Notices
Computer & Technology Related Post here for help and discussion of computing and related technology. Internet, TVs, phones, consoles, computers, tablets and any other gadgets.

help - virus - hijack browser - help!

Thread Tools
 
Search this Thread
 
Old 10 January 2009, 08:12 PM
  #1  
The Zohan
Scooby Regular
Thread Starter
 
The Zohan's Avatar
 
Join Date: Jan 2000
Location: Disco, Disco!
Posts: 21,825
Likes: 0
Received 0 Likes on 0 Posts
Exclamation help - virus - hijack browser - help!

I am a bit of an it peasant so keep it simple

I know this is probably for computer relateed but i am in desperate need of help so please do not move

I have avg virus software which came up with this
HKU/PE_C_ADMINSTRATOR/SOFTWARE/MICROSOFR/INTERNET EXPLORER/EXTENSIONS/CMDMAPPING//{c95fe080-8f5d-11d2-a20b-00aa003c157a}

it will not remove it or 'see 'it a s serious threat and remove it

can someone help me remove this or tell me how.

i cannot use firefox or ie7 to search without it coming up with spam it tries to send me to

Help - please!
Old 10 January 2009, 08:17 PM
  #2  
Jamie
Super Muppet
 
Jamie's Avatar
 
Join Date: Apr 2004
Location: Inside out
Posts: 33,364
Likes: 0
Received 0 Likes on 0 Posts
Default

That looks like a DAT file
Old 10 January 2009, 08:19 PM
  #3  
Tam the bam
R.I.P.
 
Tam the bam's Avatar
 
Join Date: May 2006
Posts: 7,036
Likes: 0
Received 0 Likes on 0 Posts
Default

You can check your pc online to see if it has any nasties Overview

HTH
Old 10 January 2009, 08:20 PM
  #4  
Jamie
Super Muppet
 
Jamie's Avatar
 
Join Date: Apr 2004
Location: Inside out
Posts: 33,364
Likes: 0
Received 0 Likes on 0 Posts
Default

Is Alexa spyware?
c95fe080-8f5d-11d2-a20b-00aa003c157a :: c95fe080-8f5d-11d2-a20b-00aa003c157a Removal Instructions
Hth

Last edited by Jamie; 10 January 2009 at 08:22 PM.
Old 10 January 2009, 08:21 PM
  #5  
PaulC72
Scooby Regular
 
PaulC72's Avatar
 
Join Date: Sep 2006
Location: RIP Tam.
Posts: 5,108
Likes: 0
Received 0 Likes on 0 Posts
Default

have you tried removing it when in safe mode?
Old 10 January 2009, 08:33 PM
  #6  
The Zohan
Scooby Regular
Thread Starter
 
The Zohan's Avatar
 
Join Date: Jan 2000
Location: Disco, Disco!
Posts: 21,825
Likes: 0
Received 0 Likes on 0 Posts
Question

Originally Posted by PaulC72
have you tried removing it when in safe mode?
How would i go about doing this?

is there some freeware that will help - without me buying software - i will purchase if need be but would like to do uit without spending £££'s and if i do need to buy something can someone reccommend a package that will work and do the job???
Old 10 January 2009, 08:34 PM
  #7  
STi wanna Subaru
Scooby Regular
iTrader: (1)
 
STi wanna Subaru's Avatar
 
Join Date: Apr 2001
Location: Yorkshire
Posts: 16,517
Likes: 0
Received 0 Likes on 0 Posts
Default

Download this.

Malwarebytes.org

Malwarebytes' Anti-Malware - Reviews and free Malwarebytes' Anti-Malware downloads at Download.com

Run the update then do a smart scan.

Report back.
Old 10 January 2009, 08:36 PM
  #8  
mykp
Scooby Regular
 
mykp's Avatar
 
Join Date: Jan 2006
Location: On the Cat and Fiddle
Posts: 1,483
Likes: 0
Received 0 Likes on 0 Posts
Default

Originally Posted by STi wanna Subaru
what he said and do a scan, anything dubious will be picked up. Had a couple of customer machines with similair probs recently.
Old 10 January 2009, 08:36 PM
  #9  
Jamie
Super Muppet
 
Jamie's Avatar
 
Join Date: Apr 2004
Location: Inside out
Posts: 33,364
Likes: 0
Received 0 Likes on 0 Posts
Default

Avg will remove it!

avg v8.0.176
Old 10 January 2009, 08:39 PM
  #10  
joey_turbo
Scooby Regular
iTrader: (26)
 
joey_turbo's Avatar
 
Join Date: Apr 2006
Location: Essex
Posts: 6,547
Received 9 Likes on 6 Posts
Default

Malwarebytes as mentioned is great.
But the OP can't use the net he is saying.

