MAMEWorld >> The Loony Bin
Previous thread Previous  View all threads Index   Next thread Next   Flat Mode Flat  

BIOS-D
MAME Fan
Reged: 08/07/06
Posts: 1688
Send PM
Re: Tricky browser hijacker/redirect
04/11/11 09:31 PM


> I'm usually really good at hunting down and squashing spyware/viruses but I've got
> one that's got me a little stumped.
>
> My google searches keep getting redirected to random pages. Happens in IE or Firefox.
> I'm running Windows XP Pro SP3.
>
> - Malwarebytes, TDSSkiller, Kaspersky, Symantec AV all show that the PC is clean
> - No rogue processes running in task manager
> - Host file looks clean
> - Nothing out of the ordinary that I can see in HijackThis
> - No rogue items are in HKLM/Software/Microsoft/Windows/CurrentVersion/Run or
> HKCU/Software/Microsoft/Windows/CurrentVersion/Run
>
> Nothing looks fishy in the usual places. The only thing that looks odd is in my
> add/remove programs there's an application called "aaa" with the Java logo next to
> it. when I try to uninstall it, I always get an error that the program was not
> uninstalled correctly. I nuked it from the registry and don't see it in add/remove
> programs anymore but my searches are still getting redirected.
>
> Anything else I should try? Any tricks/tips you guys have to hunt this down?


Maybe this could help:

http://www.bleepingcomputer.com/forums/topic376141.html







Entire thread
Subject Posted by Posted on
* Tricky browser hijacker/redirect Hizzout 04/11/11 05:32 PM
. * Re: Tricky browser hijacker/redirect PokeMAME  04/13/11 05:24 AM
. * Re: Tricky browser hijacker/redirect Hizzout  04/13/11 03:34 PM
. * Re: Tricky browser hijacker/redirect StilettoAdministrator  04/13/11 07:42 AM
. * Re: Tricky browser hijacker/redirect URherenow  04/12/11 01:44 PM
. * I'm defeated Hizzout  04/12/11 03:26 PM
. * Re: I'm defeated BIOS-D  04/12/11 10:59 PM
. * Re: I'm defeated Hizzout  04/13/11 03:32 PM
. * Re: I'm defeated Moose  04/13/11 04:42 AM
. * Re: I'm defeated StilettoAdministrator  04/12/11 11:48 PM
. * Re: Tricky browser hijacker/redirect BIOS-D  04/11/11 09:31 PM
. * Re: Tricky browser hijacker/redirect Hizzout  04/11/11 09:51 PM
. * Did you try via Safe Mode?..... mogli  04/12/11 11:23 AM
. * Re: Did you try via Safe Mode?..... TriggerFin  04/12/11 11:59 AM
. * Re: Did you try via Safe Mode?..... mogli  04/15/11 06:22 AM
. * Yeah, same here... Mojo2000  04/12/11 10:11 AM

Extra information Permissions
Moderator:  GatKong 
1 registered and 112 anonymous users are browsing this forum.
You cannot start new topics
You cannot reply to topics
HTML is enabled
UBBCode is enabled
Thread views: 1640