Author Topic: Start.qone8.com  (Read 5263 times)

Offline AlbertoGibert

  • Jr. Member
  • **
  • Posts: 58
    • Personal Message (Offline)
Start.qone8.com
« on: October 21, 2013, 06:17:58 PM »
Al descargar Java versión 7 recomendado por ustedes y redirigido desde su página web, se ha instalado un programa espía que Avast no detecta el qone.com, o bien -- start.qone8.com -- que suplanta el navegador (todos) y la página de inicio que se cambia a start.qone.com en mi caso, pero hay otros nombres circulando. Lo he desinstalado desde panel de control, eliminar programas, pero es imposible.
Ayuda por favor. Gracias.

Offline Steven Winderlich

  • Super Poster
  • ***
  • Posts: 1832
  • Gender: Male
  • Happy Easter :)
    • Personal Message (Offline)
Re: Start.qone8.com
« Reply #1 on: October 21, 2013, 06:22:33 PM »
Hello,

please post in english here if possible.

Follow this guide and attach the logs: http://forum.avast.com/index.php?topic=53253.0

When done malware removers will be notified and will help you to clean this up.
Windows 8.1 Update 1 64-Bit, Avast 2014 Free 9.0.2018, Malwarebytes 2 PRO, MCShield

Offline AlbertoGibert

  • Jr. Member
  • **
  • Posts: 58
    • Personal Message (Offline)
Re: Start.qone8.com
« Reply #2 on: October 21, 2013, 06:32:10 PM »
By installing java version 7 recommended from Avast. has downloaded a spyware program that supplants and replaces all browsers start page for start.qone8.com, looking so much like Google.com.

I tried manually desintalarlo but impossible. I have removed from elimination programs control panel, and is no longer, but still works to open any browser

Offline Steven Winderlich

  • Super Poster
  • ***
  • Posts: 1832
  • Gender: Male
  • Happy Easter :)
    • Personal Message (Offline)
Re: Start.qone8.com
« Reply #3 on: October 21, 2013, 06:36:53 PM »
Actually there is malware on this site: http://www.avgthreatlabs.com/website-safety-reports/domain/qone8.com/
Blacklisted on Sucuri: http://sitecheck.sucuri.net/scanner/?scan=http%3A%2F%2Fstart.qone8.com
So this is malware.

Please follow the instructions above and a malware remover will help you to clean this up.
Windows 8.1 Update 1 64-Bit, Avast 2014 Free 9.0.2018, Malwarebytes 2 PRO, MCShield

Offline AlbertoGibert

  • Jr. Member
  • **
  • Posts: 58
    • Personal Message (Offline)
Re: Start.qone8.com
« Reply #4 on: October 21, 2013, 06:48:59 PM »
Yes, this is invasive , this is malawere. :(  The solution is paying, and I am paying for Avast.

Offline Steven Winderlich

  • Super Poster
  • ***
  • Posts: 1832
  • Gender: Male
  • Happy Easter :)
    • Personal Message (Offline)
Re: Start.qone8.com
« Reply #5 on: October 21, 2013, 06:51:22 PM »
The solution is not paying.

NO Antivirus provides 100% protection. Not even Kaspersky or Bitdefender.

Malware removers will help you to get rid of this, for free. When logs are attached.
Windows 8.1 Update 1 64-Bit, Avast 2014 Free 9.0.2018, Malwarebytes 2 PRO, MCShield

Offline essexboy

  • avast! Überevangelist
  • Maybe Bot
  • *****
  • Posts: 28987
  • Gender: Male
  • Dragons by Sasha
    • Malware fixes
    • Personal Message (Offline)
Re: Start.qone8.com
« Reply #6 on: October 21, 2013, 06:51:43 PM »
I can remove it for you ..  Where did you get the update ?

Download OTL  to your Desktop
Secondary link
  • Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.


  • Select All Users
  • Select LOP and Purity
  • Under the Custom Scan box paste this in
netsvcs
BASESERVICES
%SYSTEMDRIVE%\*.exe
c:\program files (x86)\Google\Desktop
c:\program files\Google\Desktop
dir "%systemdrive%\*" /S /A:L /C
CREATERESTOREPOINT


  • Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
    • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
    • Attach  both logs

Offline AlbertoGibert

  • Jr. Member
  • **
  • Posts: 58
    • Personal Message (Offline)
Re: Start.qone8.com
« Reply #7 on: October 21, 2013, 07:22:04 PM »

Offline Steven Winderlich

  • Super Poster
  • ***
  • Posts: 1832
  • Gender: Male
  • Happy Easter :)
    • Personal Message (Offline)
Re: Start.qone8.com
« Reply #8 on: October 21, 2013, 07:24:07 PM »
Please follow the steps from Essexboy, he knows what he is doing.
Windows 8.1 Update 1 64-Bit, Avast 2014 Free 9.0.2018, Malwarebytes 2 PRO, MCShield

Offline essexboy

  • avast! Überevangelist
  • Maybe Bot
  • *****
  • Posts: 28987
  • Gender: Male
  • Dragons by Sasha
    • Malware fixes
    • Personal Message (Offline)
Re: Start.qone8.com
« Reply #9 on: October 21, 2013, 07:29:38 PM »
That link is using a sledgehammer to crack a nut and will probably not work

Offline AlbertoGibert

  • Jr. Member
  • **
  • Posts: 58
    • Personal Message (Offline)
Re: Start.qone8.com
« Reply #10 on: October 21, 2013, 08:03:31 PM »
okay, thanks :)

Offline woland58

  • Newbie
  • *
  • Posts: 11
    • Personal Message (Offline)
Re: Start.qone8.com
« Reply #11 on: October 22, 2013, 10:15:10 AM »
have the same problem that AlbertoGilbert got.
I have done everything that essexboy suggested (run otl.exe etc.)
I am supposed to attach here the contents of the otl.txt and the extras.txt or what else?
thanks for your help




I can remove it for you ..  Where did you get the update ?

Download OTL  to your Desktop
Secondary link
  • Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.


  • Select All Users
  • Select LOP and Purity
  • Under the Custom Scan box paste this in
netsvcs
BASESERVICES
%SYSTEMDRIVE%\*.exe
c:\program files (x86)\Google\Desktop
c:\program files\Google\Desktop
dir "%systemdrive%\*" /S /A:L /C
CREATERESTOREPOINT


  • Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
    • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
    • Attach  both logs

Offline essexboy

  • avast! Überevangelist
  • Maybe Bot
  • *****
  • Posts: 28987
  • Gender: Male
  • Dragons by Sasha
    • Malware fixes
    • Personal Message (Offline)
Re: Start.qone8.com
« Reply #12 on: October 22, 2013, 01:59:22 PM »
@woland58 if you start your own thread I will pick you up there

Offline AlbertoGibert

  • Jr. Member
  • **
  • Posts: 58
    • Personal Message (Offline)
Re: Start.qone8.com
« Reply #13 on: October 24, 2013, 05:29:39 PM »
Well, I ran the program OTL by old version and I have the report notes blok. Now what do I do?

Offline AlbertoGibert

  • Jr. Member
  • **
  • Posts: 58
    • Personal Message (Offline)
Re: Start.qone8.com
« Reply #14 on: October 24, 2013, 05:34:33 PM »
Well, I ran the "OTL by old version" and I have the report in notepad. Now what do I do?

 

Google Chrome

AVAST recommends using the FREE Google Chrome™ browser.

Download Google Chrome Now