Help with w32.desktophijack...

Chaps,

Getting browser hijacked and norton is picking up w32.desktophijack and trojan.desktophijack.b but it's unable to delete or quarantine (access denied, unable to repair etc). It's turning off autoprotect in norton antivirus on startup so I have to keep turning it on.

It's directing my homepage to www.updatecentre.com and adding desktop shortcuts (secuity centre etc).

Tried the symantic method of removal to no avail.

Have followed all the steps as per your "read this first" page. Was unable to update definitions to Spybot as it says "bad sumcheck" on attempt. Also got a runtime error when attempting to update Aboutbuster.

Other than that managed to install and run all ten applications as well as online scans/ change of settings etc. Lots of things were picked up and deleted but it still hasn't gone.

I've installed Hijack this as per instruction and eagerly await your help!!

I've used hijackthis before for deleting things (having looked up what they are on forums etc) but am not an expert by any stretch.

Thanking you in advance...

 

Chaslang

Thanks for the prompt reply.

Norton in safe mode found quarantined and was able to delete trojan.desktophijack.b.
Also found w32.desktophijack and was unable to delete or quarantine.

I think I ran this in safe mode before and both seem to have come back again.

I've attached HJT log file.

Cheers

Jeff

 

Chaslang,

As requested here's the logs:

It's all looking tickety boo at the moment - no hijacking and it's running quicker. Anything else I should do to protect in future?

Regards

Jeff

Ps Cheers to you contemporary Knights!

 

Chaslang,


Thanks for all the help - you chaps are invaluable!

Cheers

Jeff