User home page keeps resetting to assistmypc

I have a user that has the google toolbar installed.  For some reason I can't find, her homepage is constantly resetting to  I have tried changing it back, and it goes right back to it.  She has never used this service(?) and has no remote control apps on her system. Has anyone else seen this or how to get rid of it?
Who is Participating?
David-HowardConnect With a Mentor Commented:
I recommend downloading and updating Malwarebytes.
You can get it free from
Prior to running Malwarebytes (or any other anti-virus/malware suite),
disable System Restore. Directions can be found here:
Once malwarebytes is downloaded, perform an update, reboot into Safe Mode (F8 at startup) and run a scan.
You should do this with your current antivirus product as well.
You may also need to download and run HiJackThis from
Once you run the utility save the log file.
You can post it for free analysis here or at
You are primarily looking for items marked with red X's.
You can get a brief overview of Hijackthis here:
If the above steps fail to remove the threat,
you may need to download and run Combofix.
The free download and directions can be located here.
As noted in the directions, prior to running Combofix or any other anti-malware/anti-virus application please stop your anti-virus and anti-malware programs. Combofix should be saved to and run from your desktop.
You should rename the anti-malware suites to a different name prior to downloading as some threats can prevent them from running with their default names.

When you have finished running your scans and the threats have been removed enable System Restore.
Emtpy all cookies, history and reset IE to default. then disable any/all 3rd party addons for IE and finally uninstall google Toolbar and any other toobar for the browser. Once done go in and reset IE to default once again and test if issue persists
If YOU cant go here:
And run scans
you Got Worm:Win32/Conficker.B
Microsoft is offering $250,000 to a (Worm:Win32/Conficker.B) FIX
Hope its ME
Spybot Search and destroy will detect and remove the Browser Hijacker even if it isn't malicious

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.