How do I remove a browser hijacker/trojan?

Question

Ok, so my computer somehow got a trojan virus and I've been using every program imaginable to get rid of it, but I think it might be changing its name and reinstalling everytime I boot up. I'm pretty sure it has embedded itself into system 32 because every now and then my computer goes the to blue error screen that says "physical memory dump complete" or something like that. The thing that's pissing me off the most is that when I google something and click on the link, it redirects me to some bull**** website that's full of ads and junk. Please help, I have already tried avast, superantispyware, malware bytes, spybot S&D, trendmicro housecall, adaware SE, and one other one I forget.

Answer 1

You need to run these two on-line anti-malware scanners before you go any further.



F-Secure On-line Scanner



http://support.f-secure.com/enu/home/ols...



and Panda Active Scan



http://www.pandasoftware.es/activescan/a...



...in that order. Once you've done this, you'll see why I say to do it "in that order."



Use these because there are some nasties out there that can disable your on-board anti-malware programs (paid or free versions) making those on-board progs oblivious to malware presence on your computer.



After you use the two on-line scanners to clean up what they find then you should be able to do the rest with existing your NEWLY UPDATED aresenal. Leave what they find in System32 alone and allow your on-board arsenal to quarantine them! Deleting items in System32 can render your OS unusable necessitating your NON-Optional re-installation thing.



YES, it is a very good idea to disable System Restore before you start cleaning. If you don't you will re-infest the system if/when you have to do a Restore later on. Then Re-Enable it again AFTER you've cleaned, ScanDisked and Defragged. That way you can set a manual point there with a CLEAN, smoother running computer.



I hope this helps. Good Luck!



BTW: The dude that claims to have worked for the Gov has been reported for SPAMMING the Answers Board with the same exact answer for the past hour.

Answer 2

2

Answer 3

You are infected with spyware if:



* You see too much pop-up advertisements.

* Your browser has toolbars that you haven't installed.

* Your homepage has changed (and you can't change it back).

* Other settings have changed without your permission.

* Your computer is slow.



To get rid of spyware and keep your computer clean you can use an antispyware or even more.

You can download a antispyware software. There are 10 good anti-spywares.

here is the reviews: http://toptenantispyware.com/



You can download one and scan your system.

All are safe and can be trusted.

Answer 4

Have you tried running your anti-malware in Safe Mode or Safe Mode With Networking? They often prevent malware from defending itself.



Also, turn off System Restore to evict any copies of bad stuff that might be lurking there.



To get into Safe Mode or Safe Mode with Networking:



1. Log out and reboot your machine.

2. When the machine starts the reboot sequence, press the F8 key repeatedly.

3. Select Safe Mode or Safe Mode with Networking from the resulting menu.

4. Login. If the malware has changed your password, try logging in as Administrator. By default, Administrator has no password.

5. The machine will continue booting, but the Windows desktop will look different.

6. When you're finished doing what you need to do, log out and reboot back into normal mode.



Note that even if the anti-malware programs get rid of the malware, they may not be able to reverse the effects. Search the Web for possible fixes.



Update and run everything regularly, not just when you think you already have malware.



Good luck.

Answer 5

An affirmation to start: 1) NEVER run an online scan when you are already infested - It's like poking a hole in your already weakened protection to let in more Malware, do NOT copy your documents elsewhere as this will only spread the Malware, do NOT use your Email until this is cleaned and DO NOT REFORMAT unless it is your last resort.



Now for the main part: Malware is one of the worst kind of viral infection, deeply rooting itself in your system (some even hide in your router's firmware). Virus scanners (which are mostly blind to it) and the Restore Point Utility are not good things to use against such invasion for this reason alone.



So DON'T take chances with it !!!



Get the programs I listed from another computer (Internet Café, Public Library or friend's computer) onto a USB stick as Malware blocks you from downloading protection. A word of caution, be sure to read all programs help files completely before using them. If you still cannot use MBAM, rename it Alteregobytes to confuse the Malware (but be sure to keep the .exe extension on it) and use it as alternative for part A of the following solution.



TRYING MBAM ALONE IS NOT ENOUGH AS YOU NEED A COMPLETE SOLUTION, here is one (use programs in the order stated):



A) Download MBAM (MalwareBytes' Anti-Malware): http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html?part=dl-10804572&subj=dl&tag=button - Install the application and make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish ( If an update is found, it will download and install the latest version ).



Once the program has loaded, select "Perform Quick Scan", then click Scan ( The scan may take some time,so please be patient ). When the scan is complete, click OK, then Show Results to view the results. Make sure that everything is checked, and click Remove Selected ( When disinfection is completed, a log will open in Notepad and you may be prompted to Restart ).





B) Try the tricks and free programs I use: 1) Clean browsers junk.



Method One (now): In Internet Explorer (IE), click the Tools menu, then Delete Browsing History and in the box, click the Delete all button (bottom left) and Yes.

In Firefox (FF), go to tools, clear private data, make sure all boxes are checked and then click on the clear private data now button.



Method Two (Normal use: Every 14 days - Heavy use: Every 7 days): In IE, click the Tools menu, Delete Browsing History and in the box that opens, do these: a) click the button near Temporary Internet Files, click Yes and wait for the box that opens to close.

b) click the button near History, click Yes and wait for the box that opens to close and finally, click the close button (bottom right) to finish.



In FF, Go to tools, clear private data and uncheck all except Browsing History, Cache and Authenticated Sessions boxes then click on the clear private data now button.



Note: Close browser when done to clear cookies still in memory. For other browsers or versions of the programs, check help files for guidance on doing cleanup.



2) Turn off the restore point utility ( Guide for XP: http://support.microsoft.com/kb/310405 and Vista: http://windowshelp.microsoft.com/Windows/en-US/Help/9f6d755a-74bb-4a7d-a625-d762dd8e79e51033.mspx )



3) Use this free cleaner: http://www.glaryutilities.com/gu.html to remove junk and remnants files.



4) Use a "Disk defragmenter".



5) Turn restore point utility back on. (see part 2)



6) Do not use toolbars (spyware).



7) Persisting problem after this, make sure your virus scanner database is updated.



8) If the problem is very stubborn and you have a router, visit its web site and check for firmware that is more recent than your version. If FOUND, download and install, if NOT, use the router's reset switch, both methods return it to factory settings. "WARNING": Gather router install CDs, guides, passwords before doing this as you will need to do all connections again.





By doing so, you are on your way to being well protected BUT never relax your guard !



And as a bonus, your computer will be cleaner and probably a bit zippier ( all that for free ! )

Answer 6

I always reinstall windows when something like that happens to me but first you have to put a network key to go in your internet so don't happens again

Answer 7

the best free virus protection is like what IMRAM said AVG free. if your looking to buy one i recommend ESET Nod 32

Answer 8

i dont specificlly myself but try making an account on spybot.com and go to the forums and tell them your problem. theyll tell you step by step what to do. itll take a long time but theyll get the job done