Can't get PC fully clean, browser malware remains

Status
Not open for further replies.
Re-open HJT Scan only
Place a tick next to the following entries, only
Close any Internet browsers (ie Firefox ;) ) Then select FIX
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

Restart... Done :grinthumb
 
OK, done
I will see the following day but I think I'm clean!

Thanks again so much! What would so many people do without someone like you out there to help them?! (probably feel terrible...)
Thx!
:D
 
Still getting redirects :(
Some HDTV advertisements, definitly still bits of the malware, I was getting the same page
yesterday.
 
The SDFix program would have reset your Hosts file to default again

You may want to update to a more secure Hosts file
There's lots of important info on that here: http://www.mvps.org/winhelp2002/hosts.htm
As it's difficult to see the actual download, here it is: http://www.mvps.org/winhelp2002/hosts.zip
Important! Windows Vista requires special instructions: http://www.mvps.org/winhelp2002/hostsvista.htm

Simply download the hosts.zip file, extract, then run mvps.bat, then restart

[Important Notice - 2K/XP/Vista Users]
In most cases a large HOSTS file (over 135 kb) tends to slow down the machine. This only occurs
in W2000 and XP. Windows 98 and Windows ME are not affected.

To resolve this issue (manually) open the "Services Editor"

Start | Run (type) "services.msc" (no quotes)
Scroll down to "DNS Client", Right-click and select: Properties
Click the drop-down arrow for "Startup type"
Select: Manual, click Apply/Ok and restart.

Then restart, and test browsing the Internet again :)
 
Still getting weird redirects (t.websearchmaster.net/) with links.
However the page just shows up with an error...
 
Status
Not open for further replies.
Back