Pending Annoying Browser Hijack--among others

Discussion in 'Virus, Spyware and Malware Removal' started by billsfriend60, Aug 24, 2012.


  1. billsfriend60 Bronze Member

    Bronze
    Message Count:
    10
    Likes Received:
    2
    My System
    Loading...
    Hi guys...ih8bills here, on my girlfriend's PC again.
    She has been getting an annoying browser"hijack" when she is browsing-- she just changed ISP's to Cox Hi-Speed Internet (due to a move of her abode more than anything)

    When browsing using Firefox-- the page opens to a "Babylon" search page. I am not familiar with it--but apparently it has been around a while. I have removed all "installed software" and "browser add-ons" associated with it, and everything else I can find-- but it STILL shows up. I just ran a FULL SCAN with Malware Bytes on this machine the other day...it came up 'clean'...?
    I am concerned that she MAY have something more serious. Would appreciate any/all help you could render.



    Prework has been run (of course) -- and logfiles will be attached.

    Attached Files:

  2. Crush Administrator & Security Team Leader

    Manager
    PCHF Staff
    Message Count:
    39,887
    Likes Received:
    3,660
    My System
    Loading...
    Hi,

    Have you attempted to restore Firefox to default settings?

    I see you have Wise Registry Cleaner 7.43 installed

    Registry cleaners are extremely powerful applications and their potential for harming your OS far outweighs any small potential for improving your computer's performance.

    There are a number of them available and some are more safe than others. Keep in mind that no two registry cleaners work entirely the same way. Each vendor uses different criteria as to what constitutes a "bad" entry. One cleaner may find entries on your system that will not cause a problem when removed, another may not find the same entries, and still another may want to remove entries required for a program to work. Without research into what the registry entry selected for deletion is, a registry cleaner can end up being an automated method to cause problems with the registry.

    For routine use by those not familiar with the registry, the benefits to your computer are negligible while the potential risks are great.

    Further reading:
    Registry Cleaners: Do I Really Need One?
    XP Fixes Myth #1: Registry Cleaners
    Ed Bott: Why I Don't Use Registry Cleaners
    Do I need a Registry Cleaner? | What the Tech
    miekiemoes' Blog: Registry Cleaners and System Tweaking Tools

    I suggest to remove the program now, via Add or Remove programs
  3. billsfriend60 Bronze Member

    Bronze
    Message Count:
    10
    Likes Received:
    2
    My System
    Loading...
    OK.... what we did was to use Firefox's new ""Reset Firefox" button. I had tried removing this little monster manually-- by editing Firefox's code. No dice.
    We did use Firefox's new reset button--( Help / Troubleshooting Information / Reset Firefox ) This allowed us to rid our briowser of this pain-in-the-a** without losing our shortcuts.
    You may mark this thread closed-- and hopefully it helps someone else.

    As always thanks to to my friend Crush... from Jeff the mailman. ;)
    Crush likes this.
  4. Google Advertisement

  5. Crush Administrator & Security Team Leader

    Manager
    PCHF Staff
    Message Count:
    39,887
    Likes Received:
    3,660
    My System
    Loading...
    Please run OTL.exe.

    • Copy the commands with file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):

      :Commands
      [emptytemp]
      [emptyflash]
      [clearallrestorepoints]
      [reboot]

      Return to OTL.exe, right click in the "Custom Scans/Fixes" window (under the light green bar) and choose Paste.
    • Click the red Run Fix button.
    • A fix log in Notepad will appear. Copy the contents of the fix log to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy), and paste it in your next reply.
    • Close OTL.exe
    If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes.

    ======

    Remove OTL:

    To remove all of the tools we used and the files and folders they created do the following:
    Double click OTL.exe.

    • Click the CleanUp button.
    • Select Yes when the "Begin cleanup Process?" prompt appears.
    • If you are prompted to Reboot during the cleanup, select Yes.
    • The tool will delete itself once it finishes.
    Note:If any tool, file or folder (belonging to the program we have used) hasn't been deleted, please delete it manually.
    =======

    Download Security Check by screen317 and save it to your Desktop.
    • Double-click Security Check.exe to start the application
    • Follow the onscreen instructions inside of the black box.
    • A Notepad document should open automatically called checkup.txt; please post the contents of that document.
    Note: if a security program requests permission from dig.exe to access the Internet, allow it to do so.
    =======

    There are many things you can do to keep this from happening again. You can think of a computer like a car. It requires basic maintenance to keep in tip top shape and ready to go. Would you drive your car 100,000 miles without changing the oil? The same principle applies here.

    For some helpful tips regarding why you were infected in the first place, what you can do to keep this from happening again, and routine basic maintenance you should be performing on your PC to keep it running, you may wish to review the following threads:

    So, you want to keep this from happening again?
    How Did I Get Infected?
    [IMG]

    In your next reply:

    Please confirm removal of the tools
    Post the SecurityCheck log

Annoying Browser Hijack--among others