Help - Google Hijacked for IE

Lord knows what my father has done to his computer, but he was having issues with a virus so he asked me to come take a look. His McAfee was disabled when I came over (I'm not sure if he did it or if something else did it). I am unable to update McAfee (I am receiving an error about the login not match the registered email address, so I'm not sure what I am looking at yet there. I did notice that whenever I go to google with internet explorer, my search is redirected. I will type what I want to search into the search field. For a brief second, I will see the actual google search results, then the page will change and I will see different results.

I ran Adaware and Spybot and did not see anything unusual. The only thing that showed up were a few cookies, which have been deleted. I downloaded Hi-Jack This, but McAfee keeps flipping out because it says there is a worm, "W32/Generic.worm!p2p" attached to HiJack this. I've disabled McAfee so I can download and run this, but I don't know enough about what I'm looking at to clean up the problem(s). Do anyone have any suggestions.

 

First, please follow ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal

If you already have any of the programs linked in the tutorial please double check your version to make sure you have the latest one and that you have any/all updates for the programs.

NOTE: In order to resolve the issues you are having it is very important that you at least try to perform all the steps as outlined. If you have any difficulty please post back letting us know what steps you have completed, what you found while doing the scans if anything and details about any problems you have encountered in completing the steps. The more details you can provide the better.


After doing ALL of the above if you still have a problem:

Make sure you have HijackThis 1.99.1 and follow the guidelines on where to install it and how to post a log as an attachment. This is all covered in the sticky thread NO HIJACK THIS LOG FILES BEFORE READING THIS: HJT Tutorial & LOG File Posting

Now post a HijackThis log as an attachment to your message (Do not post the log inline). All running programs should be closed, including your web browser and e-mail. Please close these before running Hijack This!

To repeat: Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file. Place it in its own folder, for example C:\Program Files\HJT


We are very busy here at MajorGeeks.Com PhilliePhan, Chaslang or myself with check back when time permits.!

 

You must get the latest updates from McAfee to prevent this from occurring. There is NO virus in HJT. Update the defs and it should leave it alone.

 

I presumed that there was nothing in HiJack this, which is why I went as far as disabling McAfee, but thanks for clarifying this. I'm working on trying to get this updated before I move on.

 

Sure thing, I have to run out for a bit. If I do not make it back PP or Chaslang will be in when time permits to assit you. Hang in there