On my friends notebook he has a virus that redirects him to different web pages after a search. A bit of research has found that this is called go.google.com virus or something similar

I try and go onto safe mode, but a blue screen appears saying this isnt allowed bla bla.

Any easy fixes for this? Anti malware bytes is picking the viruses up, but wont allow them to be deleted?

Thanks

On a known-good PC (i.e. yours) download this http://connect.microsoft.com/systemsweeper and put it onto a pendrive or recordable CD. Then boot your friend's laptop from it (usually F12 on bootup, but it depends on the laptop). This will bypass any infections which are present in his installed version of Windows so that they can't load and prevent themselves from being removed.

This is a pretty ancient virus, all current AV programs should have detected and blocked it, so I am guessing your friend is someone who thinks that they dont need an AV program because they dont visit dodgy sites???

Go to Start > Control Panel > System > Hardware > Device Manager > View > Show Hidden Devices.

Scroll down to “Non-plug and Play Drivers†and click the plus icon to open those drivers.

Then search for “TDSSserv.sysâ€

Right click on it, and select “Disableâ€

Note: If you select Uninstall, it will install itself again when you reboot the system, so DON’T select Uninstall.

Restart your pc.

You can now update your Antirus/Malware/Rootkit softwares and the go.google rubbish will stop.

This fix is for XP, not sure if it works for W7 as I dont have my Win7 box back up and working yet, but the basics should be the same, even if they are in a different place.

Download AVAST! for a free full time AV program, and MalwareBytes as a back up "On Demand" AV program (also free).

Gentlegiant- I looked at that solution, but that file was not there, even in the hidden files section.

gac- Thanks ill give that a go too

If they don't have anti virus then just install microsoft security essentials for them. Free and works really well especially on slower machines.

Phil

If gac's suggestion doesnt work, try booting off of the Windows CD and see if that works.

There are other ways to get into the OS when locked out, but they arent easy and the software needed isnt cheap or easy to use.

If you afford to wait for a response, try asking for help on www.bleepingcomputer.com - they help people get rid of computer nasties.