Search engine being redirected + more

[hellig]

This morning, my computer was attacked by a trojan called psw.generic7.AUZH. AVG was able to 'stop' the virus (or so it said) but since the attack two things have started to happen:

- All browser pages (IE and Google Chrome), especially search results, redirect to hochu-spat DOT com, and of course, the page never loads and I get ad sites instead -- if at all.

- When I click on an application, a pop-up warning appears which reads "the application has failed to start because netlhwlnlp.dll was not found. Re-installing the program may fix the problem." However, the applications load anyway. A Google search for that .dll file produces no results, so I'm wondering if it's just something the virus created. I'm not sure.

Ran Ad-Aware, Spybot, and nothing helped.

Followed the instructions per sticky posts. Backed up the registry but HJT is being prevented from installation. A warning comes up saying 'the system administrator has set policies to prevent this installation" which I think is bogus because my only account in the machine has all admin permissions. So unfortunately, I cannot copy/paste HJT results.

Any help would be appreciated.

Thanks.

[Blade81]

Hi,

Download DDS and save it to your desktop from here (http://www.techsupportforum.com/sectools/sUBs/dds) or here (http://download.bleepingcomputer.com/sUBs/dds.scr) or here (http://www.forospyware.com/sUBs/dds).
Disable any script blocker, and then double click dds.scr to run the tool.
When done, DDS will open two (2) logs:
DDS.txt
Attach.txt

Save both reports to your desktop. Post them back to your topic.


´Download GMER (http://www.gmer.net) here by clicking download exe -button and then saving it your desktop:
Double-click .exe that you downloaded
Click rootkit-tab and then scan.
Don't check
Show All
box while scanning in progress!
When scanning is ready, click Copy.
This copies log to clipboard
Post log (if the log is long, archive it into a zip file and attach instead of posting) in your reply.

[Blade81]

Due to inactivity, this thread will now be closed.

Note:If it has been four days or more since your last post, and the helper assisting you posted a response to that post to which you did not reply, your topic will not be reopened. At that point, if you still require help, please start a new topic and include a fresh HijackThis log and a link to your previous thread. Please do not add any logs that might have been requested in the closed topic, you would be starting fresh.

If it has been less than four days since your last response and you need the thread re-opened, please send me or MOD a private message (pm). A valid, working link to the closed topic is required.