Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

I believe it is a malware infection .. would appreciate help

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

Re: I believe it is a malware infection .. would appreciate

Unread postby Cypher » December 5th, 2012, 1:29 pm

All looks good there, searches still redirected?
User avatar
Cypher
Admin/Teacher
Admin/Teacher
 
Posts: 15148
Joined: October 29th, 2008, 12:49 pm
Location: Land Of The Leprechauns
Advertisement
Register to Remove

Re: I believe it is a malware infection .. would appreciate

Unread postby MrWhitefolks » December 5th, 2012, 1:34 pm

hey cypher

Id just like to restate that its not searches that are redirecting .... Adverts just open on my browser ... a new tab or window will pop up ... the two websites will flash on (ib.adnxs.com and seth.avazutracking.net) and then im redirected onto an advertisement.

aside from the three pop ups 10 mins ago, there havent been any more .... but they come in randomly.

do you think it would help if I uninstalled firefox and removed all firefox entries from the registry .... rebooted and reinstalled?
MrWhitefolks
Regular Member
 
Posts: 21
Joined: December 4th, 2012, 2:35 am

Re: I believe it is a malware infection .. would appreciate

Unread postby Cypher » December 5th, 2012, 1:47 pm

Hi,
do you think it would help if I uninstalled firefox and removed all firefox entries from the registry .... rebooted and reinstalled?

This appears to be affecting both FireFox and Internet Explorer.
Out of interest run FireFox in safe mode for a while, then let me know if you still see the adverts.

    Click on Start > All programs > Accessories > Run.
  • Enter the following command:
    firefox.exe -safe-mode
  • Then hit OK
  • In the open window, select Start in Safe mode.
User avatar
Cypher
Admin/Teacher
Admin/Teacher
 
Posts: 15148
Joined: October 29th, 2008, 12:49 pm
Location: Land Of The Leprechauns

Re: I believe it is a malware infection .. would appreciate

Unread postby MrWhitefolks » December 5th, 2012, 1:50 pm

Hey

Will do .... I have also disabled cookies on firefox ..... the adnxs and avazu cookies keep reappearing, in additiong to the advertisement website cookie

I wanna know if this is coming in from a website i am frequenting or something on my pc
MrWhitefolks
Regular Member
 
Posts: 21
Joined: December 4th, 2012, 2:35 am

Re: I believe it is a malware infection .. would appreciate

Unread postby Cypher » December 5th, 2012, 1:58 pm

MrWhitefolks wrote:I wanna know if this is coming in from a website i am frequenting or something on my pc
It could of come from a site you visited, but it is something on your PC.
Let me know how it goes in safe mode.
User avatar
Cypher
Admin/Teacher
Admin/Teacher
 
Posts: 15148
Joined: October 29th, 2008, 12:49 pm
Location: Land Of The Leprechauns

Re: I believe it is a malware infection .. would appreciate

Unread postby MrWhitefolks » December 5th, 2012, 7:26 pm

Hello Cypher

Its been several hours of running firefox in safe mode, and there haven't been any redirects thus far.

Ill give you another update in like 10 hours ...

Thank you again for your efforts ... I really appreciate it
MrWhitefolks
Regular Member
 
Posts: 21
Joined: December 4th, 2012, 2:35 am

Re: I believe it is a malware infection .. would appreciate

Unread postby Cypher » December 6th, 2012, 5:21 am

Hi,
Thank you again for your efforts ... I really appreciate it

You're most welcome.
Its been several hours of running firefox in safe mode, and there haven't been any redirects thus far.

Good.
I need you to upload a file for me to get it tested.

Set Your Computer to Show All Files/Folders.

  • Click Start.
  • Open Computer.
  • Press the ALT key.
  • Select the Tools menu and click Folder Options.
  • Select the View Tab.
  • Under the Hidden files and folders heading select Show hidden files and folders.
  • Uncheck the Hide protected operating system files (recommended) option.
  • Click Yes to confirm.
  • Click OK.

Next.

