Member Avatar for divine_darkness

So I'm Pretty Sure I Got A Virus, Either From A Music File Someone Sent Me, Or My Brother Downloaded Something He Shouldn't Have...my Home Page Which Is Yahoo Is Now Blank And A Security Balloon Keeps Poppong Up That Says The System Has Detected Spyware, So I Ran A Scan (avg Free Edition) It Found Alot Of Problems And Claims To Have Fixed Them...home Page Is Still Blank....my Computer Isn't Really Running Any Different But I'm Still Not Sure.....any Advice At All Would Be Appriciated. Thanks And Sorry About Not Knowing Where To Post This

  • 2 Contributors
  • 1 Reply
  • 110 Views
  • 6 Hours Discussion Span
  • Latest Post Latest Post by crunchie

Dani AI

Generated

The symptoms described — a blank homepage, persistent "security" popups and an AV report of multiple problems — are characteristic of a browser-hijack or rogue "scareware" infection. Those infections often leave visible alerts while also changing homepage, proxy or hosts settings so the browser shows a blank page or is redirected, and an initial AV scan can report removals while some settings or helper processes remain.

Complementary checks that are often missed (and that help decide how deep the cleanup must go): confirm whether the blank page appears in every browser or only one; inspect the browser shortcut target for appended URLs; check WAN/LAN proxy settings; review the system hosts file for added redirects; look for a local proxy/listener on typical web ports; and note whether the homepage is set to a file:// or local blank HTML. These items separate simple settings changes from components that persist across reboots.

A conservative cleanup workflow used by experienced responders is: isolate the PC from the internet; back up only personal data (documents, photos — not program files); boot to Safe Mode (or Safe Mode with Networking) and run reputable second-opinion scanners; remove suspicious startup entries and browser add-ons; repair or recreate browser shortcuts and reset browser settings; clear temp files and re-scan in normal mode. System Restore can sometimes preserve infected files, so rely on actual removal first. Avoid running unknown fixers or paying for unsolicited "support."

Helpful diagnostic artifacts for people helping here include OS with service pack, exact AV filenames reported, whether multiple browsers are affected, contents of the hosts file, the browser shortcut target, and a list of running processes/services. has pointed toward removal utilities; combining those tools with the checks above gives a more reliable cleanup.

Member Avatar for crunchie

Considering that the forum you posted in has an announcement at the top stating not to post help questions there and you obviously understand English, I'm puzzled that you still posted there.

====

Download HijackThis from here. Download it to your desktop and NOT a temporary folder.

==

Please download (by S!Ri)
Extract the content (a folder named SmitfraudFix) to your Desktop.

Open the SmitfraudFix folder and double-click smitfraudfix.cmd
Select option #1 - Search by typing 1 and press "Enter"; a text file will appear, which lists infected files (if present).
Please copy/paste the content of that report into your next reply.

Note : process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.