• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2787
  • Last Modified:

How to remove SmartFinder (hijacker)?

I followed the instructions on this website for removing SmartFinder but they did not work because I did not have the specific items it said to delete.  I have tried SpyBot, Norton and others but nothing is getting rid of it - need more help. Thanks.
Debbie
0
DebbieRapp
Asked:
DebbieRapp
  • 2
1 Solution
 
SheharyaarSaahilCommented:
Download HijackThis from here, run it and Save the LOG file:
http://www.unitethecows.com/software/HijackThis.exe

Then Post that log at this site >> http://www.hijackthis.de
hit the Analyse button, scroll down to the bottom, hit the Save Analyse link, a new page will open, just post here the address of that link!
0
 
SheharyaarSaahilCommented:
PS. If you have a WinXP based system, then you are supposed to disable system restore before cleaning the system, and when you run the removal tools, run them in safemode instead of normal mode! :)
0
 
blue_zeeCommented:

If you have been hit by the redirection to Smartfinder.biz this is the only way to remove it at the moment:

Click "Start" -> "Run"
Type "regedit" and click OK.

In navigation tree go to

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SharedTaskScheduler

Then delete all keys at the right panel (just click on it and press Delete key)

Then go to

HKEY_CURRENT_USER\software\classes\CLSID\{3F143C3A-1457-6CCA-0A7-7AA23B61E40F}

and delete all keys too.

Restart your PC in safe mode

run hijackthis and fix this entry if it exists,

O2 - BHO: OsbornTech Popup Blocker - {FF1BF4C7-4E08-4A28-A43F-9D60A9F7A880} - C:\WINDOWS\System32\mshelper.dll

and any

R0 & R1 entries relating to smartfinder.biz and the O13 entries as well

Go to C:\WINDOWS\system32\ folder.

Find file mtwirl32.dll and delete it. and then delete the C:\WINDOWS\System32\mshelper.dll

then reboot.

Source:
http://www.wilderssecurity.com/showthread.php?t=27451

Zee
0

Featured Post

A Cyber Security RX to Protect Your Organization

Join us on December 13th for a webinar to learn how medical providers can defend against malware with a cyber security "Rx" that supports a healthy technology adoption plan for every healthcare organization.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now