Remove google redirect to IX-Find.com (Remove koobface and podmena.sys trojans)

In the past few days, many Myspace and Facebook users spammed with a message that have a link to a video. After clicking on this link a site opens that asking user to download an adobe flash update, which in reality is a malware (koobface and podmena trojans). When these Trojans are installed, computer works slowly, shows pop ups and program errors. Also, when attempting google searches, browser redirects to a web site ix-find.com. Use the free removal instructions below in order to remove ix-find.com malware and any other trojan infections.

Symptoms in a HijackThis Log

O4 – HKLM\..\Run: [sysldtray] c:\windows\ld01.exe
O4 – HKLM\..\Run: [sysldtray] c:\windows\ld02.exe
O4 – HKLM\..\Run: [sysldtray] c:\windows\ld03.exe
O4 – HKLM\..\Run: [sysldtray] c:\windows\ld04.exe
O4 – HKLM\..\Run: [sysldtray] c:\windows\ld05.exe
O4 – HKLM\..\Run: [sysldtray] c:\windows\ld06.exe
O4 – HKLM\..\Run: [sysldtray] c:\windows\ld07.exe
O4 – HKLM\..\Run: [sysldtray] c:\windows\ld08.exe
O4 – HKLM\..\Run: [sysldtray] c:\windows\ld09.exe
O4 – HKLM\..\Run: [pp] c:\windows\pp10.exe

Symptoms in a DDS Log

R1 podmenadrv;podmenadrv;c:\program files\podmena\podmena.sys
R2 podmena;podmena;c:\windows\system32\svchost.exe -k podmena

Use the following instructions to remove koobface and podmena trojans (IX-Find.com malware)

Download MalwareBytes Anti-malware (MBAM). Close all programs and Windows on your computer.

Double Click mbam-setup.exe to install the application. When the installation begins, keep following the prompts in order to continue with the installation process. Do not make any changes to default settings and when the program has finished installing, make sure a checkmark is placed next to Update Malwarebytes’ Anti-Malware and Launch Malwarebytes’ Anti-Malware, then click Finish.

If an update is found, it will download and install the latest version.

Once the program has loaded you will see window similar to the one below.

Malwarebytes Anti-Malware Window

Select “Perform Quick Scan”, then click Scan. The scan may take some time to finish,so please be patient.

When the scan is complete, click OK, then Show Results to view the results. You will see a list of infected items similar.

Make sure that everything is checked, and click Remove Selected. When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.

Note: if you need help with the instructions, then post your questions in our Spyware Removal forum.