Author Topic: Buildahome  (Read 25803 times)

0 Members and 1 Guest are viewing this topic.

Redberry

  • Guest
Buildahome
« on: July 20, 2013, 05:12:47 PM »
I am new on here so please forgive me if I am in the wrong forum, but I am being driven demented by pop ups!  I have run a full system scan, that got rid of 5 infected files and I have run the avast toolbar clean up and that was great, got rid of loads, but I can't get rid of this one, URL begins with
http://www.buildathome.info/  it keeps saying "PC Performance is Poor" and stuff like that
I could post the whole URL if it helps
It seems to be from adyield manager, please help if you can, don't know what else to do  :-\
Many thanks

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76038
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Buildahome
« Reply #1 on: July 20, 2013, 05:46:28 PM »
Please attach your logs. (AdwCleaner, MBAM and OTL..!!)
Instructions: http://forum.avast.com/index.php?topic=53253.0
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Redberry

  • Guest
Re: Buildahome
« Reply #2 on: July 20, 2013, 06:35:47 PM »
sorry, just read the sticky

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76038
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Buildahome
« Reply #3 on: July 20, 2013, 06:43:07 PM »
sorry, just read the sticky

NP, now you've to wait a bit.
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Redberry

  • Guest
Re: Buildahome
« Reply #4 on: July 20, 2013, 06:45:10 PM »
and this one. ooh I feel all powerful again!

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Buildahome
« Reply #5 on: July 20, 2013, 06:48:21 PM »
Hi firstly did you install this programme PPLiveNetwork

Also is the redirect in all browsers

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL
  • Under the Custom Scans/Fixes box at the bottom, paste in the following


Code: [Select]
:Commands
[CREATERESTOREPOINT]

:OTL
IE - HKLM\..\SearchScopes\{60a5deaa-eb33-463b-ab00-7addb02c330a}: "URL" = http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=z9xdm005YYGB&ptb=41C5DCAE-0A72-4121-9348-FC2D91092C32&psa=&ind=2010091804&ptnrS=z9xdm005YYGB&si=&st=sb&n=77cf911c&searchfor={searchTerms}
IE - HKU\S-1-5-21-2906953549-3232292362-3871845092-1001\..\URLSearchHook: {432cad96-6aa6-407a-ab37-6cfdcd73f377} - C:\Program Files (x86)\MyOwnSuperheroIE\bar\1.bin\cwSrcAs.dll (MyOwnSuperhero)
IE - HKU\S-1-5-21-2906953549-3232292362-3871845092-1001\..\SearchScopes\{60a5deaa-eb33-463b-ab00-7addb02c330a}: "URL" = http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=z9xdm005YYGB&ptb=41C5DCAE-0A72-4121-9348-FC2D91092C32&psa=&ind=2010091804&ptnrS=z9xdm005YYGB&si=&st=sb&n=77cf911c&searchfor={searchTerms}
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (no name) - {c335fe0b-1418-42fb-942f-2c1e13259052} - No CLSID value found.
O2 - BHO: (no name) - {d2f11d8b-3eb5-4b42-9511-370dbec707fb} - No CLSID value found.
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4 - HKLM..\Run: [MyOwnSuperheroIE Browser Plugin Loader] C:\Program Files (x86)\MyOwnSuperheroIE\bar\1.bin\cwbrmon.exe (MyOwnSuperhero)
O9:[b]64bit:[/b] - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - Reg Error: Key error. File not found
[2013/07/10 09:30:06 | 000,000,000 | ---D | C] -- C:\Users\John\AppData\Local\Smartbar
[2010/11/15 20:01:59 | 001,063,320 | ---- | C] (Citrix Online, a division of Citrix Systems, Inc.) -- C:\Users\John\gotomypc_533.exe

:Files
C:\Program Files (x86)\MyOwnSuperheroIE

:Commands
[resethosts]
[emptytemp]
[Reboot]
  • Then click the Run Fix button at the top
  • Let the program run unhindered, reboot the PC when it is done
  • Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

Redberry

  • Guest
Re: Buildahome
« Reply #6 on: July 20, 2013, 06:54:03 PM »
It seems PPLive network is on my computer, which I share with my sons.  Do you want me to run the OT scan again or did our messages cross?

"Also is the redirect in all browsers" sorry, don't know what this means
« Last Edit: July 20, 2013, 06:58:57 PM by Redberry »

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Buildahome
« Reply #7 on: July 20, 2013, 07:01:43 PM »
OK as long as you are aware of that programme

Do you get the popups in IE, Firefox or both ?

Could you run the OTL fix I posted and let me know if that cures it

Redberry

  • Guest
Re: Buildahome
« Reply #8 on: July 20, 2013, 07:26:51 PM »
we only use IE, and when you say, as long as I am aware of that programme, well, I've just spotted its there, I don't know what it is or whether I should get rid of it?
Really appreciate your help :)

Redberry

  • Guest
Re: Buildahome
« Reply #9 on: July 20, 2013, 07:37:27 PM »
ok I just googled pplive network - I want rid of it please!!! Can I just uninstall it?

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Buildahome
« Reply #10 on: July 20, 2013, 07:58:47 PM »
Yes uninstall from control panel

Redberry

  • Guest
Re: Buildahome
« Reply #11 on: July 20, 2013, 08:09:47 PM »
Dunnit!  Thank you so much, you have given me my life back, all pop ups gone - now just got to keep the pesky kids away from it all through the holidays  ;D  My laptop is also slow, gonna follow that sticky with that too now, thanks again

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Buildahome
« Reply #12 on: July 20, 2013, 08:51:14 PM »
OK if all is well then run OTL and press the cleanup button..

What is the problem with the laptop ?


Redberry

  • Guest
Re: Buildahome
« Reply #13 on: July 20, 2013, 09:03:47 PM »
Laptop is slow, and then freezes, even date won't change! I will run OTL on desk top now, am running all initial scans on laptop currently.
You guys are amazing

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Buildahome
« Reply #14 on: July 20, 2013, 09:05:33 PM »
Keeps me off the streets and out of the pubs :)