Help with mystartsearch

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by dcmt, Jul 29, 2015.

  1. dcmt

    dcmt Private E-2

    Hi all,
    I've been helping my brother with a computer that was given to him its a Toshiba Satellite E45T. He has both internet explorer and chrome installed. I had originally run a scan through malwarebytes yet both browsers show mystartsearch as the first page, i can click on the home button and i get sent to google.com which is the home page that was set for both. I used the tutorial on browser hijacking and was continuing to have problems so I used the read and run me first thread. I am only attaching three logs as im having some trouble locating the other 2, i will update this thread when im able to locate the other logs. Thanks for all the help!
    Found the other two logs, thanks again.
     

    Attached Files:

    Last edited: Jul 29, 2015
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Welcome to Major Geeks!

    Run Hitman Pro again and activate the 30 day trial license and use it to cleanup all the Malware remnants and Potential Unwanted Programs that it reports.

    I suggest not touching the items shown in the C:\ProgramData\agi unless you know for sure that they are malware. They seem suspicious but I have no info on what these are.

    After running Hitman Pro, reboot the PC and then run a new scan with Hitman Pro and attach a new log.


    Are you still having problems?
     
  3. dcmt

    dcmt Private E-2

    Thanks for the response! It worked, in both internet explorer and chrome, im back to the correct home page. I did attach the last hitman log, i left the things pulled up from the agi folder.
    Thanks again.
     

    Attached Files:

  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You're welcome.


    If you are not having any other malware problems, it is time to do our final steps:
    1. We recommend you keep Malwarebytes Anti-Malware for scanning/removal of malware.
    2. Renable your Disk Emulation software with Defogger if you had disabled it in step 4 of the READ & RUN ME.
    3. Go to add/remove programs and uninstall HijackThis. If you don't see it or it will not uninstall, don't worry about it. Just move on to the next step.
    4. If running Vista, Win 7 or Win 8, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
    5. Now goto the C:\MGtools folder and find the MGclean.bat file. Double click ( if running Vista, Win7, or Win 8 Right Click and Run As Administrator ) on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.
    6. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
    7. If you are running Win 8, Win 7, Vista, Windows XP or Windows ME, do the below to flush restore points:
      • Refer to the instructions for your WIndows version in this link: Disable And Enable System Restore
      • For Windows 8 and 8.1 system restore see this link: Win 8 System Restore - How to enable/disable
      • What we want you to do is to first disable System Restore to flush restore points some of which could be infected.
      • Then we want you to Enable System Restore to create a new clean Restore Point.
    8. After doing the above, you should work thru the below link:
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds