Discussion in 'Just Talk' started by tom.plum, Oct 24, 2013.

  1. tom.plum

    tom.plum Screwfix Select

    how do I get rid of this nasty little (or not so little) hi jacking virus,Its took over my home page and as brought loads of pop ups with it,
    I've tried the < start> <control panel> <uninstall> route, but I cant find the begger on there, its dug itsself a hidyhole somewhere,, :(
  2. Mr. Handyandy

    Mr. Handyandy Screwfix Select

    If you were on IE. you would first delete all your cookies, then you would manage your add-ons and remove any noted wrong'uns, then remove any 'downloaded program files' in IE. All done from the menu, and internet options and Manage Add-ons.

    And then immediately put your homepage back or you will go back there and start all over again.

    (Assuming it's just browser attack)

    Mr. HandyAndy - Really
  3. joinerjohn1

    joinerjohn1 Screwfix Select

  4. dobbie

    dobbie Well-Known Member

    Have you tried running Ad-Aware to see if that will find and get rid of it.There is a free version you can download.
  5. tom.plum

    tom.plum Screwfix Select

    thanks handy and JJ, I'll try tomorrow, let you know how it goes' :confused:
  6. Malwarebytes is free and is well regarded.
  7. tom.plum

    tom.plum Screwfix Select

    went to JJ's link, I've not a clue what handy's on about, ( I went to rosebridge skool not cambridge thaa kneeers) anyrode i down loaded that spyhunter and it took forever but found 533 harmfull infections, BUT it wanted $89 as a bi annual payment to shift them, so guess what :mad:

    I'm now goin't pub, when i get back I'll try the malware prog that the devs says

    p.s dobbie, I can't find a free ad-ware prog,, do you have a link:confused:

    catch yers all laters, I gotta dash...........................................
  8. Sean_ork

    Sean_ork Screwfix Select

    don't be tempted to use a removal program, to remove such hijacks, they tend to give lots of false positive results and often replace the problem hijack with one of their own and litter the registry

    the only way to safely remove these is to remove the application you installed (that resulted in the attack) and then manually edit the registry to remove the associations and all mentions - there's a few sites that give these fairly long winded instructions

    and stop installing programs of dubious origin
  9. FatHands

    FatHands Well-Known Member

    Hi Tom,
    I've always had great results with Kasperskys rescue CD - its free to download (and use!) and gets rid of most things like this.
    Might be an idea if you get someone else to download it to their (non infected computer) and burn to CD (must be ISO format).
    You can then start your computer from it (watch out for the "press any key to boot from CD") and follow the instructions.

    Bit of a faff, but will get you going and hopefully save you a few quid getting someone out to sort it for you.

    Let us know if i can help.
  10. Cough - I repeat, Malwarebytes is free (the basic version, which is all you'll need) and comes highly regarded.

    And it works.

    Without fuss.

    Or false readings.


    "Download free version", enter your name and email addy on the next page ) not a problem - but use your 'spare' addy for this kind of stuff) and download.

    Once installed and run, it'll say it'll need updating - which is pretty quick.

    It's good. And trusted.

  11. dobbie

    dobbie Well-Known Member

  12. tom.plum

    tom.plum Screwfix Select

    further update, downloaded malwrebytes and did a 'quick scan' no joy, so i did a full scan and went'pub, on my return i turned the puter on on and WAYYYYYYYYY, its gone,
    good ole devs, but its a 30 day trail package, so will it return :confused:
    anyrode, i've noted dobbies link and thanks to all for advise and information ;)
  13. Mr GrimNasty

    Mr GrimNasty Active Member

    Tom, there is a FREE and a PRO version of Malwarebytes. The FREE version is fine but you have to run it manually and it doesn't scan continuously - which has the advantage that it doesn't slow your computer down.
    I just got in the habit of running the update and full scan options every time before I shut down my computer - this is important as some of the ransom/hijack threats around these days will lock you out next time you boot up.
    It helps if you manually delete everything the system will allow you to in you temp internet files including content.IE5 with all the random named files as these get massive and takes ages to scan. And clear the recycle bin. That applies for Firefox (and IE I expect) - obviously you'll have to locate whereever your browser stashes stuff. Mine is:-
    C:\Documents and Settings\JoeBloggs\Local Settings\Temporary Internet Files\Content.IE5 - the big files with random names like 'H45PTZHF'
    C:\Documents and Settings\JoeBloggs\Local Settings\Temp - just wipe everything in here - one file may be in use and undeletable each time
    You may have to do some research into system file display options and stuff as folders like Content.IE5 may be hidden from normal exploration lists, but if you type in the address manually you should see contents. These are not always successfully cleared from the operations within the browser to clear history etc.
    Hence the manual approach.
  14. joinerjohn1

    joinerjohn1 Screwfix Select

    Wondered who had that laptop someone nicked out of me car the other year. I'd named the computer owner as Joe Bloggs. Hmmmmmmmmmmmmmm
  15. Mr GrimNasty

    Mr GrimNasty Active Member

    It's not my fault I'm eponymous.
  16. tom.plum

    tom.plum Screwfix Select

    reet well its sorted now, I can't understand all the googlygob talk about temp/files and registry and removing the application etc ect,blah blah blah,
    so here's what I done in plain english for anyone that gets this motherhuberd,

    download malaware free, run a full scan,

    then click on google (or what ever you brower is) and right click, there will be a list there of 'start up pages' in mine was that 'orrible Qone search/hhtp--&%£* then a box [start] and a little X, click on that X and choose the start up page you want, HEY PRESTO,

    apoligies if anyone said that in puter talk, I just did't understand :(

    but puter is free of pop ups now and is faster than a scouser passing a job centre :D
  17. Pleased it worked, Mr Plum.

    I only run mine every month or so, and it usually finds some 'pup' (I think) trackers, which have all been downloaded with the free software my kids keep clicking on to :mad:
  18. tom.plum

    tom.plum Screwfix Select

    yea 'pup' there were loads of those and a couple of trojans. :mad:
  19. Bullfrog

    Bullfrog New Member

  20. unphased

    unphased Screwfix Select

    Stop surfin' porn pages. Most viruses come from porn sites. :rolleyes:

Share This Page