topic Re: Happili.com Virus - How to Remove this pesky thing? in Norton Internet Security / Norton AntiVirus

Happili.com Virus - How to Remove this pesky thing?

Jaxxboss — Mon, 02 Apr 2012 00:40:42 GMT

I am going a little nuts here trying to get rid of this re-direct to Happili and/ or gimmeanswers.org/com. Seems like it only happens with Chrome. Whats my first step?

Re: Happili.com Virus - How to Remove this pesky thing?

Jaxxboss — Mon, 02 Apr 2012 00:57:15 GMT

Here is the Log, hope this is correct.

Re: Happili.com Virus - How to Remove this pesky thing?

Quads — Mon, 02 Apr 2012 03:37:55 GMT

I won't be doing this thread as you went about using tools including Combofix, FSS and OTL on your own.

Someone else can give it a go if they like.

Quads

Re: Happili.com Virus - How to Remove this pesky thing?

Krusty13 — Mon, 02 Apr 2012 04:12:11 GMT

Hi Jaxxboss,

As you seem to be out of luck here, can I recommend you try http://www.bleepingcomputer.com. This site has malware removal specialists that might assist.

Be warned though, they may not like that you have run advanced tools either!.

Also, If you do receive assistance from them, stick to their instructions and DO NOT seek help anywhere else as it can make the removal process harder and you could end up with no help at all.

Dave.

Re: Happili.com Virus - How to Remove this pesky thing?

Virtual_mind — Mon, 02 Apr 2012 04:25:48 GMT

I am along for the ride . I have picked up the same virus today . Taking a notice to the views just here at the Norton community it seems many are searching for a solution .

I am running Norton Security Suit with Xfinity Constant Guard. Definitions updated before recent scans .

I have run both deep scan and quick scan in safe mode , TDSS Fix tool 2.1.3 and all are BLIND to the problem.

Re: Happili.com Virus - How to Remove this pesky thing?

Virtual_mind — Mon, 02 Apr 2012 04:31:40 GMT

I will reply to myself because I dont see an edit option .

I have also run Norton Power Eraser with nothing found .

Re: Happili.com Virus - How to Remove this pesky thing?

Quads — Mon, 02 Apr 2012 04:49:05 GMT

Lots of people reading this, Don't use FixTDSS or NPE on this

Quads

Re: Happili.com Virus - How to Remove this pesky thing?

Virtual_mind — Mon, 02 Apr 2012 05:01:59 GMT

Ok Thanks , I just ran the scans , Nothing found .

Re: Happili.com Virus - How to Remove this pesky thing?

cgoldman — Mon, 02 Apr 2012 09:42:14 GMT

Have you considered clearing the Java cache?

Re: Happili.com Virus - How to Remove this pesky thing?

Jaxxboss — Mon, 02 Apr 2012 10:32:49 GMT

Thanks. And no worries about using the advanced tools. I'll just tell them Some Quads guy had me do it then he bailed when it was over his head.

I did the same thing to my neighbor when he fell in my pool, he went ahead and tried to swim before I could help him, so I told him he was out of luck.

Re: Happili.com Virus - How to Remove this pesky thing?

Carmie5 — Mon, 02 Apr 2012 15:21:01 GMT

This same thing happened to me last Thursday. I did a Google search and was directed to happili.com. All hell broke lose from there. Blue screens appeared. My system became very slow and I was redirected several times.

All of you are so much more computer proficient than me so I brought mine to Staples where they are reinstalling my OS (Windows Vista) and all of my data. They are supposed to be cleaned and free of viruses (fingers crossed).

I am such a low-level computer user and this really disturbs me. My pcs have never been infected with anything and I have been very pleased with Nortons. Until this time that is. I am not sure why they haven't caught this virus.

Re: Happili.com Virus - How to Remove this pesky thing?

Virtual_mind — Mon, 02 Apr 2012 17:59:51 GMT

I have used Norton so long I am unable to remember how long ,well over 12 years .

This was/is my first threat that I know of that wreaked such HAVOC .

On a good note , I hope; When I shut my machine down early this am I set it to run a FULL SYSTEM scan . When I fired up today I see 3 threats were found and qurantined .

mijimxh.dll (trojan.gen.2)

ezbdzgg.dll (trojan horse)

buhjtfc.dll (trojan horse)

Fingers crossed but I am not having browser hijacks after trying about 25 differnt searches, it was every other link when the

problem hit .

Maybe Norton updated the definitions ? If so , Thanks Norton and those that chimed in to help others.

Re: Happili.com Virus - How to Remove this pesky thing?

Carmie5 — Mon, 02 Apr 2012 19:10:32 GMT

Had this same problem last Thursday and my laptop is now being "fixed" at Staples. Shocked that Nortons didn't find this virus and so far, I haven't read any threads that they have fixed it.

Re: Happili.com Virus - How to Remove this pesky thing?

