Google Hijack issue

Discussion in 'Malware Help (A Specialist Will Reply)' started by mamamamarino, Apr 6, 2009.

  1. mamamamarino

    mamamamarino Private E-2

    Hi there,

    I'm having the google result hijack problem reported in other threads here. Basically, the google results are legitimate, but as I click on each result I am re-routed to an array of other websites, often with my search string entered into the unwanted website. Maybe 10-20% of the time, i am taken to the correct site. The problem has been ongoing for a week or so.

    I have read and performed the 'Read & Run me first' as well as the 'WinXP cleaning procedures' to the best of my abilities, and still the problem persists.

    I am attaching my various logs here and am at your mercy, good people.

    thanks in advance,
    matt.
     

    Attached Files:

    mamamamarino, Apr 6, 2009
    #1
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Welcome to Major Geeks!

    Shutdown your browsers and then delete the below file.

    C:\Program Files\Mozilla Firefox\extensions\{71BB5F0B-6E3A-40AB-A643-D95001E7320B}\chrome\content\overlay.xul

    How are things working now?

    Are the items SUPERAntiSpyware deleted from Schlumberger valid items? If so, you will need to restore them by running SUPSERAntiSpyware and selecting the Manage Quarantine button. The select the items you need to restore and click Restore.
     
    chaslang, Apr 10, 2009
    #2
  3. mamamamarino

    mamamamarino Private E-2

    Thanks so much, that seems to have cleared up the problem. I'm surprised however, because I saw a post somewhere which indicated this file could be the culprit; unfortunately a search for files of that name did not find the file that was the problem.

    Anyway, everything seems to be working now.

    thanks again!
    matt.
     
    mamamamarino, Apr 13, 2009
    #3
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You're welcome.

    If you are not having any other malware problems, it is time to do our final steps:
    1. We recommend you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no protection. They do not use any significant amount of resources ( except a little disk space ) until you run a scan.
    3. If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)
      • Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required
      • "%userprofile%\Desktop\combofix" /u
        • Notes: The space between the combofix" and the /u, it must be there.
        • This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.
      • Delete the C:\combofix folder from combofix (if it exists)
    4. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
    5. If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
    6. Go to add/remove programs and uninstall HijackThis.
    7. You can delete the C:\MGtools folder and the C:\MGtools.exe file. You can also delete the C:\MGlogs.zip
    9. After doing the above, you should work thru the below link:
     
    chaslang, Apr 16, 2009
    #4

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds