HELP!Virus redirects to spam sites and other stuff

MaxPayne · Aug 11, 2011

Hello People, I am infected with a virus that is redirecting me to other sites like spam/advertisements on Google Chrome. Also, this virus wouldn't let me open or use Microsoft Security Essentials,as soon as i open it, it closes immeditatelly, the same with Windows defender. Only if i boot into safe mode can i access them. So i uninstalled MSE and installed Avira in the mean time. So please I really need help i posted in other forums and no one is responding, so I need your guy's help since you guys respond to my other questions. It looks like this virus is getting worse, and i feel like my system is slower.

StalkeR · Aug 11, 2011

Hello. First download and install Malwarebytes. Do a full scan of your system and see the results. Also if some threads is found be sure to remove all.

MaxPayne · Aug 11, 2011

Thank you so much for helping, I really appreciate it.
Ok I am scanning now and will post the log here when finished.

MaxPayne · Aug 11, 2011

Ok i MBAM finished scanning and it found nothing..

Malwarebytes' Anti-Malware 1.51.1.1800
Malwarebytes : Free anti-malware, anti-virus and spyware removal download

Database version: 7435

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

8/11/2011 9:54:22 AM
mbam-log-2011-08-11 (09-54-22).txt

Scan type: Full scan (C:\|E:\|)
Objects scanned: 510309
Time elapsed: 2 hour(s), 10 minute(s), 22 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

What should i do next?

seth500 · Aug 11, 2011

Hi MaxPayne try this:

Emsisoft Free Emergency Kit: portable malware scanner | Free removal of Viruses, Bots, Spyware, Keyloggers and Trojans

And it doesn't need to be installed on a usb but can be run locally. Do a full update for the definitions and a deep scan and see what it pulls up. If nothing comes up do you have a clean image that you can restore your computer from? If not I would definitely pull all my important stuff of the computer, documents, pictures, ect. and do a clean install:

This is a last resort if all else fails Max cause I wouldn't trust an infected system...

Run your Windows 7 disk from boot and when it gets to the menu that says Install go to the Repair Your Computer and select the top selection and open the command prompt instead and follow this tutorial:

http://www.sevenforums.com/tutorials/52129-disk-clean-clean-all-diskpart-command.html

I would run the clean all method to wipe the disk completely..

Good luck Seth

MaxPayne · Aug 11, 2011

k thanks man , i will try that and if it doesnt work i will consider wiping everything.
however i dont have a windows 7 boot disk which is a problem

seth500 · Aug 11, 2011

You don't have an install disk?

MaxPayne · Aug 11, 2011

No turns out manufacturers are to cheap to include windows 7 iinstall disks with computers now.

seth500 · Aug 11, 2011

MaxPayne said:
No turns out manufacturers are to cheap to include windows 7 iinstall disks with computers now.

WOW! That blows! Does your computer have a recovery partition? If not I would get on the horn to the manufacture and give him a piece to say the least, that's not even cool. You should have some way of restoring your computer.

MaxPayne · Aug 11, 2011

yea now they include the recovery partition instead.. I know right that pisses me off....

i also made a recovery disk, just in case..
So now idk how to reinstall windows if i do wipe if i dont have an install disc or any empty cds/usbs.

seth500 · Aug 11, 2011

Don't wipe the drive do this instead, boot your computer hit the F8 key while booting until you get to the Safe Mode Screen and all that-there should be some sort of option for reinstall of the op system from there. If you wipe the drive with the clean all or clean commands you lose all partition information so don't do that. Every computer is different in the recovery method, I would also suggest looking at the manual that they sent with the machine on how to exactly do it with you model..

StalkeR · Aug 11, 2011

Hello there. If you want to remove all from Windows follow this tutorial.
http://www.sevenforums.com/tutorials/172617-secure-erase-wipe-definition-methods.html

MaxPayne · Aug 11, 2011

seth500 said:
Don't wipe the drive do this instead, boot your computer hit the F8 key while booting until you get to the Safe Mode Screen and all that-there should be some sort of option for reinstall of the op system from there. If you wipe the drive with the clean all or clean commands you lose all partition information so don't do that. Every computer is different in the recovery method, I would also suggest looking at the manual that they sent with the machine on how to exactly do it with you model..

thanks for the advice i will look into that..

damien76 · Aug 11, 2011

So i uninstalled MSE and installed Avira in the mean time.
-- What did the Avira scan tell you? Avira has a rescue system. You can check it out here. and here2

Equally you can also try:

Dr. Web LiveCD / Dr. Web Live USB

THIS http://www.sevenforums.com/system-security/159426-supervirus.html might be worth reading also.

Anyway better check out seth's advice first on th F8. A recovery option mght surface there.

Is that a Dell? You can check here Windows 7 PC Restore_Dell

Acer? In Acer laptops you can press ALT+F10 before the Windows boot screen appears and you'll be taken to it's recovery module. Check here1
and here2

If neither are your brand, you can check here Laptop Recovery Instructions

Goodluck

MaxPayne · Aug 11, 2011

avira found one threat and removed it.. However i just used Kaspersky's ttds killer and it found a threat in a windows/system32/ sptd.sys and it removed it.. maybe that was the virus because when i searched remove sptd.sys in google almost every site i clicked on was redirected.. like if it new i found the virus or something.
i have an hp laptop btw.

StalkeR · Aug 11, 2011

How's about to scan your pc with ESET Online Scan ?I just copyed this from here. It was originally written by Jacee.

Hold down Control and click on the following link to open ESET OnlineScan in a new window.
ESET OnlineScan
Click the

button.
For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
1. Click on
  
  to download the ESET Smart Installer. Save it to your desktop.
2. Double click on the
  
  icon on your desktop.
Check
Click the

button.
Accept any security warnings from your browser.
Check
Push the Start button.
ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
When the scan completes, push
Push

, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
Push the

button.
Push

MaxPayne · Aug 11, 2011

k thanks will try and report here

MaxPayne · Aug 11, 2011

I think i fixed it!!!! the file i had removed earlier with kaspersky tdds killer:

However i just used Kaspersky's ttds killer and it found a threat in a windows/system32/ sptd.sys and it removed it.. maybe that was the virus because when i searched remove sptd.sys in google almost every site i clicked on was redirected.. like if it new i found the virus or something.

was the culprit i think because know that i search sptd.sys on google no more redirects! but idk its permanently because sometimes this happens and the redirects reappear. will update with more testing

damien76 · Aug 11, 2011

Had an HP laptop before..did not like it and swiched to Lenovo.

Might want to run a second opinion again after all you have ran Kaspersky TDSS Killer. Try Hitman Pro 3.5.9.129 cloud based-scanner very light (there's an option to install or not). Activate it "if" it finds still so you will have a 30day removal license. The ESET Online scan is good. That's one of the online scans I use next to Kaspersky.

We have RKill here in the forums and a lot have been quite successfull using it. Corrine can help you with that. Also you can check it out here RKill

On me I'll either check using:

1. HitmanPro
2. Dr.Web Live USB/CD
3. RKill or GMER

But that's just me

But do check it again (might still have traces of some sort) and observe your system's performance. Something might got borked from the removal or while the infection was still active.

Goodluck

MaxPayne · Aug 11, 2011

k ill check it using hitman pro and rkill ill update with results

HELP!Virus redirects to spam sites and other stuff

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

BSOD Team Player

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

BSOD Team Player

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

BSOD Team Player

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

BSOD Team Player

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

Similar threads

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer