Avast WEBforum
Other => Viruses and worms => Topic started by: westcombe on January 29, 2014, 11:24:05 PM
-
Hello, I hope someone can help me with this problem I have.
I have a Desktop PC and run Windows 7 x64, when I open the Opera Web-Browse with the shortcut in the system tray, instead of going to my home page, it tries to load this website............http://websearch.toolksearchbook.info/?pid=946&r=2014/01/26&hid=11031994993776036101&lg=EN&cc=GB&unqvl=46..... I then get a Pop-Up in the bottom right hand corner from Malwarebytes,
with this information...... Malwarebytes successfully blocked access to a potentially malicious website....Website 46.165.228.246.....Port 4915, Process Chrome-Exe.
My Virus program is the paid for edition of Avast.
Advice would be very much appreciated.
-
you may have a browser hijacker..... have you done a quick scan with Malwarebytes?....make sure it is updated before you do
attach log here, also run and attach OTL log....see instructions here http://forum.avast.com/index.php?topic=53253.0
-
Please download Farbar Recovery Scan Tool (http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/) by Farbar and save it to your desktop.
Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them.
Only one of them will run on your system, that will be the right version.
- Double-click to run it. When the tool opens click Yes to disclaimer.
- Under Optional Scan ensure "List BCD" and "Driver MD5" are ticked.
- Press Scan button.
- It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
- The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.
-
Thank you Pondus and TwinHeadedEagle for your help.
Below "I hope" are the logs you requested
-
You forgot to attach FRST.txt...
-
More logs
-
Download attached fixlist.txt to your Desktop.
NOTE: => It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work.
Run FRST/FRST64 and press the Fix button just once and wait.
If the tool needed a restart please make sure you let the system to restart normally and let the tool completes its run after restart.
The tool will make a log on the Desktop (Fixlog.txt). Please attach it to your reply.
Note: If the tool warned you about the outdated version please download and run the updated version.
Please download AdwCleaner (http://www.bleepingcomputer.com/download/adwcleaner/) by Xplode and save to your Desktop.
Double click on AdwCleaner.exe to run the tool.
- Click on the Scan button.
- After the scan has finished click on the Clean button.
Press OK when asked to close all programs and follow the onscreen prompts.
Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
- After rebooting, a logfile report (AdwCleaner[S0].txt) will open automatically.
- Post logfile will also be saved in the C:\AdwCleaner folder.
-
Hi TwinHeadedEagle, Please find the logs you requested, Thanks.
-
How is the situation now?
-
Everything now seems to work just fine, no more pop-ups warning of malicious websites, I now click to go to my home page and it does! so I am over the Moon.
You are a Star TwinHeadedEagle, my sincere thanks for your expertise and time you have given, to solve a problem that I had no chance of solving.
All the very best to you.
westcombe.
-
You're very welcome ;)
Please download DelFix (http://general-changelog-team.fr/fr/downloads/finish/20-outils-de-xplode/9-delfix) by "Xplode" to your Desktop.
Run the tool and check the following boxes below;
- Remove disinfection tools
- Create registry backup
- Purge System Restore
Now click on "Run" button. Wait for the programme completes his work.
All the tools we used should be gone.
Tool will create and open an log report (DelFix.txt)
Note: The report will also be stored on C:\DelFix.txt
> I don't need DelFix log report.
-
I have completed that.
Many many thanks again TwinHeadedEagle.