system
20
I think you missed the point here. Using a utility which is designed to remove a TDL4 infection to address an issue such as a browser hijack is likely taking a sledgehammer to crack a nut.
What should have happened here IMHO is that enquiries should have been made as to which search engine the user was being redirected to and then to take it from there. In this particular case, the culprit was a well-known hijacker installed when the user installs a ‘free’ Firefox app called Facemoods , the latter of which allows the user to add smileys to messages. To remove it, go to the Firefox Add-ons menu, highlight the culprit and then click the “Remove” button. That is all that’s necessary to remove it. More details on the Facemoods site @ http://articles.facemoods.com/english/how-to-remove-facemoods/
By the way, you presumably skipped my opening statement where I said “With all due respect to essexboy…” which I would have thought constituted an acknowledgement of his experience. However, everybody, which includes the ‘experts’ should be capable of learning and in future, I would respctfully suggest ascertaining a bit more detail before applying the ‘one size fits all’ solution.