Find quick results/acronym finder search engine redirects

Viruses and worms
1

I just got this problem today but every time I search with a search engine, all my results are redirected by find-quick-results or acronymfinder. I’m pretty sure it’s a virus/malware so help would be much appreciated.

aswMBR version 0.9.7.675 Copyright(c) 2011 AVAST Software
Run date: 2011-06-30 00:20:19
-----------------------------
00:20:19.759    OS Version: Windows x64 6.1.7600 
00:20:19.759    Number of processors: 2 586 0x170A
00:20:19.763    ComputerName: TOMMY-COMPUTER  UserName: Tommy
00:20:42.032    Initialize success
00:20:50.530    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1
00:20:50.532    Disk 0 Vendor: Hitachi_ FB4O Size: 305245MB BusType: 3
00:20:50.535    Disk 0 MBR read error 0
00:20:50.538    Disk 0 MBR scan
00:20:50.540    Disk 0 unknown MBR code
00:20:50.543    MBR BIOS signature not found 0
00:20:50.547    Service scanning
00:20:51.924    Disk 0 trace - called modules:
00:20:51.967    ntoskrnl.exe CLASSPNP.SYS disk.sys iaStor.sys spxw.sys hal.dll 
00:20:51.976    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa80046da290]
00:20:51.981    3 CLASSPNP.SYS[fffff88000e3b43f] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0xfffffa80044e8050]
00:20:51.985    Scan finished successfully
00:21:19.266    Disk 0 MBR has been saved successfully to "C:\Users\Tommy\Desktop\MBR.dat"
00:21:19.268    The log file has been saved successfully to "C:\Users\Tommy\Desktop\aswMBR.txt"

is what i got from scanning with aswMBR.exe

NVM Sorry but ignore all of this, I got it fixed :slight_smile:
I found a previous post with a fix on it and used that but thanks very much you guys are awesome

Ok nvm again. It was fixed for a bit, but now it’s come back O_o but the thing is that when i click a search engine result, it will redirect, but if i click back to the result page and click the same result it will not redirect. Help please

2

wlecome to the forum. someone will check that log for you in the mean time i suggest you do a scan with malwarebytes antimalware.

http://www.filehippo.com/download_malwarebytes_anti_malware/

download install update and do a scan, don’t forget to remove what it finds and a system reboot might be necessary. and post the result here in your next post.

good luck.

3

That may well be a hijacked host file

To ensure that I get all the information this log will need to be attached (instructions at the end) if it is to large to attach then upload to Mediafire and post the sharing link.

Download OTS to your Desktop

[*]Close ALL OTHER PROGRAMS.
[*]Double-click on OTS.exe to start the program.
[*]Check the box that says Scan All Users
[*]Under Additional Scans check the following:

Reg - Disabled MS Config Items
Reg - Drivers32
Reg - NetSvcs
Reg - SafeBoot Minimal
Reg - Shell Spawning
Evnt - EventViewer Logs (Last 10 Errors)
File - Lop Check

[*]Under the Custom Scan box paste this in


%SYSTEMDRIVE%*.exe
/md5start
volsnap.*
explorer.exe
winlogon.exe
Userinit.exe
svchost.exe
/md5stop
%systemroot%*. /mp /s
hklm\software\clients\startmenuinternet|command /rs
CREATERESTOREPOINT

[*]Now click the Run Scan button on the toolbar.
[*]Let it run unhindered until it finishes.
[*]When the scan is complete Notepad will open with the report file loaded in it.
[*]Click the Format menu and make sure that Wordwrap is not checked. If it is then click on it to uncheck it.

Please attach the log in your next post.