How to remove SmartFinder (hijacker)?

Posted on 2005-05-01
Last Modified: 2010-04-11
I followed the instructions on this website for removing SmartFinder but they did not work because I did not have the specific items it said to delete.  I have tried SpyBot, Norton and others but nothing is getting rid of it - need more help. Thanks.
Question by:DebbieRapp
    LVL 65

    Expert Comment

    Download HijackThis from here, run it and Save the LOG file:

    Then Post that log at this site >>
    hit the Analyse button, scroll down to the bottom, hit the Save Analyse link, a new page will open, just post here the address of that link!
    LVL 65

    Expert Comment

    PS. If you have a WinXP based system, then you are supposed to disable system restore before cleaning the system, and when you run the removal tools, run them in safemode instead of normal mode! :)
    LVL 29

    Accepted Solution


    If you have been hit by the redirection to this is the only way to remove it at the moment:

    Click "Start" -> "Run"
    Type "regedit" and click OK.

    In navigation tree go to


    Then delete all keys at the right panel (just click on it and press Delete key)

    Then go to


    and delete all keys too.

    Restart your PC in safe mode

    run hijackthis and fix this entry if it exists,

    O2 - BHO: OsbornTech Popup Blocker - {FF1BF4C7-4E08-4A28-A43F-9D60A9F7A880} - C:\WINDOWS\System32\mshelper.dll

    and any

    R0 & R1 entries relating to and the O13 entries as well

    Go to C:\WINDOWS\system32\ folder.

    Find file mtwirl32.dll and delete it. and then delete the C:\WINDOWS\System32\mshelper.dll

    then reboot.



    Featured Post

    Highfive + Dolby Voice = No More Audio Complaints!

    Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

    Join & Write a Comment

    Getting hacked is no longer a matter or "if you get hacked" — the 2016 cyber threat landscape is now titled "when you get hacked." When it happens — will you be proactive, or reactive?
    Envision that you are chipping away at another e-business site with a team of pundit developers and designers. Everything seems, by all accounts, to be going easily.
    To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…
    Hi everyone! This is Experts Exchange customer support.  This quick video will show you how to change your primary email address.  If you have any questions, then please Write a Comment below!

    745 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    13 Experts available now in Live!

    Get 1:1 Help Now