Browser hijacking

[Leatherman]

Need a little help solving a problem with my browser. Seems my browser gets Hijacked. previously it used to be an extension that got installed and if you delete the extension things went back to normal. But this time there is no extension I Googled a solution and uninstall my antivirus and installed AVG antivirus to no avail. I then installed Malwarebytes and seem to still sit with the problem.

 

[Venomous]

what file name?

 

[Leatherman]

Don't really understand what you mean by what file name. I am using Google Chrome as my browser.

 

[Venomous]

What is the invading file or application called?

 

[Venomous]

What hijacks your browser?

 

[Venomous]

And please uninstall AVG and put back your AV.

Or better yet get, eset nod 32 smart security. Available from their site.

local site and support offered www.eset.co.za

 

[Leatherman]

I made this screenshot just a couple of minutes ago when it happened. hope it helps.

 

[Venomous]

download adwcleaner

 

[Venomous]

http://www.bleepingcomputer.com/download/adwcleaner/

one place it can be downloaded from.

 

[Venomous]

run file (Scan)
Clean,
(Reboot when requested)
after restart, restart app, then click uninstall

 

[Venomous]

oh and turn off, and delete your restore points BEFORE running the app.


After all is done turn back on restore points

 

[Venomous]

I guess it must have worked...

 

[Leatherman]

Tried all that, but it doesn't seem to have worked. Can only chat here in incognito, if I use the browser normally still the same. I ran the app two times once before I saw your post advising to delete restore points. Second time with restore points deleted and turned off.

 

[cyberbob1979]

Check also, I had a sneaky one which hijacked your shortcut to load stuff when you launch. Check to see if everything is still okay with the shortcut (s) too

 

[Leatherman]

What do you suggest delete the shortcut and recreate it?

 

[Leatherman]

And please uninstall AVG and put back your AV.

Or better yet get, eset nod 32 smart security. Available from their site.

local site and support offered www.eset.co.za

Waiting for scan to complete with Nod 32 now.

 

[Willy Strong]

Download and run RKill http://www.bleepingcomputer.com/download/rkill/
Download, update and run Malwarebytes http://www.bleepingcomputer.com/download/malwarebytes-anti-malware/
Download and run Shortcut-cleaner http://www.bleepingcomputer.com/download/shortcut-cleaner/
Run online scan http://www.eset.com/za/home/products/online-scanner/
Get ESET Smart Security http://www.eset.com/za/

 

[Leatherman]

Thanks will give it a try simm_card. This thing is driving me bonkers man.

 

[Hydnon]

Delete the Chrome Shortcut and create a new one from the chrome exe.

 

[Venomous]

if only chrome is a problem and not IE....
another thing you could try is to uninstall chrome with its addons. delete history etc


then

use IE (bet you love that idea)
and

then DL chrome again.


the reason being that it could be an infected addon, that appears legit. uninstall/delete will remove all those.