dodgy website auto opens during start up

Hi guys, I am running Windows 7 Ultimate. Few days ago, something strange happened. Everytime when windows starts up, Firefox opens up automatically to this website called http://hosting32.com/imagehosr/. I thought this was some malware so I used both Bitdefender and STOPzilla to scan and eliminate it. However, both programs did not manage to find anything. I downloaded the free AdAware and still no dice. I changed my default browser to IE and restarted my pc, only this time the website pops up again in IE. This proves that it is not a browser specific problem. So, what i did next was use Acronis Image to revert back to the time i havent got this problem.

Reverting back seemed to fix the problem. I went ahead and update my Windows Update and Bitdefender to latest. OK this is the weirdest part. After updating both, all of a sudden, my web browser pops up the same website again. I am starting to suspect that one of these updates is causing this. Anyone else having this problem and know how to solve it? Its bugging me like hell.

 

Download Avira Antivir Personal 9.
Download MalwareBytes' Anti-Malware.
Download SUPERAntiSpyware.
Download SpywareBlaster.

Install them and scan. I think you problem will be solved after that.

 

i recc smitfraudfix.

otherwise look at your starup items by typing msconfig. see what is starting causing the issue. you may be able to kill it there by using a tool like jv16

 

Are they all free? If they are, i might try them all.

I tried manually disabling startup items. I even painstakingly disable each startup one by one and restarting windows with each disable. Problem still occurs

 

You're in luck. They are all FREE.
SmitFraudFix can fix the problem too I think. But it is not recommended for newbie I guess?

 

SmitFraudFix is not free. Scanning is free but to clean my computer it asked for a registration. I tried registering and it asked me to pay for some stuff to complete the registration.

 

I guess. You only try SmitFraudFix as last resort. It is free I used it before. So strange for you. Forget it.
Now, test this 1st.

If this fail, then, only SmitFraudFix.

 

Try booting into safe mode and scan with MalwareBytes Anti-Malware. Also Just run a scan with Dr. Web CureIt. One of these 2 should find ur virus and remove it.

 

i also faced this problem...

n i opted for a simpler solution.
i use Avast antivirus, and i just make an exception in it to block connections from "http://hosting32.com/imagehosr/".

finished!
as simple as that!

 

As simple as that may be, the virus is still in ur system. It would be better to remove it.
BTW didn't avast! detect the virus?

 

You could try runnin a Kaspersky Internet Security Trial Version - I believe its fully functional for 30 days and do a full system scan.

 

If scanning with MBAM, Dr. Web CureIt, SuperAntispyware, or any software doesn't fix the issue, then i guess ur best bet is to back up all ur data and reinstall ur OS.

 

Well, this is the last resort of course.
I would suggest this too. Because the fastest way is indeed re-installation of OS. In addition, there're a lot of benefits too.

 

Guys I finally solved it. It was my STOPzilla anti spyware program that was causing it. Dr. Web Cure It is the only program that detected it as malicious. I thought it was weird but i deleted it anyways. Since it deleted the program's msi file, i couldn't uninstall it the normal way, so I tried to manually delete the installation folder. Turns out I couldn't delete the folder because the folder is in use. And the only way to explain why the folder is in use...... cause the virus is using it. Now, the website doesn't pop up anymore. Thanks guys for the help

 

Just as precaution, run a scan with MBAM one last time to see if the virus left behind any traces on ur system.
Only glad to help.
Cheers.

 

I got something that starts a slide show and opens my browser to the same URL. I noticed that the slide show is titled AliceAlbum.exe. I searched my machine and found references in my application data folder (Windows Key+R -> %APPDATA%) and in the prefetch (Windows Key+R -> %windir%/prefetch).

If you find the same, I suggest you disable System Restore and delete these files. Restart and enable System Restore.