methods i could find dont apply to my case. Any help or leads would be highly appreciated.
 

My Computer My Computer

At a glance

Windows 7 Ultimate 64 BitAMD-E4504GB RAMAMD Radeon HD 6320M
Computer type
Laptop
Computer Manufacturer/Model Number
Lenovo
OS
Windows 7 Ultimate 64 Bit
CPU
AMD-E450
Motherboard
IDK
Memory
4GB RAM
Graphics Card(s)
AMD Radeon HD 6320M
Screen Resolution
1366x768
Hard Drives
250 GB
Antivirus
Webroot
Browser
Google Chrome
See this Remove Find-all-you-want.com - Junkware Removal

Let's get rid of the 'adware' first:

Please download AdwCleaner by Xplode and save to your Desktop.
Step 1.

  • Double click on AdwCleaner.exe to run the tool.
    Vista/Windows 7/8 users right-click and select Run As Administrator.
  • Click on the Scan button.
  • AdwCleaner will begin...be patient as the scan may take some time to complete.
  • After the scan has finished, click on the Report button...a logfile (AdwCleaner[R#].txt) will open in Notepad for review (where the largest value of # represents the most recent report).
  • The contents of the log file may be confusing. Unless you see a program name that you know should not be removed, don't worry about it. If you see an entry you want to keep, let me know about it.
  • Copy and paste the contents of that logfile in your next reply.
  • A copy of all logfiles are saved in the C:\AdwCleaner folder which was created when running the tool.
Step 2.
Using AdwCleaner v3: Scan & Clean:
This time click on the Clean button.
Press OK when asked to close all programs and follow the onscreen prompts.
Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
After rebooting, a logfile report (AdwCleaner[S#].txt) will open automatically (where the largest value of # represents the most recent report).
Copy and paste the contents of that logfile in your next reply.
A copy of that logfile will also be saved in the C:\AdwCleaner folder

******Post both .txt logs
 

My Computer My Computer

At a glance

Windows 7 Ultimate 32bit SP1Intel(R) Core(TM)2 Quad CPU @ 2.40GHz, 2400 MHz4 GBATI Radeon HD 2600 Pro
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Bruce ... somewhere in his 40's
OS
Windows 7 Ultimate 32bit SP1
CPU
Intel(R) Core(TM)2 Quad CPU @ 2.40GHz, 2400 MHz
Motherboard
INTEL/D975XBX2
Memory
4 GB
Graphics Card(s)
ATI Radeon HD 2600 Pro
Monitor(s) Displays
Samsung SyncMaster 914v
Screen Resolution
1280 x 1024
Hard Drives
2/500GB each ... ST3500630AS ATA Device.
One is not connected
PSU
Rocketfish 700 W
Case
G.Skill Gigabyte Chassis
Keyboard
Standard PS/2 Keyboard
Mouse
Microsoft PS/2 Mouse
Internet Speed
DSL
Antivirus
Avira Internet Security
Browser
IE 11
Other Info
ATI HDMI Audio
My Logfile after running AdwCleaner

# AdwCleaner v4.111 - Logfile created 05/03/2015 at 13:44:23
# Updated 18/02/2015 by Xplode
# Database : 2015-03-05.1 [Server]
# Operating system : Windows 7 Ultimate Service Pack 1 (x64)
# Username : Lane XD - MEH-PC
# Running from : C:\Users\Lane XD\Downloads\AdwCleaner.exe
# Option : Scan

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Found : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced-System Protector

***** [ Scheduled tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Data Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - *.local
Key Found : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{A43DE495-3D00-47D4-9D2C-303115707939}

***** [ Web browsers ] *****

-\\ Internet Explorer v10.0.9200.17229


-\\ Google Chrome v40.0.2214.115

[C:\Users\Guest.Meh-PC\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [Search Provider] : hxxp://search.aol.com/aol/search?q={searchTerms}
[C:\Users\Guest.Meh-PC\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [Search Provider] : hxxp://www.ask.com/web?q={searchTerms}
*************************

