Expert: Brian Benosky - 11/2/2008

Question
QUESTION: Hi Brian,
 From what I understand I have some sort of host hijacker virus.  It doesn't let me view or download many different things having to do with spyware or viruses.  And has rerouted my web searches.  I actually found the hijacked file in some system files but can't delete it.  I was able to run a spyware/adware scan but it didn't get rid of it.

I don't really understand how to run a log on the computer which I'm guessing you're going to ask me to do, so please explain that part.

Thank you
Heather

ANSWER: Hi Heather

It's not that hard.  Download TrendMicro HijackThis! from the following link:

http://www.trendsecure.com/portal/en-US/_download/HJTInstall.exe

* Save HJTInstall.exe to your desktop.
* Doubleclick on the HJTInstall.exe icon on your desktop.
* By default it will install to C:\Program Files\Trend Micro\HijackThis.
* Click on Install.
* It will create a HijackThis icon on the desktop.
* Once installed, it will launch Hijackthis.
* Click on the Do a system scan and save a logfile button. It will scan and the log should open in notepad.
* Click on "Edit > Select All" then click on "Edit > Copy" and Paste the entire contents of the log here in a follow-up.

Brian

---------- FOLLOW-UP ----------

QUESTION: This "virus" would not even let me go to that website.  I've been doing some research and this is a virus called windows antispywareXP 09.  I accidently downloaded it when a balloon from windows security icon popped up. Mcafee would not get rid of it and it won't let me go to websites like mcafee, microsoft defender, or just plain redirects me to sites that are not what I intend.  Apparently this is the latest and greatest virus.  Please let me know if there is something else I can try.  Thanks so much!

Heather

Answer
Hi Heather

Let's try running a Malwarebytes scan, preferably in Safe Mode.  Please download Malwarebytes' Anti-Malware to your desktop from here:

http://www.besttechie.net/tools/mbam-setup.exe

Double-click mbam-setup.exe and follow the prompts to install the program.
* At the end, be sure a checkmark is placed next to
    o Update Malwarebytes' Anti-Malware
* then click Finish.
* If an update is found, it will download and install the latest version.  Do not run a scan yet.

Restart the computer in Safe Mode by continuously tapping the F8 key on boot until a black screen with a menu appears.  Choose to Start Windows in Safe Mode.  Log on as usual.  Open Malwarebytes and run a Full Scan.

* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected.
* When completed, a log will open in Notepad.  Save that log and reboot normally.  Copy the log in a follow-up here along with a new HJT log.

Brian