blackled.info, reduled.info malware issues

[REDACTED]

I just started having blackled.info, reduled.info problems. Avast popup warning for blackled.info, not finding a way to remove it with Avast I installed superspyware to remove it from my system. Seemed to work but then Avast started to popup with warning about reduled.info. I decided to restore a restore point that was two weeks old - thought this was a good boot before the issues with blackled and reduled but after a successful restore, Avast is still warning about reduled.info. I need some help getting rid of this without out reformatting my hard drive - if possible. Any thoughts?

I originally posted this under an old post on the same issue but noticed in the forum admin suggestions that I should start my own original topic...so here it is.

[essexboy]

Please download Farbar Recovery Scan Tool and save it to your Desktop.
 
Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
 

• Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
  
• Select  additions at the bottom
• Press Scan button.
  
  
• It will produce a log called FRST.txt in the same directory the tool is run from. 
  
• Please attach both logs generated.

THEN

Download aswMBR.exe ( 4.5mb ) to your desktop.
Double click the aswMBR.exe to run it.
You may be offered the option of using virtualisation, accept that
When it offers to download the virus database allow that as well
Click the "Scan" button to start scan




On completion of the scan click save log, save it to your desktop and post in your next reply

[REDACTED]

Hi there,

I am having the same problems with 20+ pop ups being blocked every time I wake my computer from sleep. I have prepared all the logs and attached them to this post. Please help me, it's driving me crazy!

Thanks very much!

[Eddy]

Matt, please start your own thread to avoid confusion.

[REDACTED]

Thank you so much for replying so quickly...really quick!!:)
attached are the three files generated from the two programs.
Thanks,

[essexboy]

Let me know if this stops it Jack

CAUTION :  This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:
 

CreateRestorePoint:
EmptyTemp:
CMD: bitsadmin /reset /allusers

 
Save this as fixlist.txt, in the same location as FRST.exe

Run FRST and press Fix
On completion a log will be generated please post that

[REDACTED]

So far no pop up but just finished running the fixlist.txt, I have attached the associated fixlog.txt to this reply.  I will play with the computer for a while to see if any more popups occur from blackled.info, reduled.info, or the new one that popped up yesterday afternoon "epictory.com/3131/SectionDouble_142240609149389.dll" all triggered from C:\Windows\System32\svchost.exe

Once again many thanks for your help with this.

[essexboy]

I do not believe you will see it again

[REDACTED]

Well, I have worked all day on the computer and not once did I receive any of the popups. Mr. Essexboy, you saved my bacon and many hours reformatting my hard drive followed by reinstallation of my hardware, drivers, programs, etc.
THANK YOU!!!

VERY much appreciated.

You ARE the Malware removal instructor extraordinary

[essexboy]

It was a nice clean machine to work with and cheap at half the price

Subject to no further problems   

I will remove my tools now and give some recommendations, but, I would like you to run for 24 hours or so and come back if you have any problems 

Now the best part of the day ----- Your log now appears clean  :thumbsup:

A good workman always cleans up after himself so..The following will implement some cleanup procedures as well as reset  System Restore points:

Remove tools

Download and run Delfix



Now that you are clean, to help protect your computer in the future I recommend that you get the following free programmes:

CryptoPrevent install this programme to lock down and prevent crypto ransome ware



Malwarebytes.

Update and run weekly to keep your system clean

Unchecky

Click on the link above to be taken to Unchecky.com
click the very large Download button.
click Save
Click Open folder
Right click on the Unchecky_setup and choose to Run as Administrator
Once open click the Install button.
Then click on Finish
Unchecky is now installed and will help you keep unwanted check boxes unchecked, this is a fire and forget programme 

It is critical to have both a firewall and anti virus to protect your system and to keep them updated.

To learn more about how to protect yourself while on the internet read this little guide  Best security practices Keep safe  :wave:

[REDACTED]

I have run the Delfix and then installed Crypto as well as Malwarebytes and finally Unchecky.  I LOVE Unchecky, wanted something like this for a long time...especially every time I have to update Java.

I will be working off and on over the weekend and let you know it I experience any more malware issues.

Once again - THANK YOU!!!

you are the MAN.

[essexboy]