I got stupid and now I think I have a virus.

[draggar]

Luckily it's on one of my other PCs, not the primary.

It's a nasty one, too mother fuggers.

Whenever I do a search (Google, Bing etc.) a lot of the results will go to a separate search portal (businesssite.net) when I click on them and, though an affiliate link, take me to a search results page from them, which is never anything close to what I was searching for.

It is doing this in IE and FireFox (wow! FF affected - that's a new one). I've disabled all add-ons and it is still happening.

Spybot, Ad-Aware, AVG, and Housecall do NOT see this damn thing.

Right now I'm going though my running tasks to see if something is running in the background.

Any suggestions with this? I did a few searches on my main computer and nothing came up so I'm afraid this is either very new or at least unreported.

[Broomjockey]

How are you doing the search? Through a search box, or on the site proper?

Did you try running the scans in safe mode? Try running Avast!, that might get it. Did anyone download anything on the computer recently? Have you tried running the system restore to just before that point?

[draggar]

To do the searches I go to Google.com / Bing.com and do the search though there.

Booting into safe mode now to scan.

As for downloading - you don't want to know. (Nothing adult related, don't worry about that).

Edit: Spybot picked up a lot more in safe mode.

I think it's clean now. Avast freaked out whenever I loaded up IE or FF. I uninstalled both, rebooted into safe mode w/ networking did a scan then reinstalled the two.

[crashhelmet]

Download and run HiJackThis. If it's OK with the mods, generate a report and post it in here. Otherwise PM it to me and I'll see what I can find. Do not do anything more with it unless one of us tells you to, or you know what you're doing. You could make things FUBAR if you remove the wrong items.

CH

[Jack]

Download free version of MBAM and run a quick scan. Remove whatever it finds and attach a log (if it found anything rootkitty we'll want to look into those). HJT will also work well for this sort of thing but I find it easier and more thorough to knock out what MBAM can find before cleaning up with HJT.

[Geek King]

Just a heads up: I removed several fake spyware programs from usually computer-savvy friends' computers this weekend. I'm thinking there may be a fresh batch of bad ads that snuck into someone's rotation.So far, Malwarebytes run from safe mode is removing them, though.