Windows 7: IE10 browser hijacked. Unable to load firewall or download programs.

Samgray2005 · 09 Nov 2013

Alright. I did both. Here is the report from Farber Service Scanner.
FSSRecovery.txt

cottonball · 09 Nov 2013

There are a few issues showing on the FSS report, and the Firewall is only one of them.

Let's see if the following tool can take care of them. If not, we will need to go at it manually.

Since the following steps involve editing the Registry, please create new restore point before proceeding.
System Restore Point - Create
Select: Option Two

Now, please download the ESET ServiceRepair tool:
http://kb.eset.com/library/ESET/KB%2...icesRepair.exe
(Direct link only available)
Save to the Desktop.
Double-click to run the downloaded file.

When the program runs, a prompt appears asking if you want to proceed.
Click: Yes
When the Services routine is Completed, you are asked to Reboot.
Click Yes to allow the reboot.

The tool creates a folder named CC Support on the Desktop.

Please provide the CC Support\Logs\SvcRepair.txt in your reply.

Next, please run the Farbar Service Scanner once again, and provide the FSS.txt in your reply.

Samgray2005 · 10 Nov 2013

Good Morning!
1. Created Restore Point as requested.
2. Ran ESET Service Repair (See attached File)- And Firewall is ON!SvcRepair Report.txt
3. Running Farbar Service Scanner again now.

Samgray2005 · 10 Nov 2013

Here is result of second scan.FSS2.txt

Thank you Cottonball, Usernameissues and Jacee for all your assistance and support so my husband will get his computer back!
Waiting on your reply (though I doubt anyone but me is up this early on a Sunday!)

Jacee · 10 Nov 2013

Java is out of date and so is Adobe Reader.

Download PSI and update all security vulnerabilities. Un-check any pre-checked/bundled software that may be added along with the download. Free Computer Security - Personal Software Inspector (PSI) - Secunia

cottonball · 10 Nov 2013

Samgray2005,

Been out most of the day, and did not get up 'till 9:30AM!! :)

Let's merge a missing Action Center key into the Registry...

Please open Notepad by pressing the Windows key and the R key at the same time.
In the Open area, type: notepad
Copy and paste all the text inside the code box below to Notepad:

Code:

Windows Registry Editor Version 5.00
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellServiceObjects\{F56F6FDD-AA9D-4618-A949-C1B91AF43B1A}]
"AutoStart"=""

In Notepad, go to File > Save As
Save the file to: Desktop
Save the file as: fixac.reg
Save type as needs set to: All files

On the Desktop, double-click: fixac.reg
Confirm the prompt to merge to your Registry.
Click: OK

Restart the computer.

On the Desktop, right-click fixac.reg, and select: Delete

Also empty the Recycle Bin.

Now, once again press the Windows key and the R key at the same time.
In the Open area, type: services.msc
In the Services console, make sure Security Center is there, and:
Startup Type is set to: Automatic (Delayed Start)
Service Status is set to: Started

When done, please run the Farbar Service Scanner once again, and post its FSS.txt report.

Samgray2005 · 11 Nov 2013

Glad you got to sleep in! I will apply this tonight! Not lucky enough to be off today.

Samgray2005 · 11 Nov 2013

FSS Scan- here ya go. All items done. FSS.txt

cottonball · 11 Nov 2013

Looking good!

On your initial post:

Quote:

...downloaded an update for my husband's HP printer onto his computer. At the same time, it downloaded BING, which we have never used.
...we noticed his firewall was off, and we were unable to get it turned back on.
...we cannot download any security.
...home page has changed. We are unable to change it back.

Are you still experiencing any of the above issues?

Samgray2005 · 12 Nov 2013

Nope,

Except Bing seems to still be there. That shouldn't be a problem tho. Everything seems to be working properly again.

Thank you so very much!!!