This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Malware Removal Forums

Searches redirected to http://216.195.52.100/go.php etc.

1 min read

This thread's last reply is from December 30, 2008, 5:47 AM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

JPM
December 30, 2008, 5:30 AM UTC
Dear all,
startuplist.txtany search I do will b redirected to following IP address; http://216.195.52.100/go.php?c=o6o5GaeUYQwxNrBYif1HyZxjIY4ytPzQx0g5dg7Cx2bocQoMOU5HU0GX37yNutCPQrQuK9A3TL74qsJj2xmsxKYN78LmQ3IVCToOeLgxjUmytmED0cKLeCB4JJyf0bBUlclzBJhQE5WfhZzjvo%2FvtB8H%2FBR%2BoW7cFI36KSirTEbgeXPHNDUMXz4uNUXRI0tqoPYXztZW28chM47bv5TQSxCfbNqo1d4%2FyFj8grYuMlN8AEn2ZaWUuEq3E6%2BHu4c9U1auJle%2FL5i%2FpmfrCol14ONbXHpnnhnWkN9M05J4xkq5xteJLvZVamAPqzVJwdC%2FeMzSaSi5xd65L8%2F2p0I1gJY5QbrrZtsMFQxchUBuFG%2FgqRYv50Xz8d0ZhGOb8ZP8Sldq%2BvrbJB9RkzxaYIXBsb6uxMqWH5IRTDPBaa2Njhg8I4x%2F2Whg7YrDPpBsJYEer0sXmU%2BmzGyyMjGk9IJSs6BwkAOTK1Gr1oRX5Ax9YFQ4oYQUbP6i9YFC0ny33mTEB%2Ft1OTJ0JZpF8sHgqDOl%2FM77veHpcUryKYbTsX4fwkyr88qIolbTjyzkioPbhvHTb20nPE0BnAu8GXTWR1lfBdksv5BwSMyyT9Ym%2FRYmILbAvbu1GD7I0ebpIxNkAFeLx7%2Bqoa6Q03%2BHrQ%2B3DF2ZlX7Ycmasf3Y6eSzzSIHi79WrDYCytXXaCSqUc1qtkt%2BuD3bLPSPQDOWFEDhSILpgV%2Bsuzn0ToxfbmNFb5ZrmuVSONrFC9tEM%2Fo2HoHw4tZTz1Q0Me5ONpCaXj6T8gze0tZuum5iYmg%2Fbc9kLfk9gdjoXhN3YpJLdhSfvN0XqsmlC or similar.

Please find attached startup log. For some reason the Hijack log is not allowed?

Thanks very much in advance.
NonSuch
December 30, 2008, 5:47 AM UTC
In order for us to help you it is necessary that you provide us with a HijackThis log. Please follow the guideline at the link below to start a new topic and post your HijackThis log by pasting it into your post. Do not utilize attachments.

This topic is now closed. Please start a new topic by following the HijackThis Guideline posted here: >Guideline for posting your HijackThis log<