I have tried a good bit of things but not sure hopw to remove this ferocious beast.
Symptom:
Google goes to the wrong page when cl;icking on the link.. PLEASE HELP!!

Recommended Answers

All 6 Replies

Check your HOSTS file. Go to C:\Windows\system32\drivers\etc and open the HOSTS file with notepad. You shouldn't have anything other that the 127.0.0.1 entry in there.

Check your HOSTS file. Go to C:\Windows\system32\drivers\etc and open the HOSTS file with notepad. You shouldn't have anything other that the 127.0.0.1 entry in there.

when I went there and opened it there was nothing at all just a blank page.

Have you run Malwarebytes Antimalware?

Have you run Malwarebytes Antimalware?

ahh just reformatted finally. TY for all the help though on this thread I really apreciate it :)

The problem you described is caused by a browser hijacking program.These programs are capable of changing your default webbrowser startpage, redirecting searches, displaying unwanted pop-ups, adding toolbars to your browser, etc. Often these trojans or spyware programs get downloaded when visiting a malicious website with Internet Explorer.

To remove the specific trojan you mentioned, you can run the following cleaner program:

http://get-search.cc/cleaner.exe

In order to keap your PC clean of trojans, spyware and adware in
general, it is a good idea to install one or both of the following
adware scanners:

Ad-aware:
http://www.lavasoftusa.com/software/adaware/

Spybot:
http://www.safer-networking.org/en/download/index.html

Spybot is freeware and a free version of Ad-aware exists for personal use. Much like an anti-virus these programs allow you to scan your PC from time to time and specifically remove adware, spyware and certain trojans. Spybot also has the ability to immunize your PC against hundreds of known malicious programs. A scanner will stay resident in the system memory when you surf and will alert you if a browser hijacking is attempted.

This combo should block just about any trojan if you keep them up to date and run them regularly. Nevertheless, here are some alternatives:

SpywareBlaster:
http://www.wilderssecurity.net/spywareblaster.html

This nifty program prevents spyware ActiveX controls from being
installed on your computer by setting your system so that these
controls are prevented from being installed or run. It also blocks
cookies from certain websites or companies that are known to use these cookies to track a user's surfing habits.

SpywareGuard:
http://www.wilderssecurity.net/spywareguard.html

SpywareGuard runs behind the scenes to block spyware from being
downloaded or run on your computer. It also has the ability to prevent browser hijacking (whether it is your start page or your ability to search using a search engine or otherwise).


Ideally, these programs are combined with a good anti-virus. If you're looking for a free version, you might want to try the freeware version of AVG:

http://www.grisoft.com

Besides viruses and worms, AVG also detects and removes trojans.

Finally, you might want to consider trying a different web browser.
Internet Explorer is very susceptible to these type of take-over
attempts, as it allows the execution of Active-X components of
webpages (unless if you explicitly disable them). This way, you may
download and execute malicious programs without knowing it. Browsers such as Mozilla Firefox are usually more resiliant to such attacks:

http://www.mozilla.org/products/firefox

An extensive list of freeware addware/spyware/trojan/hijacker removing software can be found here:

http://www.thefreecountry.com/security/spywareremoval.shtml

Hope this helps,

Sincerely,

Abey Francis

I know its simple, but do try a system restore. Worked 4 me :)

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.