Google HiJack

Client has Windows 7 home edition. She is using IE8 with google.com set as her home page. When she googles anything it produces the results. Then within 5 seconds the following information is displayed on a new window:

The requested URL /-7890*sfxd*0*sfxd*0 was not found on this server. That’s all we know.

Her favorites work, She can type in a URL and go to it. Only google searches are affected. I have run Ccleaner, Malwarebytes, still has the problem.

I have used the earliest restore point available. When it comes back up she cannot access the internet. The restore point is about 6 weeks ago, so I will presume that she has had problems for a while.

Any ideas?
RSchiererAsked:
Who is Participating?

Improve company productivity with a Business Account.Sign Up

x
 
Adam LeinssConnect With a Mentor Senior Desktop EngineerCommented:
Try ADWCleaner: http://www.bleepingcomputer.com/download/adwcleaner/

Followed by Norton Power Eraser: http://security.symantec.com/nbrt/npe.aspx (click Advanced and do a normal scan, not the rootkit one)

Followed by TDSSKiller: http://support.kaspersky.com/5350

Followed by Windows Defender Offline: http://windows.microsoft.com/en-US/windows/what-is-windows-defender-offline

Test between scans.
0
 
aadihConnect With a Mentor Commented:
If it is a 32 bit system, run the free tool from:

http://blog.webroot.com/2011/08/03/new-tool-released-kiss-or-kick-zeroaccess-goodbye/ >

And run (for 32 or 64 bit) Malwarebytes Anti-Rootkit from:

http://www.malwarebytes.org/products/mbar/ >
0
 
RSchiererAuthor Commented:
Thank you for the advice! I will be working on this client's computer again tonight and will try your suggestions.

Do you have any idea what the error message means? I can't find anything via a google search on another computer.
0
Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

 
Adam LeinssSenior Desktop EngineerCommented:
The computer it's trying to contact probably got taken offline...that would be my guess.
0
 
bright12Connect With a Mentor Commented:
You can also run Hitman Pro to scan the PC. This is a all-in-one package.
http://www.surfright.nl/en/
0
 
Neptune ITConnect With a Mentor Commented:
Have you checked your host file? I know that this looks like a virus, and for all I know it could be, but it looks like the user is being redirected so it is always worth checking it out.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.