Spyware Help

ChrisyB87 · 12 Jan 2009 at 11:56

Hiya all, thought i would make my first post an interesting one.

My Dads pc has a weird problem with google. Everytime i search something the actual results will come up differently, for example i searched "Currency Convertor", now the first result comes up with XE.com but the link at the bottom of the google result is always something different, and when i also click on the link it goes to a totally different website. This happens with every search and in Firefox and IE7.

I have installed and scanned with Spybot Search and Destroy, Malware Antibyes and also used Hijackthis.

I have removed a few bits of spyware and restarted the computer but the problem still exists.

Anyone have any ideas on what to do next?

Thanks in advance,

Chris

Brian Stuart · 12 Jan 2009 at 16:30

Claimed

Did you turn off system restore and then run the scans in safe mode?
What AV are you using? I would suggest you D/L the trial version of NOD32 and run that in safe mode and see what that does.

Admiral Huddy · 12 Jan 2009 at 16:37

Brian Stuart said:
Did you turn off system restore and then run the scans in safe mode?

I find this works a treat.

Failing that, you may have to manually delete the file/folder listed on the right hand side of the S&D screen. If it's a registry entry (blue cubes) then again, you may hav to remove these using regedit. Be carefull what you remove.

Failing that, google the question "Removing xxx" reaps rewards.

When done, run CCleaner and the registry clean option.

ChrisyB87 · 12 Jan 2009 at 16:54

Ye was running it like that, did some more scans with Smitfraud, cwshredder and combofix and it went, ty for the advice though

Pigeon_Killer · 12 Jan 2009 at 17:38

Had a similar problem at work last week. Turned out to be a file called wdmaud.sys that was causing the problem.