This doesn't nessecarily help, but I have the exact same issue on my wifes laptop that started about a week ago. I've scanned with Spybot, Superantispyware, Trend Micro Housecall, Norton 360 System and processes scans, and malwarebytes. While they have found things, I have had at least one clean scan with each, with my system restore turned off, and I still have the same iexplore running tself in the background, and google results redirect to other sites on the first three clicks. I've checked my host file (It wasn't there at first actually, so I created one), and its all clear as well.
I was planning on posting to the main forum- does it make more sense to post here, or should I pust post a link to this forum as it seems like possibly the same issue?
Ok I've run the aswMBR and then run the fix then here's the log:
aswMBR version 0.9.8.986 Copyright(c) 2011 AVAST Software
Run date: 2011-12-06 11:12:21
11:12:21.939 OS Version: Windows x64 6.1.7600
11:12:21.939 Number of processors: 2 586 0x170A
11:12:21.940 ComputerName: RK-PC UserName: RK
11:12:23.011 Initialize success
11:13:04.655 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\00000064
11:13:04.661 Disk 0 Vendor: ST932032 0002 Size: 305245MB BusType: 3
11:13:06.724 Disk 0 MBR read successfully
11:13:06.728 Disk 0 MBR scan
11:13:06.732 Disk 0 Windows VISTA default MBR code
11:13:06.736 Service scanning
11:13:19.364 Modules scanning
11:13:19.369 Disk 0 trace - called modules:
11:13:19.391 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys >>UNKNOWN [0xfffffa80041f2254]<<
11:13:19.397 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa80041d8330]
11:13:19.404 3 CLASSPNP.SYS[fffff880019c443f] -> nt!IofCallDriver -> [0xfffffa8004115e40]
11:13:19.410 5 ACPI.sys[fffff88000d64781] -> nt!IofCallDriver -> \Device\00000064[0xfffffa8004076490]
11:13:19.417 \Driver\nvstor64[0xfffffa80036b7790] -> IRP_MJ_INTERNAL_DEVICE_CONTROL -> 0xfffffa80041f2254
11:13:19.424 Scan finished successfully
11:14:08.686 Disk 0 MBR has been saved successfully to "C:\Users\RK\Desktop\MBR.dat"
11:14:08.693 The log file has been saved successfully to "C:\Users\RK\Desktop\aswMBR.txt"
And after this the problem's still going on. I noticed that the scan was set to quick scan so I tried to run a full scan of the C: drive a few times but everytime either the computer crashes or the scan says it's not responding and eventually has to close, don't know if this helps anything just thought I'd mention it.
Following the recent ransomware attacks that leveraged the WannaCrypt0r malware and NSA-developed EternalBlue vulnerability exploit, there was plenty of advice that backup, backup, backup was the best mitigation. Data backups ...