Thank you so much for replying to my thread.
Log is posted here. I have to go in to work and won't be back until late, but can follow whatever the next step is when I get back.
Type services.msc in the start search box. Click on the icon then scroll down to Microsoft BingBar. Right click on the line and disable it.
Now go to Programs and Features and uninstall BingBar.
Navigate to c:\program files (x86)\Microsoft\BingBar <---delete the folder.
Please download TFC by Old Timer TFC - Temp File Cleaner by OldTimer - Geeks to Go Forums and save it to your desktop.
Save any unsaved work. TFC will close ALL open programs including your browser!
Double-click on TFC.exe to run it. If you are using Vista/Windows 7 right-click on the file and choose Run As Administrator.
Click the Start button to begin the cleaning process and let it run uninterrupted to completion.
Important! If TFC prompts you to reboot, please do so immediately. If not prompted, manually reboot the machine anyway to ensure a complete clean.
Next,
Copy and paste these lines in Note pad.
@Echo on
pushd\windows\system32\drivers\etc
attrib -h -s -r hosts
echo 127.0.0.1 localhost>HOSTS
attrib +r +h +s hosts
popd
ipconfig /release
ipconfig /renew
ipconfig /flushdns
netsh winsock reset all
netsh int ip reset all
shutdown -r -t 1
del %0
Save as flush.bat to your desktop.
Double click on the flush.bat file to run it.Vista and Windows 7... right click the .bat file and choose to run as Administrator. Your computer will reboot itself.
Let me know if you're still being re-directed.
I am not an expert virus remover and haven't tried all the exotic suggestions mentioned for removing the Happili Virus. They must be very good.
I had found the instructions as under at How Do I Stop Happili From Redirecting? | eHow.com for removing it, and it did the job for me nicely.
Instructions
1 Exit out of any open Web browsers.
2 Click the "Start" button located in the bottom left of the screen. The Start menu launches.
3 Type “Windows Defender” in the Search box located at the bottom of the Start menu. Press “Enter.”
4 Click “Scan” from the top menu and then select “Full Scan.” The Windows Defender tool scans your computer for the Happili virus. The files are quarantined and automatically removed. This could take several hours depending on how badly infected your computer system is.
5 Click the “X” located in the upper right corner of Windows Defender to close the program after the Happili virus has been removed.
That is why I had suggested that Windows Defender should be given a try before anything else.
Jacee, followed all instructions and am still being redirected. I use Firefox, fwiw.
wanchoo, I wasn't able to get Windows Defender re-enabled when I tried it after your post yesterday. I get the message that it's turned off (which apparently is common when using other AV software), but also get an error message when I tried to re-enable it.
I'm sure Jacee will return as soon as she can. In the meantime can you open a command prompt, type ipconfig /all and press enter, and post us a screenshot of the result?
I'd like to see what DNS servers you're using...
Thanks. Can you go back to that window, scroll up some, and post a shot of the beginning of that output?
Oh jeez- I can't believe I didn't catch that myself last night. Sorry about that.
Un-install Firefox and if asked about user data or settings then I want that removed too.
Delete your copy of Combofix.
Re-install Firefox and tell me if you're still being re-directed.
Quote