Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

www-search.net is taking over, need help

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

Re: www-search.net is taking over, need help

Unread postby Cypher » March 11th, 2014, 2:06 pm

Sellon05 wrote:Everything seems to be running smoothly now, no sign of Tuvaro at all!

Excellent :thumbup: but i need you to run one more scan for me.

ESET online scannner

Note: You can use either Internet Explorer or Mozilla FireFox for this scan.

Note: If you are using Windows Vista or Windows 7, open your browser by right-clicking on its icon and select 'Run as administrator' to perform this scan.

  • First please Disable any Antivirus you have active, as shown in This topic.
  • Note: Don't forget to re-enable it after the scan.
  • Next hold down Control then click on the following link to open a new window to ESET online scannner
    Note: If using Mozilla Firefox you will need to download esetsmartinstaller_enu.exe when prompted then double click on it to install.
    All of the below instructions are compatible with either Internet Explorer or Mozilla FireFox.
  • When prompted allow the Add-On/Active X to install.
  • Click on Run ESET Online Scanner, then elect the option YES, I accept the Terms of Use, then click Start.
  • Make sure that the option Remove found threats is NOT checked, and the option Scan archives is checked.
  • Now click on Advanced Settings and select the following:
    • Scan for potentially unwanted applications
    • Scan for potentially unsafe applications
    • Enable Anti-Stealth Technology
  • Now click on Start.
  • The virus signature database... will begin to download. Be patient this make take some time depending on the speed of your Internet Connection.
  • When completed the Online Scan will begin automatically.
  • Do not touch either the Mouse or keyboard during the scan otherwise it may stall.
  • When completed select Uninstall application on close if you so wish, make sure you copy the logfile first!
  • Now click on Finish.
  • Use notepad to open the logfile located at C:\Program Files\ESET\EsetOnlineScanner\log.txt.
  • Copy and paste that log as a reply to this topic.
User avatar
Cypher
Admin/Teacher
Admin/Teacher
 
Posts: 14959
Joined: October 29th, 2008, 12:49 pm
Location: Land Of The Leprechauns
Advertisement
Register to Remove

Re: www-search.net is taking over, need help

Unread postby Sellon05 » March 11th, 2014, 5:52 pm

ESET

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=ed36f42150880248b877862951a8bdd0
# engine=17403
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2014-03-11 09:50:18
# local_time=2014-03-11 03:50:18 (-0700, Mountain Daylight Time)
# country="United States"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776574 100 94 13650681 146118068 0 0
# scanned=129117
# found=5
# cleaned=0
# scan_time=3146
sh=04D02A27F924CCA6222B45027779462538070735 ft=1 fh=6d4a723d85390481 vn="Win32/DownloadAdmin.G potentially unwanted application" ac=I fn="C:\Users\Sellon\Downloads\hexcolorfinder-setup.exe"
sh=0F33FFF12F6552F1790D3825DBB1B7A0D359EA56 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B potentially unwanted application" ac=I fn="C:\zoek_backup\C_Users_Sellon_AppData_Roaming_Mozilla_Firefox_Profiles_gqjyoili.default-1393478999498_extensions_2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\217_similar_products_m.js"
sh=1C4A6EF22D66B4B3AC5CFD6620EFC10D8145A209 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B potentially unwanted application" ac=I fn="C:\zoek_backup\C_Users_Sellon_AppData_Roaming_Mozilla_Firefox_Profiles_gqjyoili.default-1393478999498_extensions_2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\242_price_gong_m.js"
sh=DC790DFB6D4E0C15D927A3B20EFC147F44D4F5E7 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B potentially unwanted application" ac=I fn="C:\zoek_backup\C_Users_Sellon_AppData_Roaming_Mozilla_Firefox_Profiles_gqjyoili.default-1393478999498_extensions_2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\91_monetizationLoader.js.js"
sh=82375A6153BE4F1F134E2E0A6077B67597E7F382 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B potentially unwanted application" ac=I fn="C:\zoek_backup\C_Users_Sellon_AppData_Roaming_Mozilla_Firefox_Profiles_gqjyoili.default-1393478999498_extensions_2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\93_superfish_no_coupons_m.js"
Sellon05
Active Member
 
Posts: 13
Joined: March 9th, 2014, 11:41 pm

Re: www-search.net is taking over, need help

Unread postby Cypher » March 12th, 2014, 5:39 am

Hi Sellon05,
Can you give me another update on how your computer is running, still no sign of Tuvaro ?
User avatar
Cypher
Admin/Teacher
Admin/Teacher
 
Posts: 14959
Joined: October 29th, 2008, 12:49 pm
Location: Land Of The Leprechauns

Re: www-search.net is taking over, need help

Unread postby Sellon05 » March 12th, 2014, 11:33 am

Yes, so far so good. No problems.
Sellon05
Active Member
 
Posts: 13
Joined: March 9th, 2014, 11:41 pm

Re: www-search.net is taking over, need help

Unread postby Cypher » March 12th, 2014, 11:37 am

Hi Sellon05,
Yes, so far so good. No problems.

In that case you're good to go :)

Time for some housekeeping

Please download delfix and save it to your desktop.
  • Right-click on delfix.exe and select " Run as administrator " to run it.
  • Check the following boxes then click on Run.

    • Remove disinfection tools
  • All tools we used to clean your computer should be gone now.

You can now delete any tools/logs we used if they remain on your Desktop.

Protection Programs
Don't forget to re-enable any protection programs we disabled during your fix.

Please read the article below which will give you a few suggestions for how to minimise your chances of getting another infection.

I would be grateful if you could reply to this post so that I know you have read it and, if you've no other questions, the thread can be closed.

Safe surfing!
User avatar
Cypher
Admin/Teacher
Admin/Teacher
 
Posts: 14959
Joined: October 29th, 2008, 12:49 pm
Location: Land Of The Leprechauns

Re: www-search.net is taking over, need help

Unread postby Sellon05 » March 12th, 2014, 11:41 am

Great, I really appreciate it. Thanks so much!
Sellon05
Active Member
 
Posts: 13
Joined: March 9th, 2014, 11:41 pm

Re: www-search.net is taking over, need help

Unread postby Cypher » March 12th, 2014, 11:45 am

Sellon05 wrote:Great, I really appreciate it. Thanks so much!

You're more than welcome, glad we could help :)
As you have no questions i will close this topic, good luck and stay safe.

As your problems appear to have been resolved, this topic is now closed.

We are pleased we could help you resolve your computer's issues.

If you would like to make a comment or leave a compliment regarding the help you have received, please see Feedback for Our Helpers - Say "Thanks" Here.
User avatar
Cypher
Admin/Teacher
Admin/Teacher
 
Posts: 14959
Joined: October 29th, 2008, 12:49 pm
Location: Land Of The Leprechauns
Advertisement
Register to Remove

Previous

  • Similar Topics
    Replies
    Views
    Last post

Return to Infected? Virus, malware, adware, ransomware, oh my!



Who is online

Users browsing this forum: No registered users and 19 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware