Another infection with Qone8

[Fernando Eguilaz]

At last, here you have.

I guess everything should be ok.

Thank you in advance.

[TwinHeadedEagle]

1. Open notepad and copy/paste the text present inside the code box below.
To do this highlight the contents of the box and right click on it. Paste this into the open notepad.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system

Code: [Select]

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\qone8.xml
C:\Program Files (x86)\mozilla firefox\browser\searchplugins\qone8.xml
cmd: ipconfig /flushdns
2. Save notepad as fixlist.txt to your Desktop.
NOTE: => It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work.


3. Run FRST/FRST64 and press the Fix button just once and wait.
If the tool needed a restart please make sure you let the system to restart normally and let the tool completes its run after restart.

The tool will make a log on the Desktop (Fixlog.txt). Please attach it to your reply.
Note: If the tool warned you about the outdated version please download and run the updated version.



Then...



Tell me, how are the things now?

[Fernando Eguilaz]

Perfect, TwinHeadedEagle!

It has been a long trip to the success, but it works perfectly (I attacht the result). I've tested it in Mozilla, Chrome and IE ok: Qone8 has disappeared.

So, my last question is about the Pondus recommendation ("unless you know what you do, I recomend you keep it that way and let Malwarebytes handle the PUPs as what it targets are just crap avast however also class some factory installed programs as PUP bc of what they can do").

Do you think it's the proper way in order to manage our security? Any other hint for improving our Avast configuration?

Thank you very much!

[TwinHeadedEagle]

Adware is unlike virus in 99% of cases installed by user itself. It is bundled in majority of free software, various sites and similar. Everything you need to do is to watch out what are you installing and to follow installation, not to install anything exept program itself.
There is no realtime protection against such threats, so everything is on you.


Please download DelFix by "Xplode" to your Desktop.

Run the tool and check the following boxes below;

• Remove disinfection tools
• Create registry backup
• Purge System Restore

Now click on "Run" button. Wait for the programme completes his work.
All the tools we used should be gone.
Tool will create and open an log report (DelFix.txt)
Note: The report will also be stored on C:\DelFix.txt


> I don't need DelFix log report.

[stevenj888]

TwinHeadedEagle, my browsers (firefox & chrome) are also infected with qone8.

Can I follow your steps to remove it?
Or I have to do different steps since maybe I have different machine?

This qone8 really annoys me, I tried the Avast bootscan and fullscan but it is still there.

Hope you can help me.
Thanks in advance,
Steven

[TwinHeadedEagle]

Start your own topic...

[stevenj888]

I just tried installing the adwcleaner, so far it works!

The qone8 is not there anymore.

Thanks anyway TwinHeadedEagle 

steven