search engine redirect virus

builder22 · 8 Dec 2011 at 17:47

had a virus earlier with firefox that took me to ebay pages everytime i tried to access a page from google

think that is sorted now (all I did was delete a folder with the 08d.exe which causes it apparently) but internet explorer is doing the same thing with bing

have run malwarebytes, spybot and avira but no results

I don't use internet explorer but i'm a bit worried it may damage something else in the future....

any ideas ?

Philtor · 8 Dec 2011 at 20:55

Have you run the above tools from within Safe mode?

KIA · 8 Dec 2011 at 21:16

philtorrens said:
Have you run the above tools from within Safe mode?

and with the latest definitions!

maj · 8 Dec 2011 at 21:37

Sounds like its modified the hosts file.

Terrier_Jimlad · 8 Dec 2011 at 22:26

1) Check hosts file
2) Use HijackThis

flippant · 9 Dec 2011 at 09:07

Don't forget to reset the browsers to default mode, browser hijacks tend to mess with homepages & search settings etc.

bledd · 9 Dec 2011 at 10:04

flippant said:
Don't forget to reset the browsers to default mode, browser hijacks tend to mess with homepages & search settings etc.

Yup

Use this tool or follow the instructions

http://support.microsoft.com/kb/923737

Mark M · 9 Dec 2011 at 10:48

Checked the proxy settings?

builder22 · 9 Dec 2011 at 11:02

thanks for all the tips, I used the Fixit tool and it is all ok now
there was another virus affecting my pc yesterday and I actually used system restore to sort it, it worked but I wish I had tried the things mentioned in this thread first (never thought about safe mode) as using system restore has been the start of many problems for me in the past!

anything I don't mind · 9 Dec 2011 at 11:12

use combofix do not restart

use rkill then scan with malware bytes.

restart, should be sorted, if not you will have to format.

http://www.combofix.org/download.php
http://www.bleepingcomputer.com/download/anti-virus/rkill

also make sure you completely disable system restore. you can enable it a later date if you want, but it will hide in there.

builder22 · 9 Dec 2011 at 12:56

combofix found 2 problems, not sure if they were serious or harmful at all but it's got rid of them now!

Crowort · 9 Dec 2011 at 13:23

Yeah system restore normally seems to works until a few days later when it comes back.