Possible Browser Hijack redirects Internet Explorer.

[Murray Tinker]

Everytime I run the scan it detects this high level threat.

"Description: Possible Browser Hijack redirects Internet
Explorer.

Advice: High-risk items have a large potential for adverse
effect, such as loss of computer control, and should be
removed unless knowingly installed.

About Browser Modifier: Software that changes browser
settings, such as the homepage, without adequate consent."

It is not removing the spyware. Any advice?

 

[Engel]

Please submit a suspected spyware report to MSAS (tools -

suspected spyware report)

Boot to Safe Mode.

Empty your IE cache and your other temporary file
folders, eg: c:\temp, c:\windows\temp or C:\Documents and
Settings\<name>\Local Settings\Temp (the path to your temp
folder will change depending on your name) - sometimes
programmes can be hidden in there - watch out for
mysterious *.exe files or *.dll files in those folders.

Have you tried scanning with Microsoft Antispyware in safe
mode?
Run a FULL SYSTEM SCAN, check the 3 boxes

Assuming that the installation is on drive C:
1. In "My Computer", right click on the icon for drive C:,
select "Properties".
2. Click tab "Tools".
3. Click button "Check Now".
3. Check both "Automatically fix file system errors"
and "Scan for and attempt recovery of bad sectors".
4. Click "Start".

Follow the instructions to allow system shut-down and
restart. The disk checks will run after restart and
before Windows loads. This scan for bad sectors might
take few minutes if you have a large hard disk: be patient.

Assuming that the installation is on drive C:
1. In "My Computer", right click on the icon for drive C:,
select "Properties".
2. Click tab "Tools".
3. Click button "Defragment Now".
3. Click Defragment.

Reboot.

 

[chad]

The same thing is happening here.

Trojan.Thun is the problem for us but the Microsoft anti-
spyware say it removed it. It right away changes the
registry entries back to point to all-find.com

 

[Bill Sanderson]

Have you tried scanning and removal in safe mode--doing full, deep scans
until one comes through clean?