I think my browsers have been hijacked

Solved/Closed
Report
Posts
13
Registration date
Thursday September 16, 2010
Status
Member
Last seen
January 18, 2013
-
Posts
47366
Registration date
Monday February 1, 2010
Status
Moderator
Last seen
September 1, 2021
-
Hello,


I think I have been hijacked. I cannot go to my home page. There is now this link in it: websearch.just-browse.info with pop ups.

I need the computer for work and this I think is very serious, having read other posts here similar to my situation. I appreciate if somebody can help me.

Many thanks in advance.

24 replies

Posts
13
Registration date
Thursday September 16, 2010
Status
Member
Last seen
January 18, 2013

Well, I'm here again. On Friday night I had to switch off the computer abruptly because it started to burnt. I disconnected it completely from the power, I cleaned it and left to rest for several days. Then I installed Microsoft Security Essentials, deleted many things. I thought everything was fine. But IE is hijacked completely.

This is what I got when I open it:

http://runonce.msn.com/runonce3.aspx

I didn't realize I had Silverlight and honestly I don't know what it is. The Google Chrome was installed when I upgraded FF. I would rather not have the Google Chrome but I thought I could do nothing.

I hope all this saga has soon an end.

Can I remove the IE?

(I haven't forgotten the stouts and will come with scones of course!)
0
Posts
47366
Registration date
Monday February 1, 2010
Status
Moderator
Last seen
September 1, 2021
11,368
Okay, load me up with a new ZHP Diag,

Do you still get the rundll error ?

Removing IE is ill advised, it's part of Windows.

When you use CCleaner, check the Windows uninstall files in the advanced section, you should gain lots of Mb's.

What do you mean "it started to burnt" ?
0
Posts
13
Registration date
Thursday September 16, 2010
Status
Member
Last seen
January 18, 2013

Good evening Ambucias,

Here is the new link http://speedy.sh/xsjrF/ZHPDiag.txt

It's been a while of not getting the rundll error I think it had something to do with the sound system. I searched on the internet, and I can't remember what I did exactly, something with the regedit comand in run I then deleted a file, but it has been so stressful this last days that I cannot remember exactly all the steps I took to remove it.

The burning thing it was just a week ago today. I was just working on the computer when a strong burning smell came from the machine, and I just switched it off thinking well that's it, the end. But it's still fine and doing a good job.

Now if I could get rid of that annoying thing on the IE browser that would be wonderful.

Once again, many many thanks for your help.
0
Posts
47366
Registration date
Monday February 1, 2010
Status
Moderator
Last seen
September 1, 2021
11,368
Greetings again Monteserrat,

I really don't know what you are doing with this computer, but your memory status has gone beyond the critical point, in fact it's just on verge of jamming.

Please launch ZHP Fix, copy and paste the following lines (using the clipboard) and click on GO

O3 - Toolbar: (no name) - [HKLM]{CCC7A320-B3CA-4199-B1A6-9F516DD69829} Orphean Key => Toolbar.AVGSearch
O69 - SBI: SearchScopes [HKUS\.DEFAULT] {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (Yahoo! Search) - https://us.search.yahoo.com/ => Toolbar.AVGSearch
O69 - SBI: SearchScopes [HKUS\S-1-5-18] {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (Yahoo! Search) - https://us.search.yahoo.com/ => Toolbar.AVGSearch
[HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}] => Toolbar.Conduit
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}] => Toolbar.AVGSearch
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}] => Toolbar.AVGSearch
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}] => Toolbar.AVGSearch
[HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}] => Toolbar.AVGSearch
[HKLM\Software\Classes\Toolband.EB_ExplorerBar.1] => Toolbar.Agent
[HKLM\Software\Classes\Toolband.IPM_PrintListItem.1] => Toolbar.Agent
[HKLM\Software\Classes\Toolband.PM_Launcher.1] => Toolbar.Agent
[HKLM\Software\Classes\Toolband.PM_PrintManager.1] => Toolbar.Agent
[HKLM\Software\Classes\Toolband.PR_BindStatusCallback.1] => Toolbar.Agent
[HKLM\Software\Classes\Toolband.PR_CancelButtonEventHandler.1] => Toolbar.Agent
[HKLM\Software\Classes\Toolband.TBToolband.1] => Toolbar.Agent
[HKLM\Software\Classes\Toolband.UserOptions.1] => Toolbar.Agent

Close it

You have stuff there about Kaspersky, you don't need it.

What is this ?

C:\Program Files\CartyStudios Corporation
C:\Program Files\CommentKahuna
C:\Program Files\PowerfulPDF
C:\Program Files\Sigil
C:\Program Files\Solar Accounts
C:\Program Files\Traffic Travis v3
C:\Program Files\WFX Website Builder
C:\Program Files\Whisper Technology
C:\Program Files\Common Files\SBSolutions
C:\Documents and Settings\Montserrat Arda\Start Menu\Programs\Accessories
C:\Documents and Settings\Montserrat Arda\Start Menu\Programs\Administrative Tools
C:\Documents and Settings\Montserrat Arda\Start Menu\Programs\RSS Announcer
C:\Documents and Settings\Montserrat Arda\Start Menu\Programs\Startup

If you don't know, I suggest you remove.

You system is now virus free, all you need is space.

Good luck
0