SysChat is a free online computer support community. Ask questions, share resources, contribute knowledge and discuss technology. Join our growing community to access all features. Register Now!

SysChat » Software Support » Computer Security » Question Browser Hijack removal desperately needed.

Computer Security

Discuss Computer Security- Viruses, Adware, Spyware, etc...

Reply
 
LinkBack Thread Tools
  #1 (permalink)  
Old 12-01-2010, 12:27 PM
andybambi andybambi is offline
Junior Member
 
About:
Join Date: Dec 2010
Posts: 3
andybambi is on a distinguished road

Default Browser Hijack removal desperately needed.


My girlfriend’s notebook has become infected with a browser hijacker. I’ve tried running antivirus programmes (Avira, Advanced System Care, Malwarebytes' Anti-Malware, Super Spyware Remover) but nothing seems to touch it. I even tried using a different browser but the problem remains. Normally I would just restore the notebook back to factory settings but it was a free gift she received when taking out a new phone contract and didn’t come with a restore disk. I really am at my wits end. Can anybody please help me? I've installed Hijackthis and can proivide a log if required.

Thank you.



Reply With Quote
  #2 (permalink)  
Old 12-01-2010, 02:41 PM
Sami's Avatar
Sami Sami is offline
Administrator
 
About:
Join Date: Jan 2006
Location: New Jersey
Posts: 804
Sami has a spectacular aura aboutSami has a spectacular aura aboutSami has a spectacular aura about

Default


Can you attach the hijackthis log file.



Reply With Quote
  #3 (permalink)  
Old 12-01-2010, 03:00 PM
andybambi andybambi is offline
Junior Member
 
About:
Join Date: Dec 2010
Posts: 3
andybambi is on a distinguished road

Default


Hi Sami,

Thanks for replying to my question.

I've attached the file.

Thanks again.



Attached Files
File Type: txt hijackthis log.txt (8.3 KB, 894 views)
Reply With Quote
  #4 (permalink)  
Old 12-01-2010, 09:49 PM
Sami's Avatar
Sami Sami is offline
Administrator
 
About:
Join Date: Jan 2006
Location: New Jersey
Posts: 804
Sami has a spectacular aura aboutSami has a spectacular aura aboutSami has a spectacular aura about

Default


Hi Andy,

Please run the Hijackthis again

and remove these items and restart your computer

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.condui...........

R3 - URLSearchHook: Shareware.Pro-EN Toolbar - {da21bd13-ca22-42e3-a071-98f08f1ca1e7} - C:\Program Files\Peer2Peer-EN\tbPee2.dll

R3 - URLSearchHook: (no name) - {7b13ec3e-999a-4b70-b9cb-2617b8323822} - (no file)

O2 - BHO: (no name) - {003FA5B5-2389-45C7-8705-624EB6865785} - C:\WINDOWS\system32\azroles32.dll

O2 - BHO: (no name) - {00716B20-5BBC-46DF-9192-06C942C4AE20} - C:\WINDOWS\system32\azroles32.dll

O2 - BHO: (no name) - {00A87B2F-9C13-4730-A806-9086962A92D6} - C:\WINDOWS\system32\azroles32.dll

O2 - BHO: (no name) - {00E2D641-5BBC-46DF-9192-06C942C4AE20} - C:\WINDOWS\system32\azroles32.dll

O2 - BHO: (no name) - {00E9D207-083F-42C4-BC83-634BF0A1ACDe} - C:\WINDOWS\system32\azroles32.dll

O2 - BHO: (no name) - {01C5AC82-5BBC-46DF-9192-06C942C4AE20} - C:\WINDOWS\system32\azroles32.dll

O2 - BHO: (no name) - {01D3A40E-083F-42C4-BC83-634BF0A1ACDe} - C:\WINDOWS\system32\azroles32.dll

O2 - BHO: (no name) - {038B5904-5BBC-46DF-9192-06C942C4AE20} - C:\WINDOWS\system32\hid32.dll (file missing)

O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll

O2 - BHO: Shareware.Pro-EN Toolbar - {da21bd13-ca22-42e3-a071-98f08f1ca1e7} - C:\Program Files\Peer2Peer-EN\tbPee2.dll

O3 - Toolbar: Shareware.Pro-EN Toolbar - {da21bd13-ca22-42e3-a071-98f08f1ca1e7} - C:\Program Files\Peer2Peer-EN\tbPee2.dll



Reply With Quote
  #5 (permalink)  
Old 12-02-2010, 04:15 AM
andybambi andybambi is offline
Junior Member
 
About:
Join Date: Dec 2010
Posts: 3
andybambi is on a distinguished road

Default


Hi Sami,

I've tried what you have said but my browser still redirects me. Is there anything else I can try?

Kind regards



Reply With Quote
  #6 (permalink)  
Old 12-02-2010, 08:44 PM
Sami's Avatar
Sami Sami is offline
Administrator
 
About:
Join Date: Jan 2006
Location: New Jersey
Posts: 804
Sami has a spectacular aura aboutSami has a spectacular aura aboutSami has a spectacular aura about

Default


Try to run Malwarebytes' Anti-Malware in safemode.



Reply With Quote
Reply




Thread Tools

Similar Threads
Thread Thread Starter Forum Replies Last Post
How To Hide Images In Google Chrome Browser Without Any Addon? dwarkarao Internet 0 01-20-2010 05:52 AM
Remove the Google Hijack Virus! KarlM Security 0 06-17-2009 07:06 AM
Microsoft Windows Malicious Software Removal Tool Sami News 1 04-12-2006 02:08 AM

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is on
Smilies are on
[IMG] code is on
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are on



» Ads



1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54