Search Engine hijacked and Norton 2009 not opening up

Status
Not open for further replies.
HI Guys
My internet explorer was hijacked and can't get it back to normal. When i go to search for stuff in google and click on the result it takes me to a page that isn't what i'm looking for. Redirects me to somewhere else. Ran malwarebytes and took care of 9 things. IE7 still is screwed up. I ran hijack this in safe mode and here is what i have for the log file. Besides the internet messed up Norton 2009 won't even open up in normal mode.
 
hey ConquerDeath

Many people are struggling with the redirect from google at this point in time. There are a few threads associated with the problem. I'm not sure whether it's been solved or not but just do some searching on this site and you should find something. Uninstall Norton AV .... frankly, it's pretty rubbish.... Run the 8-step virus removal from here .... https://www.techspot.com/community/...lware-removal-preliminary-instructions.58138/ ....

Spyder_1386 :)
 
In MBAM click logs and attach all logs in order from oldest to newest.

It is important that we see all that you had as it helps us proceed in the right direction with your cure.

Do this....

So go here: http://www.adrive.com/public/97c4357781f45c7e443061094b8cfaff3836f57446eb242ab2ee0b6cd68a0107.html

Download to Desktop then double click it to extract it, then click OK to self extract.

Once extracted boot to Safe Mode.

Then dbl click to enter Fixer folder.

To run it 1st double click Daft, click scan and check any found items and click fix.
Then just dbl click Fixit.cmd to run it.

Then boot back to normal mode.

You did not mention SAS so install that update and run Full Scan and post log.

Mike
 
SAS not loading after installation

I'm following the 8 step process and am stuck on the superantispyware program. I install it correctly and it just won't open up when i click on the icon on my desktop. says it has encountered a problem and must close. i've tried using sas's site and and this site. is the download file corrupt? or is it my computer? thanks for any help. once i get this thing done i'll post my logs and hope to regain my computer back.
 
Special case where after installing MBAM and SAS they will not update or run
Read here: https://www.techspot.com/vb/topic116603.html

Failing that, try here: https://www.techspot.com/vb/post684649-3.html

Then continue: UPDATED 8-step Viruses/Spyware/Malware Preliminary Removal Instructions

Threads merged


To save mflynn's reply ;)

Where's Malwarebytes log?

By the way, you should run these multiple times until clean

Also I don't help on these threads (Virus and Malware) anymore so I hope mflynn continues on once you have attached the Malwarebytes scan log
 
Alrighty. I finally got things working. renamed the sas.exe file and then it worked. found a bunch of garbage. here are the txt files. I reset IE8 for the heck of it. I just checked the search engine on the other tab just now and it is back to normal. Let me know what I should do with the hijackthis program for which ones to checkmark and fix. I also killed Norton 2009. what a waste of a program. I am noticing I still can't get into my c:, e:, and f: drives. comes up with cannot find recycler.com with a bunch of numbers in the file name. what's the fix for that cranky beast? thanks a bunch.

here the mbam ones. sorry bout that.

I've done that too for running them a few times for the different programs I've installed from the list of to do things to clean system. just that recycler virus thing preventing me from double clicking on my drives. I read something online earlier today but couldn't make sense of it.
 

Attachments

  • hijackfinal.txt
    7.9 KB · Views: 5
  • avira-last.txt
    6.8 KB · Views: 5
  • sas.txt
    3.1 KB · Views: 6
  • mbam2.txt
    853 bytes · Views: 6
You did not say but your logs indicate you did not run this? From my last post.
So go here: http://www.adrive.com/public/97c4357...cd68a0107.htmlDownload to Desktop then double click it to extract it, then click OK to self extract.

Once extracted boot to Safe Mode.

But you did a excellent job on all else.

Even if you did it, do it again as it like MBAM and SAS take more than one run sometimes. As you still have issues.
----------------------------------------------------------------------------------------------------------------------------------------------------

Norton is hard to remove fully and properly and can cause non apparent issues and performance issues until properly cleaned.

Norton removal tool (use this to cleanup after a normal uninstall or if it will not uninstall)
http://majorgeeks.com/Norton_Removal_Tool_SymNRT_d4749.html

Then SymRegFix ftp://ftp.symantec.com/public/english_us_canada/tutorials/SymRegFix.exe

To download using Internet Explorer. Click the following link to download the file:

SYMMSICLEANUP.reg (ftp://ftp.symantec.com/public/english_us_canada/linked_files/tsgen/SYMMSICLEANUP.reg)

Save the file to the Windows desktop.

