Not what you were looking for? Ask our experts!
Reply
Newbie
jersygirlrocks
Posts: 1
Registered: ‎12-21-2011

Plz plz help I can not get rid of this thing

I seem to have a virus or something that changes the home page of my browsers to searchqu.com/406 no matter how many times I change them back to my preferences. I have NIS 2011 and have run couple  full scans but it doesn't seem to remove this virus-program. Has anyone else had problems with this virus-program and if so how did you get it removed??

 

I had been trying to  get the searchqu.com removed   and dont know how  

 

 

 Please help me  thank you

lmacri
Posts: 1,448
Kudos: 536
Registered: ‎05-05-2009

Re: Plz plz help I can not get rid of this thing

[ Edited ]

Hi jersygirlrocks:

 

Welcome to the Norton forum.

 

It sounds like you have the same browser redirector malware reported here in BKVic's thread Searchqu.com/406 Removal. There's a solution posted here in the Firefox forum that recommends uninstalling a program called Windows iLivid Toolbar, so look in your Windows Control Panel (Add/ Remove Programs for XP or Programs and Features for Vista/Win7) as see if your can find and uninstall this toolbar.

 

I would also try running a full system scan using the free Malwarebytes Anti-Malware (MBAM) scanner.  If you accept the 15-day trial period to test the Pro features of MBAM, make sure you disable the real-time protection mode in MBAM, since running more than one security program in real-time protection mode can create conflicts and allow malware to "sneak" past your NIS anti-virus protection.

 

MBAM RT Protection.jpg

 

Let us know if the above suggestions don't work.  Floplot has posted links here to four excellent malware removal forums where you can get expert help if someone in the Norton forum can't provide a quick solution.

---------

Windows Vista Home Premium 32-bit SP2 * NIS 2011 v. 18.6.0.29 * IE 9.0 * Firefox 8.0.0
HP Pavilion dv6835ca, Intel Core2Duo CPU T5550 @ 1.83 GHz, 3.0 GB RAM, NVIDIA GeForce 8400M GS

 

 

 

Visitor
nellika3
Posts: 1
Registered: ‎01-03-2012

Re: Plz plz help I can not get rid of this thing

After I installed iLivid Download Manager, both Firefox and IE had an unwanted Toolbar and the homepage was hijacked - it went to searchqu.com/406. I think the searchqu.com homepage hijack can come from downloading other programs as well.

Here is the solution that worked for me:   for Windows XP (it's probably similar for Windows 7)-

-In Firefox Addons window, uninstall the Searchqu Toolbar and DataMngr addons.

I think there was something in the Plugins that I deleted as well (probably had searchqu/ datamngr/ or ilivid in the name)
 
-Close all browsers - Firefox, IE..
-Uninstall iLivid from Control panel Add/Remove Programs tool. (if it's there)

-Run Spybot Search & Destroy if you have it - I had 4 entries (not sure if they were all related to the iLivid install)

-go to  C:\Program Files\Windows iLivid Toolbar\Datamngr\ToolBar\uninstall  (click on uninstall)
-go to  C:\Program Files\Windows iLivid Toolbar\uninstall  (click on uninstall)

In C:\Program Files\Windows iLivid Toolbar\Datamngr
Delete:
-Browser Connection.dll
-DnsBHO.dll
-datamngr.dll

 

--If can't delete (access denied/ file in use) - Delete them in Safe Mode. Then delete from recyling bin. Restart computer.

Then change the home pages in Firefox/ IE back to what you want:
*Firefox - Tools, Options, General
*IE - Tools, Internet Options, General

After these steps my home page finally stopped going to searchqu.com/406 in both browsers. Hopefully it'll work for you too!

Visitor
searchqusupport
Posts: 1
Registered: ‎01-08-2012

Re: Plz plz help I can not get rid of this thing

Hi,

My name is John, and I'm a member of the Searchqu Support Team. I'm here to help :)

When iLivid installs onto your pc it offered two basic installs, typical installation, which lists the add-on features such as searchqu homepage, and custom installation, which allows you to select the add-ons that you wish to install. There's no need to worry if you did the typical install - this isn't a virus, nor malware, and there's no need to Perform a virus scan against it.

Since Searchqu is an addon feature of iLivid, there's no need to uninstall iLivid [http://www.iLivid.com], the iLivid Download Manager will work just fine without it :-)

If you prefer to change your default search engine please check:

http://www.ilivid.com/faq.htm#8

Please look for the paragraph saying “I would like to keep iLivid, but change my default search engine”

We are here to answer to any further questions :)

The searchqu team support

 

lmacri
Posts: 1,448
Kudos: 536
Registered: ‎05-05-2009

Re: Plz plz help I can not get rid of this thing

[ Edited ]

Hi searchqusupport:

 

Thank you for the additional information, but respectfully, if the "standard" iLivid installation also installs a browser search engine that automatically redirects users to your website without their expressed permission, most users would assume that their browser home page had been hijacked.  If this doesn't qualify as malware then it certainly qualifys as unwanted behavior.  If other users still want to use iLivid as their download manager after reading information on the ThreatExpert Report site here and comments on Sanjay Ranjur's site here titled How to Remove iLivid Download Manager then they are free to do so at their own risk.

-----------

Windows Vista Home Premium 32-bit SP2 * NIS 2011 v. 18.6.0.29 * IE 9.0 * Firefox 9.0.1
HP Pavilion dv6835ca, Intel Core2Duo CPU T5550 @ 1.83 GHz, 3.0 GB RAM, NVIDIA GeForce 8400M GS