Malware problem

Viruses and worms
1

Hello,

I’ve been having a problem with a malware redirecting me from google and other sites that I go to. I have ran several scans and Avast cannot pick up anything, however I just had a notification that showed an item as Malware. Is there any way to rectify this problem? I have ran every antivirus software that I have and everything comes up with nil. Here’s what the website picked up:

Can someone please help.

Thank you for your time.

2

Remove that link and follow these instructions: http://forum.avast.com/index.php?topic=53253.0
And NEVER have multiple av’s installed/running at the same time!

3

Please attach your logs. (MBAM, OTL and aswMBR…!!)
Instructions: http://forum.avast.com/index.php?topic=53253.0

4

New computer, and Windows 8 will not let me uninstall Norton.

5

I followed the instructions in the thread, and here are my logs.

6

It will let you remove the link in your initial post and it will let you remove that Symantec crap.
New or old computer doesn’t matter.
And again… Follow the instructions in the link we gave you.

7

Attached is my log from MBR.

8

Hi cverch09,

OTLFix shall just remove some leftovers ( consider that fix as registry and temp cleaner ) and then we shall go in deeper check with FRST.

Re-run OTL.exe.

[*]Copy and paste the following text written inside of the quote box into the Custom Scans/Fixes box.

:OTL
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}: "URL" = http://search.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
IE - HKLM\..\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}: "URL" = http://search.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
IE - HKU\S-1-5-21-520150884-4034319647-3975091115-1002\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.findwide.com/?guid={742EB37F-DA6D-47F5-AA72-9BFC5D24AC14}&serpv=22
IE - HKU\S-1-5-21-520150884-4034319647-3975091115-1002\..\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}: "URL" = http://search.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
IE - HKU\S-1-5-21-520150884-4034319647-3975091115-1002\..\SearchScopes\{F8845B03-2E8D-43CA-9DCD-398F2024B057}: "URL" = http://search.findwide.com/serp?guid={742EB37F-DA6D-47F5-AA72-9BFC5D24AC14}&action=default_search&serpv=22&k={searchTerms}
O3 - HKU\S-1-5-21-520150884-4034319647-3975091115-1002\..\Toolbar\WebBrowser: (no name) - {54AB8064-8958-442F-871D-A904BDEC9758} - No CLSID value found.
:files
ipconfig /flushdns /c
:COMMANDS
[EMPTYTEMP]

[*]Then click the Run Fix button at the top.
[*]Let the program run unhindered; it will reboot the system when it is done and open notepad with logreport. Attach here that logreport.

If the log doesn’t appear, it can be found here:

c:_OTL\MovedFiles\mmddyyyy_hhmmss.log

================================
Next …

Please download Farbar Recovery Scan Tool (
http://www.mcshield.net/personal/magna86/Images/FRST_canned.png
) by Farbar and save it to your desktop.

Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them.
Only one of them will run on your system, that will be the right version.

[*]Double-click to run it. When the tool opens click Yes to disclaimer.
[*]Press Scan button.
[*]It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
[*]The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.