Both Intenet Explorer and Firefox hijacked

edd9139 · Nov 29, 2006

It seems IE7 and Firefox 2 have both just been hijacked on my computer. Whenever I open them up, or load a new tab (which is google), it redirects to dodgy pharmaceuticals, domain for sale sites every time, etc. Different one though.

I've run spybot, etc, although it didn't fix it.

Edit removed inline Hjiackthis log

My host file:
# Copyright (c) 1993-1999 Microsoft Corp.
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
# For example:
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host
127.0.0.1 localhost

Is the above correct, or the problem. If so, what should I set it to?

I can ping Google fine. It is only google that this is occuring. Home pages are set to google. If I type www.google.com (or .com.au) into addres bar, it will redirect to hte dodgy sites. If i type www.yahoo.com into the address bar, it will be fine and go to Yahoo.

If I open a new tab in Firefox, (which is set to load google) it will go to the dodgy site. If I click a bookmark in firefox (which automatically opens in its own tab), the site will load fine.

Urgently need to fix this.

edd9139 · Nov 28, 2006

please

DavidGP · Nov 29, 2006

Hi

Your HOSTS file is fine and normal.

But to fully assist you in removing any malware please follow the below guide and steps, then attach the requested logs.

Our standard cleaning procedures which are necessary for us to provide you support. Also there are steps included for installing, running, and posting HijackThis logs as attachments.

Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support

Make sure you check version numbers and get all updates.

Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:

Downloading, Installing, and Running HijackThis

Make sure you also rename HijackThis.exe as suggested in the procedures. Use analyse.exe for the new name. This is very important due to some new infections going around.

When you return to make your next post, make sure you attach the following logs and that you have run these scans in the following order too:

CounterSpy

AVG Antispyware log - ONLY IF NEEDED you were not able to run CounterSpy

Bitdefender - from step 6

Panda Scan - from step 6

runkeys.txt - the log from GetRunKey.bat

newfiles.txt - the log from ShowNew.bat

HijackThis

NOTE: You can only attach 3 files in a single message so it will require that you use two messages to attach all of these logs!

also note: Don't Bump! It Only Hurts You!!!

Log in or Sign up

Both Intenet Explorer and Firefox hijacked

edd9139 Private E-2

edd9139 Private E-2

DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member