8 Step search result hijack help

Resetting Winsock is quite safe to do
Here is the command line alternative Start > Run > netsh winsock reset >ok
Then Restart

But it is preferred to run the above tool
Actually, I'm going to run it on mine right now, nothing like resetting all the winsock entries
I think I've quoted it about a 1000 times, everyone has been happy



Vista users can run this:
Manual steps to repair or to reset Winsock for Windows Vista users

1. Click , type cmd in the Start Search box, right-click cmd.exe, click "Run as administrator", and then press Continue.
2. Type netsh winsock reset at the command prompt, and then press ENTER.
3. Type netsh int ip reset at the command prompt, and then press ENTER.
4. Type netsh interface ip delete arpcache at the command prompt, and then press ENTER.
5. Type Exit, and then press ENTER.

Restart

Dont know if it means anything or not... but the search results are not hijacked anymore. I dont think we really did anything though, just scanned and posted the logs here.... I dont think im outta the woods yet.

did this too....

I'm thinking it was a Winsock entry, fixed by doing the above :approve:

But just keep testing (on safe normal sites of course
And let us know

Edit:
You know there is an Edit button

Hi EMS0525,

Can I assume by your absence that this topic is now solved?
I notice that you logged on 3 hours ago but no further reports from you
Did you want any help cleaning up all the tools, or is all ok with you doing this yourself?

Anyway, if you get a chance to let us know if you're "outta the woods" yet, that will be nice
I'll assume this Topic solved if you don't reply. I hope we all have helped you in this malware removal

The search results are not hijacked anymore... Can i supply any logs for confirmation on everything ok? Are all the tools pretty straight forward to uninstall?

Yep

As per my >> original post to you
And the rest:

• Winsockfix
• SystemLook
• GMER Rootkit Scanner
• Hijackthis (this may have an uninstall command in Add/Remove Programs)

Can just be deleted

I don't need any further logs

Ok, Thank both of you for helping.

Its not fixed after all....

I dont have the time to monkey with it anymore. Unless there is something else i can do its just going to get reformatted. Anything?

So the search results were not hijacked anymore, is it possible that you have now been re-infected? (ie you got infected in the first place) Do you have some ideas of where this infection may be coming from? File Sharing? Network?

I think it would be best to run through the 8-step removal guide again (ie all the programs have obviously updated in the last 4 days)

I also feel you may be best creating a new topic, since we are starting again

My wife needs the computer for work, she logs in at home. I couldnt afford to loose any more time. She had to call off 2 days because of the computer, so tonight i reformatted the hard drive and started over. Its all up and running again, only took 4 hours and if i was to try to fix the problem it would have taken alot longer. This way i also know that its clean and there isnt somethign lingering on it somewhere. Thanks again for your help.

I'm happy with that. Good idea :grinthumb
Generally (not always) a computer forum tries to fix the issue, but sometimes a clean install is required.

Do note: As I stated above, you were not infected originally Surf safe