New browser hijacker?

[JohannesK]

Hi, i recently became victim of a hijacker? that opens new tabs and new windows in mozilla, directing you to this: http://bestscanpc.biz/win/?code=934#. It seems a variant of bestscanpc.org which might be known:

http://safeweb.norton.com/report/show?name=bestscanpc.org

It disabled IE and hijacks mozilla. Ad aware, spydoctor, norton, spybot and other utils have not found anything, but norton does keep finding tracking cookies everytime this thing launches a window.

Here is what i know or did:

Nothing in Add or remove program list
Don't see unusual processes in taskmanager, but maybe it has a harmless name.
Nothing in msconfig that i know could be it, disabled few start up things that i didn't know, then re-enabled them after they checked out.
Seems only to happen when i start mozilla, doesn't start mozilla or IE by itself.
Didn't change startpage in mozilla.
Nothing in HOST file, just 127.


Please help :)

[tashi]

Hello JohannesK :welcome:

Please see this forum's FAQ, "BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance) (http://forums.spybot.info/showthread.php?t=288)

Then start a new topic providing the HJT log, and I will close this one as helpers look for threads without a response.

Best regards.