Browser Infected

[lupi]

Got some type of pop up/redirect infection going on and can't seem to get rid of it. Run full virus scan, MWAB, spybot, hitman and none have reported anything other than antivirus reporting an infected item prevented initially.

What else out there can I run to wipe this out?

 

[Elixer]

You check your hosts file to make sure that is OK?
Screenshot of the popup might help identify it as well.

 

[lupi]

Host file unmodified with nothing that isn't commented out by the OS.

pop up pages are for a secret search, another privacy thing, and a couple computer help related. Also had one of those we've locked you computer pay us messages, unless you realize alt-f4 works.

 

[mikeymikec]

DNS servers? Unlikely but I'd check what is set anyway.

Which browser are you using? There are ways to hijack browsers without requiring a binary left behind. Backing up any data from the browser that you want to keep then resetting it may help.

 

[John Connor]

Check out if you have any rouge extensions or services installed in the browser. Run Autoruns and make sure something shouldn't be there. Run Freefixer and be very careful and what you delete. Research each module. I can't stress that enough.

 

[lupi]

Chrome, did reset it.

 

[lupi]

This is the latest one.


http://www.reimageplus.com/lp/rgn/i...0fGJjNDk2MTY4ZjkyMGVlMjgxZmMyZmJiYWFiNzJjZjYw

 

[Newfangle9]

Reimage looks like a nice little program. Showed me things others didn't, but I imagine it finds problems every time it's used since it costs 27 dollars and change. Not for a one year license or anything, but for each repair. Nice to sit and watch the whole process and then see the charge. I can't say that I was surprised because I've seen it before, but it's a sleazy way to do things if you ask me.

 

[mikeymikec]

I wouldn't touch Reimage with a barge pole. Customers with unwanted software and performance problems often also have this software on their computer, with no idea how it got there.

OP, did resetting Chrome help?

 

[Newfangle9]

Quick update regarding reimage. Uninstalled the program, did a malware scan and this morning I have a pop up window with a "special offer" My thanks to the poster of that link, nice one