Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I used "Revo Uninstaller" to uninstall the spyware which left me with a problem using Internet Explorer so then downloaded the free version of "Hijack This" from the website and, not reading the Super User answer correctly, used fix for the general issues it found and saved the log file of the other queries.

NetAssistant is completely gone or appears to have - Malwarebytes Malware remover cannot find anything and most Google searches now seem to work correctly. However in removing it I seem to have made an error and now whenever I search for and try to open or try to directly access two sites which I had tried to access via NetAssistant whilst infected IE8 says they cannot be displayed. One of them is Wikipedia and I use both regularly.

I am not sure at what point this happened I think it may have been after using Revo Uninstaller and the second section where it looks for references to netassistant (in the registry?). Not sure if this is relevant but I can remember deleting some flags or something relating to Internet Explorer but not sure what.

Any suggestions?

share|improve this question
1  
start by clearing your Net Temps , cookies, and flush the DNS cache. do a quick check of the "hosts" file if the others didnt clear it up, then ammend your question if it is still broken –  Psycogeek Oct 17 '11 at 11:59

1 Answer 1

I suspect a rootkit. Google "ComboFix download" and click only on the link from Bleepingcomputer.com. Any other source of CompboFix is bogus. You will have 10 minutes to download ComboFix before the link expires. CompoFix is free, if you are prompted for payment you have the wrong file. Do the following in the order listed:

  1. Run ComboFix
  2. Uninstall old MalwareBytes and reinstall a new copy and run it
  3. Visit Microsoft Download Center and search the term 'malicious'. Look through the returns click on the Malicious Software Removal Tool that fits your system, 32 bit or 64 bit.
  4. Visit Ninite.com and download CCleaner registry tool. Beware all 'free' registry tuners CCleaner is ok, CleanMyPc from www.registry-cleaner.net is the best $29 you'll ever spend.
  5. Open your browser and look for something like 'Options'. Click on this and check your search settings. Use only Bing or Google, Dogpile, etc. MyWebSearch is a virus.
  6. Also check your browsers proxy server settings. Unless you really need this disable proxy server settings.

You should now be clean and free from malware/spyware:)

share|improve this answer
    
Thanks so much for this.Ran ComboFix and it has fixed the problem but it crashed the machine. Rebooted ok. How important is it to do step 4 and install and use CleanMyPc? Have done all the others. –  Firefly Oct 18 '11 at 11:14
    
If this is a Windows machine, you could try installing Windows Defender Offline to a USB flash drive and then boot the probably infected machine with the USB flash drive. Then run a full scan on the system. You can download Defender Offline here: windows.microsoft.com/en-US/windows/…. The installer will format your flash drive so you might want to create a backup of the data that is on it before installing Windows Defender Offline. I have found rootkits this way that weren't detected by anti-virus and TDSSKiller. See goo.gl/xh1ey –  jao Dec 21 '12 at 12:34

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.