If you want I can email it is over, its 2.57mbs.
Old 10 January 2009, 08:56 PM
  #11  
samcowrx
Scooby Regular
 
samcowrx's Avatar
 
Join Date: Dec 2006
Location: Oxford- the shire
Posts: 1,281
Likes: 0
Received 0 Likes on 0 Posts
Default

malwarebytes is brilliant, iirc it does a great boot scan, and as long as you are disconnected from the net for the time you are scanning and booting it rids of the virus completely so it can manifest itself again.
Old 10 January 2009, 08:57 PM
  #12  
samcowrx
Scooby Regular
 
samcowrx's Avatar
 
Join Date: Dec 2006
Location: Oxford- the shire
Posts: 1,281
Likes: 0
Received 0 Likes on 0 Posts
Default

Free trial on avast can be good too!, hijackthis and spybot can be helpful also.
Old 10 January 2009, 08:58 PM
  #13  
The Zohan
Scooby Regular
Thread Starter
 
The Zohan's Avatar
 
Join Date: Jan 2000
Location: Disco, Disco!
Posts: 21,825
Likes: 0
Received 0 Likes on 0 Posts
Question

Originally Posted by joey_turbo
Malwarebytes as mentioned is great.
But the OP can't use the net he is saying.

If you want I can email it is over, its 2.57mbs.
Hi Joey

Thanks to all that have responded - i can get onto sites directly just not use a search engine without spam sites coming up.

I have downloaded the malware software and updated it - it found the virus mentioned and i removed it and still have the same problem when trying to use a search engine.

maybe i did the update incorretly - i clicked on update and followed the instructions and it said it was up to date.

any thoughts???

Many thanks

Paul
Old 10 January 2009, 09:04 PM
  #14  
mykp
Scooby Regular
 
mykp's Avatar
 
Join Date: Jan 2006
Location: On the Cat and Fiddle
Posts: 1,483
Likes: 0
Received 0 Likes on 0 Posts
Default

if you can get internet access then it sounds like your dns has been comporimised.

close your browser,
goto start then run
type cmd (if your on vista type cmd in the box)
you should get a black windows.
type: IPCONFIG /flushdns

then type: c:\program files\internet explorer\iexplore.exe Malwarebytes.org

this will open IE at the malwarebytes site
Old 10 January 2009, 09:05 PM
  #15  
samcowrx
Scooby Regular
 
samcowrx's Avatar
 
Join Date: Dec 2006
Location: Oxford- the shire
Posts: 1,281
Likes: 0
Received 0 Likes on 0 Posts
Default

did it do a lengthly boot scan?, ie reboot and scan on startup?, it might be an idea to try again but definately disconnect from the internet tottally, unplug it if you have too, a lot of these viruses at any chance download themselves again at any chance unless you are disconnected and then scan and delete all of its components before going back onilne
Old 10 January 2009, 09:05 PM
  #16  
PaulC72
Scooby Regular
 
PaulC72's Avatar
 
Join Date: Sep 2006
Location: RIP Tam.
Posts: 5,108
Likes: 0
Received 0 Likes on 0 Posts
Default

Paul, it does soumd like malware you have a PM.
Old 10 January 2009, 09:06 PM
  #17  
mykp
Scooby Regular
 
mykp's Avatar
 
Join Date: Jan 2006
Location: On the Cat and Fiddle
Posts: 1,483
Likes: 0
Received 0 Likes on 0 Posts
Default

if its still there get a copy of hijack this and run it. Its designed to remove browser hijacks

|MG| HijackThis 1.99.1
Old 10 January 2009, 09:15 PM
  #18  
STi-Frenchie
Scooby Regular
 
STi-Frenchie's Avatar
 
Join Date: Sep 2002
Location: French side of the border at Geneva, Switzerland
Posts: 5,703
Likes: 0
Received 0 Likes on 0 Posts
Default

