Search engine hijack

[(RIP) Proff]

Since D/Ling from a supposed safe site, I have had all my search engines redirected, as soon as I click a google link its redirected to some other search engine usually a pay for or a porn site WTF went Wrong ?????

over to you resident gurus


also it seems to have affected my preferences for writing, no longer recognising my DVD re writers as a option from Nero smart start


Of course as soon as I put "Search engine hijack" in google it came up with lots of answers, but as soon as I click them I'm redirected to some shit site with no info whatsoever

 

[bowser]

first thing, disconnect from the internet, start up whatever browser you use and then clear history, cookies, temp files the lot. Shut down browser and shut down windows and restart.
when starting up again, STILL disconnected from the net, start up browser and set you home page to whatever it normally is.

Next go into the options panel, this option will change depending on which browser you use, but there is options to choose which program is automatically selected for which option.

If your really paranoid then do a system scan with AV software, I would then suggest a shut-down and restart and all should be well, if not let us know what site it is redirecting you to and will do a search and see what we can find out.

 

[DaveGSCymro]

Or throw it away and get a Mac

 

[Dickieboy]

Prof download and install Spybot if you haven't got it already, link here -

http://www.safer-networking.org/en/ownmirrors1/index.html

Do the updates and immunisation then run it and delete anything it finds.

I don't know what AV you're using but try Avast it is pretty good at picking up a lot of dodgy sites and may help to prevent it happening again.

 

[Steve]

Or throw it away and get a Mac

You do realise, that once the Mac customer base becomes large enough to bother with, Macs will be targeted by the same jokers that currently spend their time with Windows.

So the more you suggest people get Macs, the sooner that time will come.

 

[DaveGSCymro]

You do realise, that once the Mac customer base becomes large enough to bother with, Macs will be targeted by the same jokers that currently spend their time with Windows.

So the more you suggest people get Macs, the sooner that time will come.

Was trying to have a bit of a laugh....

 

[(RIP) Proff]

Running full AV check....
Now on wifes laptop while PC is being scanned..
Seems like it stopped my last nights scan by flooding 2gb of ram and stopping all progs
Will not let me do a system restore.will not let me access DVD writers or a programme called "bannerbot" which keeps trying to start up..
Did a upgrade for me anti virus via this lappy onto pendrive, then put it onto pc and uploaded the file,,, seems AVG is having happy time going for spyware 2 hours in and not even 50% of PC scanned yet

 

[Dansin]

I had a similar one a while ago which AVG and an online scan didn't pick up. HijackThis is a useful tool for diagnosing. A combination of Malwarebytes (free) and a bit of registry editing (from the results of the HijackThis log) did the trick. I turned System Restore off before I started and backed the Registry up before tinkering.

Happy hunting. Good luck!

 

[Fanum]

Keith, you also need to look at why you got infected in the first place....it shouldn't have been able to happen

Are you running something like Adaware ?
Are all of your updates, er, up to date?

Just as a matter of interest, what was the site and what were you trying to D/L?

I'll have a peek at it

 

[(RIP) Proff]

Keith, you also need to look at why you got infected in the first place....it shouldn't have been able to happen

Are you running something like Adaware ?
Are all of your updates, er, up to date?

Just as a matter of interest, what was the site and what were you trying to D/L?

I'll have a peek at it

Pirate bay, trying to D/L G-Force

It's this fecking "bannerbot" that seems to be main source of problem
left it running all night, got up and had notice "all virtual memory is used, windows trying to create space [or sum'at loike that] it had also stopped me AV scan at around 2.30 am and wiped the result
rebooted after only thing to come up on screen was "bannerbot trying to reboot IIRC",, so I switched off manually

 

[Steve]

If SpyBot doesn't get it, Malwarebytes Anti-Malware should.

 

[Dickieboy]

Pirate bay, trying to D/L G-Force

It's this fecking "bannerbot" that seems to be main source of problem
left it running all night, got up and had notice "all virtual memory is used, windows trying to create space [or sum'at loike that] it had also stopped me AV scan at around 2.30 am and wiped the result
rebooted after only thing to come up on screen was "bannerbot trying to reboot IIRC",, so I switched off manually

Prof another good reason to switch to Avast, twice it's enabled me to delete infected torrent files which were supposedly genuine.

 

[Fanum]

Read the comments on all PB torrents, and if poss, check the hashsum...they're often in the readme's and you can Google what it should be and compare......If they're different, leave it alone

 

[WiiMW]

I find "autoruns" can be effective in this kind of scenario too ... you can check for programs etc that start when the machine boots ... allowing you to disable sneaky little programs that start up automatically

This is from Microsoft - they bought up Sys Internals who origianlly came up with the prog .. they do other stuff too that might help
Anything SysInternals is good shit

DVD might be a rootkit hijack

http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx

you do kind of need to know what you are looking at tho'



be careful with the pen drive you don't transfer some nasty to your other PC





.... to be sure .... format & Start again ... it might even be quicker

 

[(RIP) Proff]

Well the bastards still there, AVG is updating [seemingly] and running but Hitman pro will not update and Malwarebytes will not open. Tried to visit websites for new versions and d/l'd them to a clean 40 gig H/D then connected it to this PC ...still won't let them operate..I can get any of my bookmarks to open but anything else comes up as blocked plus I'm getting shitload of spam

 

[(RIP) Proff]

I've deleted and reformatted each extra H/D before connecting back to laptop ...
then run all scans on the bastardds No Nasties at all
So lappy is ok