try malwarebytes
Download a Malware program from Malwarebytes.com. My computer tech told me about this site. There is a free version and it works great!
http://download.cnet.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html?tag=mncol;1
I had great success with Malwarebytes when I had a similar issue.
I’ve already said it on another thread:
99% of the time, people get viruses, trojans and malware because they were viewing porno online, or trying to get something free (software, music, video) that they would otherwise normally pay for, or open up attachments and links in an email without examining the headers.
Trying to clean up your system is pointless if you don’t fix some habits to begin with.
=8-)
Extremely hard to get rid of once that happens. I scoured the web for any possible remedy for the Google hijack virus but usually ended up reinstalling Windows. When it started happening too frequently I gave up windows altogether and moved to Ubuntu-Linux(free).. and have never looked back since. Linux (and Mac) are rock solid and virus proof.
A workaround is to disable javascript in your browser. (Edit—>preferences->.... )
Uninstall everything but the operating system and a few trusted programs. Back it up - create a restore point.
Use the registry editor (regedit.exe). Look in HKEY_LOCAL_MACHINE in the SOFTWARE folder and in the HKEY_CURRENT_USER SOFTWARE folder. Delete any subfolder that is for software you uninstalled.
Look in the remaining subfolders and use Google to identify the entries. Keep it if it is for software you trust. Otherwise, delete it. You will eventually find a search engine hidden in the registry. Delete it. Create a restore point. Reboot.
If successful, test for the hijacker. If it is gone, reinstall all of the software you want.
It took me a weekend, but it saved me $100 Norton wanted to charge me for them to do it. I made alot of mistakes, including deleting a bunch of drivers. That’s OK because I found an installed updated drivers and my machine works much better.
I advise you to proceed slowly and with caution.
I have had that same problem twice and have no idea where or how I picked up the virus.
I have never visited a porno site but have had innocent sounding sites redirect me to questionable sites a few times.
In efforts to eliminate the virus I followed much of the advice I could find on Google searches, Free Republic threads, etc. None of the recommended actions worked and some made the problem worse or introduced other problems.
This includes Malwarebytes, AVG and other popular recommendations. They often remove or recommend removal of certain files but the action did not kill the virus and often affected other features that worked fine before.
Both times I ended up having to completely reload the operating system from the factory disk that came with my PC.
An acquaintance had the same problem and took it to a computer shop where they cured the problem for $75 without having to reload the OS.
I now use the latest version of Microsoft Essentials and Zone Alarm and I do not leave the PC on line when I am not actively using it.
Good Luck!
Here ya go:
(1) On a NON-INFECTED PC, download Malwarebytes AND Hitman Pro 3.5 (both free) and put them on a CD/DVD.
(1.1) ESSENTIAL SUB-STEP — recent malware BLOCKS the installation of anti-malware programs, so you must rename the executables for the install to some other name. IOW, if you download “Malwarebytesinstall.exe” YOU MUST rename it to “Somethinselse.exe” for both Malwarebytes AND hitmanpro. IFNOT, the malware will likley BLOCK your attempt.
(2) Boot your INFECTED PC in safe mode with network access
(3) install both Malwarebytes and Hitman Pro on the infected PC from the CD you just made. LET THEM UPDATE their databases.
(4) reboot your INFECTED PC in safe mode, *no network*
(5) run deep scans with both, at least twice, especially until it/they detects no more proxy servers.
(6) reboot your INFECTED PC (now cleanER) in safe mode with network and run scans again with both.
(7) reboot your PC in NORMAL mode.
(8) Launch MS Internet Explorer and google “download security essentials” and download, install, update it. MS actually put out a good piece of code here. The is a FREE AV and malware offering from MS that’ll find java explouts that Avast, Malware etc miss.
(9) do a DEEP scan with MS Security Essentials.
(10) reboot your PC in NORMAL mode
(11) rescan with all three.
(12) suggestion — set up Malwarebytes and Hitman to run on startup for a week or so.
(13) suggestion — download Registry Mechanic and use it to CLEAN your registry and also temp files etc etc.
Expect the above process to take several hours, and frequent attention. Have beer and chips (or your choice) available.
Just do a system restore to a date prior to when the infection happened. Don’t install any new anti-malware programs or uninstall programs, etc. The system restore will get you back to where you were - good as new.
Try this Microsoft program...
http://www.microsoft.com/downloads/en/details.aspx?FamilyID=AD724AE0-E72D-4F54-9AB3-75B8EB148356&displaylang=en
....Worked for me.
I tried Malwarebytes,Spy-Bot. And I use AVG. And they did not find it.
You may have a version of what is called “SmitFraud”. There are many variant of this and it can be removed by following these steps:
1. Download smitfraudfix here: http://siri.geekstogo.com/SmitfraudFix.php use one of the mirrors. Download it on your computer or a friends.
2. Turn off your system restore. Many times, system restoration files will hide other installations of the malicious software.
3. Boot into safe mode WITHOUT NETWORKING and install the smitfraudfix.
4. Run smitfraudfix. When it completes, it will perform a disk clean up.
5. When it is done, restart the computer in normal mode. You may notice that your desktop background is gone, that is normal. Check and see if you are able to browse the web without problem. If so, then turn your system restoration back on.
Once you get cleaned up a FReeper made a good recommendation IMHO. Use a tool like Clonezilla to create an image of your system drive and save it on an external partition that stores images only. If you make sure you save your docs, favorites, etc. somewhere other than your system drive and run into trouble..pop in your Clonezilla CD and your good as new in a half hour or less.
Also, make sure you have the latest version of Java installed and the old versions are removed.
Use JavaRa for that. Excellent program.