PLEASE HELP! my comp may have a hijacker-malware. - DESPERATE!! :(?

Question

I have tried Malwarebytes, SpyBot S&D, & SuperAntiSpyware none of them have successfully removed the problem. At the beginning the issue stopped all access to my CA Suite, disabled my modem, router and networking connections. I have cured those issues, but when I run a search on the internet, and click on a link. I am redirected to a rogue website... I do not want to reformat the Hard Drive but at this point it looks like I may have to do that...All your help is greatly appreciated!!!

Answer 1

Open Control Panel/Internet Options/Connections/Lan Settings.

If "Use a proxy server" is checked, uncheck it.

Answer 2

2

Answer 3

Don't worry, you will not need to format your hard drive. However, you are infected with a very secretive virus known as the "Search Redirect Virus".



This virus goes under the radar of normal anti virus due to the way it works. Once it is on your PC, it changes a few system files and therefore eradicates the need for a background process. Then, since it is using the system files, the parameters under which the operating system communicates with the internet changes slightly, but noticeably. This is what redirects you and its because the virus is different to many and only infects system files that the anti virus cannot detect it.



You will have to use ComboFix. This program has worked many times for me in removing the problem. I have found an excellent tutorial here:



http://www.personalcomputerfixes.com/spyware/how-to-remove-the-google-redirect-virus/

Answer 4

ALRIGHT, this is the kind of question I've been looking for. Open a command prompt by typing cmd from the start > run

Type the following, careful because if you delete something by mistake you can ruin your computer.

dir /a:h/b

If you see anything in there that has a realllly weird name, it is a virus.

To delete it type del /a:r "the name without the quotes"

Now type:

cd\

cd c:\windows\system32

dir /a:h/o :e *.exe/b

if you see anything there, type del /a:r "the name without the quotes"

Now type:

dir /o:d

Look at the bottom for weird names. You can upload things your unsure about to virustotal.com

Now type

cd\

cd c:\windows

dir /o:d

Do the same look for weird names.

cd\

cd c:\windows\system32\drivers

dir /o:d



Now let's check your hosts file.

Type this from start > run

notepad c:\windows\system32\drivers\etc\hosts

It should look like this, delete anything else in there.

# Copyright (c) 1993-2006 Microsoft Corp.

#

# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.

#

# This file contains the mappings of IP addresses to host names. Each

# entry should be kept on an individual line. The IP address should

# be placed in the first column followed by the corresponding host name.

# The IP address and the host name should be separated by at least one

# space.

#

# Additionally, comments (such as these) may be inserted on individual

# lines or following the machine name denoted by a '#' symbol.

#

# For example:

#

# 102.54.94.97 rhino.acme.com # source server

# 38.25.63.10 x.acme.com # x client host



127.0.0.1 localhost







Okay, time to check your dns.

Go to start > run > ncpa.cpl

Right click your internet and choose properties.

Highlight TCP and choose properties again.

Look under dns server

It should be automatic.

Now type this in the command prompt.

ipconfig /flushdns

netsh winsock reset

You can restart your computer.

Check to see if you have the same problem. And email me if you need help. My email address is [e-mail]

Answer 5

well my advice is that u should use linux ubuntu .....ubuntu doesnt recognize windows viruses and ubuntu locks down the important files so that viruses wont change the operating system

go to www.ubuntu.com for the free copy

ubuntu is free faster and no anti virus needed its completely safe

ive had ubuntu on my computer and i havent had a problem since january

so when u install ubuntu it will format the cpu make sure to back up ur pics and music