Laptop infected ?

[Deleted User]

I'm trying to clean up a pal's laptop with my limited computer skills and coming up against a brick wall.

Each time it goes to the Google homepage after start up it instantly goes onto a page called bb-journal.com, an auto portal.

I've tried Iobit's Advanced System Care but to no avail.

It appears he had his Windows Defender turned off and now it won't let me turn it back home.

Any suggestions gratefully accepted.
Thanks

Browntoa

https://www.malwarebytes.com/mwb-download/


choose free options , full scan and remove all it finds

AndyPix

^^ this right here .. (Decline the option for a free trial of the pro version)
And then ADW cleaner to "tidy up" ..


https://toolslib.net/downloads/viewdownload/1-adwcleaner/

[Deleted User]

Browntoa wrote: »

https://www.malwarebytes.com/mwb-download/


choose free options , full scan and remove all it finds

It won't let me open it.Keeps coming up with the previous dodgy page

AndyPix

Deleted_User wrote: »

It won't let me open it.Keeps coming up with the previous dodgy page

You need to download the 2 programs on a differnt pc and then move them over to the infected one with a usb stick or similar ..

DoaM

And make sure to scan the USB stick with your AV / anti-malware programs when you go to use it again in your own PC. (Just in case the infected PC tries to infect the USB stick).

AndyPix

DoaM wrote: »

And make sure to scan the USB stick with your AV / anti-malware programs when you go to use it again in your own PC. (Just in case the infected PC tries to infect the USB stick).

Sound advice - But this is unlikely - This is malware/pup infection ..


Worms are rare these days and wouldnt exhibit this behaviour (changing homepages) as they dont want you to realise you are infected.

[Deleted User]

Managed to run MalwareBytes and ADW Cleaner and both registered infections.
Sadly even though both cleaned these up the problem remains.
It seems to be only on one account on the computer - my pal's Chrome browser - but not his son's IE.
Could it be something on the toolbar ?

AndyPix

Go into chrome settings, remove any addons , then set your homepage back to google or whatever.
That should finish the job.


Although i would have expected ADW cleaner to remove the offending addon(s)

AndyPix

And you did run ADW cleaner whilst logged on with the affected account, yes ?

[Deleted User]

AndyPix wrote: »

And you did run ADW cleaner whilst logged on with the affected account, yes ?

Yes.
I'm trying HitmanPro now and then I'll try your suggestion next.
Thanks for all the input.
Malwareytes is showing Bdt.femurssculler.com