Help with Google SERPS Hijack by Malware on my computer

[Rugles]

My home computer was infected with malware on the weekend.

This is what is does:

- all Google(and Yahoo) searches yields results with the proper page title, the proper ransom note, the proper kb's,
- yet the domain that appears is for some stupid MFA shopping sites
- if you click anywhere on the results, you get redirected to the MFA shopping site

So basically they are inserting there domain into the SERPS.

I tried Avast, Hijack This (killed off unknown processes), Adaware, Spybot and last night I used M$ Onecare scan.

Spybot was the only one that yeilded a problem and it deleted whatever it was.

However, now Google SERPS take for ever to load. Yahoo will search properly now. So I am sure its not completely gone.

I spent an hour searching with Yahoo last night for anyone talking about this particular Malware and a possible cure, found some similar Malwares but after following the instructions about registry changes, I can seem to find it.

Anyone have any ideas?

[youfoundjake]

I would recommend malware bytes, to remove all remaining infections. Next I would recommend taking a look at your hosts file to see if anything in there doesn't belong. Clear the cache of your browser, remove all the objects being used. (what browser are you using?) Run another hijackthis, and you can either post the log here (mods?) or pm it to me (mods?)
Did spybot say what the infection was? I know there is an icky winxpantivirus2009 going around, had to fight that off of numerous machines i take care of...
good luck to you..

[Rugles]

I am at work, so I dont have access to the machine right now.

Thanks for the suggestions,

..added

yes, Spybot did say what they found, just cant remember what it was, but it was nto what you are suggesting

and i do know where i picked it up, on a message board on a compromised server, there are several of us with the exact same malware, we are all stumped

[edited by: tedster at 5:31 pm (utc) on Nov. 20, 2008]

[tigertom]

MalwareBytes removed adware like this for me.

[Rugles]

really, i will give that a try tonight, thanks

so you had the exact same thing?

[Rugles]

Thanks, Tigertom

that worked!