In addition to the other useful tips here, get to the Run menu item and type in MSCONFIG it will show you a list of programs that are starting when Windows is starting. Uncheck anything you think is dodgy then reboot and try searching. It could well be that the hijacker is starting when you start windows but not showing the system tray or start menu items. Msconfig will allow you to disable it. As you can't get to a search engine right now, make a list of the program names you see in the list MSCONFIG supplies and then people on here can search for them in Google to verify whether or not they are harmful. If harmful simply tell them not to load and then when you have clean booted, delete the offending programs and empty the trash. This will help get you back to some semblance of stability. HTH
Old 10 January 2009, 09:15 PM
  #19  
j4ckos mate
Scooby Regular
 
j4ckos mate's Avatar
 
Join Date: Sep 2006
Posts: 3,283
Likes: 0
Received 0 Likes on 0 Posts
Default

MY top tips are go to download.com on another machne
get avg free, spybot, ad aware and firefox
on a mem stick shove it in yours, then run them all and windows defender, you should be ok.
Old 10 January 2009, 09:21 PM
  #20  
oadamo
Scooby Regular
iTrader: (1)
 
oadamo's Avatar
 
Join Date: May 2007
Location: west mids
Posts: 338
Likes: 0
Received 0 Likes on 0 Posts
Default

does it keep poping up with security center 2009
adam
Old 10 January 2009, 09:26 PM
  #21  
samcowrx
Scooby Regular
 
samcowrx's Avatar
 
Join Date: Dec 2006
Location: Oxford- the shire
Posts: 1,281
Likes: 0
Received 0 Likes on 0 Posts
Default

Originally Posted by STi-Frenchie
In addition to the other useful tips here, get to the Run menu item and type in MSCONFIG it will show you a list of programs that are starting when Windows is starting. Uncheck anything you think is dodgy then reboot and try searching. It could well be that the hijacker is starting when you start windows but not showing the system tray or start menu items. Msconfig will allow you to disable it. As you can't get to a search engine right now, make a list of the program names you see in the list MSCONFIG supplies and then people on here can search for them in Google to verify whether or not they are harmful. If harmful simply tell them not to load and then when you have clean booted, delete the offending programs and empty the trash. This will help get you back to some semblance of stability. HTH
if you go the msconfig route mate, and you are not sure what should be running, or what should not be running, screen grab the list and send it to someone on here who is clued up on what should be running, they will prob help no end!
Old 11 January 2009, 02:46 AM
  #22  
Boro
Scooby Regular
iTrader: (1)
 
Boro's Avatar
 
Join Date: Jul 2003
Location: Cornwall
Posts: 7,222
Likes: 0
Received 0 Likes on 0 Posts
Default

Dont forget the most valuable piece of advice above and do EVERYTHING in SAFE MODE. It could be completely useless doing it any other way.

Keep pressing F8 on boot up.
Old 13 January 2009, 07:56 AM
  #23  
The Zohan
Scooby Regular
Thread Starter
 
The Zohan's Avatar
 
Join Date: Jan 2000
Location: Disco, Disco!
Posts: 21,825
Likes: 0
Received 0 Likes on 0 Posts
Default

Hello and many thanks for the advice.

I am a techno peasant whan it comes to computers - the safe mode route is a bit out of my league unless a last resort.
I have d/l'd the reg mechanic and also anti malware - both pick up the problem and i need to purchase one of them to get rid of the virus.
Also avg picks it up and again i need to dust of my wallet and buy it

I can use Yahoo to search in the mean time.

Again thanks
Old 13 January 2009, 09:34 AM
  #24  
STi wanna Subaru
Scooby Regular
iTrader: (1)
 
STi wanna Subaru's Avatar
 
Join Date: Apr 2001
Location: Yorkshire
Posts: 16,517
Likes: 0
Received 0 Likes on 0 Posts
Default

malwarebytes is free and will remove stuff for free. Not sure why you have to pay for anything if it picks it up?

Safe mode is easy to activate and turn off.

Start>Run>msconfig

Bootini tab select Safeboot

resart

do your scans

repeat above and untickk Safeboot to restart in normal mode.
Related Topics
Thread
Thread Starter
Forum
Replies
Last Post
farmerwrx
Computer & Technology Related
14
10 September 2015 11:59 AM
BUDA
ScoobyNet General
29
01 June 2001 05:33 PM
a2jcy
ScoobyNet General
3
30 May 2001 12:38 PM
Big RS Dave
ScoobyNet General
5
14 April 2001 08:12 PM



Quick Reply: help - virus - hijack browser - help!



All times are GMT +1. The time now is 03:23 AM.