VIRUS:URLSEEK40

Hi EE'r,

My wife has the redirect virus urlseek40 - my searches tie it to oovoo toolbar and Firefox. She does not seem to have the oovoo toolbar... I used the about:config in firefox and changed it from whare it was and changed it to google as per an answer I found. I restarted Firefox.

It's still happening. Still redirecting.

Help?

Thanks.
COBOLforeverAsked:
Who is Participating?
 
younghvConnect With a Mentor Commented:

For Hijacking/re-directs, you might want to start with TDSSKILLER found here:
http://support.kaspersky.com/viruses/solutions?qid=208280684

Let us know the results and we can take the next steps.


Read my Article here:
http://www.experts-exchange.com/Virus_and_Spyware/Anti-Virus/A_1940-BASIC-MALWARE-TROUBLESHOOTING.html

Download, install, and run
CCleaner (www.ccleaner.com)

Malwarebytes (http://www.malwarebytes.org/mbam.php)
The instructions are included right in that link.
0
 
phototropicConnect With a Mentor Commented:
So you type about:config then In the filter field, :  browser.search.defaulturl
Then you edit that value to http://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=

Is that correct? Did you remove the toolbar?

Tools - Addons - Oovoo Toolbar - uninstall - uninstall

You should remove the toolbar after you reset the value but before you restart Firefox.

0
 
carrolc575Commented:
the following are what should be run
malwarebytes
spyware dr. from pack.google.com
then spybots s&d then adware

restart if these do not work bring your system into a local it company or reload your comp to factory ...
0
Worried about phishing attacks?

90% of attacks start with a phish. It’s critical that IT admins and MSSPs have the right security in place to protect their end users from these phishing attacks. Check out our latest feature brief for tips and tricks to keep your employees off a hackers line!

 
phototropicCommented:
carrolc575,

younghv has already recommended Mbam, and given a download link.

I assume you are referring to Spybot and Adaware ("..spybots s&d then adware...").  What is it about these programs which makes you feel that they are "....what should be run..."?

"... if these do not work bring your system into a local it company..."   Generally speaking, people tend to ask questions here at ee so that they can avoid having to do that.

"...or reload your comp to factory ... "  Isn't that rather a drastic step to resolve a browser hijack?

 


0
 
younghvCommented:
Thanks pt - I need to make a macro out of this post:

http://www.experts-exchange.com/help.jsp#hs=30&hi=416
"Read previous posts before commenting:"
It is important to read the entire thread so that you know the current situation. That will keep you from posting a duplicate answer or one that has already been shown not to work. If you basically agree with another comment but have something more to add, remember to give credit for the original suggestion -- mention that Expert by name -- in your post.

0
 
COBOLforeverAuthor Commented:
nothing from Kapersky
CCcleaner did it!
appreciate the tip on removing oovoo toolbar!

Thank you folks!
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.