Browser Hijack - Localhost Hijack
-
Browser Hijack - Localhost Hijack
I've just created a new Firefox profile and when i connect to Google i get this:

I get the same when i connect to 127.0.0.1, however my hosts file in not edited.
Original Firefox profile is working fine.
When i go to Locate IP Address Lookup Show on Map City of the IP 217.8.248.134, it's showing this ip: 218.201.21.184
and this location: country: China city: Chongqing
and i am in the US.
The worst thing is, same happen to me before and i don't remember what i did.
I use kaspersky.
-
Welcome aboard 
Please, read HERE and post required logs.
Please, observe following rules:
- Read all of my instructions very carefully. Your mistakes during cleaning process may have very serious consequences, like unbootable computer.
- If you're stuck, or you're not sure about certain step, always ask before doing anything else.
- Please refrain from running tools or applying updates other than those I suggest.
- Never run more than one scan at a time.
- Keep updating me regarding your computer behavior, good, or bad.
- The cleaning process, once started, has to be completed. Even if your computer appears to act better, it may still be infected. Once the computer is totally clean, I'll certainly let you know.
- If you leave the topic without explanation in the middle of a cleaning process, you may not be eligible to receive any more help in malware removal forum.
- I close my topics if you have not replied in 5 days. If you need more time, simply let me know. If I closed your topic and you need it to be reopened, simply PM me.
-
Hey Broni, thanks for your help and sorry i did not read the forum rules before posting.
Some of the files you asked log from are showing 4/43 and 5/43 infection on Virus Total(dds.scr, MBRcheck.exe), are they 100% safe?
I'am doing MalwareBytes cleaning process at the moment and i will do Avira, i will post logs tomorrow.
Please give me advice about the 2 suspicious files? Thanks
-
Just look at this forum and see how many computers I already fixed. Not to mention a bunch of other forums.
Of course those files are safe.
You think, I want to mess up your computer?
-
Of course i don't think that, it's just the virus total results that got me worried (4/43 and 5/43).
I will use all the tools and post logs here asap. Thank's
-
Sure thing