Possible Infection - Need Help

Viruses and worms
1

A few days ago, my scanner picked up something off of a website that had popped up under my main window. The notification down in the right-hand bottom corner of the screen came up a few times, then nothing happened, so I immediately set up a boot scan and nothing was found or removed from my system.

Now as of late I’ve been having two major problems when using the Google search engine. First of the two is that when searching for web page, it loads up a blank screen - however other parts of the site and it’s searches work fine. Second, if by chance that everything loads up fine, every single result brings me to this following web page: searchclick10[dot]com
No matter what it is that I search for, that site pops up on any link I click on Google. Even sites that I know are up and working fine, like the World of Warcraft main site.

I’m kinda at a loss here. I’m unable to find anything on my system, even through a manual search - maybe I’m just missing -something-.

2

Have you tried scanning your system with MBAM and SAS

MBAM http://filehippo.com/download_malwarebytes_anti_malware/
update and do a quick scan, click on “remove selected” after scan to quarantine anything found, and restart

SAS http://filehippo.com/download_superantispyware/

Are cookies really spyware and are they dangerous?
http://www.superantispyware.com/supportfaqdisplay.html?faq=26

come back and post scan logs here if you want someone to look at them

3

[font=Segoe UI]Please follow Pondus’s proposed solution then post a Hijack This log to fix the redirect problem.

Hijack This (HJT) ============

1 Download Trend Micro Hijack This here
2 Install HJT in C:\Program Files\Trend Micro\HijackThis (the location is already displayed by default). Click Install
3 HJT Window will appear. Click Do a system scan and save a logfile. A notepad file will pop-up once the scan is completed
5 Click on the Notepad window and click File > Save As and save the file on your desktop
6 Go back here on your topic and start a reply. On the Reply window, click Additional Options
7 Attach the .txt file we created and saved on your desktop
NOTE: Do not have HJT fix anything yet.

4

Your host file has been modified.

Download Hostsxpert and unzip it
Double click the exe file to run the program
Click on file handling
Click ’ make hosts writable ’ ( this may not be necessary, it may already be on that option )
Click 'restore Microsoft’s host file ’ then OK
Click X to exit

http://www.funkytoad.com/index.php?option=com_content&task=view&id=13&Itemid=

5

If hosts file is the one which is modified, you can reset it using this fixit tool by microsoft : http://go.microsoft.com/?linkid=9668866

nmb

6

Sorry about the slow response - holiday stuff and work is being a pain. I have log files attached to this response for MBAM, SAS and HijackThis. And I’ll work on the other suggestions posted by everyone else.

EDIT

Accessing GMail gives me the following:

404 Not Found

The requested URL /accounts/ServiceLogin was not found on this server.
Apache/2.2.3 (Red Hat) Server at www.google.com Port 443

7

Fix the following in HJT (if im not wrong about them of course… so wait until someone else gives you the good to go signal then you can)

O1 - Hosts: 89.149.210.61 www.google.com
O1 - Hosts: 89.149.210.61 www.google.de
O1 - Hosts: 89.149.210.61 www.google.fr
O1 - Hosts: 89.149.210.61 www.google.co.uk
O1 - Hosts: 89.149.210.61 www.google.com.br
O1 - Hosts: 89.149.210.61 www.google.it
O1 - Hosts: 89.149.210.61 www.google.es
O1 - Hosts: 89.149.210.61 www.google.co.jp
O1 - Hosts: 89.149.210.61 www.google.com.mx
O1 - Hosts: 89.149.210.61 www.google.ca
O1 - Hosts: 89.149.210.61 www.google.com.au
O1 - Hosts: 89.149.210.61 www.google.nl
O1 - Hosts: 89.149.210.61 www.google.co.za
O1 - Hosts: 89.149.210.61 www.google.be
O1 - Hosts: 89.149.210.61 www.google.gr
O1 - Hosts: 89.149.210.61 www.google.at
O1 - Hosts: 89.149.210.61 www.google.se
O1 - Hosts: 89.149.210.61 www.google.ch
O1 - Hosts: 89.149.210.61 www.google.pt
O1 - Hosts: 89.149.210.61 www.google.dk
O1 - Hosts: 89.149.210.61 www.google.fi
O1 - Hosts: 89.149.210.61 www.google.ie
O1 - Hosts: 89.149.210.61 www.google.no
O1 - Hosts: 89.149.210.61 search.yahoo.com
O1 - Hosts: 89.149.210.61 us.search.yahoo.com
O1 - Hosts: 89.149.210.61 uk.search.yahoo.com

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)