Author Topic: outfox.tv virus undetected  (Read 3672 times)

0 Members and 1 Guest are viewing this topic.

prorank

  • Guest
outfox.tv virus undetected
« on: March 15, 2014, 04:38:54 AM »
i got a virus called outfox.tv that takes over my browser, puts a program in my start up. If I try to uninstall it from programs manager, it changes the uninstall word to update. It sucks and slows my computer down to nothing. I think Avast should have caught this. Especially since I purchased the product. While I am at it, i would like to say Grime Fighter should be included in teh Avast Pro version or atleast give us a better deal on it.
Well i am going to look up how to remove this virus.
Prorank

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: outfox.tv virus undetected
« Reply #1 on: March 15, 2014, 11:39:40 AM »
That is a toolbar addon and usually comes bundled with free programmes

Try this initially

Please download AdwCleaner by Xplode onto your desktop.
  • Close all open programs and internet browsers.
  • Double click on AdwCleaner.exe to run the tool.
  • Click on Scan.
  • After the scan is complete click on "Clean"
  • Confirm each time with Ok.
  • Your computer will be rebooted automatically. A text file will open after the restart.
  • Please post the content of that logfile with your next answer.
  • You can find the logfile at C:\AdwCleaner[S1].txt as well.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37527
  • Not a avast user
Re: outfox.tv virus undetected
« Reply #2 on: March 15, 2014, 12:19:20 PM »
Outfox is classed as a PUP = not virus / Possible Unwanted Program
Avast pup detection is default off.....exept for boot scan
http://malwaretips.com/blogs/outfox-tv-removal/

prorank

  • Guest
Re: outfox.tv virus undetected
« Reply #3 on: March 15, 2014, 09:26:39 PM »
Thanks for your reply, I tried what you said and I am posting now the results. I still need to reboot my computer I just thought of. i noticed that the program did not list outfox in any of the scam\n results. Ilso once I seen it open I realized I had tried this program already last night and it didn't work. HOWEVER with that said I did original click uninstall in program manager and it did remove, but left a folder in program files. I used a couple programs to try delete it, then just for the heck of it, this morning I woke up and the folder was there but the file inside gone. I click delete on the folder and it was gone as well. Here is that file info
"
# AdwCleaner v3.022 - Report created 15/03/2014 at 14:56:45
# Updated 13/03/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Prorank - PRORANK-PC
# Running from : C:\_! ALL SAVED INFORMATION\files 2012\PC Support Files\AdW Cleaner\AdwCleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\wajam.WajamBHO
Key Deleted : HKLM\SOFTWARE\Classes\wajam.WajamBHO.1
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\wajamupdater_rasapi32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\wajamupdater_rasmancs
Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WajamUpdater

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16843


-\\ Mozilla Firefox v27.0.1 (en-US)

[ File : C:\Users\Prorank\AppData\Roaming\Mozilla\Firefox\Profiles\y4v3q5aq.default-1372892257678\prefs.js ]


*************************

AdwCleaner[R0].txt - [6686 octets] - [15/03/2014 01:59:18]
AdwCleaner[R1].txt - [1282 octets] - [15/03/2014 14:55:13]
AdwCleaner[S0].txt - [6641 octets] - [15/03/2014 02:08:18]
AdwCleaner[S1].txt - [1213 octets] - [15/03/2014 14:56:45]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1273 octets] ##########

"
I will reboot and post if I got rid of it or not. I have taken down the link the next person suggests as well just in case.
Thank you
Prorank

That is a toolbar addon and usually comes bundled with free programmes

Try this initially

Please download AdwCleaner by Xplode onto your desktop.
  • Close all open programs and internet browsers.
  • Double click on AdwCleaner.exe to run the tool.
  • Click on Scan.
  • After the scan is complete click on "Clean"
  • Confirm each time with Ok.
  • Your computer will be rebooted automatically. A text file will open after the restart.
  • Please post the content of that logfile with your next answer.
  • You can find the logfile at C:\AdwCleaner[S1].txt as well.

prorank

  • Guest
Re: outfox.tv virus undetected
« Reply #4 on: March 15, 2014, 09:53:20 PM »
Well so far it looks like everything is gone, this program may have helped me last night, because it did show allot in the scan results. Although looking now none of them showed outfoxTV. My computer is super slow. Going to run CCleaner now in hopes to remove some unwanted files, only problem is I hate having to put all my info back into the sites I do like cookies for.
Just in case it helps someone, here is a copy of what ADW did find and clean up from my system last night
"
# AdwCleaner v3.022 - Report created 15/03/2014 at 01:59:18
# Updated 13/03/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Prorank - PRORANK-PC
# Running from : C:\_! ALL SAVED INFORMATION\files 2012\adaware cleaner\ADW Cleaner\adwcleaner.exe
# Option : Scan

