Unwanted Web Browser redirect

Give Adaware a try -

http://filehippo.com/download_ad-aware/

It can reach the parts SpyBot cannot, including the registry.

Certainly sounds like a spyware thing... make sure you update the definitions file before scanning.

EW

Thanks Earwicker,

I've done a quick and full scan with adaware, which removed a fair few cookie type things, but alas the problem appears to be persisting. It looks like one of those re-directors that earns the infector money by going through their site i.e a hit based thing.

Any other ideas gratefully received.

Ian

Do you have a System Restore point that you can go back to? Obviously, one before the problem started.

You have a browser hijacker. You will need to turn off System Restore before you start doing anything. It is a common mistake that people forget to turn system restore off before doing anything re viruses, worms or trojans.

Adaware and Spybot are ok for the basic stuff but do a trial run of Counterspy (wonderful and thorough little programme). It should find the hijacker and delete it. If you have to buy the programme it is only £10 and well worth it.

Shut down your computer and restart.

After the restart you will also have to open up your Internet browser poss IE7 - Tools- Options and see what it mentions for your homepage you may need to change it back to whatever you had before.

If your computer is fine turn your System Restore back on at this point BUT don't do it until your computer is clear of the BHO.


If you want to have an extra check for malware etc download the free A2 squared programme by GFI. It will also pick up anything that shouldn't be there.

The best programe out there I know of is Hijackthis but you need to have an understanding of your computers running programmes to use it.

Hope this helps but please post with how you are getting on.

Adam,

Alas I've not been maintaining my computer very well and have not backed-up for some time (I know, very negligent of me). Unless there is an automatic restore that I can return to, I think I'm out of luck on that point.

Ewemon,

Thanks for the extra info, I'll give your advice a go and report back my findings. Where do I switch off system restore, is it a setting f my virus software or a Windows thing?

Thanks once again...
Ian

Follow this easy way.

Start
Right click the My Computer icon
Click Properties- up comes System Properties- System Restore will be one of the sub headings.
Put a tick in the box where it says turn off system restore and click apply. Just say yes to anything that comes up.

Remember if you manage to sort everything you must follow the same route and take the tick out of the box to reset system restore.

Ewemon,

I have downloaded and run Counterspy with my system restore off and it picked up one DP Trojan, which I have now removed. I restarted my computer and did a little search engine test, but the problem still persists.... Seems a tough little critter whatever it is.

Any further hints?

Thanks Ian

Ian

These browser hijackers are the biggest pain in the backside to get rid off so I'm not surprised it is still there.

I have had to format and reinstall windows before to get rid of them....a bit brutal but if all else fails you may have no choice....(probably not a good time to tell you that my home network is all Mac apart from my work laptop so no more hijacking problems! )

But before going to that extreme try this. It's a bit complex and you have to follow the directions exactly for it to work. You do need a good degree of computer literacy to do this since it involces changing the registry (where these hijackers reside).

Directions here.....

Download HijackThis here.

Good luck.

Regards

Jim

Thanks for the advice Jim,

A couple of my posts were removed(?), but ewemon came to my help and I can now report the problem has been erradicated after about 6 hours of head scratching. It was residing in my system registry and a natty little program called Smitfraudfix managed to get rid of the problem.

A huge thankyou to ewemon for his help and patience.

Regards,

Ian

Ian

quote:

but ewemon came to my help

Clever buggers these highlanders!

Cheers

Jim

quote:

Originally posted by Jagster:
Thanks for the advice Jim,

A couple of my posts were removed(?), but ewemon came to my help and I can now report the problem has been erradicated after about 6 hours of head scratching. It was residing in my system registry and a natty little program called Smitfraudfix managed to get rid of the problem.

A huge thankyou to ewemon for his help and patience.

Regards,

Ian

My pleasure Ian and enjoy the beer.