I have a friend that wants me to clean up her PC. Among the usual Trojans and misc. craziness, her IE browser is hijacked to safesear.ch. home page. Revo doesn't see it as don't the other uninstall programs. (Windows, CCleaner). Reset homepage in Internet options, disabled proxy server, disabled third party browser extensions. Booted to Safe mode, Ran Malware bytes and Super anti spyware. Found a slew of malware. Still opening up in searchsafe (or safesearch). Downloaded Avast and am now running a boot scan. I hope that works, but if it doesn't, does anybody have experience with browser hijackers?
This conversation is currently closed to new comments.
Hello. The tools you are using are very good but not quite good enough for this type of problem. There are two things you can try. Open Internet Explorer and go to INTERNET OPTIONS from your Tools pull-down menu. Once there, go to the ADVANCED tab. Click on RESET INTERNET EXPLORER SETTINGS. This may take care of the home page issue but there is still the underlying issue of the hijacker in the system. For that, you should run two programs to start with. The first one is called TDSS KILLER. You can download it for free at http://www.bleepingcomputer.com/download/tdsskiller/ and download the EXE version. Once installed, it will only take about 30 to 60 seconds to run. If that program doesn't find anything, you'll want to try a program called Combofix. Combofix is a very powerful program and is wonderful at identifying and removing these types of issues. You can find that program at http://www.bleepingcomputer.com/download/combofix/ To run this program, disable ALL antivirus, antispyware, antimalware programs. If you have to, boot into SAFE MODE and run it from there but be sure to disable those programs. It will run with them enabled but not quite as effectively.
My name is Mike. I own Byte Size Computer Repair and I do have a website at www.bscr.biz. I just wanted to let you know that so you don't think I'm some fly-by-night hacker trying to get you to run things that will compromise your system. 90% of my business is virus and malware removal. If these programs don't solve your problem, then you have some deeper issues that will require some further attention. Good luck and happy new year!
Thanks Mike, I reset IE yesterday and when I clicked the IE quick launch afterwards, it still took me to safesear.ch. I noticed the IE icon had a lock on it and that tipped me off that it was still being controlled. So I decided to unpin IE from quick launch and then brought IE up in programs (Start Menu). Clicked on that icon and it took me to my set home page. I then pinned that icon to the taskbar. I do PC repair as a sideline and I'd say the bulk of my business is malware removal. Thank you once again, Mark
If you're asking for technical help, please be sure to include all your system info, including operating system, model number, and any other specifics related to the problem. Also please exercise your best judgment when posting in the forums--revealing personal information such as your e-mail address, telephone number, and address is not recommended.
Browser hijacked
I hope that works, but if it doesn't, does anybody have experience with browser hijackers?