1. Welcome Guest! In order to create a new topic or reply to an existing one, you must register first. It is easy and free. Click here to sign up now!.
    Dismiss Notice

My home page keeps changing to search.info

Discussion in 'Malware Removal Help' started by grantiman, May 4, 2015.

  1. grantiman

    grantiman Registered Members

    Joined:
    Apr 13, 2015
    Messages:
    40
    Operating System:
    Windows 7
    Got a new computer and downloaded Firefox with Yahoo as my homepage, worked good for a few day then my home page changed to www-search.info. I ran Malwarebytes and Spybot and they're always coming up with some kind of infected files. I click on fix but it still won't get rid of search.info. This doesn't happen with my IE only with Firefox. I uninstall Firefox then reinstall it again, set my home page to Yahoo, but then a few days later it happens again. Can anyone help me get rid of this search.info?
     
    grantiman, May 4, 2015
    #1
  3. Rich M

    Rich M Guest

    Joined:
    Dec 24, 2013
    Messages:
    4,580
    Location:
    NE Pa USA
    Operating System:
    Windows 7
    Computer Brand or Motherboard:
    MSI Z97 PC Mate LGA 1150 Intel Z97
    CPU:
    Intel i7 4790K 4.0Ghz
    Memory:
    Corsair Vengeance 16GB (2x8GB) DDR3 2133
    Hard Drive:
    Crucial 256 Gb SSD+ WD Raptor 300 Gb Sata III
    Graphics Card:
    Radeon R9 280 2GB HDMI
    Power Supply:
    Seasonic 750 watt
    Rich M, May 4, 2015
    #2
  4. starbuck

    starbuck Administrator - Malware Removal Specialist Administrator

    Joined:
    Sep 26, 2009
    Messages:
    3,825
    Location:
    Midlands, UK
    Operating System:
    Windows 10
    CPU:
    AMD Athlon II x2 250 Processor 3.00GHz
    Memory:
    8gb DDR3
    Hard Drive:
    500gb SATA
    Graphics Card:
    ASUS GeForce GTX 960 2gb
    Power Supply:
    650w PowerCool X-Viper
    Hi grantiman,

    Although you have already run MalwareBytes... please run it again and post the report from it:
    After MBAM has finished...
    • Click on the History tab >> Application Logs.
    • Double click on the scan log which shows the Date and time of the recent scan that showed the infections.

      9a6e580fff9c8571a5ca63282bd36ecd.png
    • Click 'Copy to Clipboard'

      659074db5778e497b12fcc667ed9d26a.png
    • Paste the contents of the clipboard into your reply.


    Also please post the 2 FRST reports and the AdwCleaner report from the scans that Rich-M linked to.

    Thanks
     
    starbuck, May 5, 2015
    #3
  5. grantiman

    grantiman Registered Members

    Joined:
    Apr 13, 2015
    Messages:
    40
    Operating System:
    Windows 7
    I hope I did this right, if not let me know and I'll try it again, thanks
     

    Attached Files:

    grantiman, May 5, 2015
    #4
  6. starbuck

    starbuck Administrator - Malware Removal Specialist Administrator

    Joined:
    Sep 26, 2009
    Messages:
    3,825
    Location:
    Midlands, UK
    Operating System:
    Windows 10
    CPU:
    AMD Athlon II x2 250 Processor 3.00GHz
    Memory:
    8gb DDR3
    Hard Drive:
    500gb SATA
    Graphics Card:
    ASUS GeForce GTX 960 2gb
    Power Supply:
    650w PowerCool X-Viper
    Hi grantiman

    Nearly.
    Unfortunately you are running FRST from the Temporary Internet Files.
    This makes it impossible to run a fix..... and there's quite a bit to fix.
    The fix and FRST will need to be in to same folder for the fix to work.

    But first let's clean up the AdwCleaner report.
    • Close all open programs and internet browsers.
    • Double click on adwcleaner.exe to run the tool again.
      Vista/Windows 7/8 users right-click and select Run As Administrator.
    • Click on the Scan button.
    • AdwCleaner will begin to scan your computer.
    • After the scan has finished...
    • Click on the Cleaning button.
    • Press OK when asked to close all programs and follow the onscreen prompts.
    • Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
    • After rebooting, a logfile report (AdwCleaner[S0].txt) will open automatically.
    • Copy and paste the contents of that logfile in your next reply.
    • A copy of that logfile will also be saved in the C:\AdwCleaner folder.

    Please follow this guide to run FRST.

    For x32 bit systems download Farbar Recovery Scan Tool and save it to your Desktop.
    Do Not select Run..... you must select save.
    If it saves to the Download folder instead of the Desktop... that's OK.
    • Double-click the downloaded icon to run the tool. Vista/Windows 7/8 users right-click and select Run As Administrator

      a1e30894cbd1e51d77798ccaebcd6fa0.png
    • When the tool opens click Yes to disclaimer.

      6c81f32e4cfa276b33b2c5b126a03416.png
    • Make sure that Addition.txt is selected at the bottom
    • Press Scan button.

      1b8c7ec40ba5fc57455a82d8388da693.png
    • It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
    • The first time the tool is run, it also makes another log (Addition.txt). Please copy and paste it to your reply also.

    Running the AdwCleaner 'cleaning' mode before running FRST will give us less to remove in the next fix. :)

    Please post the new AdwCleaner report and the 2 new FRST reports when you are ready.

    Thanks
     
    Last edited: May 5, 2015
    starbuck, May 5, 2015
    #5
  7. starbuck

    starbuck Administrator - Malware Removal Specialist Administrator

    Joined:
    Sep 26, 2009
    Messages:
    3,825
    Location:
    Midlands, UK
    Operating System:
    Windows 10
    CPU:
    AMD Athlon II x2 250 Processor 3.00GHz
    Memory:
    8gb DDR3
    Hard Drive:
    500gb SATA
    Graphics Card:
    ASUS GeForce GTX 960 2gb
    Power Supply:
    650w PowerCool X-Viper
    Hi grantiman

    How are things going?
    Do you still require assistance?
     
    starbuck, May 9, 2015
    #6

Share This Page