Wednesday, March 16, 2011

Somoto redirect in Explorer

Hi

I have an annoying redirect to
http://www.somoto.com/139/%7BF50C5C9A-0980-430A-A914-83F661E5D039%7D?s_src=newtab

eachtime I open an new tab in Explorer. Neither AVG9 or Malwarebytes can see this, any ideas on how to remove

Thanks - Pete

Reply 1 : Somoto redirect in Explorer

If Internet Explorer's HOME PAGE has been hijacked this can happen.

I'd check that as well as take Grif's advice at http://forums.cnet.com/7726-19411_102-5070551.html?tag=posts;msg5070551

Bob

Reply 2 : Somoto redirect in Explorer

First, after transferring it to the problem machine, run the following tool to help allow the removal programs below to run. (courtesy of Grinler at BleepingComputer.com)
There are 3 different versions. If one of them won't run then try to run the other one. Be patient.... as a black window should open, then close after finding all the background programs.
Vista and Win7 users need to right click and choose Run as Admin
You only need to get one of them to run, not all of them.

Rkill.exe
http://download.bleepingcomputer.com/grinler/rkill.exe

Rkill.com
http://download.bleepingcomputer.com/grinler/rkill.com

Rkill.scr
http://download.bleepingcomputer.com/grinler/rkill.scr

_____________________

IMMEDIATELY after running the "Rkill" tool above, run/install the Hitman Pro and TDSSKiller from the links below which you've also copied to a CD or flash drive, and transfered to the problem machine. Do NOT restart the computer after running Rkill.

Install and run a full system scan with the Hitman Pro program from the link below.

Hitman Pro 3.5

Next, download TDSSKiller and follow the guide to use the tool:
http://support.kaspersky.com/viruses/solutions?qid=208280684

And when you're done, check your LAN settings in Internet Explorer like this:

Open Internet Explorer and go to Tools-Internet Options-Connection Tab. Click on the LAN settings button. IF there is a check mark next to "Use a proxy server for your LAN", uncheck it. Click OK. Then OK, again.

Hope this helps.

Grif

No comments:

Post a Comment