AdwCleaner[R0].txt - [2606 bytes] - [16/09/2014 17:50:49]
AdwCleaner[R1].txt - [2666 bytes] - [16/09/2014 17:56:40]
AdwCleaner[R2].txt - [1587 bytes] - [05/03/2015 11:03:34]
AdwCleaner[R3].txt - [1449 bytes] - [05/03/2015 13:44:23]
AdwCleaner[S0].txt - [2745 bytes] - [16/09/2014 17:58:13]

########## EOF - C:\AdwCleaner\AdwCleaner[R3].txt - [1567 bytes] ##########
 

My Computer My Computer

At a glance

Windows 7 Ultimate 64 BitAMD-E4504GB RAMAMD Radeon HD 6320M
Computer type
Laptop
Computer Manufacturer/Model Number
Lenovo
OS
Windows 7 Ultimate 64 Bit
CPU
AMD-E450
Motherboard
IDK
Memory
4GB RAM
Graphics Card(s)
AMD Radeon HD 6320M
Screen Resolution
1366x768
Hard Drives
250 GB
Antivirus
Webroot
Browser
Google Chrome
After running the cleaner

# AdwCleaner v4.111 - Logfile created 05/03/2015 at 13:49:18
# Updated 18/02/2015 by Xplode
# Database : 2015-03-05.1 [Server]
# Operating system : Windows 7 Ultimate Service Pack 1 (x64)
# Username : Lane XD - MEH-PC
# Running from : C:\Users\Lane XD\Downloads\AdwCleaner.exe
# Option : Cleaning

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced-System Protector

***** [ Scheduled tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A43DE495-3D00-47D4-9D2C-303115707939}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
Data Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - *.local

***** [ Web browsers ] *****

-\\ Internet Explorer v10.0.9200.17229


-\\ Google Chrome v40.0.2214.115

[C:\Users\Guest.Meh-PC\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://search.aol.com/aol/search?q={searchTerms}
[C:\Users\Guest.Meh-PC\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.ask.com/web?q={searchTerms}

*************************

AdwCleaner[R0].txt - [2606 bytes] - [16/09/2014 17:50:49]
AdwCleaner[R1].txt - [2666 bytes] - [16/09/2014 17:56:40]
AdwCleaner[R2].txt - [1587 bytes] - [05/03/2015 11:03:34]
AdwCleaner[R3].txt - [1646 bytes] - [05/03/2015 13:44:23]
AdwCleaner[S0].txt - [2745 bytes] - [16/09/2014 17:58:13]
AdwCleaner[S1].txt - [1585 bytes] - [05/03/2015 13:49:18]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1644 bytes] ##########
I am still being redirected randomly as we speak :/
 

My Computer My Computer

At a glance

Windows 7 Ultimate 64 BitAMD-E4504GB RAMAMD Radeon HD 6320M
Computer type
Laptop
Computer Manufacturer/Model Number
Lenovo
OS
Windows 7 Ultimate 64 Bit
CPU
AMD-E450
Motherboard
IDK
Memory
4GB RAM
Graphics Card(s)
AMD Radeon HD 6320M
Screen Resolution
1366x768
Hard Drives
250 GB
Antivirus
Webroot
Browser
Google Chrome
Please download TFC by Old Timer TFC - Temp File Cleaner by OldTimer - Geeks to Go Forum and save it to your desktop.
Save any unsaved work. TFC will close ALL open programs including your browser! This will also eliminate all desktop shortcuts, so just be aware!
Double-click on TFC.exe to run it. If you are using Vista/Windows 7 right-click on the file and choose Run As Administrator.
Click the Start button to begin the cleaning process and let it run uninterrupted to completion.

Important! Manually reboot the machine to ensure a complete clean.

Copy and paste these lines in Note pad.

