Hijacking of seeks

[Guest]

I use XP home SP2, IE 6, Outlook Express, MS Antispyware and Norton
Antivirus, all up-to-date with the very latest updates. Nevertheless in the
last few days IE has been hijacked by some type of infection. The symptoms
are: after a search for a particular site when clicking on it I get taken to
another unwanted & undesired site (ie: Morwill Search.com and others). I have
attempted to clean this out by using MS Antispyware, Ad-Aware SE, No Adware,
Spybot, Spyware, Panda Activescan & Trend Micro all without success.
Has anyone had similar problems and how was it resolved?
Can anyone help?
If I can not clean this out of my system I may have to consider using
Firefox & Eudora rather then MS IE & Internet Explorer.

 

[Jan Il]

Hi Nevio

Thank you for the additional information. You have a hijacker or other type
of malware. Some types of malware can replicate itself repeatedly if not
fully removed.

Be sure that you have run all the programs that you have listed fully
updated. Download and install HiJackThis, run it, save the log and then
post the log to one of the HiJackThis Forums below for an expert evaluation.
Often things hide in system files that can't be detected but will show up in
the HJT logs. The experts at the forums can help you find out if there is
anything lurking in the system and how to remove it. Follow the
instructions below:

Download and install HiJackThis:

How to download and install HiJackThis: Win 98-XP
http://www.bleepingcomputer.com/forums/topict309.html
or
http://www.download.com/HijackThis/3000-8022_4-10227353.html

Please DO NOT post your log HiJackThis log to this newsgroup. It is
important that you go to one of the HiJackThis Support Forums below and
allow the experts there to analyze it for you.:
http://www.hijackthis.de/forum/forumdisplay.php?f=10&guestlanguageid=4
AumHa HiJackThis Forum
http://forum.aumha.org/viewforum.php?f=30
HJT - CastleCops
http://castlecops.com/f67-Hijackthis_Spyware_Viruses_Worms_Trojans_Oh_My.html
to allow the experts there to evaluate your log and advise you of any
necessary steps to clean your system.
(Note: You will have to Register before posting on these Forums. Please
follow all posting instructions carefully to avoid having your log deleted
or ignored.

Please post a link back here to the forum where you post your HJT log so
that we might follow your progress there.

Hope this helps.

Jan
MS MVP/Windows - Internet Explorer
Smiles are meant to be shared,
that's why they're so contagious

Replies posted only to the newsgroup for the benefit or other readers.
How to make a good newsgroup post:
http://www.dts-l.org/goodpost.htm

 

[Guest]

Jan,

Here is the link:
http://castlecops.com/t135819-Help_to_remove_re_direction_from_IE_to_Morwill_amp_other.html

Let hope my problem get resolved.

Nevio

 

[Jan Il]

Hi Nevio

Thank you for the link. Looks like Yellowhammer has you well in hand. I'll
monitor your progress there.

Jan
MS MVP/Windows - Internet Explorer
Smiles are meant to be shared,
that's why they're so contagious

Replies posted only to the newsgroup for the benefit or other readers.
How to make a good newsgroup post:
http://www.dts-l.org/goodpost.htm

 

[Guest]

Hi Jan,
As you may have seen, with the help of Yellowhammer the Virus afflicting my
PC has been purged; so all is well there now, but from after the first
Windows restart after the fix, I get this message in the early part of the
startup "Your computer might be at risk. Norton Antivirus is turned off.
Click this baloon to fix the problem" I promptly do that each time, nothing
shows as been out of the normal and in any case the message re-appears at the
next Windows restart.
Norton Antivirus is running and active.
This baloon appears above a RED & CROSSED Security Control Icon in the
System Tray.

Can you Help?

Nevio

 

[Jan Il]

Hi Nevio

Hi Jan,
As you may have seen, with the help of Yellowhammer the Virus afflicting
my
PC has been purged; so all is well there now, but from after the first
Windows restart after the fix, I get this message in the early part of the
startup "Your computer might be at risk. Norton Antivirus is turned off.
Click this baloon to fix the problem" I promptly do that each time,
nothing
shows as been out of the normal and in any case the message re-appears at
the
next Windows restart.
Norton Antivirus is running and active.
This baloon appears above a RED & CROSSED Security Control Icon in the
System Tray.

Can you Help?

I am very glad to see that Yellowhammer has been able to get help you get
your system fully clean and the initial problem is resolved. Good job!

As for the new problem, I have seen this problem before, and I have had it
myself, with the Windows XP Security Center and it is very annoying. Try
this:

Open the Windows Security Center. If the icon is not on your system tray to
the lower right of the screen where the time is listed, then open the
Control Panel and scroll down to the Windows Security Center. Open it and
click on last section to the left, "Change the way Security Center alerts
me". Uncheck the box next to "Firewall" and the last one "Virus Protection
if they are checked.

Also...on the right had side of the Security Center window, if you have
Norton turned on, turn the Virus Protection in that list to "Off", as it is
not necessary to have two virus programs in use/running at the same time,
and this could cause problems, as Norton has been known to try to disable
anything and everything else of that nature on your system.

Hope this helps.

Jan
MS MVP/Windows - Internet Explorer
Smiles are meant to be shared,
that's why they're so contagious

Replies posted only to the newsgroup for the benefit or other readers.
How to make a good newsgroup post:
http://www.dts-l.org/goodpost.htm

 

[Guest]

Hi Jan,

all issues are resolved now, many thanks for your help.

Nevio

 

[Jan Il]

Hi Nevio

Hi Jan,

all issues are resolved now, many thanks for your help.

Nevio

You're very welcome! I'm glad to hear you were able to resolve your
problem.

Jan
MS MVP/Windows - Internet Explorer
Smiles are meant to be shared,
that's why they're so contagious.