I registered to this forum simply to reply to someone who had posted a few days ago about the problem of hao123 hijacking the homepage of his browser (which redirects it to hao123.com). Being a newbie here I was not able to directly reply to him to help. But I've also seen this problem asked on other forums with no solutions.
The latest hao123 simply appends its URL to all the Windows shortcuts to your browser.
So for example if you right-click on the Windows desktop shortcut for Firefox, and look in the "Target:" box, chances are, you'll see that the hao123 URL has been appended to the link to the browser file.
So, after you use Malwarebytes or another reliable anti-malware program, check to see if the hao123.com URL has been appended to your browser shortcuts. Your system may not be infected anymore -- it's just the addresses in the shortcuts to any browser installed on your Windows computer that you need to manually change.
Edited by Orange Blossom, 27 July 2014 - 01:32 PM.
Moved to General Security from log forum. ~ OB