  • Please click on the following [url]LINK[/url]. A new window will open.
  • Please copy/paste the text inside the codebox below into the box marked Link to topic where this file was requested:[code][/code]
  • Click the Browse button and navigate to the folder:
  • There should be a file there named
  • Select the file and click Open
  • In the Leave any comments... box, please put:
  • Finally click SendFile
  • let me know in your next post if the upload was successful.
User avatar
Cypher
Admin/Teacher
Admin/Teacher
 
Posts: 15148
Joined: October 29th, 2008, 12:49 pm
Location: Land Of The Leprechauns

Re: I believe it is a malware infection .. would appreciate

Unread postby MrWhitefolks » December 6th, 2012, 5:37 am

Hello again Cypher

the upload was successful

Malware Submission

Your file was successfully submitted. Please let the user helping you know that you have submitted the file.


Incidentally, id also like to report that using firefox in safe mode appears to stop the adverts.
Additionally, Ive blocked cookies and told firefox to warn me when web pages are trying to reload or redirect, and it also appears to have stopped the adverts.
MrWhitefolks
Regular Member
 
Posts: 21
Joined: December 4th, 2012, 2:35 am

Re: I believe it is a malware infection .. would appreciate

Unread postby Cypher » December 6th, 2012, 6:28 am

Hi,
the upload was successful

Good work, bear with me while the file gets tested and i will get the results.
Incidentally, id also like to report that using firefox in safe mode appears to stop the adverts.

It looks like we may have found the cause of the problem, i will get back to you later.
User avatar
Cypher
Admin/Teacher
Admin/Teacher
 
Posts: 15148
Joined: October 29th, 2008, 12:49 pm
Location: Land Of The Leprechauns

Re: I believe it is a malware infection .. would appreciate

Unread postby MrWhitefolks » December 6th, 2012, 8:11 am

Alright .. thats fantastic

thanks again
MrWhitefolks
Regular Member
 
Posts: 21
Joined: December 4th, 2012, 2:35 am

Re: I believe it is a malware infection .. would appreciate

Unread postby Cypher » December 6th, 2012, 11:22 am

Hi,
Ok i would like you to boot Firefox back in normal mode, and then disable these add-ons.
If you don't know how to disable the add-ons let me know.
Easy YouTube Video Downloader 6.5 <- may not be named
Hotspot Shield Helper (Please allow this installation)

Once done try using FireFox normal mode, then let me know if you get any redirects/pop-up adverts.
User avatar
Cypher
Admin/Teacher
Admin/Teacher
 
Posts: 15148
Joined: October 29th, 2008, 12:49 pm
Location: Land Of The Leprechauns

Re: I believe it is a malware infection .. would appreciate

Unread postby MrWhitefolks » December 6th, 2012, 11:24 am

Hello Cypher

Ok .... Would you like me to allow cookies and redirects?

I should tell you that I havent had any redirects today ...
MrWhitefolks
Regular Member
 
Posts: 21
Joined: December 4th, 2012, 2:35 am

Re: I believe it is a malware infection .. would appreciate

Unread postby Cypher » December 6th, 2012, 11:25 am

MrWhitefolks wrote:Ok .... Would you like me to allow cookies and redirects?

No, not just now.
User avatar
Cypher
Admin/Teacher
Admin/Teacher
 
Posts: 15148
Joined: October 29th, 2008, 12:49 pm
Location: Land Of The Leprechauns

Re: I believe it is a malware infection .. would appreciate

Unread postby MrWhitefolks » December 6th, 2012, 11:28 am

alright .... Ive disabled the two add-ons ....

Will give it a few hours to see if any pop-ups occur, and will report back
MrWhitefolks
Regular Member
 
Posts: 21
Joined: December 4th, 2012, 2:35 am

Re: I believe it is a malware infection .. would appreciate

Unread postby Cypher » December 6th, 2012, 11:29 am

MrWhitefolks wrote:Will give it a few hours to see if any pop-ups occur, and will report back

Ok :)
User avatar
Cypher
Admin/Teacher
Admin/Teacher
 
Posts: 15148
Joined: October 29th, 2008, 12:49 pm
Location: Land Of The Leprechauns
Advertisement
Register to Remove

PreviousNext

  • Similar Topics
    Replies
    Views
    Last post

Return to Infected? Virus, malware, adware, ransomware, oh my!



Who is online

Users browsing this forum: No registered users and 131 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware