Firefox Hijacked

1

Despite running the latest Service packed versions of Windows 8 with UAC, Windows defender, Microsoft Security Essentials along with Firefox 6 + updates, my computer became infected with a Trojan from a website which made nearly all the files on the HDD Hidden. Then Ads kept popping up for a fake AV application.

I have a removed the Trojan (I think) but my Firefox browser search has been hijacked. I have disabled all addons, ran Hijack this, Malware Bytes, the USB linux based AVG scanners and several commercial online viruses scanners which find nothing. How can I track down and remove the hijacker which I think was installed by FakeSysDef?

Canacourse

Posted 2011-11-09T16:32:06.670

Reputation: 205

FAQ: http://superuser.com/q/100360/52492.

– RedGrittyBrick – 2011-11-09T23:13:28.667

Thanks Ive tried most of those suggestions on there already. Im fairly sure the malware is gone from my PC but whatever is causing the search re-directs still remains. A re-install of the OS is looking likely. – Canacourse – 2011-11-10T11:26:48.070

Answers

0

Try looking in the config screen on firefox by putting about:config in your address bar.

See if any search options there have been hijacked. If searches are still being hijacked even in Windows Safe Mode and running firefox with addons disabled, you may have a rootkit.

Try ComboFix from Bleeping Computer, and TDSSKiller, and ZbotKiller from Kaspersky Virus Removal Tools usually work well for me detecting common rootkits.

drew010

Posted 2011-11-09T16:32:06.670

Reputation: 351

Got with TDSSKiller in the end althought it took a few attempts to get it to even run. It wewas aroot kit. – Canacourse – 2011-12-05T16:56:39.040

nice, glad you got it. those mbr rootkits are nasty. – drew010 – 2011-12-05T17:35:57.777

Asked: 2011-11-09T16:32:06.670

Viewed: 315 times

Active: 2015-10-27T02:36:03.863