Author Topic: Start.qone8.com  (Read 9865 times)

0 Members and 1 Guest are viewing this topic.

Offline AlbertoGibert

  • Jr. Member
  • **
  • Posts: 58
Start.qone8.com
« on: October 21, 2013, 08:17:58 PM »
Al descargar Java versión 7 recomendado por ustedes y redirigido desde su página web, se ha instalado un programa espía que Avast no detecta el qone.com, o bien -- start.qone8.com -- que suplanta el navegador (todos) y la página de inicio que se cambia a start.qone.com en mi caso, pero hay otros nombres circulando. Lo he desinstalado desde panel de control, eliminar programas, pero es imposible.
Ayuda por favor. Gracias.

Online Steven Winderlich

  • Super Poster
  • ***
  • Posts: 2296
Re: Start.qone8.com
« Reply #1 on: October 21, 2013, 08:22:33 PM »
Hello,

please post in english here if possible.

Follow this guide and attach the logs: http://forum.avast.com/index.php?topic=53253.0

When done malware removers will be notified and will help you to clean this up.
Windows 10 Technical Preview Build 10061 64 Bit, Avast Premier 2015 R2 SP2 Build 2218

Offline AlbertoGibert

  • Jr. Member
  • **
  • Posts: 58
Re: Start.qone8.com
« Reply #2 on: October 21, 2013, 08:32:10 PM »
By installing java version 7 recommended from Avast. has downloaded a spyware program that supplants and replaces all browsers start page for start.qone8.com, looking so much like Google.com.

I tried manually desintalarlo but impossible. I have removed from elimination programs control panel, and is no longer, but still works to open any browser

Online Steven Winderlich

  • Super Poster
  • ***
  • Posts: 2296
Re: Start.qone8.com
« Reply #3 on: October 21, 2013, 08:36:53 PM »
Actually there is malware on this site: http://www.avgthreatlabs.com/website-safety-reports/domain/qone8.com/
Blacklisted on Sucuri: http://sitecheck.sucuri.net/scanner/?scan=http%3A%2F%2Fstart.qone8.com
So this is malware.

Please follow the instructions above and a malware remover will help you to clean this up.
Windows 10 Technical Preview Build 10061 64 Bit, Avast Premier 2015 R2 SP2 Build 2218

Offline AlbertoGibert

  • Jr. Member
  • **
  • Posts: 58
Re: Start.qone8.com
« Reply #4 on: October 21, 2013, 08:48:59 PM »
Yes, this is invasive , this is malawere. :(  The solution is paying, and I am paying for Avast.

Online Steven Winderlich

  • Super Poster
  • ***
  • Posts: 2296
Re: Start.qone8.com
« Reply #5 on: October 21, 2013, 08:51:22 PM »
The solution is not paying.

NO Antivirus provides 100% protection. Not even Kaspersky or Bitdefender.

Malware removers will help you to get rid of this, for free. When logs are attached.
Windows 10 Technical Preview Build 10061 64 Bit, Avast Premier 2015 R2 SP2 Build 2218

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 36476
  • Dragons by Sasha
    • Malware fixes
Re: Start.qone8.com
« Reply #6 on: October 21, 2013, 08:51:43 PM »
I can remove it for you ..  Where did you get the update ?

Download OTL  to your Desktop
Secondary link
  • Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.


  • Select All Users
  • Select LOP and Purity
  • Under the Custom Scan box paste this in
netsvcs
BASESERVICES
%SYSTEMDRIVE%\*.exe
c:\program files (x86)\Google\Desktop
c:\program files\Google\Desktop
dir "%systemdrive%\*" /S /A:L /C
CREATERESTOREPOINT


  • Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
    • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
    • Attach  both logs

Offline AlbertoGibert

  • Jr. Member
  • **
  • Posts: 58
Re: Start.qone8.com
« Reply #7 on: October 21, 2013, 09:22:04 PM »

Online Steven Winderlich

  • Super Poster
  • ***
  • Posts: 2296
Re: Start.qone8.com
« Reply #8 on: October 21, 2013, 09:24:07 PM »
Please follow the steps from Essexboy, he knows what he is doing.
Windows 10 Technical Preview Build 10061 64 Bit, Avast Premier 2015 R2 SP2 Build 2218

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 36476
  • Dragons by Sasha
    • Malware fixes
Re: Start.qone8.com
« Reply #9 on: October 21, 2013, 09:29:38 PM »
That link is using a sledgehammer to crack a nut and will probably not work

Offline AlbertoGibert

  • Jr. Member
  • **
  • Posts: 58
Re: Start.qone8.com
« Reply #10 on: October 21, 2013, 10:03:31 PM »
okay, thanks :)

Offline woland58

  • Newbie
  • *
  • Posts: 11
Re: Start.qone8.com
« Reply #11 on: October 22, 2013, 12:15:10 PM »
have the same problem that AlbertoGilbert got.
I have done everything that essexboy suggested (run otl.exe etc.)
I am supposed to attach here the contents of the otl.txt and the extras.txt or what else?
thanks for your help




I can remove it for you ..  Where did you get the update ?

Download OTL  to your Desktop
Secondary link
  • Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.


  • Select All Users
  • Select LOP and Purity
  • Under the Custom Scan box paste this in
netsvcs
BASESERVICES
%SYSTEMDRIVE%\*.exe
c:\program files (x86)\Google\Desktop
c:\program files\Google\Desktop
dir "%systemdrive%\*" /S /A:L /C
CREATERESTOREPOINT


  • Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
    • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
    • Attach  both logs

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 36476
  • Dragons by Sasha
    • Malware fixes
Re: Start.qone8.com
« Reply #12 on: October 22, 2013, 03:59:22 PM »
@woland58 if you start your own thread I will pick you up there

Offline AlbertoGibert

  • Jr. Member
  • **
  • Posts: 58
Re: Start.qone8.com
« Reply #13 on: October 24, 2013, 07:29:39 PM »
Well, I ran the program OTL by old version and I have the report notes blok. Now what do I do?

Offline AlbertoGibert

  • Jr. Member
  • **
  • Posts: 58
Re: Start.qone8.com
« Reply #14 on: October 24, 2013, 07:34:33 PM »
Well, I ran the "OTL by old version" and I have the report in notepad. Now what do I do?