I have a new recurring computer problem, where every time I type in a URL, it automatically takes me to a page with a shady-looking search engine. It also resets my home page from Hotmail to this unwanted search engine, even after I go to Settings-Control Panel-Internet Options, and reenter www.hotmail.com as my home page.
I Googled a bit, and downloaded a program called Hijack This!, which I run, and then it gives me a list of all running processes. I check all the suspicious-looking ones to delete them, but this problem keeps coming back. Norton Antivirus, Adaware, and Spybot are no help, and this is incredibly frustrating.
What can I do to get rid of this browser hijacker once and for all, and to stay safe in the future? Has anyone else used Hijack This!, and am I even using it properly?
What is the name on the search engine that opens when you enter the new URL? What page does it reselect as your home page?
Using either name, you may be able to run a system search then search your registry for the thing.
If you can’t find anything, post the URL’s it redirects you to, as that might lead to an answer.
The site it usually sends me to is: http://www. smart-finder .biz
DO NOT CLICK ON IT, or any of the below links!
What happens is I’ll type in a URL like http://www.amazon.com and press Enter, then it’ll start taking me to “http://www.nkvd.us/1507/www.amazon.com”. And it comes up as the shady search engine I referred to above. So unless I have a website bookmarked, this problem essentially keeps me from going to other sites I want to go to!
I’m pretty computer-literate, Zigarre, but I always worry about poking around and deleting things in my registry.
Epileptik, I downloaded Spyware Blaster to go with Adaware and Spybot, and Daizy, I just updated Adaware and I’m running it again. Using Hijack This! seems to have made the problem go away for now, perhaps in concert with the others, but it has continued to come back over the last few days.
Thank you all for your advice, and I’ll be hoping this is the last I see of the problem. But if anyone else has experience, feel free to chime in!
I hope you have indeed rid yourself of it. Should it decided to grace you with a return:
Do a search for:
mtwirl32.dll
If you find it …
Go to start then Run and then type regedit. Press enter.
Navigate to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
Higjlight ShellServiceObjectDelayLoad in the left pane.
Look in the right pane for this entry:
DDE Control Module
Right click on it and choose delete.
Click OK. Close the registry.
RESTART THE COMPUTER
Delete these files:
C:\WINDOWS\SYSTEM\mtwirl32.dll
mtwcnl32.dll
I couldn’t find “DDE Control Module” in my Registry, but I did find the files C:\WINDOWS\SYSTEM\mtwirl32.dll and mtwcnl32.dll and deleted them both. So far, so good!
I had the same thing happen to me, except the search engine was called “search-space.com”. I asked for help here on SDMB and what worked for me was getting rid of Explorer and going to Mozilla Firebird. I would use Hijackthis to find the bad file and delete it and the next thing I knew it was back. I really like Firebird, so this story has a happy ending.
Search for a program called “cwshredder”, it is small and fixes the problem with maybe 3 clicks of the mouse. If it ever happens again (you get it from popups) just run cwshredder again, and then reset your homepage in start>settings>internet options.
cool-search.net (didn’t add the www’s so it won’t be a link)
I used all the tools listed in this thread and it didn’t go the Fck away. It always resetted to that Fcking damned site as my homepage. I was going F*cking MAD.
This site helped me and now I don’t get that f*cking site as my homepage.
I just added this extra bit for other people in need of help and that might have this problem as well.
Sorry about that.