I can usually get rid of stuff like this but this one is kicking my you-know-what and it seems to be very new. Ad-aware had me send the desote.exe file to them. So the only problems left are the hijacked Google searches and the inability to run hijack this. Is there another tool that does the same thing as hijack this or is there a command line type thing that will allow me to save the output somewhere? It opens up, it runs, then it disappears. The best I can do is get a screenshot of the top handful of results.
Then when I go to open it again it says "Windows cannot access the specified device, path, or file. You may not have permissions to access the item." I can then save it again in a new location and repeat the process, but if I save it in the old place it still says I can't use it. If I choose "run a system scan and save a logfile" does it save it in real time? Should that logfile actually be somewhere? Because it IS running, shouldn't it save the logfile somewhere?
This is VERY frustrating. I have absolutely no clue what is doing the google hijacking. I can't find anything in any startup location and I don't see any suspicious processes running. Besides, the whole permissions thing happens in safe mode too. Where is this happening? I'll give you any info I can, but I really wish we could figure out how to get hijackthis to work.
Edit: Let me add a few more details. It hijacks Google searches in EVERY browser (though Safari seems to be working now for some reason). Firefox and IE Google searches don't work and chrome won't even open. When I search in Firefox for "something" and click the Wikipedia article the link it goes to is:
I've been using Safari because it seemed to work when I opened a new tab but not when I opened in the same window. Now it seems to be working for both ... Where can a process exist that changes the links? I feel like I've looked everywhere.
Edited by TheAndy500, 29 August 2009 - 10:11 AM.