I've been having problems for the past couple of days. Normally when/if I find things on my computer I go online and just find solutions but I haven't been able to find anything up to this point.
My wife first noticed that IE would redirect to weird search sites when clicking on links in Google search. Then I started noticing even on Firefox that extra tabs would open up, and it always seemed to be the same ones, like Luxury Link, or QuitSmokingSolution, or MyChurchLife.org. Heck, it's pretty random, I'm not sure if listing them all out will help? Another thing I noticed is trying to go to any legitimate anti-virus website will just redirect to random sites. The only way I found this place was I went with "Cached" page instead which opened the page using the IP address which I guess the trojan didn't recognize to redirect me.
I'm using Chrome right now but it's having the same problems.
Another thing I noticed is that I can no longer Hibernate my laptop.
I have tried a few things, including checking out sites where people had the same problem as I did. I went to a TechGuy forum to do some searching, but the instructions got to the point of using ComboFix and I didn't want to touch that because I'm no expert. Tried a few of those online free scans from McAfee and one other site, basically just the standard anti-virus sites I actually know are legit. None of those found anything.
I downloaded Windows Defender, which found something called "Hiloti", and I had it removed but it didn't make any difference. I also tried HJT, but I'm not familiar enough with the various processes my laptop runs so I didn't bother much with the results.
I've also tried SDFix, rebooted in safe mode and did the scan, then rebooted back and did more scans.
Still the same thing -- redirection of websites, especially when try to hit anti-virus sites. Lots of pop-ups, some of which are inappropriate but all in all, pretty random.
I can't think of anything else I can help with.. I'm wireless internet, on a Toshiba Laptop. Windows XP SP2.
Edited by ebrian, 21 December 2009 - 09:02 PM.