Author Topic: My own Malware URL nightmare ( alwaysisobar.com, etc.)  (Read 2941 times)

0 Members and 2 Guests are viewing this topic.

REDACTED

  • Guest
My own Malware URL nightmare ( alwaysisobar.com, etc.)
« on: June 08, 2015, 05:19:58 PM »
*sigh* Well since misery loves company I've also been hit with the alwaysisobar.com, anythicago.com, bestdriverstar.net and such garbage.  Avast stops them but half a dozen or more warnings pop up each time I boot.  Anything anyone can do to help would be very much appreciated.  Logs you require attached.  Thanks in advance.


Offline TwinHeadedEagle

  • Malware Removal Expert
  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2987
    • Zemana
Re: My own Malware URL nightmare ( alwaysisobar.com, etc.)
« Reply #1 on: June 08, 2015, 05:26:07 PM »
Hello,


Scan with ZOEK

Please download ZOEK by Smeenk and save it to your desktop (preferred version is the *.exe one)
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.

  • Right-click on icon and select Run as Administrator to start the tool.
  • Wait patiently until the main console will appear, it may take a minute or two.
  • In the main box please paste in the following script:
Code: [Select]
createsrpoint;
autoclean;
emptyalltemp;
bitsadmin /reset /allusers;
chrdefaults;
C:\Users\jamestkirk\AppData\Local\Google\Chrome\User Data\Default\Preferences;f
ipconfig /flushdns;b
  • Make sure that Scan All Users option is checked.
  • Push Run Script and wait patiently. The scan may take a couple of minutes.
  • When the scan completes, a zoek-results logfile should open in notepad.
  • If a reboot is needed, it will be opened after it. You may also find it at your main drive (usually C:\ drive)
Post its content into your next reply.
My help is free, however if you'd like to show your appreciation by leaving a donation, it will be much appreciated ------> DONATE

REDACTED

  • Guest
Re: My own Malware URL nightmare ( alwaysisobar.com, etc.)
« Reply #2 on: June 08, 2015, 10:59:41 PM »
Here you go.

Offline TwinHeadedEagle

  • Malware Removal Expert
  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2987
    • Zemana
Re: My own Malware URL nightmare ( alwaysisobar.com, etc.)
« Reply #3 on: June 08, 2015, 11:21:50 PM »
How is the situation now?
My help is free, however if you'd like to show your appreciation by leaving a donation, it will be much appreciated ------> DONATE

REDACTED

  • Guest
Re: My own Malware URL nightmare ( alwaysisobar.com, etc.)
« Reply #4 on: June 10, 2015, 03:50:06 AM »
Everything looks good.  Thanks, Eagle! ;D ;D ;D

Offline TwinHeadedEagle

  • Malware Removal Expert
  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2987
    • Zemana
Re: My own Malware URL nightmare ( alwaysisobar.com, etc.)
« Reply #5 on: June 10, 2015, 08:49:11 AM »
The following will implement some post-cleanup procedures:

=> Please download DelFix by Xplode to your Desktop.

Run the tool and check the following boxes below;
Remove disinfection tools
Create registry backup
Purge System Restore

Click Run button and wait a few seconds for the programme completes his work.
At this point all the tools we used here should be gone. Tool will create an report for you (C:\DelFix.txt)

The tool will also record healthy state of registry and make a backup using ERUNT program in %windir%\ERUNT\DelFix
Tool deletes old system restore points and create a fresh system restore point after cleaning.
My help is free, however if you'd like to show your appreciation by leaving a donation, it will be much appreciated ------> DONATE

REDACTED

  • Guest
Re: My own Malware URL nightmare ( alwaysisobar.com, etc.)
« Reply #6 on: June 12, 2015, 10:52:26 PM »
Hello, I am having this same problem. Will these steps work for me too?

Offline TwinHeadedEagle

  • Malware Removal Expert
  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2987
    • Zemana
Re: My own Malware URL nightmare ( alwaysisobar.com, etc.)
« Reply #7 on: June 12, 2015, 10:52:58 PM »
Start your own topic please.
My help is free, however if you'd like to show your appreciation by leaving a donation, it will be much appreciated ------> DONATE