Just FYI, I got hit with some nasty malware/spyware clicking one of the blogs on their site last week. Finally got it cleaned up yesterday once and for all....I hope.

Anyway, use this info however you want, I just thought I'd pass it along.

thanks for the info.

Maybe tell us what browser and OS you are using? That might serve as an extra warning for anyone with the same configuration on their computer.

JC Wrote:
-------------------------------------------------------
> thanks for the info.
>
> Maybe tell us what browser and OS you are using?

RESPONSE: Hmmmmmmmmmmmmmmmmmmmmmmm. You sound like a hacker to me, JC.
LOL, Just kidding.

What was the malware? I got one last week that I haven't been able to completely get rid of it yet. The worst symptoms are gone. But any searches on Yahoo or Google are still getting redirected.

I'm running Windows XP SP3. My browser is IE8 and I keep my computer fully patched.

The malware started out as Antivirus System Pro which is a scareware program that tries to bully you into paying for their software. I was able to clean it with malwarebytes but was left with annoying redirects and popups in IE.

dolfanmark, I ended up using Combofix but only as a last resort and found out it was actually a rootkit disguised as my cdrom driver which explains why it went unnoticed by all the other cleaners I tried. I suggest you go to techsupportforum.com or bleepingcomputer.com and follow instructions to get help before trying combofix as it can leave your computer inoperable....don't ask how I know.

Hope this helps.

Thanks GBOFinFan. That is exactly what I had. I ran ComboFix on my own, and I'm still getting the redirects. And when I do a netstat, I see the PC opening up http sessions to .ru websites. Needless to say, at that point, I turned that PC off and haven't used it since. I was going to revisit it again this weekend.

Firefox + the NoScript plugin. Can't recommend it enough.

This particular malware hit firefox, too.

Ran ComboFix again tonight. There was an updated version since last Sunday. And it found the rootkit was still in an ati video driver. It's fixed now.