Spyware, Viruses, & Security forum

Question

Browser Hijacked - blendersearch.com

by michael_fett / October 11, 2011 3:37 AM PDT

I have somesort of browser hijacking going on. Randum searches will take me to strange websites. The only common part I see is blendersearch.com (Warning: do not visit site) in my listings under the back button. I'm using Windows 7 Professional 64-bit. Browser is Internet Explorer 8. Had Microsoft Security Essentials on here with Malwarebytes. Neither of those found it. Installed Trend Micro Internet Security 2012, that did not work either. Tried Spybot Search and Destroy, still nothing. It is still doing it. Any ideas how to get this off this machine?
Mike

Note: This post was edited by a forum moderator to disable link and put up warning note about site which maybe malicious on 10/11/2011 at 11:50 AM PT

Answer This Ask For Clarification
Discussion is locked
You are posting a reply to: Browser Hijacked - blendersearch.com
The posting of advertisements, profanity, or personal attacks is prohibited. Please refer to our CNET Forums policies for details. All submitted content is subject to our Terms of Use.
Track this discussion and email me when there are updates

If you're asking for technical help, please be sure to include all your system info, including operating system, model number, and any other specifics related to the problem. Also please exercise your best judgment when posting in the forums--revealing personal information such as your e-mail address, telephone number, and address is not recommended.

You are reporting the following post: Browser Hijacked - blendersearch.com
This post has been flagged and will be reviewed by our staff. Thank you for helping us maintain CNET's great community.
Sorry, there was a problem flagging this post. Please try again now or at a later time.
If you believe this post is offensive or violates the CNET Forums' Usage policies, you can report it below (this will not automatically remove the post). Once reported, our moderators will be notified and the post will be reviewed.
Collapse -
Clarification Request
Same Problem
by sameproblem / October 12, 2011 3:41 AM PDT
Collapse -
Solution
by momomo100 / October 12, 2011 5:31 AM PDT
In reply to: Same Problem

I had the same exact problem. I tried using SUPERAntiSpyware, MSE, and TDSSKiller. I kept updating my SUPERAntiSpyware throughout the day, and eventually one of the updates last night was able to detect the Trojan.

Collapse -
Have you checked ..
by Carol~ Forum moderator / October 12, 2011 7:35 AM PDT
In reply to: Same Problem

In addition to using the scanning tools suggested, have you checked Windows HOSTS file, to see if it's been altered in any way? What about your DNS settings? Have you tried resetting your router to its default setting / configuration?

Carol

All Answers

Collapse -
Answer
Additional scanners to try..
by Carol~ Forum moderator / October 11, 2011 5:29 AM PDT

Mike..

If Malwarebytes' Anti-Malware didn't find anything, give the below a try:

Kaspersky's TDSSKiller - Instructions are listed below. (Additional instructions can be found here)

http://support.kaspersky.com/viruses/solutions?qid=208280684

Hitman Pro - It's free to use without a license. If a virus is found, you will receive a free 30-day license to remove the threat. Note: There is a separate download for 64-bit versions of Windows 7.

http://www.surfright.nl/en/home/

ESET Online Scanner
http://www.eset.com/online-scanner

You might also want to check to make sure your settings haven't been changed to use a Proxy Server. Open IE and go to Tools>Internet Options>Connection Tab. Click on the LAN settings button. If there is a checkmark next to "Use a proxy server for your LAN", uncheck it. Click OK. Then OK, again.

Lastly. You wrote you 'had' MSE installed and it didn't find anything. Then you wrote you installed Trend's suite. Does that mean you uninstalled MSE? IF not, I would strongly suggest only using ONE of the two.

Best of luck..
Carol

Collapse -
Answer
SUPERAntiSpyware
by michael_fett / October 13, 2011 5:04 AM PDT

SuperAntiSpyware did the trick. I found it and removed it.

Collapse -
Great! Glad you were able to straighten it out :)
by Carol~ Forum moderator / October 13, 2011 7:16 AM PDT
In reply to: SUPERAntiSpyware

Mike,

Thanks for posting back and letting us know.

Do you happen to have the name of what SAS detected? It should be in the log.

In addition to my own curiosity, it may help others.

Thanks!
Carol

Popular Forums
icon
Computer Help 47,885 discussions
icon
Computer Newbies 10,322 discussions
icon
iPhones, iPods, & iPads 3,188 discussions
icon
Security 30,333 discussions
icon
TVs & Home Theaters 20,177 discussions
icon
HDTV Picture Setting 1,932 discussions
icon
Phones 15,713 discussions
icon
Windows 7 6,210 discussions
icon
Networking & Wireless 14,510 discussions

Tech for the school year

Smart tech for smart students

Forget the pencils and notebooks. Gear up your students with these portable and powerful note-taking machines.