This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Malware Removal Forums

Hijacker.Medfos.B

10 min read

This thread's last reply is from November 7, 2013, 6:24 AM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

I have done 5 or 6 searches, and so far it is working like suppose to!! Thank you very much for your help. If I ever have a problem again, I won't hesitate to contact you.
One question: By the names of the infections removed, can you tell me how they got through McAfee and into my computer? I joined Facebook in June. Can one get a virus by opening and reading what a "friend" posts?
Most modern infections get onto a computer because the person using the computer "invited" them in. By that I mean you probably clicked on something that was "disguised" as something else, could be a link in a post or on a webpage, could be malicious html (javascript) code in an e-mail, could be an attachment to an e-mail, the possibilities are endless.

By clicking on an item, you are instigating a "conversation", and therefore your firewall will allow any incoming data from the remote party in that "conversation", if that remote party is malicious then the only thing preventing you getting infected is your anti-virus, and as you've found out, they're not foolproof. None of them are. That doesn't mean they don't protect you, because they do, they just don't protect you against everything. Hardly surprising since 1000s of new infections (or variations on old infections) are created every day, so a "signature" dependant AV is playing catch-up all the time.

Since your problems now appear to have been resolved, it's time to remove the programs we've been using to clean your machine.

First ...

Let's clear out OTL and the files and folders it created.
  • Double click OTL.exe to launch the programme.
  • Click on the CleanUp! button.
  • OTL will download a list from the Internet, if your firewall or other defensive programmes alerts you, allow it access.
  • You will be prompted to allow the clean up procedure, click Yes
  • When finished exit out of OTL
  • Now delete OTL.exe (if still present).


Next ...

Let's clear out ADWCleaner and the files and folders it created.
  • Double click AdwCleaner.exe to run it.
  • Click Uninstall.
  • Click Yes to the prompt.
  • AdwCleaner will close and uninstall itself


Note: If AdwCleaner prompts you an update is available, click Cancel and continue to uninstall.

As far as I can see, your computer looks clear of infection now.

Are you still noticing any problems ?
  • If you are let me know about them.
  • If not it's time to make your computer more secure.


Please read the article below which will give you a few suggestions for how to minimise your chances of getting another infection.
I tried multiple searches, and the one I clicked on is actually the one that comes up! So far, so good. Thank you very much for your help and expertise. I really appreciate it. Jim
I joined Facebook in June. Is it possible that my computer got infected by me reading what my "friends" were posting on facebook?
"MtMercy+" wrote:I tried multiple searches, and the one I clicked on is actually the one that comes up! So far, so good. Thank you very much for your help and expertise. I really appreciate it. Jim


You're welcome, glad we could help.

I joined Facebook in June. Is it possible that my computer got infected by me reading what my "friends" were posting on facebook?


Hard to say, it would depend on whether they had any embedded code in their posts, and whether you clicked on the code links or not. As I said earlier, any web page is a potential "minefield", but that's not to suggest that you should get paranoid about clicking on things, just that you should exercise a reasonable amount of caution when visiting sites you're not familiar with.

As your problems appear to have been resolved,