Browser Hijack

  nenetwork 19:35 21 Jun 2009
Locked

Hi,

I am stuck with trying to remove a problem that I have on my computer.

My browser is hijacked and I cannot install any program that will remove it, as soon as its finished creating the folder it will just disappear.

I have tried online scans and they dont work, they dont find a thing.

I have tried Trend, CWShredder, Norton, and they dont find anything. Norton checks just over 5,000 files but I have over 200,000 files on my computer.

Is there anything else I could try?

Thanks.

  nenetwork 19:36 21 Jun 2009

PS I have tried doing it in Safe mode but it still has the same problems.

  Sea Urchin 19:39 21 Jun 2009

I would suggest trying to download and run a hijack this program - and then post your log onto that forum

click here

  nenetwork 19:43 21 Jun 2009

Thanks for your reply

It won't let me run HijackThis, not even in Safe mode

  mfletch 19:51 21 Jun 2009

Download the free version of this.

MBAM/ Malwarebytes/ Antimalware click here

But before you download it rename the download to rabbits foot.exe

Then

Go to the MBAM program folder here
C:\Program Files\Malwarebytes' Anti-Malware
rename mbam.exe to rabbits foot.exe
double click on rabbits foot.exe to start MBAM.
scan.. remove detected items...once clear you can rename the executable file back to mbam.exe

  Sea Urchin 19:54 21 Jun 2009

Was just about to post the same idea - but beaten to it.

  nenetwork 14:07 22 Jun 2009

Thanks.

I did that, took a few times to get there quick enough to rename the file before it was deleted.

It found some trojans etc, but the problems with the browser still remain.

I finally got HijackThis to run by renaming the files, but cannot see anything suspicious on the log.

I have Norton installed and when I get it to search the system32 folder, it will only search the files and not the subfolder.

Got to say, I've tried all the software and nothing is shifting this virus.

  Fruit Bat /\0/\ 16:44 22 Jun 2009

what's it called and where is it directing you to?

  nenetwork 17:21 22 Jun 2009

I don't know the name of the virus, its redirecting me to 3 pages, a MySpace page, StopZilla and a search engine that I can't remember (currently on friends computer).

Think it may be best if I just reinstall Windows, but my problem there is that it came preloaded, I have the COA and number but no disc, is there a way I can get around that?

  Sea Urchin 20:48 22 Jun 2009

*
"I finally got HijackThis to run by renaming the files, but cannot see anything suspicious on the log"

I'm not questioning your expertise - but I would recommend you post the log on to the Hijack This forum for some expert opinion and direction.

  mfletch 20:56 22 Jun 2009

Goto IE Tools>manage add-ons

Turn off all add-ons

Download this ATF Cleaner click here

Run ATF Cleaner it will remove all temp files and cookies

Now run MBAM again,

This thread is now locked and can not be replied to.

Elsewhere on IDG sites

Best phone camera 2017

Stunning new film posters by Hattie Stewart, Joe Cruz & more

iPad Pro 10.5in (2017) review

28 astuces pour profiter au mieux de votre iPhone