Google HiJack

Client has Windows 7 home edition. She is using IE8 with google.com set as her home page. When she googles anything it produces the results. Then within 5 seconds the following information is displayed on a new window:

The requested URL /-7890*sfxd*0*sfxd*0 was not found on this server. That’s all we know.

Her favorites work, She can type in a URL and go to it. Only google searches are affected. I have run Ccleaner, Malwarebytes, still has the problem.

I have used the earliest restore point available. When it comes back up she cannot access the internet. The restore point is about 6 weeks ago, so I will presume that she has had problems for a while.

Any ideas?
RSchiererAsked:
Who is Participating?
 
Adam LeinssServer SpecialistCommented:
Try ADWCleaner: http://www.bleepingcomputer.com/download/adwcleaner/

Followed by Norton Power Eraser: http://security.symantec.com/nbrt/npe.aspx (click Advanced and do a normal scan, not the rootkit one)

Followed by TDSSKiller: http://support.kaspersky.com/5350

Followed by Windows Defender Offline: http://windows.microsoft.com/en-US/windows/what-is-windows-defender-offline

Test between scans.
0
 
aadihCommented:
If it is a 32 bit system, run the free tool from:

http://blog.webroot.com/2011/08/03/new-tool-released-kiss-or-kick-zeroaccess-goodbye/ >

And run (for 32 or 64 bit) Malwarebytes Anti-Rootkit from:

http://www.malwarebytes.org/products/mbar/ >
0
 
RSchiererAuthor Commented:
Thank you for the advice! I will be working on this client's computer again tonight and will try your suggestions.

Do you have any idea what the error message means? I can't find anything via a google search on another computer.
0
Cloud Class® Course: Microsoft Azure 2017

Azure has a changed a lot since it was originally introduce by adding new services and features. Do you know everything you need to about Azure? This course will teach you about the Azure App Service, monitoring and application insights, DevOps, and Team Services.

 
Adam LeinssServer SpecialistCommented:
The computer it's trying to contact probably got taken offline...that would be my guess.
0
 
bright12Commented:
You can also run Hitman Pro to scan the PC. This is a all-in-one package.
http://www.surfright.nl/en/
0
 
Neptune ITCommented:
Have you checked your host file? I know that this looks like a virus, and for all I know it could be, but it looks like the user is being redirected so it is always worth checking it out.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.