Need Help! Results5 Google Virus

[VincentX3]

Alright so for the past few months, I been having this "Virus". It's more like malware since it doesn't harm anything.

What is does is re-directs me to a Scam site every time I click on one of my searches on Google
It makes my internet connection slower and it has a bad side effect of always disconnecting my downloads whenever I try to download something on Megaupload.

I've been trying ever since I noticed the virus to get rid of it! No virus scanner has proven effective and when I search for ways to get rid of it, most people would recommend a program called "Malwarebytes" Which I have, used, it will detect the virus, delete it but it will come back.

I tried password protecting my router and activating "Dynamic DNS" with a password too. So far nothing works.

If anyone can help me out it will be much appreciated. I'm getting desperate

- Using Avast Antivirus (Wont detect it)
- Used Malwarebytes (Detects and deletes it, yet it comes back)

 

[VincentX3]

Bump for the help

 

[tippy2k2]

What site does it re-direct you to? Is it the "Windows Defender" for $50 or is it something else?

 

[Mockingjay]

Try 'Super Anti Spyware'. It managed to remove a virus that Malware Bytes couldn't detect on my computer which was preventing me from playing WoW.

http://www.superantispyware.com/

 

[Megacherv]

Computer Associates is a good anti-virus/malware.

Have a look through your processes. If you can find one what looks suspicious, search for it and delete it manually.

 

[Sacman]

have you tried to quarantine it instead of delete it when it's detected?

 

[flaming_squirrel]

Restart your computer, boot it into safe mode, run Malwarebytes, delete virus.

I tried password protecting my router and activating "Dynamic DNS" with a password too

That's going to do bugger all to the virus, your router should ALWAYS be password protected and encrypted to at least WPA level though.

Edit: Also turn off system restore before deleting it.

 

[VincentX3]

What site does it re-direct you to? Is it the "Windows Defender" for $50 or is it something else?

http://results5.google.com/
I have it blocked with the addon "Noscript" for Firefox, but it will still re-direct me to it

Try 'Super Anti Spyware'. It managed to remove a virus that Malware Bytes couldn't detect on my computer which was preventing me from playing WoW.

http://www.superantispyware.com/

I will try it and post back after I do

Computer Associates is a good anti-virus/malware.

Have a look through your processes. If you can find one what looks suspicious, search for it and delete it manually.

I'm really carefull with my computer, especially the processes. Which is why I'm so surprised I have this virus. I'll private you a list if you want?

have you tried to quarantine it instead of delete it when it's detected?

I think I have, after a few times.
When it deletes it, all it does is erase my DNS. Then after I restart my router I get the malware back.

 

[VincentX3]

Restart your computer, boot it into safe mode, run Malwarebytes, delete virus.

I tried password protecting my router and activating "Dynamic DNS" with a password too

That's going to do bugger all to the virus, your router should ALWAYS be password protected and encrypted to at least WPA level though.

What's the difference in deleting a Malware\Virus in "Safe mode" than in normal mode?
Isn't it a file that must be deleted either way?

Yea
I JUST password protected it today in the morning since I never had a problem with it (It had the default company password)

encrypted to at least WPA level though

Encrypted on a WPA level?? Sorry, I'm not an expert on these kind of things ><

 

[Megacherv]

What site does it re-direct you to? Is it the "Windows Defender" for $50 or is it something else?

http://results5.google.com/
I have it blocked with the addon "Noscript" for Firefox, but it will still re-direct me to it

Try 'Super Anti Spyware'. It managed to remove a virus that Malware Bytes couldn't detect on my computer which was preventing me from playing WoW.

http://www.superantispyware.com/

I will try it and post back after I do

Computer Associates is a good anti-virus/malware.

Have a look through your processes. If you can find one what looks suspicious, search for it and delete it manually.

I'm really carefull with my computer, especially the processes. Which is why I'm so surprised I have this virus. I'll private you a list if you want?

have you tried to quarantine it instead of delete it when it's detected?

I think I have, after a few times.
When it deletes it, all it does is erase my DNS. Then after I restart my router I get the malware back.

Sure thing, PM me some screenshots of your task manager

 

[LightOfDarkness]

encrypted to at least WPA level though

Encrypted on a WPA level?? Sorry, I'm not an expert on these kind of things ><

I think the default for password protection is WEP which is supposedly horribly outdated. Go to your router settings (localhost or your IP address I think), go to wireless settings and then scroll down a bit until you come across security or password or whatever, and there should be a drop down box around there. Click it then select WPA or WPA2 and then set your password, save changes blah blah blah.

