asafetylist.com - that old favourite

Hi
Recently had this site hijack my pc and can't get rid of it.
I managed to get rid of the flashing icon but can't get rid of the homepage redirection.
I have tried a variety of searches on this but am getting nowhere fast, I've seen a few examples where some people have been helped where they have posted whole screeds of 'Processes'.
I've no idea how to kick all of this off but would really appreciate some help. Must point out that I'm not as knowledgable as I think I am with computers.

 

Hello and welcome to WindowsBBS Forums.

Here is how we like to begin our analysis of your pc:

For starters, if you do not have them yet, please DL and run AdAware & Spybot Search & Destroy. AdAware and Spybot Search & Destroy are 2 of the most trusted apps in the security area. They are both free, compliment each other nicely, and do not use a lot of resources. They can be found here:

Spybot Search & Destroy v.1.4
AdAware SE Free v1.06r

With AdAware and Spybot: DL, follow the install instructions, check for updates, then scan, repair/remove/quarantine anything found. Reboot before next scan with whichever app is next. The reason for running these apps, is to clean up some of the other 'crapware' on your pc, which, in turn, will make deciphering your HJT log, easier.

Then we use HiJackThis v1.99.1
Please download HijackThis! SetUp from here. Save the file to your desktop.

Double-click the HijackThis! SetUp icon to begin the installation. Follow the prompts for the default install location of:'C:\Program Files\HijackThis'. Tick the 'Create a desktop' button when the option appears. Select next, then allow HijackThis! to start.

Then press the [Scan] button. You will notice the [Scan] button will turn into a [Save Log] button. Click the [Save Log] button and notepad will open up with the contents of the scan. Right-click in the saved log, and select 'copy'. Then proceed to your original thread, unless otherwise instructed and click the '[Reply]' button and paste the saved contents to be reviewed. Do not make any modifications to the log or perform any 'fixes' until told to do so.

Someone will be along to look at your log soon as possible, we appreciate your patience. Remember, we are ALL VOLUNTEERS, those of us who help. And we do the best we can to answer posts as soon as we can. Logs are generally looked at in the order in which they are posted.

 

probs with ad-aware

I managed to download both suites but can't find the ad-aware stuff, looks like it went to a temp folder but I can't find it, the Search and Destroy looks fine and is on my desktop.
Trying to reload the ad-aware stuff simply 'Thank Me' for downloading - confirming that I've got some files on my pc somewhere.
The S&D is on my Start/All Programs list but nothing for the other.
Any idea where the default would be storing it. I've done a C: search on ad-aware, adaware, adware, aware & lavasoft without success.

I'll keep looking.

The S&D looks like it got rid of some stuff but I'll wait until I get the Ad-Aware stuff before posting the results etc.

Thanks very much so far.

 

Try searching for 'aaw', that is the default name for the file. If you can't find it, then download it again from here, save it to your desktop for easy retrieval.

 

The Search & Destroy re-ran at switch on and corrected additional problems, I am now able to use my browser with no redirection problems, seems the S&D was enough.
I did manage to get Ad-aware installed so thanks for that too. It found even more problems on my pc and quarantined or removed those.
Much appreciated for the help, I am going to see how things go for the next few days but it looks like my problems are no more.

 

This infection is not easily removed without some specialized tools. There are not anti-spyware applications made by anyone which can entirely remove the infection.

Please run the HJT so we can be sure