Browser hijacker/ trojan

January 16, 2009 at 15:40:32
Specs: Windows XP, Dual processor 1.8, 2 gigs ram
I've been hijacked!

Yesterday afternoon my Firefox started acting quite strange, when I would click on a link it would open up a new tab to a random generic search engine, casino advertisement, or porn web page. After doing a bit of research on a different computer i found out that it was most likely the cause of a browser hijack. I read up on many posts about solutions to this virus, however none seem to be working for me.
One thing that is quite strange is the virus wont let me visit certain sites specifically (trendmicro/spybot S&D), it will not even allow me to open malwarebytes, or even the installation folder for Hijack this.
I managed to get a version of Hijackthis onto my computer by installing the full file on a separate PC and transferring it to my laptop via thumbdrive. I will post the log upon request. Thank you.

edited by moderator: HJT log removed

See More: Browser hijacker/ trojan

Report •

January 16, 2009 at 19:11:26
Try this, it may temporarily help.:

Click on Start, click Run, and then type devmgmt.msc and click OK
On the View menu click on Show hidden devices
Browse to Non-Plug and Play Drivers and click the + sign to the left, you should see something like TDSSserv.sys in that list.
Highlight that driver and right click on it and select DISABLE - NOT uninstall.
Now RESTART your computer.

If that did not work try Safe Mode with Networking. Restart your computer
After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;
Instead of Windows loading as normal, a menu with options should appear;
Select Safe Mode with Networking, then press "Enter".
Choose your usual account.

Also you can download Malwarebytes to a cd or jump drive but follow the renaming directions below.

Please download Malwarebytes' Anti-Malware from one of these sites:



Rename the setup file, mbam-setup.exe, before you download it. To do that once the "enter name of file to save to" box appears as the download begins in the filename box rename mbam-setup.exe to tool.exe> click save.

1. Double Click tool.exe to install the application.
2. Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
3. If an update is found, it will download and install the latest version.
4. Once the program has loaded, select "Perform Quick Scan", then click Scan. The scan may take some time to finish,so please be patient.
5. When the scan is complete, click OK, then Show Results to view the results.
6. Make sure that everything found is checked, and click Remove Selected.
7. When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediately.
8. The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
9. Copy&Paste the entire report in your next reply.

Post your Hijack This log.

Report •
Related Solutions

Ask Question