How can I remove a browser hijacker from my computer?

Question

This occurred just yesterday. My OS is Windows XP. I have both Norton Internet Security 2005 and Lavasoft Ad-Aware SE Personal installed and have used them but them seem unable to find the virus. I tried installing XOFTSPY 4.22 which found sevral Trojans and successfully removed them. However one keeps reappearing even after XOFTSPY claims it removed it. The details it gives are:

Vendor - Encodec
Type - Registry Value
Category - Trojan
Object - software\microsoft \windows\currentversion \policies\explorer\n
Danger - Severe Risk

Note: I intentionally put those two spaces in the object above (one after "microsoft" and one after "version") because otherwise Y!A abbreviates the whole thing, leaving some of it out.

Typo above - should read "they seem able" not "them seem able."

Sorry: "unable" not "able"
I'm just a little riled here.

This is turning into one of the most useful questions I have ever asked on Y!A. I can't thank you all enough for your terrific suggestions. You have "saved my life," figuratively if not literally. I am going to keep this question open for the maximum period allowed because one never knows what other great advice might come along.

Answer 1

Hi there,

There's currently many of these "Codec" Trojan infections doing the rounds lately, which it sounds like you have a variant of. The only program I have been able to find which will remove these is Prevx1.

Here's some detailed information on what they call Trojan ECodec, plus a link to their free trial which will remove this infection free of charge:
http://virusinfo.prevx.com/pxparall.asp?PXC=5fbf53442005
 

Answer 2

For future protection, you should get an Internet security suite. I've used the Zone Alarm security suite and Norton as well. Both are pretty good.

As suggested by another user, get Microsoft Antispy or whatever it is called. Also get Adaware by Lavasoft. In stall both and make sure you download the updates. Then reboot in safe mode and use both to do a complete system scan.

Microsoft Antispy runs in real time. Adaware does not and you should run the scan at least once a week. that should take care of any problems.

Answer 3

You seem to have plenty of good responses already, so either follow their advice or stop taking software plane rides altogether! :-)

P.S. I would recommend installing a good firewall like ZoneAlarm as well (it's free - google it by typing ZoneAlarm, enter the site and download). Good Luck!

MY advice would be go with ZoneAlarm, specially if you can buy the professional version (not very expensive at all), and yes get rid of Norton, if you install ZoneAlarm.

All you would need, for a fairly decent PC security system and backup, are the following five pieces of software (either their free or professional versions - go with the professional versions, if you can). [ BTW, they are all update-able on-line and in fact I highly recommend that you update them on a daily basis and scan your system at least every couple of days. Also make sure to always delete those darn cookies and temporary Internet files on a daily basis]:

1- AVG Anti-virus
2- ZoneAlarm Firewall
3- Ad-Aware Anti-spy-wear
4- MailWasher Pro (to pre-check/delete/bounce your e-mail's before actually downloading them)
5- Nero Burning ROM (great program for making regular backups, etc. You would be glad you did, if your computer ever catches something truly nasty.)

Install all the above, update and run them regularly and you will hopefully not run into any further problems. Good Luck!

Answer 4

Try using a program called HiJackThis. This might be able to get rid of the trojan hijacker...

Answer 5

You try to install microsofts antispyware on your systtem and scan. antispyware is better for hunting spywares

Answer 6

I have the Zone Alarm too and love it.

Now what have you learned from this one? LOL

Answer 7

marko...this is part of the smitfraud family....go here and follow these instuctions and u will remove this threat
http://siri.urz.free.fr/Fix/SmitfraudFix_En.php