Quads — Mon, 02 Apr 2012 21:09:38 GMT

Jaxxboss wrote:
Thanks. And no worries about using the advanced tools. I'll just tell them Some Quads guy had me do it then he bailed when it was over his head.
I did the same thing to my neighbor when he fell in my pool, he went ahead and tried to swim before I could help him, so I told him he was out of luck.

That's fine Bleeping Computer know me and I will direct them to this thread and that the first 2 messages, It shows I did not tell you to do anything on this thread

You went about using FSS and OTL on your own, before I posted and your log shows you used Combofix before that which was not even on this thread.

So I did niot have you run OTL, FSS, Combofix or any other program so that means your statement is false and I can notify them of that of that if need be.

They know I can play with any infection and remove it, I infect my PC all the time on purpose, but that means I kmow how these tools work and what damage they can do.

Quads

Re: Happili.com Virus - How to Remove this pesky thing?

AllenM — Tue, 03 Apr 2012 01:19:07 GMT

Jaxxboss wrote:
Thanks. And no worries about using the advanced tools. I'll just tell them Some Quads guy had me do it then he bailed when it was over his head.
I did the same thing to my neighbor when he fell in my pool, he went ahead and tried to swim before I could help him, so I told him he was out of luck.

Hi Jaxxboss,

Quads is one of the best malware removal experts around but for him to help out you need to not have done anything on your own to try and resolve it.

Do be aware that BleepingComputer and all other reputable malware removal forums have very strict rules about NOT doing anything other than precisely what they ask you to do - nothing more and nothing less. They also do not allow you to get assistance from a second source. The reasons for this are quite simple really - doing anything on your own or getting help from someone else makes it impossible for them to do their job properly and even more importantly can make your situation worse than what you started with.

If they see evidence of those rules being violated they will close your ticket forthwith.

Best wishes.

Allen

Re: Happili.com Virus - How to Remove this pesky thing?

cgoldman — Tue, 03 Apr 2012 06:26:23 GMT

.Jaxxboss wrote:
Thanks. And no worries about using the advanced tools. I'll just tell them Some Quads guy had me do it then he bailed when it was over his head.
I did the same thing to my neighbor when he fell in my pool, he went ahead and tried to swim before I could help him, so I told him he was out of luck.......
..........................................................................................................................................................................................................................

I happen to have a different opinion. Unless I am missing something you ran a couple of programs and attached logs.
Had you been following any one specific persons advice and then gone off on your own, then I might have understood why that specifc person would not wish to provide further advice. But I do not see that that is the situation here.

Also I am not a fan of bleeping and no offence to them is intended. But the time lags are great and when you have an infected system you want immediate solutions and often simply cannot wait around for days for the next post.

Taking a helicopter view. Norton is an AV product, this is a forum for support of those products and what I would really like to see is that users can be supported here whatever their AV difficulty and not, when it gets tough having to redirect users to a completely unaffiliated website.

Re: Happili.com Virus - How to Remove this pesky thing?

Quads — Tue, 03 Apr 2012 14:09:00 GMT

Then again you struggle with scripting and what is going on.

Second, the time lag depends on how many PC's need malware removal and the type of malware involved and other problems caused by that. None of the guys including myself get paid for it, and the sometimes 100's of PC's needing help.

When people want that best that is what happens with a very high success rate.

Most people don't mind waiting and understand what we do and the technical ability involved, usually female more than males, males tend to think I can do it I can do it OH BUGGER. Females may at first glance ask silly questions or ask for clarification but better that way then the other.

I have 41 zeroaccess droopers to infect my machine with so I am off.

Quads

Re: Happili.com Virus - How to Remove this pesky thing?

cgoldman — Tue, 03 Apr 2012 15:00:25 GMT

Yes I struggle with many things and many people. Nevertheless, I try. Making personal comments is not what this forum is about.

I also provide solutions for people with infected computers. My track record is 99% and I do this for money professionally. Terrible by your standard no doubt but this is not a competition. Taking people off to bleeping does not provide the feedback that is valuable for the community here.

Re: Happili.com Virus - How to Remove this pesky thing?

grafaloff — Wed, 04 Apr 2012 00:36:04 GMT

I also got the happili.com redirect virus yesterday. I worked with Norton Live for 6 hours today. They had 4 "expert technicians" working on my computer online and they were not able to solve the problem. They sent the information to their research department and said they would get back to me when they figure out a solution. Its not worth running the basic norton virus removal tools (360, NPE, FixTDSS, etc because none of them worked.

Good Luck!

Gary

Re: Happili.com Virus - How to Remove this pesky thing?

AllenM — Wed, 04 Apr 2012 02:25:08 GMT

grafaloff wrote:
I also got the happili.com redirect virus yesterday. I worked with Norton Live for 6 hours today. They had 4 "expert technicians" working on my computer online and they were not able to solve the problem. They sent the information to their research department and said they would get back to me when they figure out a solution. Its not worth running the basic norton virus removal tools (360, NPE, FixTDSS, etc because none of them worked.

Good Luck!

Gary

Hi Gary,

I can confirm Symantec is looking into this.

From some research I done I believe this virus recently resurfaced, and I would guess with further changes to try and circumvent AV software.

Allen