Google Redirect Virus

Hi Guys

I have a PC that got infected with Goolge redirect virus and I try everything I know to clean it but nothing work.
I download tdsskiller but it does not start.
I delete and recreate the host file and it work for a day then it start again.
I flush the DNS, Clean the internet temp files. Not sure what else I can try.
Any ideas?
Who is Participating?
infedonetworkConnect With a Mentor Author Commented:
Hitman Pro fix it in less than 2 minutes.
It was a MBR infection.

Scott ThompsonComputer Technician / OwnerCommented:
I have had the issue of TDSSKiller not running before, and usually it is the infection you are trying to remove that is causing this issue.

Try running Symantec's FixTDSS

Also, run Symantec's ZeroAccess Removal Tool:

This infection commonly comes with it.

Once you have ran both removal tools, try to run TDSSKiller again.  Let this run through and remove any leftovers.  Be sure to checkmark to check for TDLFS in the options.

Last but not least, run a scan with Malwarebytes to look for anything that these rootkits might have brought in.

Post your results when this is done.
I agree w pc_solutions recommendation, especially malwarebytes.

Also, after everything is all said and done, be sure to scan with a couple of other freeware virus checkers and spyware checkers.  AVGfree ( and SuperAntiSpyware free version ( both come to mind.  

So often if you have one infection, you've probably got more... and no one virus checker will find everything.
WEBINAR: GDPR Implemented - Tips & Lessons Learned

Join the WatchGuard team on Thursday, March 29th as we recount some valuable lessons learned in weighing the needs of a business against the new regulatory environment, look ahead at the two months left before implementation, and help you understand the steps you can take today!

infedonetworkAuthor Commented:
Already done all this except the symantec zero access that I will run shortly.
Malwarebyte did not find anything, neider avg.
Superantispyware found something but did not fix the problem.
Fixtds does not start eider.
Scott ThompsonComputer Technician / OwnerCommented:
If you are unable to run neither TDSSKiller or FixTDSS after running the ZeroAccess removal tool, pull the drive from your system and slave it to another computer.  Then run TDSSKiller from that computer.  If it does have a variant of Tidserv or Pihar, it will find it on the MBR of the hard drive and you should be able to remove it.

I recommend Avast! Free Antivirus over AVG by the way, but that's just a recommendation.
infedonetworkAuthor Commented:
Zerro Access did not found any infection.
TDSSKiller or fix tdss does not run.
I also use mbrcheck and it say that is an infected mbr and I chose to replace it but that did not help eider.
Scott ThompsonComputer Technician / OwnerCommented:
Were you able to slave your hard drive to another computer and scan it with TDSSKiller?  I was a little unclear on this sentence, "I also use mbrcheck and it say that is an infected mbr and I chose to replace it but that did not help eider."

Do you have TDSS logs?  If so, it will place them in the C:\ directory.  Please upload these logs.

Also, please download and run RKill.  This will shutdown any processes that may be preventing TDSSKiller from running.  You can download it here.  I recommend downloading the iExplore.exe file.
Please upload the results of this also.  After running this, DO NOT reboot your computer.  Run TDSSKiller and see if you can now fix the issues.
infedonetworkAuthor Commented:
I already try few times the rkill but it did not help
Teh MBR tool can be found here:
After I run it said that I have an infected MBR and I chose to have it replaced but nothing changed.
I can't slave the drive because the computer infected is to a remote location.
I'm Trying HitmanPro now. I will let you know if it work.
infedonetworkAuthor Commented:
After I reboot tdsskiller also start working and found 0 infections.
I guess there is no antivirus that could get it all.
That PC was running kaspersky, malwarebyte and search and destroy.
All of those reports no infection.
Scott ThompsonComputer Technician / OwnerCommented:
Wow, it's amazing what works and what doesn't for different infections.  I do use Hitman Pro from time to time, but I'm glad that fixed the issue for you!
infedonetworkAuthor Commented:
Hitmanpro was the only software that was able to remove the Malware
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.