Security

Question

Gravatar
0 Votes
Locked

Browser hijacked

By mg23gerard1 ·
Tags: Security, Malware, Browser
I have a friend that wants me to clean up her PC. Among the usual Trojans and misc. craziness, her IE browser is hijacked to safesear.ch. home page. Revo doesn't see it as don't the other uninstall programs. (Windows, CCleaner). Reset homepage in Internet options, disabled proxy server, disabled third party browser extensions. Booted to Safe mode, Ran Malware bytes and Super anti spyware. Found a slew of malware. Still opening up in searchsafe (or safesearch). Downloaded Avast and am now running a boot scan.
I hope that works, but if it doesn't, does anybody have experience with browser hijackers?

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Answers

gravatar
Collapse -

Hijackers

by harpazo In reply to Browser hijacked

Hello. The tools you are using are very good but not quite good enough for this type of problem. There are two things you can try. Open Internet Explorer and go to INTERNET OPTIONS from your Tools pull-down menu. Once there, go to the ADVANCED tab. Click on RESET INTERNET EXPLORER SETTINGS. This may take care of the home page issue but there is still the underlying issue of the hijacker in the system. For that, you should run two programs to start with. The first one is called TDSS KILLER. You can download it for free at http://www.bleepingcomputer.com/download/tdsskiller/ and download the EXE version. Once installed, it will only take about 30 to 60 seconds to run. If that program doesn't find anything, you'll want to try a program called Combofix. Combofix is a very powerful program and is wonderful at identifying and removing these types of issues. You can find that program at http://www.bleepingcomputer.com/download/combofix/ To run this program, disable ALL antivirus, antispyware, antimalware programs. If you have to, boot into SAFE MODE and run it from there but be sure to disable those programs. It will run with them enabled but not quite as effectively.

My name is Mike. I own Byte Size Computer Repair and I do have a website at www.bscr.biz. I just wanted to let you know that so you don't think I'm some fly-by-night hacker trying to get you to run things that will compromise your system. 90% of my business is virus and malware removal. If these programs don't solve your problem, then you have some deeper issues that will require some further attention. Good luck and happy new year!

Mike
Byte Size Computer Repair

gravatar
Collapse -

Browser Hijacked

by mg23gerard1 In reply to Hijackers

Thanks Mike,
I reset IE yesterday and when I clicked the IE quick launch afterwards, it still took me to safesear.ch.
I noticed the IE icon had a lock on it and that tipped me off that it was still being controlled.
So I decided to unpin IE from quick launch and then brought IE up in programs (Start Menu).
Clicked on that icon and it took me to my set home page. I then pinned that icon to the taskbar.
I do PC repair as a sideline and I'd say the bulk of my business is malware removal.
Thank you once again,
Mark

gravatar
Collapse -

!!!

by harpazo In reply to Browser Hijacked

Hi Mark. I hope you got all of the issues worked out on that computer!

Best wishes for 2015! Have a great year! :-)

Mike

Back to Security Forum

Start or search

Related Discussions

Related Forums