Hi there, new to this forum but heard about it on youtube,
I've had an annoying bit of adware for a while now which redirects ALL my internet browser's homepages to HAO123. To avoid it before i simply used a re-directer in chrome to remove it as AVAST (my initial antivirus) was unable to detect anything.
However, recently i tried to remove the adware. I installed mbam and scanned the whole system and it found the malicious link in appdata local for HAO in chrome, and it was removed. I reinstalled all my browsers (firefox and chrome) and the problem seemed to be solved. However, the homepage came back. After trying Adwcleaner and other tools on this site, i attempted to find and remove the problem, however it detected nothing. So i took to youtube and discovered that it could have edited my shortcuts. Annoyingly it had. I looked on a few videos and apparently simply editing the shortcut removed the problem. However something is constantly changing my shortcut no matter how many times i edit it, somewhat periodically. I edit it, leave it for roughly an hour, and the shortcut (in the start menu) is edited to link to HAO123 on startup.
I've done a full scan with MBAM and Adwcleaner. I've reinstalled both chrome and firefox and disabled all extensions/addons however i have had no luck.
Any help would be appreciated