Avast WEBforum

Other => Viruses and worms => Topic started by: Ariel66 on January 13, 2019, 10:55:28 PM

Title: JS:Redictor virus, Need help
Post by: Ariel66 on January 13, 2019, 10:55:28 PM

Hi,
So I went to my gf house for a few days and when I came back to my computer, Avast was spamming that "the conecction of noblockweb.biz was cut cause it was infected by JS:Redirector-CAP [Tool]". It keeps appearing, and I dont know how to solve it. I didnt enter that page, nor had the browser oppened. I looked and it says that JSRedirector is a very serious trojan, so Im asking for help. Should I delete Firefox or do something like that? What can help? This PC is very old, but I dont want to lose it now.
Thanks

Title: Re: JS:Redictor virus, Need help
Post by: Asyn on January 14, 2019, 06:06:37 AM

Attach your basic diagnostic logs. (MBAM and FRST)
Instructions: https://forum.avast.com/index.php?topic=194892

Title: Re: JS:Redictor virus, Need help
Post by: Ariel66 on January 14, 2019, 03:46:04 PM

Well, since I ran the first scan (mbam) and sent all of the files to the quarentine the avast notifications stopped appearing. Does that mean the problem is solved?
I still have the mbam and frst reports if needed.

Title: Re: JS:Redictor virus, Need help
Post by: Asyn on January 14, 2019, 03:57:23 PM

Your reports are needed to confirm.

Title: Re: JS:Redictor virus, Need help
Post by: polonus on January 14, 2019, 04:50:52 PM

Noblockweb dot biz is Adware
Wait for removal instructions in the mean time read backround info:
-> https://malwarefixes.com/remove-noblockweb-biz/

polonus

Title: Re: JS:Redictor virus, Need help
Post by: Ariel66 on January 16, 2019, 05:12:11 PM

Here are the reports



Also, I think that the trojan was trying to install noblockweb, but failed cause Avast prevented it, but didnt delete the virus so It kept trying to install it, until Malwarebytes finally deleted it. Please correct me if Im wrong

Title: Re: JS:Redictor virus, Need help
Post by: Sass Drake on January 18, 2019, 03:54:51 PM

It seems that MBAM cleaned up adware since there is no active one in FRST logs.

Please rename FRST64.exe to uninstall.exe and run it. That should uninstall FRST.

Title: Re: JS:Redictor virus, Need help
Post by: Ariel66 on January 18, 2019, 04:06:02 PM

Thanks a lot for the help!!