Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

Adware hijacked browser homepage.

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

Adware hijacked browser homepage.

Unread postby kri234 » July 5th, 2016, 2:37 pm

Whenever I open the browser, the homepage (google) comes on for a second, and then redirects to the adware page - savemybiz.in or something. Then I realized my folly of installing a random program along with a required program and uninstalled the program which was causing this (springfiles downloader).
I also tried to remove the adware with malware removal and antivirus software such as malware bytes, avg, hitman pro etc.
Still the problem persists. The page now changes to another adware page, there are no programs that are unnecessary.
The ads were grinding my gears, so I enabled AdBlock Plus . Each time I open my browser, it blocks two ads now and opens my required homepage (google). Also, my system is visibly slowing down as I type this. Please save my system from my stupidity.
You do not have the required permissions to view the files attached to this post.
kri234
Active Member
 
Posts: 4
Joined: July 3rd, 2016, 10:30 pm
Advertisement
Register to Remove

Re: Adware hijacked browser homepage.

Unread postby Gary R » July 9th, 2016, 11:35 am

Looking over your FRST logs, back soon.
User avatar
Gary R
Administrator
Administrator
 
Posts: 21868
Joined: June 28th, 2005, 11:36 am
Location: Yorkshire

Re: Adware hijacked browser homepage.

Unread postby Gary R » July 9th, 2016, 11:46 am

Please note that all instructions given are customised for this computer only, the tools used may cause damage if used on a computer with different infections.

If you think you have similar problems, please post a log in the "Infected? Virus, malware, adware, ransomware, oh my!" forum and wait for help.


Unless informed of in advance, failure to post replies within 3 days will result in this thread being closed.


Hi

I'm Gary R,

Before we start: Please be aware that removing Malware is a potentially hazardous undertaking. I will take care not to knowingly suggest courses of action that might damage your computer. However it is impossible for me to foresee all interactions that may happen between the software on your computer and those we'll use to clear you of infection, and I cannot guarantee the safety of your system. It is possible that we might encounter situations where the only recourse is to re-format and re-install your operating system, or to necessitate you taking your computer to a repair shop.

Because of this, I advise you to backup any personal files and folders before you start.

As an added safety precaution, before we start removing anything, I'd like you to make a backup of your Registry, which we can restore to if necessary.

Please click on THIS link, and follow the instructions for installing TCRB and creating a backup of your Registry.

Please observe these rules while we work:
  • Do not edit your logs in any way whatsoever.
  • Perform all actions in the order given.
  • If you don't know, stop and ask! Don't keep going on.
  • Please reply to this thread. Do not start a new topic.
  • Stick with it till you're given the all clear.
  • Remember, absence of symptoms does not mean the infection is all gone.
  • Don't attempt to install any new software (other than those I ask you to) until we've got your computer clean.
  • Don't attempt to clean your computer with any tools other than the ones I ask you to use during the cleanup process. If your defensive programmes warn you about any of those tools, be assured that they are not infected, and are safe to use.
If you can do these things, everything should go smoothly.

    It may be helpful to you to print out or take a copy of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.


    There are a large number of policy settings showing in your FRST logs, these are not normal for a home machine, are you aware of how and why these policy settings have been made ????

    Next ...


    • Download MGA Diagnostic Tool to your Desktop.
    • Double click MGADiag.exe to launch the programme.
    • Click Continue and let the scan run.
    • When finished it will have created a log.
    • Click Copy.
    • Next open Notepad.
      • Click Start > Run type Notepad click OK.
      • This will open an empty Notepad file.
      • Right click in the empty file and choose Paste to copy the log from MGA Diagnostics into it.
      • Save the file to your Desktop.
    • Close MGA Diagnostic Tool.
    • Copy/Paste the log in your next reply please.

    Next ...

    Download CKScanner to your Desktop.
    • Doubleclick CKScanner.exe to launch it.
    • Click Search For Files.
    • After a couple minutes a list will appear in the panel to the right.
    • Click Save List To File.
    • A message box will verify the file saved.
    • Close CKScanner.
    • Copy/paste the contents of ckfiles.txt in your next reply please (it will be on your Desktop).
    • Please run the program once only.

    Summary of the information I need from you in your next post:
    • A reply to my question about the policy settings.
    • MGA Diagnostic log
    • ckfiles.txt
    User avatar
    Gary R
    Administrator
    Administrator
     
    Posts: 21868
    Joined: June 28th, 2005, 11:36 am
    Location: Yorkshire

    Re: Adware hijacked browser homepage.

    Unread postby Gary R » July 12th, 2016, 1:24 am

    Due to a lack of response, this topic is now closed.

    If you still require help, please open a new thread in the Infected? Virus, malware, adware, ransomware, oh my! forum, include a fresh FRST log, and wait for a new helper.
    User avatar
    Gary R
    Administrator
    Administrator
     
    Posts: 21868
    Joined: June 28th, 2005, 11:36 am
    Location: Yorkshire
    Advertisement
    Register to Remove


    • Similar Topics
      Replies
      Views
      Last post

    Return to Infected? Virus, malware, adware, ransomware, oh my!



    Who is online

    Users browsing this forum: No registered users and 18 guests

    Contact us:

    Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

    Member site: UNITE Against Malware