 

[VincentX3]

What site does it re-direct you to? Is it the "Windows Defender" for $50 or is it something else?

http://results5.google.com/
I have it blocked with the addon "Noscript" for Firefox, but it will still re-direct me to it

Try 'Super Anti Spyware'. It managed to remove a virus that Malware Bytes couldn't detect on my computer which was preventing me from playing WoW.

http://www.superantispyware.com/

I will try it and post back after I do

Computer Associates is a good anti-virus/malware.

Have a look through your processes. If you can find one what looks suspicious, search for it and delete it manually.

I'm really carefull with my computer, especially the processes. Which is why I'm so surprised I have this virus. I'll private you a list if you want?

have you tried to quarantine it instead of delete it when it's detected?

I think I have, after a few times.
When it deletes it, all it does is erase my DNS. Then after I restart my router I get the malware back.

Sure thing, PM me some screenshots of your task manager

Alright, give me a few mins.

 

[flaming_squirrel]

What's the difference in deleting a Malware\Virus in "Safe mode" than in normal mode?
Isn't it a file that must be deleted either way?

Yea
I JUST password protected it today in the morning since I never had a problem with it (It had the default company password)

encrypted to at least WPA level though

Encrypted on a WPA level?? Sorry, I'm not an expert on these kind of things ><

Safe mode means that only Windows files and drivers are loaded on boot, so in theory the malware will not be running and 'should' be unable to re-install itself when deleted.
To get into it press F8 before windows starts to load (just mash the button as soon as you turn it on if you're not sure when to press it).

Go into your router settings and look for a tab related to encryption, you should be able to set it to WEP, WPA or WPA2, best one being WPA2. This is to stop anyone in the nearby area from stealing your bandwidth or data, without it anyone with a wireless adapter in range could simply use your connection however they like.

Oh just to be warned though once you've changed it to WPA2 you'll need to set a password in order to access your connection, so once it's done you'll need to change the settings on all the wireless adaptors as well.

 

[fanklok]

What's the difference in deleting a Malware\Virus in "Safe mode" than in normal mode?
Isn't it a file that must be deleted either way?

When you boot in safe mode absolutely no programs that auto run when you log in run, so if your virus/malware/STD isn't running chances are good it can't save itself.

EDIT: Vile ninja explaining things better then I.

 

[Sightless Wisdom]

Ok basically you need to find the location of the file that is repeatedly installing itself, and directly get rid of it. I found the easiest way to do this is with AVG free. Once does a scan, follow the file path to the problem and delete it. If it still doesn't work try heading to the file in windows Safe Mode and deleting it, make sure it doesn't just go to the recycle bin as well because that would be a stupid mistake.

 

[Dirty Saint]

Ad-Aware
Spybot
AVG Anti-Virus
-all free and available at download.com

I've never needed anything else in the six years or so since I've owned my pc.
Except for common sense. You really need that, too.
Scan anything you EVER download, EVER.

 

[VincentX3]

Ad-Aware
Spybot
AVG Anti-Virus
-all free and available at download.com

I've never needed anything else in the six years or so since I've owned my pc.
Except for common sense. You really need that, too.
Scan anything you EVER download, EVER.

I do, trust me. I don't even download many things, especially from un-trusted sites.
That's why I'm so surprised at this

I'll give those a shot too though.

 

[flaming_squirrel]

Ad-Aware
Spybot
AVG Anti-Virus
-all free and available at download.com

These are all alrite, personally I'd shell out a bit of cash and buy something with constant updates though, my personal favourite being Kaspersky (quite a demanding one, but very good detection rates). Got myself another years subscription for £5 due to play.com being awesome.

EDIT: Vile ninja explaining things better then I.

*maniacal cackling*

I do, trust me. I don't even download many things, especially from un-trusted sites.
That's why I'm so surprised at this

I'll give those a shot too though.

Often malware/viruses are not aquired through downloads, websites are compromised by hackers and dodgy advertisements every day so using scripts can download nasty stuff to your pc without you ever knowing about it.
If you want to be a bit more safe then one way is to use Firefox + NoScript. It blocks all scripts from running on a site until you let them, so it does slow down your browsing experience but in return you're that bit more secure.

 

[Canid117]

My guess is that it has a second program on your computer that detects when it has been deleted and re installs it. If thats the case then you would have to hunt down this program as well and get rid of it. I am just guessing here but it seems possible. That or it isn't really being removed by the anti virus programs you are using.

 

[Claymorez]

Bump for the help

Bumping is never ok - read the posting guidelines - consider this an unofficial warning as I do sympathise with you. I would recommend getting another harddrive and moving everything you KNOW is safe to it and then scan that and ensure nothings on it, then reset your computer to factory settings then re-move everything from the harddrive to the pc. Otherwise call in a technician.