Author Topic: JS:Redictor virus, Need help  (Read 3253 times)

0 Members and 1 Guest are viewing this topic.

Offline Ariel66

  • Newbie
  • *
  • Posts: 4
JS:Redictor virus, Need help
« on: January 13, 2019, 10:55:28 PM »
Hi,
So I went to my gf house for a few days and when I came back to my computer, Avast was spamming that "the conecction of noblockweb.biz was cut cause it was infected by JS:Redirector-CAP [Tool]". It keeps appearing, and I dont know how to solve it. I didnt enter that page, nor had the browser oppened. I looked and it says that JSRedirector is a very serious trojan, so Im asking for help. Should I delete Firefox or do something like that? What can help? This PC is very old, but I dont want to lose it now.
Thanks

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: JS:Redictor virus, Need help
« Reply #1 on: January 14, 2019, 06:06:37 AM »
Attach your basic diagnostic logs. (MBAM and FRST)
Instructions: https://forum.avast.com/index.php?topic=194892
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline Ariel66

  • Newbie
  • *
  • Posts: 4
Re: JS:Redictor virus, Need help
« Reply #2 on: January 14, 2019, 03:46:04 PM »
Well, since I ran the first scan (mbam) and sent all of the files to the quarentine the avast notifications stopped appearing. Does that mean the problem is solved?
I still have the mbam and frst reports if needed.

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: JS:Redictor virus, Need help
« Reply #3 on: January 14, 2019, 03:57:23 PM »
Your reports are needed to confirm.
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33905
  • malware fighter
Re: JS:Redictor virus, Need help
« Reply #4 on: January 14, 2019, 04:50:52 PM »
Noblockweb dot biz is Adware
Wait for removal instructions in the mean time read backround info:
-> https://malwarefixes.com/remove-noblockweb-biz/

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Ariel66

  • Newbie
  • *
  • Posts: 4
Re: JS:Redictor virus, Need help
« Reply #5 on: January 16, 2019, 05:12:11 PM »
Here are the reports



Also, I think that the trojan was trying to install noblockweb, but failed cause Avast prevented it, but didnt delete the virus so It kept trying to install it, until Malwarebytes finally deleted it. Please correct me if Im wrong
« Last Edit: January 16, 2019, 05:15:16 PM by Ariel66 »

Offline Sass Drake

  • MyCity AMF R2
  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 820
Re: JS:Redictor virus, Need help
« Reply #6 on: January 18, 2019, 03:54:51 PM »
It seems that MBAM cleaned up adware since there is no active one in FRST logs.

Please rename FRST64.exe to uninstall.exe and run it. That should uninstall FRST.

Offline Ariel66

  • Newbie
  • *
  • Posts: 4
Re: JS:Redictor virus, Need help
« Reply #7 on: January 18, 2019, 04:06:02 PM »
Thanks a lot for the help!!