Gregg, Have you tried malwarebytes (www.malwarebytes.org)? There's a version that's free for personal use. There are lots of other good anti-malware programs out there but we have found this to be one of the better ones. You may have to download it on another computer and copy it via a USB drive. You might also try renaming the program to hopefully fool the malware on your computer. If you can get it cleaned up, I'd install both an anti-virus and anti-spyware program unless you install one that's supposed to do both. AVG makes a good free anti-virus program. If all else fails, you may need to format the drive and install a fresh copy of the OS, backing up anything you want to keep first. Good luck. Mark Mark Seagroves Dir, Information Technology Assoc Prof, Computer Science Carson-Newman College (865) 471-3506 [log in to unmask] -----Original Message----- From: PCSOFT - Personal Computer software discussion list [mailto:[log in to unmask]] On Behalf Of Gregg Pfaff Sent: Wednesday, March 24, 2010 11:49 AM To: [log in to unmask] Subject: Re: [PCSOFT] can't get rid of a redirecting/browser hijacking Virus It appears the link I was sent contained a virus / malware cocktail...I still have not found anything that will detect and remove whatever is hijacking my browsers. I downloaded Mozilla Firefox while in safe mode but it hijacks that also (when not in safe mode). Maybe it's into my networking? I can browse anywhere but anti-virus sites unless I'm in safe mode W/networking. Any Ideas out there? the rest of my computer seems fine and no viruses or malware are detected. Gregg ----- Original Message ----- From: "Gregg Pfaff" <[log in to unmask]> To: "PCSOFT - Personal Computer software discussion list" <[log in to unmask]> Sent: Tuesday, March 23, 2010 7:41 PM Subject: Re: [PCSOFT] can't get rid of a redirecting/browser hijacking Virus > Rob and everyone, > I forgot to mention that my friend didn't really send it...it got into his > friends list and sent itself out to all his friends as it did the same > thing to my friends list. I called and emailed and posted a message to my > profile to "DON'T CLICK ON IT, I DID NOT SEND IT IT'S A VIRUS" This thing > also posted itself to my profile which I promptly removed it. Hope nobody > else clicked on it. > People who sit around and intentionally write virus's should be caught and > sentenced to life in prison minimum! But they seldom get caught because > it's too hard to trace where it originates from I guess? > Gregg > > > ----- Original Message ----- > From: "Robert Citkowitz" <[log in to unmask]> > To: <[log in to unmask]> > Sent: Tuesday, March 23, 2010 1:36 PM > Subject: Re: [PCSOFT] can't get rid of a redirecting/browser hijacking > Virus > > > Good luck, Gregg! Sounds bad! But how do you know it came from Facebook? > > Rob > > ----- Original Message ----- > From: Gregg Pfaff > To: [log in to unmask] > Sent: Tuesday, March 23, 2010 3:57 AM > Subject: [PCSOFT] can't get rid of a redirecting/browser hijacking Virus > > > I can't seen to remove the remainder of a virus which was picked up on > facebook. I've tried the windows malicious software removal tool, AVG, > McAfee, HijackThis, Ad ware, MalwareBytes...etc. Most virus files are > removed but the problem I still have is it redirects my browser away from > antivirus sites and wouldn't let me update AVG antivirus database so, I > downloaded the trial version of McAfee while in safe mode. The redirecting > doesn't occur while in safe mode. any suggestions before I'm forced to > reformat and reinstall everything? I'm running XP pro and IE8 on a Dell > latitude D620 laptop. > Gregg > > Curious about the people moderating your > messages? Visit our staff web site: > http://freepctech.com/staff.shtml > > Curious about the people moderating your > messages? Visit our staff web site: > http://freepctech.com/staff.shtml Do you want to signoff PCSOFT or just change to Digest mode - visit our web site: http://freepctech.com/pcsoft.shtml Do you want to signoff PCSOFT or just change to Digest mode - visit our web site: http://freepctech.com/pcsoft.shtml