@Echo on
pushd\windows\system32\drivers\etc
attrib -h -s -r hosts
echo 127.0.0.1 localhost>HOSTS
attrib +r +h +s hosts
popd
ipconfig /release
ipconfig /renew
ipconfig /flushdns
netsh winsock reset all
netsh int ip reset all
shutdown -r -t 1
del %0


Save as flush.bat to your desktop.

Vista and Windows 7... right click the .bat file and choose to run as Administrator. Your computer will reboot itself.

Are you still being re-directed?
 

My Computer My Computer

At a glance

Windows 7 Ultimate 32bit SP1Intel(R) Core(TM)2 Quad CPU @ 2.40GHz, 2400 MHz4 GBATI Radeon HD 2600 Pro
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Bruce ... somewhere in his 40's
OS
Windows 7 Ultimate 32bit SP1
CPU
Intel(R) Core(TM)2 Quad CPU @ 2.40GHz, 2400 MHz
Motherboard
INTEL/D975XBX2
Memory
4 GB
Graphics Card(s)
ATI Radeon HD 2600 Pro
Monitor(s) Displays
Samsung SyncMaster 914v
Screen Resolution
1280 x 1024
Hard Drives
2/500GB each ... ST3500630AS ATA Device.
One is not connected
PSU
Rocketfish 700 W
Case
G.Skill Gigabyte Chassis
Keyboard
Standard PS/2 Keyboard
Mouse
Microsoft PS/2 Mouse
Internet Speed
DSL
Antivirus
Avira Internet Security
Browser
IE 11
Other Info
ATI HDMI Audio
Still didnt work :/

I ran the provided tool as an administrator and it seemed to work correctly but it didnt remove my desktop shortcuts as you said so i continued and ran the .bat file with no luck. should i just reinstall chrome?
 

My Computer My Computer

At a glance

Windows 7 Ultimate 64 BitAMD-E4504GB RAMAMD Radeon HD 6320M
Computer type
Laptop
Computer Manufacturer/Model Number
Lenovo
OS
Windows 7 Ultimate 64 Bit
CPU
AMD-E450
Motherboard
IDK
Memory
4GB RAM
Graphics Card(s)
AMD Radeon HD 6320M
Screen Resolution
1366x768
Hard Drives
250 GB
Antivirus
Webroot
Browser
Google Chrome
Try this mate
Emsisoft Emergency Kit Download I only ever run the Emergency and Command line scans - see what it comes up with.

There is more as Jacee will tell you too:)
 

My Computer My Computer

At a glance

Desk1 7 Home Prem / Desk2 10 Pro / Main lap A...Desk1 i5 3750K / Laptop i7 GTX 860M / Desk2 i...Desk1 8GB (1866) / Desk2 16GB (1333) / Laptop...Desk 1& 2NVidia GTX 650 & Laptops on board Intel
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Own build (new) Desk1 / Asus ROG Win 7 / Desk2 1st build
OS
Desk1 7 Home Prem / Desk2 10 Pro / Main lap Asus ROG 10 Pro 2 laptop Toshiba 7 Pro Asus P2520 7 & 10
CPU
Desk1 i5 3750K / Laptop i7 GTX 860M / Desk2 i5 2500
Motherboard
Desk1 Asus P877-V / Desk2 Gigabyte H67 UD3H / Laptop ?
Memory
Desk1 8GB (1866) / Desk2 16GB (1333) / Laptop 8Gb DDR3
Graphics Card(s)
Desk 1& 2NVidia GTX 650 & Laptops on board Intel
Sound Card
Desk 1 & 2 -XONAR DG Realtek High Def audio Laptop
Monitor(s) Displays
Desk 1 Benq HD 2450 / Desk2 Philips 24" / Laptop 17.5"
Screen Resolution
1920x1080 D1 & D2 & Laptop 1
Hard Drives
Desk1 Samsung 120GB 830 SSD
Asus ROG 256GB 850 Pro SSD
Desk2 Samsung 840 256 SSD
Toshiba 120GB EVO
PSU
Desk 1 Corsair HX 1050/ Laptop ? / Desk 2 Corsair HX 650
Case
Desk 1 Cooler HAF XM ? Toshiba laptop / Desk2 Coolermaster
Cooling
Fans on all Desk1 -2 Desk2 - all Coolermasters 5 Laptop ?
Keyboard
Desk 1 MS Sidewinder X6 Desk 2 MS Sidewinder X 4
Mouse
Desk 1&2 - Gigabyte MS 900 gamer - laptop - Logitec wireless
Internet Speed
ADSL2+
Other Info
One other Desktop (tester) and spare Toshba laptop both with SSD's
Running Kaspersky 2016 ISS on all machines config'd identically
Logitec audio stereo systems on each machine (x3)
Canon MG5250MFC
Router/modem TP-Link running WPA2SK
I ran the provided tool as an administrator and it seemed to work correctly but it didnt remove my desktop shortcuts as you said so i continued and ran the .bat file with no luck. should i just reinstall chrome?

