Hijacked search results, and more

June 11, 2010 at 21:22:17
Specs: Windows XP
I have a couple of different problems. Maybe they are related.
I have random websites popping up on my screen from time to time. And I have noticed that when I click on a link in search results, that I am always redirected to some other site.
I have been trying desperately to rid myself of a file that keeps re morphing itself into my documents folder under all users... m22hv0xo.exe
I have removed it several times in safe mode but it always regenerates at some point. Not sure if this is the main culprit or not.
I have ran adaware, mcafee, spybot, superantispyware, malawarebytes... none of these programs seem to help. Any ideas?

See More: Hijacked search results, and more

Report •

June 12, 2010 at 05:04:27
First did you disabled Restore point , if not disable it first then
remove your old restore points,then run malawarebytes in the
safe mode don't forget to update it first try it hope it help you
good luck .

Report •

June 12, 2010 at 07:45:59
Are you talking about the system restore in the control panel? Then yes, I did turn it off about a month ago. My System Vol Info folder had been infected with a virus, so I decided to turn it off. But I just checked it and it had been turned on again somehow. I will turn it off and do as you suggested. What do you think would be turning the system restore back on like that?

Report •

June 12, 2010 at 14:55:14
It's amazing that some people reply that system restore should be turned off before scanning.
I believe you should do your scans and if it shows that the problem is in the system restore, THEN, it should be disabled to scan.

Also you DON'T have run malwarebytes in safe mode. Normal mode catches problems very well, especially ones that are causing problems.

Response 1 keeps stressing safe mode in his answers. I PREFER to keep my restore points in case they are needed for any reason. That's what they are for.

Some HELP in posting on Computing.net plus free progs and instructions Cheers

Report •

Related Solutions

June 13, 2010 at 01:32:19
no one knows?

Report •

June 13, 2010 at 10:03:27
It's probably the hijacker itself. Are you running Firefox?.. If so please disable Javascript, by going to Tools > Options > Content, and untick to disable Javascript (as the Google Redirect virus uses it to run by an unauthorized plugin that's downloaded). I would try scanning with Hitman Pro 3.5, found here: http://download.cnet.com/Hitman-Pro... , you could also try scanning with Malware Bytes in safe mode, if you haven't already. I would also try downloading Avast! and enabling a boot scan: http://download.cnet.com/Avast-Free... before you do that though, please check out the link in my sig and follow the steps to prep your computer, and another note, when you do scan with Avast!, PLEASE disable your current AV software to avoid any incompatibility issues, as having two AV programs at once can cause your system to be unstable, and or crash.

Helpful tips before getting started: http://www.computing.net/howtos/sho...</

Report •

Ask Question