Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: Happili Virus

26 Apr 2012   #1

Windows 7 Professional 64 Bit
Happili Virus


I seem to have also contracted the Happili Virus on my PC. I know there are multiple posts on this but they all seem to be following different steps on a case-specific basis so I figured to start my own. Please let me know how I can remove thise as it's become a substantial nuisance.

Thank You,

My System SpecsSystem Spec
26 Apr 2012   #2
Microsoft MVP

Windows 7 Ultimate 32bit SP1

Download DDS from one of these links:
Mirror 1 Mirror 2 Mirror 3
  • Disable any script blocking protection
  • Double click the dds icon to run the tool.
  • When done, DDS will open two (2) logs:
    1. DDS.txt
    2. Attach.txt <--- will be minimized in the task tray
  • Save both reports to your desktop.
Include the contents of both logs in your next post.
The scan will instruct you to post Attach.txt as an attachment.
My System SpecsSystem Spec
26 Apr 2012   #3

Windows 7 Professional 64 Bit
Two Log Files

Please find both of my log files that you requested attached here, let me know how to proceed. Thanks a lot!

Attached Files
File Type: txt DDS.txt (18.7 KB, 33 views)
File Type: txt Attach.txt (6.7 KB, 18 views)
My System SpecsSystem Spec

26 Apr 2012   #4
Microsoft MVP

Windows 7 Ultimate 32bit SP1

I see you've run Combofix .... was it run with help on a security forum?
My System SpecsSystem Spec
26 Apr 2012   #5

Windows 7 Professional 64 Bit

I did try to run combofix to get this off the computer about a month ago with no luck. I had thought it was removed prior to a few days ago when it began redirecting my searches again.
My System SpecsSystem Spec
26 Apr 2012   #6
Microsoft MVP

Windows 7 Ultimate 32bit SP1

We need to get a current copy of CF....

Click on the Start button and then select Run from the menu. This will open up the Run box.
Copy/Paste combofix /uninstall (Please note that there is a space between combofix and /uninstall), click on the OK button or Enter on your keyboard.
You can now delete the ComboFix.exe program from your computer


Download Combofix from any of the links below, and save it to your desktop.<--Important
Link 1
Link 2
Link 3

Click on this link Here to see a list of programs that should be disabled.
The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
If your anti-virus or firewall complains, please allow this script to run as it is not malicious.
Next: Disconnect from the internet. If you are on Cable or DSL, unplug your computer from the modem.
Next: Please disable all onboard security programs (all running with back ground protection) as it may hinder the scanner from working.

This includes Antivirus, Firewall, and any Spyware scanners that run in the background.
  • Double click combofix.exe and follow the prompts.
  • When finished, it will produce a log for you.
Note: Do not mouseclick combofix's window while its running. That may cause it to stall
Please be patient while the scan runs, at times it may appear to stall.
When finished and after reboot (in case it asks to reboot), it should open a log, combofix.txt.
Post this log in your next reply
After rebooting ensure your Security applications have been re-enabled.

In your next reply post:
***A guide and tutorial on "How to use Combofix" can be found here:
A guide and tutorial on using ComboFix

IF CF won't run:
During the download, rename Combofix.exe to sVchost.exe
My System SpecsSystem Spec
26 Apr 2012   #7

Windows 7 Professional 64 Bit

Please see attached.

Attached Files
File Type: txt combofix.txt.txt (122.1 KB, 24 views)
My System SpecsSystem Spec
26 Apr 2012   #8
Microsoft MVP

Windows 7 Ultimate 32bit SP1

Why didn't you finish the malware topic here? Happili Redirect Virus

Please flush the DNS cache and restore MS's hosts file. Copy and paste these lines in Note pad.

@Echo on
attrib -h -s -r hosts
echo localhost>HOSTS
attrib +r +h +s hosts
ipconfig /release
ipconfig /renew
ipconfig /flushdns
netsh winsock reset all
netsh int ip reset all
shutdown -r -t 1
del %0

Save as flush.bat to your desktop.
Double click on the flush.bat file to run it.Vista and Windows 7... right click the .bat file and choose to run as Administrator. Your computer will reboot itself.

Next, download TFC by Old Timer TFC - Temp File Cleaner by OldTimer - Geeks to Go Forums and save it to your desktop.
Save any unsaved work. TFC will close ALL open programs including your browser!
Double-click on TFC.exe to run it. If you are using Vista/Windows 7 right-click on the file and choose Run As Administrator.
Click the Start button to begin the cleaning process and let it run uninterrupted to completion.
Important! If TFC prompts you to reboot, please do so immediately. If not prompted, manually reboot the machine anyway to ensure a complete clean.

After doing the above, I'd like you to scan your machine with ESET OnlineScan
  1. Hold down Control and click on the following link to open ESET OnlineScan in a new window.
    ESET OnlineScan
  2. Click the button.
  3. For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
    1. Click on to download the ESET Smart Installer. Save it to your desktop.
    2. Double click on the icon on your desktop.
  4. Check
  5. Click the button.
  6. Accept any security warnings from your browser.
  7. Check
  8. Push the Start button.
  9. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
  10. When the scan completes, push
  11. Push , and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
  12. Push the button.
  13. Push
My System SpecsSystem Spec
26 Apr 2012   #9

Windows 7 Professional 64 Bit

Thanks again for the help, please see attached.

Attached Files
File Type: txt ESETScan.txt (331 Bytes, 31 views)
My System SpecsSystem Spec
26 Apr 2012   #10
Microsoft MVP

Windows 7 Ultimate 32bit SP1

Do you use a proxy?
My System SpecsSystem Spec

 Happili Virus

Thread Tools

Similar help and support threads
Thread Forum
Another Happili Virus
So it seems I am not alone here, but Happili is taking over my seaches, any help would be appreciated!
System Security
Another happili virus
Need help removing happili. I know other posts exist but the solutions seem to be custom. Please help. TIA
System Security
Happili virus as well
Hello, i recently just got the happili virus, ive recently checked this site and what i found didnt work for me. I have malewarebytes and tried full scan and it didnt detect it. i have also downloaded google chrome to avoid the problem but now i get happili as well, just less frequently then...
System Security
Infamous happili virus
Hello. Recently I have been infected with the happili virus. It has all the symptoms of other users, with hijacked searched results leading to spam pages. I don't know how long I have it as I do not search on this computer often, but it is still a pain to have. Any help in getting this issue...
System Security
happili virus! anyone?
hello i dont know if this is on the right thread or not but if its not can the mods move it. i got this happili virus in my laptop yesterday everytime i try to search the web it redirects me to another page. i ran the windows defender scan and i have norton and did a full system scan and still...
System Security

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 08:10.
Twitter Facebook Google+