Problem with uni-search.com trojan/virus
Discussion
Hi,
I wonder if anyone can help with this. A friend of mine has a problem with his home-page being re-directed to uni-search.com. there are also other unpleasant aspects, too.
Does anyone know how to get rid of this? It keeps re-appearing after a re-boot.
He's tried NAV & adaware, cwshredder etc to no avail.
Thanks.
I'll include his account here:
The symptoms are:
The first instance was that the homepage in Internet Explorer became set to "uni--search.com" and I was unable to edit the homepage in IE options.
Having undone the registry setting to allow me to edit the homepage, it now gets set back to "uni--search.com" periodically.
I have warnings regards Trojans from IE from this site. It tries to run a script to a site "traffic2cash" with a name "loader4". Sometimes IE gets redirected to other dodgy sites.
I have run Norton Anitvirus, but it is not picking up the Trojans on my system (much to my annoyance). I have discovered 3 rogue executables that run (msxmidi, preotect, yesb) but each time I delete them, they are regenerated.
The virus is spreading and getting worse - it seems that every time open IE and access "uni--search.com" it gets more malicious.
I wonder if anyone can help with this. A friend of mine has a problem with his home-page being re-directed to uni-search.com. there are also other unpleasant aspects, too.
Does anyone know how to get rid of this? It keeps re-appearing after a re-boot.
He's tried NAV & adaware, cwshredder etc to no avail.
Thanks.
I'll include his account here:
The symptoms are:
The first instance was that the homepage in Internet Explorer became set to "uni--search.com" and I was unable to edit the homepage in IE options.
Having undone the registry setting to allow me to edit the homepage, it now gets set back to "uni--search.com" periodically.
I have warnings regards Trojans from IE from this site. It tries to run a script to a site "traffic2cash" with a name "loader4". Sometimes IE gets redirected to other dodgy sites.
I have run Norton Anitvirus, but it is not picking up the Trojans on my system (much to my annoyance). I have discovered 3 rogue executables that run (msxmidi, preotect, yesb) but each time I delete them, they are regenerated.
The virus is spreading and getting worse - it seems that every time open IE and access "uni--search.com" it gets more malicious.
These sorts af things are best removed from Safe Mode, not normal mode. The reason they keep reappearing is because the 3 executables you mention are all watching each others backs. As you delete one, it will be spotted by one of the others which will then restore it.
By running in safe mode, you should find that the three malicious executables are not running and you should be able to delete them safely.
You will also need to delete the registry keys that are causing the bad guys to run. If you are unsure how to do this, get yourself a copy of HiJack This and post it's output here for us to help you further.
By running in safe mode, you should find that the three malicious executables are not running and you should be able to delete them safely.
You will also need to delete the registry keys that are causing the bad guys to run. If you are unsure how to do this, get yourself a copy of HiJack This and post it's output here for us to help you further.
Gassing Station | Computers, Gadgets & Stuff | Top of Page | What's New | My Stuff