MAMEWorld >> The Loony Bin
Previous thread Previous  View all threads Index   Next thread Next   Flat Mode Flat  

Hizzout
70's baby, early 80's child
Reged: 02/05/04
Posts: 4841
Send PM
Tricky browser hijacker/redirect
04/11/11 05:32 PM


I'm usually really good at hunting down and squashing spyware/viruses but I've got one that's got me a little stumped.

My google searches keep getting redirected to random pages. Happens in IE or Firefox. I'm running Windows XP Pro SP3.

- Malwarebytes, TDSSkiller, Kaspersky, Symantec AV all show that the PC is clean
- No rogue processes running in task manager
- Host file looks clean
- Nothing out of the ordinary that I can see in HijackThis
- No rogue items are in HKLM/Software/Microsoft/Windows/CurrentVersion/Run or HKCU/Software/Microsoft/Windows/CurrentVersion/Run

Nothing looks fishy in the usual places. The only thing that looks odd is in my add/remove programs there's an application called "aaa" with the Java logo next to it. when I try to uninstall it, I always get an error that the program was not uninstalled correctly. I nuked it from the registry and don't see it in add/remove programs anymore but my searches are still getting redirected.

Anything else I should try? Any tricks/tips you guys have to hunt this down?







Entire thread
Subject Posted by Posted on
* Tricky browser hijacker/redirect Hizzout 04/11/11 05:32 PM
. * Re: Tricky browser hijacker/redirect PokeMAME  04/13/11 05:24 AM
. * Re: Tricky browser hijacker/redirect Hizzout  04/13/11 03:34 PM
. * Re: Tricky browser hijacker/redirect StilettoAdministrator  04/13/11 07:42 AM
. * Re: Tricky browser hijacker/redirect URherenow  04/12/11 01:44 PM
. * I'm defeated Hizzout  04/12/11 03:26 PM
. * Re: I'm defeated BIOS-D  04/12/11 10:59 PM
. * Re: I'm defeated Hizzout  04/13/11 03:32 PM
. * Re: I'm defeated Moose  04/13/11 04:42 AM
. * Re: I'm defeated StilettoAdministrator  04/12/11 11:48 PM
. * Re: Tricky browser hijacker/redirect BIOS-D  04/11/11 09:31 PM
. * Re: Tricky browser hijacker/redirect Hizzout  04/11/11 09:51 PM
. * Did you try via Safe Mode?..... mogli  04/12/11 11:23 AM
. * Re: Did you try via Safe Mode?..... TriggerFin  04/12/11 11:59 AM
. * Re: Did you try via Safe Mode?..... mogli  04/15/11 06:22 AM
. * Yeah, same here... Mojo2000  04/12/11 10:11 AM

Extra information Permissions
Moderator:  GatKong 
0 registered and 295 anonymous users are browsing this forum.
You cannot start new topics
You cannot reply to topics
HTML is enabled
UBBCode is enabled
Thread views: 1639