iehomepages.com

I am pretty sure it is from this:

C:\Program Files\PowerCodec\pmsngr.exe


but I cannot remove it with hijackthis

anyone have any suggestions?

 

Can you explain a little bit better?

 

any time I open up IE, my home page automatically gets redireted to iehomepages.com

popups keep popping up non stop.

it will redirect any website i go to after a short time, saying my computer is infected

I am pretty positive it is from the power codec accidentally downloaded on my computer

 

Please follow our standard cleaning procedures:

http://www.majorgeeks.com/images/grenade.gif Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support

• Make sure you check version numbers and get all updates.

http://www.majorgeeks.com/images/grenade.gif Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

http://www.majorgeeks.com/images/grenade.gifAfter doing ALL of the above and you still have a problem, make sure you have booted to normal mode and run the steps in the below thread to properly use HijackThis and attach the log:

http://www.majorgeeks.com/images/grenade.gif Downloading, Installing, and Running HijackThis

• Make sure you also rename HijackThis.exe as suggested in the procedures. Use analyse.exe for the new name. This is very important due to some new infections going around..

http://www.majorgeeks.com/images/grenade.gif In your next post, please make sure you attach the following logs and that you have run these scans in the following order:

• CounterSpy - ONLY IF you were not able to run Windows Defender
• Bitdefender - from step 6
• Panda Scan - from step 6
• runkeys.txt - the log from GetRunKey.bat
• newfiles.txt - the log from ShowNew.bat
• HijackThis

NOTE: You can only attach 3 files in a single message so it will require that you use two messages to attach all of these logs!

 

Ok problem solved

I was able to delete this using hijackthis in safe mode

 

Glad your problem is fixed, however I would recommend running the READ ME and posting your logs to confirm nothing else is on your system.