Author Topic: Start.qone8.com  (Read 31959 times)

0 Members and 1 Guest are viewing this topic.

AlbertoGibert

  • Guest
Start.qone8.com
« on: October 21, 2013, 08:17:58 PM »
Al descargar Java versión 7 recomendado por ustedes y redirigido desde su página web, se ha instalado un programa espía que Avast no detecta el qone.com, o bien -- start.qone8.com -- que suplanta el navegador (todos) y la página de inicio que se cambia a start.qone.com en mi caso, pero hay otros nombres circulando. Lo he desinstalado desde panel de control, eliminar programas, pero es imposible.
Ayuda por favor. Gracias.

Offline Secondmineboy

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3645
Re: Start.qone8.com
« Reply #1 on: October 21, 2013, 08:22:33 PM »
Hello,

please post in english here if possible.

Follow this guide and attach the logs: http://forum.avast.com/index.php?topic=53253.0

When done malware removers will be notified and will help you to clean this up.
Windows 10 1909, 4 GB DDR3 RAM, 500 GB 5400 RPM HDD, 1366 by 768 LCD Screen, Intel Core i3 5010U Dual Core, Intel HD Graphics 5500
HUAWEI P30 Pro. Android 10

AlbertoGibert

  • Guest
Re: Start.qone8.com
« Reply #2 on: October 21, 2013, 08:32:10 PM »
By installing java version 7 recommended from Avast. has downloaded a spyware program that supplants and replaces all browsers start page for start.qone8.com, looking so much like Google.com.

I tried manually desintalarlo but impossible. I have removed from elimination programs control panel, and is no longer, but still works to open any browser

Offline Secondmineboy

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3645
Re: Start.qone8.com
« Reply #3 on: October 21, 2013, 08:36:53 PM »
Actually there is malware on this site: http://www.avgthreatlabs.com/website-safety-reports/domain/qone8.com/
Blacklisted on Sucuri: http://sitecheck.sucuri.net/scanner/?scan=http%3A%2F%2Fstart.qone8.com
So this is malware.

Please follow the instructions above and a malware remover will help you to clean this up.
Windows 10 1909, 4 GB DDR3 RAM, 500 GB 5400 RPM HDD, 1366 by 768 LCD Screen, Intel Core i3 5010U Dual Core, Intel HD Graphics 5500
HUAWEI P30 Pro. Android 10

AlbertoGibert

  • Guest
Re: Start.qone8.com
« Reply #4 on: October 21, 2013, 08:48:59 PM »
Yes, this is invasive , this is malawere. :(  The solution is paying, and I am paying for Avast.

Offline Secondmineboy

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3645
Re: Start.qone8.com
« Reply #5 on: October 21, 2013, 08:51:22 PM »
The solution is not paying.

NO Antivirus provides 100% protection. Not even Kaspersky or Bitdefender.

Malware removers will help you to get rid of this, for free. When logs are attached.
Windows 10 1909, 4 GB DDR3 RAM, 500 GB 5400 RPM HDD, 1366 by 768 LCD Screen, Intel Core i3 5010U Dual Core, Intel HD Graphics 5500
HUAWEI P30 Pro. Android 10

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Start.qone8.com
« Reply #6 on: October 21, 2013, 08:51:43 PM »
I can remove it for you ..  Where did you get the update ?

Download OTL  to your Desktop
Secondary link
  • Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.


  • Select All Users
  • Select LOP and Purity
  • Under the Custom Scan box paste this in
netsvcs
BASESERVICES
%SYSTEMDRIVE%\*.exe
c:\program files (x86)\Google\Desktop
c:\program files\Google\Desktop
dir "%systemdrive%\*" /S /A:L /C
CREATERESTOREPOINT


  • Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
    • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
    • Attach  both logs

AlbertoGibert

  • Guest
Re: Start.qone8.com
« Reply #7 on: October 21, 2013, 09:22:04 PM »

Offline Secondmineboy

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3645
Re: Start.qone8.com
« Reply #8 on: October 21, 2013, 09:24:07 PM »
Please follow the steps from Essexboy, he knows what he is doing.
Windows 10 1909, 4 GB DDR3 RAM, 500 GB 5400 RPM HDD, 1366 by 768 LCD Screen, Intel Core i3 5010U Dual Core, Intel HD Graphics 5500
HUAWEI P30 Pro. Android 10

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Start.qone8.com
« Reply #9 on: October 21, 2013, 09:29:38 PM »
That link is using a sledgehammer to crack a nut and will probably not work

AlbertoGibert

  • Guest
Re: Start.qone8.com
« Reply #10 on: October 21, 2013, 10:03:31 PM »
okay, thanks :)

woland58

  • Guest
Re: Start.qone8.com
« Reply #11 on: October 22, 2013, 12:15:10 PM »
have the same problem that AlbertoGilbert got.
I have done everything that essexboy suggested (run otl.exe etc.)
I am supposed to attach here the contents of the otl.txt and the extras.txt or what else?
thanks for your help




I can remove it for you ..  Where did you get the update ?

Download OTL  to your Desktop
Secondary link
  • Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.


  • Select All Users
  • Select LOP and Purity
  • Under the Custom Scan box paste this in
netsvcs
BASESERVICES
%SYSTEMDRIVE%\*.exe
c:\program files (x86)\Google\Desktop
c:\program files\Google\Desktop
dir "%systemdrive%\*" /S /A:L /C
CREATERESTOREPOINT


  • Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
    • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
    • Attach  both logs

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Start.qone8.com
« Reply #12 on: October 22, 2013, 03:59:22 PM »
@woland58 if you start your own thread I will pick you up there

AlbertoGibert

  • Guest
Re: Start.qone8.com
« Reply #13 on: October 24, 2013, 07:29:39 PM »
Well, I ran the program OTL by old version and I have the report notes blok. Now what do I do?

AlbertoGibert

  • Guest
Re: Start.qone8.com
« Reply #14 on: October 24, 2013, 07:34:33 PM »
Well, I ran the "OTL by old version" and I have the report in notepad. Now what do I do?