Browser hijack query

[BJG]

Grrr...

 

I've got a Vista PC with a browser hijack problem. The two free anti-malware programs I tend to turn to are Superantispyware and Malware Bytes. But I can't seem to install the first for some reason, and the second hasn't cured it. Any other suggestions...? I have to admit I'm hazy on the difference between malware and viruses in cases like this...

 

(Thanks for any ideas.)

[elsiegee40]

Firstly, I'd try installing, updating and running in safe mode with networking. It doesn't always work, but it does sometimes get round the issues caused by the malware.

 

I'd also give A-squared a try as I find it picks up the occasional thing missed by MBAM. Download a-squared Free 4.5.0.27 - FileHippo.com

[drew_mi]

Trend Micro's Hijackthis is an excellent, simple executable (no installation cleanup when you are done) for viewing and fixing browser hijack issues. Its free, can create a log at startup for documentation purposes, and creates nice little *oops* undo files to fix anything you may have accidentally removed.

 

free.antivirus.com/hijackthis/

[mac_shinobi]

Trend Micro's Hijackthis is an excellent, simple executable (no installation cleanup when you are done) for viewing and fixing browser hijack issues. Its free, can create a log at startup for documentation purposes, and creates nice little *oops* undo files to fix anything you may have accidentally removed.

 

free.antivirus.com/hijackthis/

 

I was going to say that but I normally go to hijackthis.de which is where it was originally made until they took over

[difinity]

Go here How to remove malware belonging to the family Rootkit.Win32.TDSS (aka Tidserv, TDSServ, Alureon)? for a TDSS removal tool.

 

And try combofix if it finds nothing.

[BJG]

(Thanks for the feedback - will try these out...)

[m25man]

The TDSS Variants seem to be highly active this week, with Fake AV payloads bypassing some of the best AV suites.

If you have users running with elevated rights such as Power User or Local Admins watch out as these users are the most likely to caught by a drive by.

Unfortunately most home users run their PCs as Local Admins which is why they get caught out...