Home > My Computer > My Computer Has Google Redirect Virus And Winlogon.exe Error

My Computer Has Google Redirect Virus And Winlogon.exe Error

Thanks for the solution and the clarity of presentation. January 14, 2012 at 12:36 PM Anonymous said... Simply add me to your Google Plus circles. Usually the page you are ending up at is either commercial in nature, or has malicious content that will attempt to infect your computer. have a peek at this web-site

Register now! September 17, 2010 at 7:28 PM Anonymous said... February 7, 2010 at 5:38 AM Anonymous said... The steps looked intimidating at first glance, but it was easy to follow once I tried. http://www.bleepingcomputer.com/forums/t/338430/my-computer-has-google-redirect-virus-and-winlogonexe-error/

Use CCleaner to remove unnecessary system/temp files and browser cache CCleaner is a freeware system optimization. I tried to run GMER but my computer crashed twice so I ran it with just the "Sections" and "C" checked and am attaching the results. Anyway, the problem seems to be gone. I went ahead and followed it up with CCleaner just to stay on target.

  1. I also scanned my computer twice with updated versions of malewarebytes and avast.
  2. December 7, 2011 at 7:28 AM Anonymous said...
  3. May 11, 2010 at 9:36 AM Anonymous said...
  4. Thank you so much for this blog! (excuse me if I sent this twice) July 18, 2012 at 1:24 PM Anonymous said...
  5. Navigate to the following registry and restore "Shell"="Explorer.exe 1″ to "Shell"="Explorer.exe" Situation Four.
  6. Thank you!You have saved me a lot of hassle.it worked perfectly March 24, 2010 at 11:54 AM Ian said...
  7. Whatever problem you have, we're here to help you solve it!

Also: My windows xp came on my computer. TDSSKiller did not solve the problem. Thanks! I'm not technically skilled at all and I was able to follow your very well laid-out instructions with no problems whatsoever.

Please, please help. But, the redirecting fro what appears to be google still persists. Death to malware producers!!!Name: SXNewVoice ModulePublisher: (Not verified) Sony CorporationType: Browser Helper ObjectVersion: date: Date last accessed: ‎Today, ‎October ‎23, ‎2011, ‎3 minutes agoClass ID: {1024CB52-DFE7-460E-B781-46C4705DC81D}Use count: 178Block count: 0File: http://newwikipost.org/topic/tkuRtQoHQQft82LidASP1VqUN7kADY6u/Google-Redirects-and-34-Explorer-exe-and-maybe-winlogon-exe-is-infected-34.html This hasn't worked for me.First off, TDSSKiller didn't find anything.Then when it looked like the virus had been given the boot, it came back.I'm using Google Chrome, if that matters at

I downloaded TDSS killer, ran it and everything workes like new,plus I gained 3 Gigs of space. You are welcome! The fix is simple: remove the mlicious lines. Winlogon.exe problems should be fixed immediately to gain proper operations so that subsequent steps can be carried out to further remove the Trojan affecting winlogon.exe.

I didn't have any suspicious add-ons, but there were three Java-type add-ons so I deleted them all (why not) and THAT fixed my problem. Copy the content of the following codebox into the main textfield: Code: :filefind winlogon.ex* explorer.ex* Click the Look button to start the scan. If you accept cookies from this site, you will only be shown this dialog once!You can press escape or click on the X to close this box. Also go to the Key P3P 2 folders up and delete the history.

August 4, 2010 at 11:07 PM Anonymous said... Check This Out Press “OK” button to confirm the change. Several functions may not work. I don't have that line so I removed nothing O_O.

All the research I found pointed to residuals from a virus I had removed. Thank you very much. August 2, 2010 at 2:43 PM Anonymous said... Source Combofix is KING!

Uncheck the "Hide protected operating system files" and the "Hide extensions for know file types" boxes. I just got this viruns within the last 30 days. Thank you very much appreciated June 6, 2010 at 10:36 AM Anonymous said...

Keep reading the following paragraphs.

thanks again. Thanks; I have been looking ofr quite some time now for soultions. It also creates a logfile & directory on drive C:. Yay!

However, when I do the same on an uninfected computer, the Google name image is a special graphic; not the standard. Nothing else, but the TDSSkiller helped me to get rid of this rootkit. Hi, so when I try to save the HOST file I edit, it saves it as a different type of file. have a peek here August 29, 2011 at 7:43 AM Anonymous said...

dude..... I would never have thought of that. winlogon.exe http://www.virustotal.com/file-scan/...ceb-1286843316 explorer.exe http://www.virustotal.com/file-scan/...b3d-1286844352 Thanks for your help. So reading through all the comments, I tried the Power Eraser.

can anybody confirm this for me? Thank you so much. Search redirect problems happen occasionally. I only wish I knew what site I went to to pick up that virus so I don't go there again.Thanks alotSteve October 11, 2010 at 8:01 AM starr said...

and it never actually opened up another window to submit files. Don't forget to update the installed program before scanning. And still has the actual old HOST file saved there. I tried the ComboFix but it said something about not being able to rename the file.

Thanks again for posting this. Great article! Great blog post, this virus was driving me mad. is infected!! . ((((((((((((((((((((((((( Files Created from 2010-09-12 to 2010-10-12 ))))))))))))))))))))))))))))))) . 2010-10-08 05:28 . 2009-03-25 16:06 40552 ----a-w- c:\windows\system32\drivers\mfesmfk.sys 2010-10-08 05:28 . 2009-03-25 16:05 34216 ----a-w- c:\windows\system32\drivers\mferkdk.sys 2010-10-08 05:28 .

Fiz todos os procedimentos TDSSKILLER e COMBOFIX.A minha dúvida é que após obter o relatório do COMBOFIX, qual site poderia me ajudar a respeito.Quando executei o COMBOFIX não tinha a opção Type “regedit” and hit Enter key to access Registry Editor. December 28, 2011 at 10:19 AM Anonymous said... You totally rock!!!

Help! My "hosts" file has two lines, but I can't provide administrator permission to save the file - which strikes me as weird because I am the administrator.My specific problem is being Malwarebytes' Anti-Malware found & removed the Trojan first time round but it returned. At the command prompt, type (or copy then right click and paste into the command window) the following in bold then press "Enter" expand C:\I386\EXPLORER.EX_ C:\explorer.exe You should see a line