To download using Firefox. Right-click the following link and then click Save Link As to download the file:

SYMMSICLEANUP.reg (ftp://ftp.symantec.com/public/english_us_canada/linked_files/tsgen/SYMMSICLEANUP.reg)

then
Use same instructions for IE or FF to get the below.

IE: MSIFIX.bat (ftp://ftp.symantec.com/public/english_us_canada/linked_files/tsgen/MSIFIX.bat)

FF: MSIFIX.bat (ftp://ftp.symantec.com/public/english_us_canada/linked_files/tsgen/MSIFIX.bat)

Download them all and then run each and you will mostly be cleat od Norton/Symantec.

Finally to finish cleaning Norton paste the text inside the box below to an open command prompt.
Code:
@echo off
cd\
attrib /s c:\norton*.* >"%USERPROFILE%"\Desktop\Norton.log
attrib -h -s -r  /s c:\norton*.* 
attrib /s c:\syman*.* >"%USERPROFILE%"\Desktop\symantec.log
attrib -h -s -r  /s c:\syman*.*
del /f /q /s c:\norton*.*
del /f /q /s c:\syman*.*
exit
exit

Now look at the 2 new files on Desktop to see what was left on the HDD!

To get the rest D/L Regseeker http://www.hoverdesk.net/freeware.htm
Click its find in registry and search for norton then symantec. Then a general Regseeker clean.
----------------------------------------------------------------------------------------------------------------------------------
When all above is finished do the below..

Download ComboFix

Get it here: https://www.techspot.com/downloads/5587-combofix.html
Or here: http://subs.geekstogo.com/ComboFix.exe

Double click combofix.exe follow the prompts.

Install Recovery Console if connected to the Internet!

When finished, it will open a log.
Attach the log and a new HJT log in your next reply.

Note: Do not click combofix's window while its running. That may cause it to stall.
=========================================

Download SDFix to Desktop.

http://downloads.andymanchesta.com/RemovalTools/SDFix.exe

On Desktop run SDdFix It will run (install) then close.

Then reboot into Safe Mode

As the computer starts up, tap the F8 key several times.

On the Boot menu Choose Safe Mode.

Click thu all the prompts to get to desktop.

At Desktop
My Computer C: drive. Double-click to open.

Look for a folder called SD Fix. Double-click to enter SD Fix.

Double-click to RunThis.bat. Type Y to begin.

SD Fix does its job.

When prompted hit the enter key to restart the computer

Your computer will reboot.

On normal restart the Fixtool will run again and complete the removal process then say Finished,
Hit the Enter key to end the script and load your desktop icons.

Once the desktop is up, the SDFix report will open on screen and also be saved to the SDFix folder as Report.txt.
Attach the Report.txt file to your next post.

Then last a new HJT log!

Mike
 
i'll finish the rest up tomorrow. and run the adrive thing. what is that suppose to do anyways? i'll post the logs once i'm finished. is the recycler.com thing that prevents me from double clicking into my drives going to be fixed with what i'll be doing? thank you for the all the info. i'm glad i found this place.
 
What does it Do! Run many fixes and deletes known bad files plus more!

It alone should fix the Recycle bin!

Then as Norton seems to cause issues like this be sure to do that.

Other words do all of the post!

Mike
 
Ok i'm back here. busy day. I'm stuck on the Regseeker progam. I know i shouldn't delete everything i see listed. I searched for Norton related stuff and came up with 57 items. Symantec 55 items. Then the big fat list for general clean came up with 1295 items which has stuff saying somethings not used or not found. How do i go about knowing what's safe to delete? I was trying to copy the stuff to save to notepad but couldn't. At this point too i still am unable to double click into my c,e,f drives. i know i have the combofix and sdfix left but want to make sure i get the regseeker thing done correctly knowing that some things are related to programs i use on the computer.
 
Skip the Regseeker cleanup and instead do a CCleaner Temp and Reg twice or more on each until clean then get on with the other steps.

Mike
 
Status
Not open for further replies.
Back