***** [ Services ] *****

Service Found : WajamUpdater

***** [ Files / Folders ] *****

File Found : C:\END
File Found : C:\Users\Prorank\AppData\Roaming\Mozilla\Firefox\Profiles\y4v3q5aq.default-1372892257678\user.js
Folder Found : C:\Users\Prorank\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp
Folder Found C:\Program Files (x86)\Wajam
Folder Found C:\Users\Prorank\AppData\Local\Wajam
Folder Found C:\Users\Prorank\AppData\LocalLow\boost_interprocess
Folder Found C:\Users\Prorank\AppData\LocalLow\findr
Folder Found C:\Users\Prorank\AppData\LocalLow\PriceGong
Folder Found C:\Users\Prorank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam
Folder Found C:\Users\Prorank\AppData\Roaming\OpenCandy

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Found : HKCU\Software\AppDataLow\Software\PriceGong
Key Found : HKCU\Software\AppDataLow\Software\SmartBar
Key Found : HKCU\Software\AppDataLow\Software\Toolbar
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Key Found : HKCU\Software\Softonic
Key Found : HKCU\Software\Wajam
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Key Found : [x64] HKCU\Software\Softonic
Key Found : [x64] HKCU\Software\Wajam
Key Found : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Key Found : HKLM\SOFTWARE\Classes\AppID\{1FAEE6D5-34F4-42AA-8025-3FD8F3EC4634}
Key Found : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}
Key Found : HKLM\SOFTWARE\Classes\AppID\priam_bho.DLL
Key Found : HKLM\SOFTWARE\Classes\CLSID\{1663C10B-0D55-438D-8496-19A3DBAEC0E4}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{5D64294B-1341-4FE7-B6D8-7C36828D4DD5}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{6E993643-8FBC-44FE-BC85-D318495C4D96}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{A43DE495-3D00-47D4-9D2C-303115707939}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Key Found : HKLM\SOFTWARE\Classes\driverscanner
Key Found : HKLM\SOFTWARE\Classes\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}
Key Found : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Key Found : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT3225826
Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT3240727
Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT3300195
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{095BFD3C-4602-4FE1-96F1-AEFAFBFD067D}
Key Found : HKLM\SOFTWARE\Classes\wajam.WajamBHO
Key Found : HKLM\SOFTWARE\Classes\wajam.WajamBHO.1
Key Found : HKLM\SOFTWARE\Classes\wajam.WajamDownloader
Key Found : HKLM\SOFTWARE\Classes\wajam.WajamDownloader.1
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\pricegong_rasapi32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\pricegong_rasmancs
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_bandicam_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_bandicam_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_zune-software_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_zune-software_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\wajamupdater_rasapi32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\wajamupdater_rasmancs
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Wajam
Key Found : HKLM\Software\Uniblue
Key Found : HKLM\Software\Wajam
Key Found : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WajamUpdater
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}
Key Found : [x64] HKLM\SOFTWARE\DivX\Install\Setup\WizardLayout\ConduitToolbar
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Value Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16843

Setting Found : HKCU\Software\Microsoft\Internet Explorer\Main [Secondary Start Pages] - hxxp://www.google.com
hxxp://search.conduit.com/?ctid=CT3324790&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=4&UP=SP00AE1CCE-6D02-4EFB-9303-81BF40739879&SSPV=

-\\ Mozilla Firefox v27.0.1 (en-US)

[ File : C:\Users\Prorank\AppData\Roaming\Mozilla\Firefox\Profiles\y4v3q5aq.default-1372892257678\prefs.js ]


*************************

AdwCleaner[R0].txt - [6514 octets] - [15/03/2014 01:59:18]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [6574 octets] ##########

"
Thank you again for everyones help. I apologize that my poist was not more helpful, I used allot of different programs and basically lost track it was so hard. If you try ADW you should atleast clean some things up.
Thanks
Prorank

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37527
  • Not a avast user
Re: outfox.tv virus undetected
« Reply #5 on: March 15, 2014, 10:00:06 PM »
If you still have problems then attach (not copy and paste) OTL diagnostic log, then essexboy will help you

You find it here   http://forum.avast.com/index.php?topic=53253.0


AngleOfRepose

  • Guest
Re: outfox.tv virus undetected
« Reply #6 on: April 03, 2014, 06:31:30 AM »
I have the same problem. I followed your instructions using AdwCleaner and unfortunately I was not as lucky as the original poster. I still have the god awful PUP outfox.tv. (also, this is well past being a potentially unwanted program, ha....seriously though, this program is terrible)

please help.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37527
  • Not a avast user
Re: outfox.tv virus undetected
« Reply #7 on: April 03, 2014, 07:45:11 AM »
I have the same problem. I followed your instructions using AdwCleaner and unfortunately I was not as lucky as the original poster. I still have the god awful PUP outfox.tv. (also, this is well past being a potentially unwanted program, ha....seriously though, this program is terrible)

please help.
for help, follow instructions    http://forum.avast.com/index.php?topic=53253.0