How to remove qooqlle?

November 13, 2010 at 05:11:34
Specs: Windows 7
My browsers have been hijacked from the past 2 weeks. they keep on resetting and homepage changes to upon every restart. If anyone knows how to get rid of this please reply. I have already used loads of spyware remover like spybot, ad aware, malware bytes but non have worked.

edited by moderator: remove un-requested log

See More: How to remove qooqlle?

November 15, 2010 at 10:13:26

a little about me:
i have been using and programming and hacking around on computers since the early 1980's.
i do this for friends, family, and as a side job as i work on my electrical engineering degree.
i would say that i have a very very high level of understanding of much of this kind of stuff.

with regards to this QOOQLLE browser homepage / search engine hijack:
i found a more definitive fix. heres what i tried at first

i ran a bunch of scans (ms security essentials, adaware, spybot search & destroy, malware bytes anti-malware, comodo),
deleted all of my temp files with cleanup 4.52, and reset my browsers pages (in chrome, firefox, and internet explorer).

it looked to be gone.

but i would reboot and it would return. qooqlle was my browser homepage and search engine again on all browsers.

here is how i finally got rid of it

1) ran all the above scans.
2) deleted my temp files with cleanup 4.52

and what i believe to be the most important step:

3) i looked at all of the currently running programs with process explorer, and looked at all of the programs that run at computer startup with msconfig and also with chameleon startup manager. chameleon is like using msconfig, but easier to use

...i also ran hijack this again (i had done this before) everything seemed to be ok.

BUT... looking at everything CLOSELY i discovered

1) a registry entry (which i deleted) that started this program on reboot located here:


2) an offending program called either IGFXTRAY.EXE or IGFXTRAYSOUND.EXE

there is supposedly a valid program named similarly, which is for intel chipset computers -- built in sound or video programs. googling it, it says its the "Intel Integrated Display Adapter component"

but i actually dont use my onboard graphics (intel chipset) and use an added pci express video card instead.

so look in the directory

C:\users\{my user name}\appdata\roaming\igfxtray.exe
(for windows 7 / vista)

C:\documents and settings\{my user name}\application data\igfxtray.exe
(for windows xp)

i made sure it wasnt currently running in the background (checked process explorer and stopped the running process),
deleted it from my hard drive,
restarted my pc,
and the qooqle browser hijacker (hijacking my home page on all 3 browsers) did not return!

finally, i must make note of my favorite real time process monitoring tools that helped me figure this out.
they dont use very much cpu power, dont slow the computer, and work very well. much less cpu intensive than symantec bloatware, mcafee, or especially avg !

try a combo of these two:
1) adaware. the component of adaware that monitors in realtime is called adwatch live. it works well and with minimal compute power
2) spybot search and destroy. make sure to enable "teatimer" ("protection of over-all system settings")

hope this helps. it defintely helped me.


kyle-can-fix-it {at} att {dot} net
kyle-can-fix-it {dot} does-it {dot} net / reviews

Report •

November 16, 2010 at 04:25:19
Thanks for the detailed response. It sure was the same process that you mentioned. but i cured it by installing AVG 2011. It picked it up on reboot and got rid of it.

thanks again.

Report •

November 18, 2010 at 04:44:05
I obtained this virus from Vuze. I downloaded a film (Dexter), whit a program named divx. Today, after I throw out this divx dirt, my computer and google works fine even after reboot. R.

Report •

Related Solutions

April 14, 2011 at 08:21:31
I removed this from almost all of my computer, including IE9, with MalwareBytes. It stayed Chrome.

It infects Chrome by putting in a new default search engine. Make a different search engine the default and remove the offending search engine. It should work.

Report •

July 5, 2011 at 02:59:38
Inaf ActiveX Filtering

Report •

Ask Question