You may not have noticed, but your desktop icons and task bar were temporarily removed while TFC ran.

Are you still being re-directed?
 

My Computer My Computer

At a glance

Windows 7 Ultimate 32bit SP1Intel(R) Core(TM)2 Quad CPU @ 2.40GHz, 2400 MHz4 GBATI Radeon HD 2600 Pro
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Bruce ... somewhere in his 40's
OS
Windows 7 Ultimate 32bit SP1
CPU
Intel(R) Core(TM)2 Quad CPU @ 2.40GHz, 2400 MHz
Motherboard
INTEL/D975XBX2
Memory
4 GB
Graphics Card(s)
ATI Radeon HD 2600 Pro
Monitor(s) Displays
Samsung SyncMaster 914v
Screen Resolution
1280 x 1024
Hard Drives
2/500GB each ... ST3500630AS ATA Device.
One is not connected
PSU
Rocketfish 700 W
Case
G.Skill Gigabyte Chassis
Keyboard
Standard PS/2 Keyboard
Mouse
Microsoft PS/2 Mouse
Internet Speed
DSL
Antivirus
Avira Internet Security
Browser
IE 11
Other Info
ATI HDMI Audio
unfortunately none has worked

Still no dice. Sorry to bother you so much but nothing seems to work although they act as if they did
 

My Computer My Computer

At a glance

Windows 7 Ultimate 64 BitAMD-E4504GB RAMAMD Radeon HD 6320M
Computer type
Laptop
Computer Manufacturer/Model Number
Lenovo
OS
Windows 7 Ultimate 64 Bit
CPU
AMD-E450
Motherboard
IDK
Memory
4GB RAM
Graphics Card(s)
AMD Radeon HD 6320M
Screen Resolution
1366x768
Hard Drives
250 GB
Antivirus
Webroot
Browser
Google Chrome
Let's try Junkware Removal Tool: Please download Junkware Removal Tool to your desktop.
  • Shut down your protection software now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message.
 

My Computer My Computer

At a glance

Windows 7 Ultimate 32bit SP1Intel(R) Core(TM)2 Quad CPU @ 2.40GHz, 2400 MHz4 GBATI Radeon HD 2600 Pro
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Bruce ... somewhere in his 40's
OS
Windows 7 Ultimate 32bit SP1
CPU
Intel(R) Core(TM)2 Quad CPU @ 2.40GHz, 2400 MHz
Motherboard
INTEL/D975XBX2
Memory
4 GB
Graphics Card(s)
ATI Radeon HD 2600 Pro
Monitor(s) Displays
Samsung SyncMaster 914v
Screen Resolution
1280 x 1024
Hard Drives
2/500GB each ... ST3500630AS ATA Device.
One is not connected
PSU
Rocketfish 700 W
Case
G.Skill Gigabyte Chassis
Keyboard
Standard PS/2 Keyboard
Mouse
Microsoft PS/2 Mouse
Internet Speed
DSL
Antivirus
Avira Internet Security
Browser
IE 11
Other Info
ATI HDMI Audio
Back
Top