Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

Computer Hijacked...PLEASE HELP!!

Apr 13, 2011 12:04PM PDT

Hey Everybody,
I am a complete computer newbie and I now have a problem that seems way above what I can fix on my own. My internet browsers(I.E. and Mozilla) redirect me to random websites when I do an internet search.
So far I have ran Spybot S&D, Malwarebytes, Superantispyware, Rkill, all of these with no fix. Could someone PLEASE tell me what to do next, what software to try and where to get it? Again, I am a complete newbie so pleas be specific when you reply.

Thanks,

Mike

Discussion is locked

- Collapse -
Please Try It This Way...
Apr 14, 2011 2:14AM PDT

There are a couple of other tools that tend to do a better job with the redirect problem.

First, make sure to clean out all your Temporary Internet Files and Cookies (in all browsers), then clean out the "Temp" folders on your computer.. (If using XP, eliminate all files from the "C:\Documents and Settings\Yourusername\Local Settings\Temp" and C:\Windows\Temp folders.
_______________________________

Next, if you can download the tools below on your current computer, and get them to work, then fine, but frequently the problem malware prevents the programs from running correctly. If that's the case, then download ALL of the tools below on a friend or family member's, CLEAN computer and copy them to a CD or flash drive, then transfer them to the problem machine.
____________

First, run the following tool to help allow the removal programs below to run. (courtesy of Grinler at BleepingComputer.com)
There are 3 different versions. If one of them won't run then try to run the other one. Be patient.... as a black window should open, then close after finding all the background programs.
Vista and Win7 users need to right click and choose Run as Admin
You only need to get one of them to run, not all of them.

Rkill.exe
http://download.bleepingcomputer.com/grinler/rkill.exe

Rkill.com
http://download.bleepingcomputer.com/grinler/rkill.com

Rkill.scr
http://download.bleepingcomputer.com/grinler/rkill.scr

_____________________

IMMEDIATELY after running the "Rkill" tool above, run/install the Hitman Pro and TDSSKiller from the links below which you've also copied to a CD or flash drive, and transfered to the problem machine. Do NOT restart the computer after running Rkill.

Install and run a full system scan with the Hitman Pro program from the link below.

Hitman Pro 3.5

Next, download TDSSKiller and follow the guide to use the tool:
http://support.kaspersky.com/viruses/solutions?qid=208280684

Running Malwarebytes again, at this time, might help also.

And when you're done, check your LAN settings in Internet Explorer like this:

Open Internet Explorer and go to Tools-Internet Options-Connection Tab. Click on the LAN settings button. IF there is a check mark next to "Use a proxy server for your LAN", uncheck it. Click OK. Then OK, again.

Hope this helps.

Grif

- Collapse -
No Luck
Apr 14, 2011 12:58PM PDT

Hello Grif,
Thanks for the advice. I could not get the "Kaspersky" program to run. I downloaded and extracted the files but, it will not run. I tried running just Rkill, Hitman and Malwarebytes. no luck. Still haveing problems. Any other suggestions?

Mike

- Collapse -
You must be more specific
Apr 14, 2011 4:43AM PDT

In order to solve this you need to be more specific. You need to name the sites where you have been redirected to. It can be a specific virus or you just need to adjust a home page in the internet options.

- Collapse -
What OS are u using, XP ?
Apr 14, 2011 12:04PM PDT

Have you tried running in Safe Mode? Or trying the System Restore function?
System restore might help since it restores to a date where the computer behaves/running normally.
To goto Safe Mode: Once memory test completed, PRESS F8 few times just before Windows logo appears.
A boot menu will appear and choose Safe Mode option.
Good Luck.

- Collapse -
Hello
Apr 15, 2011 7:52AM PDT

Hello, Thanks for responding. I am using windows XP. I have tried running in safe mode and I have performed a system restore. None of this helped. As far as where I am being redirected, it is ramdom, usually to other"search engine" results pages. There is a constant error message on the desktop, it is an internet Explorer script error. It will say something about a certain line number, character number and usually a URL that almost always includes something, something, something. mevio.

Any help would be greatly appreciated.

- Collapse -
Just Some Thoughts
Apr 15, 2011 8:49AM PDT

Please try resetting both browsers and disable their add-ons.

If you haven't already, download, install, and run the free Firefox 4.0 browser from the link below..

http://www.mozilla.com/en-US/firefox/fx/
Then clean out all Temporary Files and Cookies from Firefox using the Firefox user interface. Then click on "Tools" in the upper left, choose "Add-ons", then click on the "Extensions" category, and "Disable" everything. Then "disable" anything that looks unusual.

Next, disable all Add-ons in Internet Explorer by opening IE, click on "Tools" in the upper left, choose "Internet Options", then click on "Advanced" tab, then select the "Reset Internet Explorer settings" button.

While still in the "Internet Options" display panel, click on the "General" tab. Once there, in the "Home Page" section at the top, type this address: http://www.google.com/, then click on "Apply", then OK. Close Internet Explorer and the "Internet Options" settings panel, the open Internet Explorer again.. See if that helps.

Hope this helps.

Grif