Author Topic: Start.qone8.com  (Read 25000 times)

0 Members and 1 Guest are viewing this topic.

Offline AlbertoGibert

  • Jr. Member
  • **
  • Posts: 58
Re: Start.qone8.com
« Reply #30 on: October 29, 2013, 08:40:50 PM »
Right, I send report that came out in the notebook.
But I do not know how to disable Avast Internet Security to continue.
Should I disable Windows Defender?

Offline AlbertoGibert

  • Jr. Member
  • **
  • Posts: 58
Re: Start.qone8.com
« Reply #31 on: October 29, 2013, 08:53:11 PM »
oh .. Sorry; the OTL report ..

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40636
  • Dragons by Sasha
    • Malware fixes
Re: Start.qone8.com
« Reply #32 on: October 29, 2013, 09:20:11 PM »
Right click the Avast icon and select shield control > Disable until reboot

Offline AlbertoGibert

  • Jr. Member
  • **
  • Posts: 58
Re: Start.qone8.com
« Reply #33 on: October 29, 2013, 10:02:45 PM »
Well, continued all the same. By opening any browser opens a tab:
http://start.qone8.com/?type=sc&ts=1381697851&from=tugs&uid=TOSHIBAXMK6465GSXN_Z0LCS14DSXXZ0LCS14DS
For the rest it seems there is no other problem, but still not solve the problema  :(

Sending report ...

Offline AlbertoGibert

  • Jr. Member
  • **
  • Posts: 58
Re: Start.qone8.com
« Reply #34 on: October 29, 2013, 10:22:42 PM »
When I open a new tab, I get a security alert: You are about to leave a secure connection to the Internet. It is possible that other people see the information you send.
Do you want to continue?
 (  ) Do not show me this warning.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40636
  • Dragons by Sasha
    • Malware fixes
Re: Start.qone8.com
« Reply #35 on: October 29, 2013, 11:39:23 PM »
OK we will need to reset all browsers now.  I will need to see how firefox and chrome do this

For IE

Go control panel > internet options > advanced and click reset

Offline AlbertoGibert

  • Jr. Member
  • **
  • Posts: 58
Re: Start.qone8.com
« Reply #36 on: October 30, 2013, 07:20:59 PM »
Please a question before: I will lose all the links that I keep in IE "Favorites"?
Thanks ... I wait for answer ...

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40636
  • Dragons by Sasha
    • Malware fixes
Re: Start.qone8.com
« Reply #37 on: October 30, 2013, 07:24:18 PM »
No favourites will not be affected as it just resets the workings of IE

If you want to be doubly sure you can export favourites first

This can be done via the favourites menu in IE


Offline AlbertoGibert

  • Jr. Member
  • **
  • Posts: 58
Re: Start.qone8.com
« Reply #38 on: October 30, 2013, 08:51:38 PM »

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40636
  • Dragons by Sasha
    • Malware fixes
Re: Start.qone8.com
« Reply #39 on: October 30, 2013, 10:04:54 PM »
Within Firefox and Chrome are you able to reset the search engine ?

Offline AlbertoGibert

  • Jr. Member
  • **
  • Posts: 58
Re: Start.qone8.com
« Reply #40 on: October 30, 2013, 10:50:56 PM »
The search engine is google in all three browsers. It was the first thing I did before consulting. However to open any browser appears as a new tab:
start.qone8.com ...

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40636
  • Dragons by Sasha
    • Malware fixes
Re: Start.qone8.com
« Reply #41 on: October 30, 2013, 11:09:51 PM »
I just noticed that I did not get an all user OTL scan

Could you re-run the scan and ensure that all users is selected please

Offline AlbertoGibert

  • Jr. Member
  • **
  • Posts: 58
Re: Start.qone8.com
« Reply #42 on: October 31, 2013, 12:13:24 AM »
I have to paste any script ?
And how I selected all users ??
Thanks.

Offline AlbertoGibert

  • Jr. Member
  • **
  • Posts: 58
Re: Start.qone8.com
« Reply #43 on: October 31, 2013, 12:36:42 AM »
Good I ve pasted: BASESERVICES
%SYSTEMDRIVE%\*.exe
c:\program files (x86)\Google\Desktop
c:\program files\Google\Desktop
dir "%systemdrive%\*" /S /A:L /C

I sellect all and post the OTL

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40636
  • Dragons by Sasha
    • Malware fixes
Re: Start.qone8.com
« Reply #44 on: October 31, 2013, 04:20:07 PM »
This is the most obstinate version that I have come across.. Normally one maybe two fixes kill this

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL
  • Under the Custom Scans/Fixes box at the bottom, paste in the following


Code: [Select]
:Commands
[CREATERESTOREPOINT]

:OTL
IE - HKU\S-1-5-21-1571150509-1092675849-722137386-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-1571150509-1092675849-722137386-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" =
FF - prefs.js..browser.search.order.1: ""
FF - prefs.js..browser.search.useDBForOrder: ""
O2:64bit: - BHO: (no name) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - No CLSID value found.

:Files
C:\Users\Alberto\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml
C:\Users\Alberto\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf

:Commands
[resethosts]
[emptytemp]
[Reboot]
  • Then click the Run Fix button at the top
  • Let the program run unhindered, reboot the PC when it is done
  • Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.