This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Malware Removal Forums

Impossible to clean onclkds.com infection

1 min read

This thread's last reply is from January 28, 2017, 5:04 AM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

Hi.
My son started playing online games in my laptop. I had VIPRE antivirus with web defense activated, so I thought I could not get an infection, well it happened.

Symptoms: When I open IE, and write an address of a site, it gets redirected to a searchtext.pro/dori page. Then, in IE, Firefox and Chrome, at first load, when I load a page, any click I do opens a new window with an address onclkds.com/?zoneid=

First, I downloaded Malwarebytes and ran it, it discovered PUP.Optional.Spigot, which I removed. But the problem was still there. Then I tried with other malware scanners: Zemana.AntiMalware, hitmanpro, adwcleaner, Adware Removal Tool by TSA, Bitdefender antimalware, SUPERAntiSpyware, JRT, Karspersky, msert, Spybot, grind, 360 Security. NOTHING. None of them discovers any malware. Well, Grind discovered a registry entry for RMPL.Shopper, and SUPERAntiSpyware encountered traces of Scorpion.

Manually cleaning: I checked and there are no suspicious installs, no addons, I did a reset of all three browsers, I even reinstalled from scratch Firefox, I checked services, running processes, startup apps, checked on regedit… NOTHING.

Any ideas?
Thanks
By posting just a description of your problems it is likely that your topic will be passed by and you will not receive the help you're looking for.

We need to know what's running on your computer so we can give you appropriate instructions.

May I draw your attention to THIS topic, which you should have read, and which tells you what we need you to post so that we can help you.

This topic will now be closed.

If you still need help, please start a new thread with:
  • FRST.txt
  • Addition.txt
  • Details of your problems.


If for any reason you can't run FRST, please let us know in your post.