google redirect virus >:-(

[BadHabitz]

I solved this problem by switching to Chrome

[{CLR} ObiTroy]

Thanks. I'll try the MB safemode thing this morning before doing anything more drastic.

I ran MB and Spybot S&D in safe mode... didn't find anything.

[GeneralSnake]

What was that program Cain linked to way back? It was in the sticky but the link seems to have been removed form it.

Unless you mean a diffrent post, he mentioned malware bytes and MSSecurity essentials. Its a sticky in the CL lab, or atleast it was.

[{CLR} ObiTroy]

RESOLVED

This fixed it:
Fix Uninitiated Google Redirects With GooredFix [Firefox]

I had to reboot in safe mode to run it.

Log file shows what it removed:

GooredFix by jpshortstuff (03.07.10.1)
Log created at 14:47 on 04/08/2011 (Troy)
Firefox version 4.0 (en-US)

========== GooredScan ==========

Deleting "C:\Users\Troy\Application Data\Mozilla\Firefox\Profiles\ls14ote8.default\ext ensions\{3fd344b7-88a8-487a-afbd-7e1361a3f74d}" -> Success!
Deleting HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extens ions\\{F91A8FD7-8FD4-498A-98BB-12FE3549AF55} -> Success!
Deleting C:\Users\Troy\AppData\Local\{F91A8FD7-8FD4-498A-98BB-12FE3549AF55} -> Success!
Deleting HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extens ions\\{CFF8E882-E08B-47BB-8436-A36A36DB9398} -> Success!
Deleting C:\Users\Troy\AppData\Local\{CFF8E882-E08B-47BB-8436-A36A36DB9398} -> Success!

[mapes]

Ahh it was loaded as an extension

[Qicmee]

Celebrate!

[Dead...Again]

[WalkinTarget]

Wow, ran into this bug on a customer laptop last night. First time I'd seen it, and it does indeed hide from MalwareBytes at this point.

Still working on cleaning off the laptop, as its got more issues than just that one. Thanks for the link, Obi !!

[{CLR} ObiTroy]

No problem.... it is very illusive for sure. Thankful I found the fix and didn't have to do anything more drastic.