We help IT Professionals succeed at work.

Check out our new AWS podcast with Certified Expert, Phil Phillips! Listen to "How to Execute a Seamless AWS Migration" on EE or on your favorite podcast platform. Listen Now

x

Laptop infected with browser redirects

Medium Priority
726 Views
Last Modified: 2013-12-06
laptop infected with various browser redirects, including: ads.clicksor.com and atelbh....

Have run Malwarebytes, AdAware, Spybot and CCleaner to no avail.  System will sometimes work fine for a few minutes on web but almost always gets redirected if I try to go to anti-spyware site. Really frustrating!
Comment
Watch Question

Program Analyst II
Commented:
Unlock this solution with a free trial preview.
(No credit card required)
Get Preview
Commented:
Unlock this solution with a free trial preview.
(No credit card required)
Get Preview
CERTIFIED EXPERT
Author of the Year 2011
Top Expert 2006
Commented:
Unlock this solution with a free trial preview.
(No credit card required)
Get Preview

Author

Commented:
Hosts file is empty, sorry I forgot to say that I had checked that already. I will try Hitman Pro (oddly I use that on another PC on startup) and TDSSkiller.

Author

Commented:
hunart: I have already tried that with existing utils, I will try with Hitman and TSSKiller as well...

Author

Commented:
HitmanPro - nothing found
TDSSkiller - nothing found
Sudeep SharmaTechnical Designer
CERTIFIED EXPERT
Commented:
Unlock this solution with a free trial preview.
(No credit card required)
Get Preview
CERTIFIED EXPERT
Author of the Year 2011
Top Expert 2006

Commented:
You may find that Menu Item #5 in RogueKiller (mentioned above) will help by applying a DNS fix.
CERTIFIED EXPERT
Top Expert 2007

Commented:
Are you using a router? sometimes it can be due to infected router.

Try the suggested ComboFix, let it install the Recovery Console, then scan in normal mode.
Scan only once and show us the logfile.

Also try this tool:
Download aswMBR.exe ( 511KB ) to your desktop.
http://public.avast.com/~gmerek/aswMBR.exe

Double click the aswMBR.exe to run it
Click the "Scan" button to start scan

On completion of the scan click save log, save it to your desktop and post in your next reply
CERTIFIED EXPERT
Top Expert 2007

Commented:
@ SSharma, it is possible that this is an mbr issue.
But we should NEVER suggest to fix the mbr without proper diagnoses first, that it is really needed and leave caution, specially if it is a Dell.

We haven't even ask the asker what system he has... We need to include an important note when suggesting to re-write their mbr as for Dell users it can prevent them from accesing the Dell restore utility.

Commented:
rkill and malwarebytes have not been mentioned here in combination, though I have found it very effective...I'm exploring hitmanpro 3.5 now, and will suggest it if I find it valueable...

http://www.bleepingcomputer.com/download/anti-virus/rkill - Get all versions of rkill
Malwarebytes.org - get latest, and update definitions

Rkill stops unnecessary/malicious services
malwarebytes removes the bad entries...
CERTIFIED EXPERT
Author of the Year 2011
Top Expert 2006

Commented:
@nmacfall,
Welcome to EE - always good to have new folks posting advice.
If you will look at the links to 'EE Articles' is the Expert Comments, you will see that rogue process killers -- followed by a Malwarebytes scan have been mentioned.

http:#a35486020

"If that doesn't work, try running one of the "rogue process" killers prior to doing a new Malwarebytes scan.


Details in EE Articles here:
https://www.experts-exchange.com/A_5124.html (Stop-the-Bleeding-First-Aid-for-Malware)
https://www.experts-exchange.com/A_4922.html (Rogue-Killer-What-a-great-name)"
Commented:
Unlock this solution with a free trial preview.
(No credit card required)
Get Preview

Author

Commented:
Lots of good advice but in the end decision was taken that this would all cost too much time so a new laptop was purchased. Thanks anyway as there were some good tips for future problems.

Author

Commented:
Partial solution
Unlock the solution to this question.
Thanks for using Experts Exchange.

Please provide your email to receive a free trial preview!

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.