[cintwinawork]

Recently my browswer has been hijacked. Ads will pop up on my screen. My websites will be redirected to other sites. I got the html above from one of the pop up ads.

 

I have NORTON Anitvirus and Live update. I just started getting an error when trying to access Norton Anti Virus program.

 

I restored my system back to June 28 before this all started and still have the hijackers.

 

Please help!

 

Cindy

Attached Thumbnails

• 

[Advertisements]

Hi there, I will need to have a look at your system. What error does Norton give ?

Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

• Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
• Select additions at the bottom
• Press Scan button.
  
• It will produce a log called FRST.txt in the same directory the tool is run from.
• Please attach both logs generated.

[Essexboy]

Hi there, I will need to have a look at your system. What error does Norton give ?

Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

• Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
• Select additions at the bottom
• Press Scan button.
  
• It will produce a log called FRST.txt in the same directory the tool is run from.
• Please attach both logs generated.

[cintwinawork]

I'm attaching a screen shot of the norton error. I am also attaching the OTL logs and the Farber logs.

Attached Thumbnails

• 
• 
• 

Attached Files

•  FRST.txt   32.23KB   100 downloads
•  Addition.txt   40.87KB   117 downloads
•  OTL.Txt   77.92KB   107 downloads

[cintwinawork]

Sorry, forgot the OTL extras log

Attached Files

•  Extras.Txt   63.96KB   93 downloads

[Essexboy]

OK lets start.  The thing to bear in mind is that most Antivirus programmes do not like system restore, I will see if Norton has a repair function

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:
 

SearchScopes: HKLM-x32 - DefaultScope {8A289A0D-F50F-460C-9C7C-A677132F175F} URL =
SearchScopes: HKLM-x32 - {0BC6E3FA-78EF-4886-842C-5A1258C4455A} URL = http://search.imgag....q={searchTerms}
SearchScopes: HKCU - DefaultScope {8A289A0D-F50F-460C-9C7C-A677132F175F} URL = http://search.condui...8555933254&UM=2
SearchScopes: HKCU - {49606DC7-976D-4030-A74E-9FB5C842FA68} URL =
SearchScopes: HKCU - {6D832424-63E4-4543-A7F5-28FC67BC5B2E} URL = http://websearch.ask...FF-41BFD5F0FE8A
SearchScopes: HKCU - {8A289A0D-F50F-460C-9C7C-A677132F175F} URL = http://search.condui...8555933254&UM=2
FF SearchPlugin: C:\Users\cindy\AppData\Roaming\Mozilla\Firefox\Profiles\qojbh5en.default\searchplugins\askcom.xml
FF SearchPlugin: C:\Users\cindy\AppData\Roaming\Mozilla\Firefox\Profiles\qojbh5en.default\searchplugins\conduit.xml
FF SearchPlugin: C:\Users\cindy\AppData\Roaming\Mozilla\Firefox\Profiles\qojbh5en.default\searchplugins\web-search.xml
C:\Users\cindy\xp.reg
Task: {0840070A-F90A-4D95-B542-61060696FF5C} - System32\Tasks\PC Optimizer Pro64 startups => C:\Program Files\PC Optimizer Pro\StartApps.exe <==== ATTENTION
CMD: bitsadmin /reset /allusers
CMD: DEL %TEMP%\*.* /F /S /Q
CMD: RD /S /Q %TEMP%
REBOOT:

Save this as fixlist.txt, in the same location as FRST.exe
Run FRST and press Fix
On completion a log will be generated please post that

THEN

Please download AdwCleaner by Xplode onto your desktop.

• Close all open programs and internet browsers.
• Double click on AdwCleaner.exe to run the tool.
• Click on Scan.
• After the scan is complete click on "Clean"
• Confirm each time with Ok.
• Your computer will be rebooted automatically. A text file will open after the restart.
• Please post the content of that logfile with your next answer.
• You can find the logfile at C:\AdwCleaner[S1].txt as well.

FINALLY

Download aswMBR.exe ( 4.5mb ) to your desktop.
Double click the aswMBR.exe to run it.
You may be offered the option of using virtualisation, accept that
When it offers to download the virus database allow that as well
Click the "Scan" button to start scan




On completion of the scan click save log, save it to your desktop and post in your next reply

[cintwinawork]

Here is the fix list as requested. I will continue with your instructions.

[cintwinawork]

Here is the fix list as requested. I will continue with your instructions.

Attached Files

•  Fixlog.txt   99.17KB   218 downloads

[Essexboy]

Thanks, unfortunately Norton does not have a repair function, according to them you will need to fully uninstall and then re-install.  So you will need your licence file before we start on that road

[cintwinawork]

here is the adwcleaner log

Attached Files

•  AdwCleanerS0.txt   6.7KB   89 downloads

[cintwinawork]

Here is my aswMBR log

Attached Files

•  aswMBR.txt   2.35KB   102 downloads

[cintwinawork]

I will get my norton disk and uninstall and reinstall

[Essexboy]

Once done could you let me know if the ads/popups have ceased please

[Essexboy]

Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.