Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

en.v9.com hijacked my internet explorer - how to fix it?


  • Please log in to reply
3 replies to this topic

#1 piyopiyo

piyopiyo

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:01:24 AM

Posted 30 December 2013 - 05:24 AM

I had removed the QV06.com from my google chrome.

BUT the en.v9.com is still hijacking my IE browser.

Can someone help me?  Thanks.


Edited by hamluis, 30 December 2013 - 08:52 AM.
No logs, moved from MRL to AII - Hamluis.


BC AdBot (Login to Remove)

 


#2 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,213 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:09:24 AM

Posted 30 December 2013 - 11:33 AM

Hello and welcome
 
Look in Control Panel ...Remove /Uninstall programs for en.v9. if there remove it.
Look in your browsers add-ons for same and remove ,delete or disable.  .. How to disable add-ons/extensions in your browser?
 
 
Please download MiniToolBox, save it to your desktop and run it.
Checkmark the following checkboxes:
  • Flush DNS
  • Report IE Proxy Settings
  • Reset IE Proxy Settings
  • Report FF Proxy Settings
  • Reset FF Proxy Settings
  • List content of Hosts
  • List IP configuration
  • List Winsock Entries
  • List last 10 Event Viewer log
  • List Installed Programs
  • List Users, Partitions and Memory size.
  • Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run.
    Note: When using "Reset FF Proxy Settings" option Firefox should be closed.

     
    Download TDSSKiller and save it to your desktop.
    • Extract (unzip) its contents to your desktop.
    • Open the TDSSKiller folder and doubleclick on TDSSKiller.exe to run the application, then on Start Scan.
    • If an infected file is detected, the default action will be Cure, click on Continue.
    • If a suspicious file is detected, the default action will be Skip, click on Continue.
    • It may ask you to reboot the computer to complete the process. Click on Reboot Now.
    • If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.
    • If a reboot is required, the report can also be found in your root directory (usually C:\ folder) in the form of TDSSKiller_xxxx_log.txt. Please copy and paste the contents of that file here.
    • .
      .
      .
      ADW Cleaner

      Please download AdwCleaner by Xplode and save to your Desktop.
      • Double click on AdwCleaner.exe to run the tool
      • Click on the Scan button.
      • AdwCleaner will begin to scan your computer like it did before.
      • After the scan has finished...
        <-insert any special instructions here for what to uncheck OR remove this line if there are none->
      • This time click on the Clean button.
      • Press OK when asked to close all programs and follow the onscreen prompts.
      • Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
      • After rebooting, a logfile report (AdwCleaner[S#].txt) will open automatically (where the largest value of # represents the most recent report).
      • Copy and paste the contents of that logfile in your next reply.
      • A copy of that logfile will also be saved in the C:\AdwCleaner folder.
      • .
        .
        .
      thisisujrt.gif Please download Junkware Removal Tool to your desktop.
      • Shut down your protection software now to avoid potential conflicts.
      • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
      • The tool will open and start scanning your system.
      • Please be patient as this can take a while to complete depending on your system's specifications.
      • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
      • Post the contents of JRT.txt into your next message.

How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#3 piyopiyo

piyopiyo
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:01:24 AM

Posted 01 January 2014 - 02:49 AM

The problem is fixed.  Thank you very much.  Happy New Year!



#4 piyopiyo

piyopiyo
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:01:24 AM

Posted 01 January 2014 - 12:23 PM

Oh, what I did was I removed a fishy search engine (it didn't have the en.v9.com name ) from the IE add-on.

Then I ran the Rkill,  then ran the adwcleaner.  And then my IE browser was not being hijacked.

 

But the question is whether the problem is really gone.   I probably will do what boopme told me later today and then post the log.

 






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users