![]() |
|
[Infected] Parent's Computer Infected with adware, Still Infected - Printable Version +- Hack Forums (https://hackforums.net) +-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45) +--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448) +---- Forum: Malware, Rat, and Virus Removal (https://hackforums.net/forumdisplay.php?fid=110) +---- Thread: [Infected] Parent's Computer Infected with adware, Still Infected (/showthread.php?tid=4916619) |
* - Sennheiser - Jul 22, 2015 does bleeping computer get ads normally? If so, I think it is all good now * - Knautschtabak - Jul 22, 2015 (Jul 22, 2015 01:59 PM)Sennheiser Wrote: does bleeping computer get ads normally? It should not show ads. And as I said, we are not done. * - Sennheiser - Jul 22, 2015 (Jul 22, 2015 02:02 PM)Knautschtabak Wrote: It should not show ads. And as I said, we are not done. ok ill run another frst scan so we can have updated logs Additions: http://pastebin.com/RSCsCtxH FRST: http://pastebin.com/H3tNwFHg sorry, here is the fixlog as well http://pastebin.com/jwZLEajM * - Knautschtabak - Jul 22, 2015 Sennheiser, this what normal advertisment on bleepingcomputer looks like: ![]() While I was searching for ads yesterday, I did not find any, but these sponsored advertisments are in the download section. If it is just that, you are fine. You can now reinstall Chrome from here: http://www.google.com/chrome/ There is still something left. Step 1: Farbar Recovery Scan Tool (FRST) Script
NOTICE: This script is intended for use on this particular machine. Do not use this script on any other machine; doing so may cause damage to your Operating System.
Step 2: RogueKiller
* - Sennheiser - Jul 23, 2015 rougekiller log: http://pastebin.com/ytV9srT2 fixlog: http://pastebin.com/PUHZyxAf * - Black_Georg - Jul 23, 2015 The only way to get rid of that malware is to FORMAT HDD! Do a clean system installation, it'll take you less time then searching for good anti-malware software. * - Sennheiser - Jul 23, 2015 (Jul 23, 2015 02:54 PM)Black_Georg Wrote: The only way to get rid of that malware is to FORMAT HDD! Do a clean system installation, it'll take you less time then searching for good anti-malware software. https://hackforums.net/showthread.php?tid=4557247
* - focuss - Jul 23, 2015 These are the steps I would follow: 1. Go through Add/Remove program and remove any programs that look dodgy. 2. Do a full Malwarebytes Scan. 3. Go to start-->run and type in msconfig and click on the start-up tab and see if there is anything that doesn't look like a legit program there. 4. Right-click on your browser and go to properties and check the Target field. If your using Firefox it should be something like this: "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" Sometimes the path is modified with a spammy website. 5. Do a complete browser reset (recommend that you to save your bookmarks if you need them) Depending on the browser your using the steps for this is different. Do a quick Google search on how to restore settings to default on your browser. 6. If you are still having issues it may be that Adobe Flash has been infected. Reinstall it. Let me know if this did not fix the issues. * - Knautschtabak - Jul 24, 2015 RogueKiller Fix
* - Sennheiser - Jul 26, 2015 (Jul 24, 2015 08:05 AM)Knautschtabak Wrote: RogueKiller Fix done http://pastebin.com/1aK1D43t * - Knautschtabak - Jul 26, 2015 Well done. Are there any outstanding issues with your computer? You may re-run the adware cleaning tools now to get rid of leftovers. Junkware Removal Tool (JRT)
AdwCleaner
-- File and folder backups are made for items removed using this tool. Should a legitimate file or folder be removed (otherwise known as a 'false-positive'), simple steps can be taken to restore the item. Please do not overly concern yourself with the contents of AdwCleaner[R0].txt. * - Sleeping With Sirens - Jul 26, 2015 (Jul 23, 2015 02:54 PM)Black_Georg Wrote: The only way to get rid of that malware is to FORMAT HDD! Do a clean system installation, it'll take you less time then searching for good anti-malware software. I really suggest you leave this forum, bud. * - Sennheiser - Jul 27, 2015 JRT Logs: http://pastebin.com/CzTYCgxV adwcleaner: http://pastebin.com/Uav4rw6T I think it may be gone now, hasn't come up from what i've seen yet * - Knautschtabak - Jul 27, 2015 Looks good to me too. I think your computer is clean. Let's wrap this up. You have no AV installed. I suggest you get one. Your current version of Flash Player is vulnerable. Update it to avoid infections via recent Flash exploits: https://get.adobe.com/flashplayer/ DelFix
-- This will remove the specialised tools we used to disinfect your system. Any leftover logs, files, folders or tools remaining on your Desktop which were not removed can be deleted manually (right-click the file + delete). * - Sennheiser - Jul 31, 2015 Ok, so after a few days. The ads still keep popping up, however at a very small rate and random meaning it is not as obtrusive as it was originally. Any way to remove these ads? They occur on sites they never did before School site and aol |