Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Help with removing happili virus

19 Apr 2012   #11
weeksjr

Windows 7 64 bit
 
 

Hi Jacee!

Thanks for the post! I've followed the instructions you posted and here's the log file you requested. Please advise as to what you'd like me to do next.

Cheers!




Attached Files
File Type: txt combofix.txt (15.9 KB, 33 views)
My System SpecsSystem Spec
.
19 Apr 2012   #12
Jacee
Microsoft MVP

Windows 7 Ultimate 32bit SP1
 
 

Next, flush the dirty DNS cache, and restore MS's Hosts file:
Copy and paste these lines in Note pad.

@Echo on
pushd\windows\system32\drivers\etc
attrib -h -s -r hosts
echo 127.0.0.1 localhost>HOSTS
attrib +r +h +s hosts
popd
ipconfig /release
ipconfig /renew
ipconfig /flushdns
netsh winsock reset all
netsh int ip reset all
shutdown -r -t 1
del %0


Save as flush.bat to your desktop.
Double click on the flush.bat file to run it.Vista and Windows 7... right click the .bat file and choose to run as Administrator. Your computer will reboot itself.

After your computer reboots, I'd like you to scan your machine with ESET OnlineScan
  1. Hold down Control and click on the following link to open ESET OnlineScan in a new window.
    ESET OnlineScan
  2. Click the button.
  3. For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
    1. Click on to download the ESET Smart Installer. Save it to your desktop.
    2. Double click on the icon on your desktop.
  4. Check
  5. Click the button.
  6. Accept any security warnings from your browser.
  7. Check
  8. Push the Start button.
  9. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
  10. When the scan completes, push
  11. Push , and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
  12. Push the button.
  13. Push
My System SpecsSystem Spec
19 Apr 2012   #13
weeksjr

Windows 7 64 bit
 
 

Wow... that took a while! Anyway, the scan just finished and there were no threats found. Since that's the case, I couldn't do the last few steps (exporting the file) so I just grabbed a screenshot to show you. Anything else to be done? Thanks again so much for the help!


Attached Thumbnails
Help with removing happili virus-esetresults.jpg  
My System SpecsSystem Spec
.

19 Apr 2012   #14
Jacee
Microsoft MVP

Windows 7 Ultimate 32bit SP1
 
 

Please download TFC by Old Timer TFC - Temp File Cleaner by OldTimer - Geeks to Go Forums and save it to your desktop.
Save any unsaved work. TFC will close ALL open programs including your browser!
Double-click on TFC.exe to run it. If you are using Vista/Windows 7 right-click on the file and choose Run As Administrator.
Click the Start button to begin the cleaning process and let it run uninterrupted to completion.
Important! If TFC prompts you to reboot, please do so immediately. If not prompted, manually reboot the machine anyway to ensure a complete clean.

***TFC (Temp File Cleaner) will clear out all temp folders for all user accounts (temp, IE temp, java, FF, Opera, Chrome, Safari), including Administrator, All Users, LocalService, NetworkService, and any other accounts in the user folder. It also cleans out the %systemroot%\temp folder and checks for .tmp files in the %systemdrive% root folder, %systemroot%, and the system32 folder (both 32bit and 64bit on 64bit OSs). It shows the amount removed for each location found (in bytes) and the total removed (in MB). Before running, it will stop Explorer and all other running apps. When finished, if a reboot is required the user must reboot to finish clearing any in-use temp files.

Now let me know if you are still being redirected while searching in both FF and IE.
My System SpecsSystem Spec
19 Apr 2012   #15
weeksjr

Windows 7 64 bit
 
 

Ok, I went ahead and cleared all of the temp files. I was only getting redirected every now and again so, it will take a little while to confirm that it's worked but, so far so good! I'll post again when I know for sure. Thanks again so much for your help!
My System SpecsSystem Spec
20 Apr 2012   #16
weeksjr

Windows 7 64 bit
 
 

Hmmm... unfortunately, it doesn't look like I'm fixed entirely. In the 10 minutes of surfing I've done this AM, I've already had one redirection to a page that didn't actually load (the URL was totally wrong so, when I backed up and clicked the link again, it actually went to the right page) and then just got redirected to something called beesq. Help?
My System SpecsSystem Spec
20 Apr 2012   #17
Jacee
Microsoft MVP

Windows 7 Ultimate 32bit SP1
 
 

Which browser (IE or FF) redirected you?



Download TDSSKiller and save it to your Desktop.
  • Extract the file and run it.
  • Once completed it will create a log in the root directory (usually C:\).
  • Please post the contents of that log in your next reply.
My System SpecsSystem Spec
20 Apr 2012   #18
weeksjr

Windows 7 64 bit
 
 

Ok. Done and it looks to me as though it didn't find anything. Here's the log you requested. Thanks!


Attached Files
File Type: txt TDSSKiller.2.7.30.0_20.04.2012_12.22.08_log.txt (123.9 KB, 28 views)
My System SpecsSystem Spec
20 Apr 2012   #19
Jacee
Microsoft MVP

Windows 7 Ultimate 32bit SP1
 
 

Log looks okay! You didn't tell me which browser redirected you.

Did you set this "Manual Proxy Configuration" and enter "localhost" as the server and 8000 as the port in Firefox?
FF - prefs.js: browser.startup.homepage - hxxp://www.southpole.usap.gov/
FF - prefs.js: network.proxy.socks - 10.0.2.1
FF - prefs.js: network.proxy.socks_port - 8000

Download Security Check by screen317 from here http://screen317.spywareinfoforum.org/SecurityCheck.exe or here http://screen317.changelog.fr/SecurityCheck.exe
Save it to your Desktop.
Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
A Notepad document should open automatically called checkup.txt.
Please post the contents of that document.
My System SpecsSystem Spec
20 Apr 2012   #20
weeksjr

Windows 7 64 bit
 
 

Sorry. I just came back to the computer b/c I realized that I forgot to tell you that I'm using FF. I definitely set the homepage but the other things I didn't do myself. I had an IT person look at my PC and I *THINK* that's what he set a while ago. Should I remove them?

Anyway, I've run the next program and attached the file... no more re directions have happened recently but, I also haven't been on the computer much....


Attached Files
File Type: txt checkup.txt (783 Bytes, 25 views)
My System SpecsSystem Spec
Reply

 Help with removing happili virus




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
Another Happili Virus
So it seems I am not alone here, but Happili is taking over my seaches, any help would be appreciated!
System Security
Happili Virus
Hello, I seem to have also contracted the Happili Virus on my PC. I know there are multiple posts on this but they all seem to be following different steps on a case-specific basis so I figured to start my own. Please let me know how I can remove thise as it's become a substantial nuisance. ...
System Security
Another happili virus
Need help removing happili. I know other posts exist but the solutions seem to be custom. Please help. TIA
System Security
Need help removing Happili redirect virus
Greetings, I have contracted the evil Happili redirect virus and need assitance in eradicating it. I saw from a previous post that you had requested the attached files so I generated those. I'm lost from here. Thanks in advance. MOS
System Security
Happili virus as well
Hello, i recently just got the happili virus, ive recently checked this site and what i found didnt work for me. I have malewarebytes and tried full scan and it didnt detect it. i have also downloaded google chrome to avoid the problem but now i get happili as well, just less frequently then...
System Security
happili virus! anyone?
hello i dont know if this is on the right thread or not but if its not can the mods move it. i got this happili virus in my laptop yesterday everytime i try to search the web it redirects me to another page. i ran the windows defender scan and i have norton and did a full system scan and still...
System Security


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 16:37.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App