This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Malware Removal Forums

Impossible to clean onclkds.com infection

1 min read

✨ The volunteers who helped with this thread aren't active anymore, but you can still get a personalized answer — click Ask AI below.

This thread's last reply is from January 28, 2017, 5:04 AM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

willmarpo
Hi.
My son started playing online games in my laptop. I had VIPRE antivirus with web defense activated, so I thought I could not get an infection, well it happened.

Symptoms: When I open IE, and write an address of a site, it gets redirected to a searchtext.pro/dori page. Then, in IE, Firefox and Chrome, at first load, when I load a page, any click I do opens a new window with an address onclkds.com/?zoneid=

First, I downloaded Malwarebytes and ran it, it discovered PUP.Optional.Spigot, which I removed. But the problem was still there. Then I tried with other malware scanners: Zemana.AntiMalware, hitmanpro, adwcleaner, Adware Removal Tool by TSA, Bitdefender antimalware, SUPERAntiSpyware, JRT, Karspersky, msert, Spybot, grind, 360 Security. NOTHING. None of them discovers any malware. Well, Grind discovered a registry entry for RMPL.Shopper, and SUPERAntiSpyware encountered traces of Scorpion.

Manually cleaning: I checked and there are no suspicious installs, no addons, I did a reset of all three browsers, I even reinstalled from scratch Firefox, I checked services, running processes, startup apps, checked on regedit… NOTHING.

Any ideas?
Thanks
pgmigg Admin/Teacher
By posting just a description of your problems it is likely that your topic will be passed by and you will not receive the help you're looking for.

We need to know what's running on your computer so we can give you appropriate instructions.

May I draw your attention to THIS topic, which you should have read, and which tells you what we need you to post so that we can help you.

This topic will now be closed.

If you still need help, please start a new thread with:
  • FRST.txt
  • Addition.txt
  • Details of your problems.


If for any reason you can't run FRST, please let us know in your post.

✨ Ask AI about this thread

No ads, no affiliate links — generated on request from this thread's own archived content, not written by forum staff. Never run a scan/removal tool as a self-service step if the original thread describes it being done under a helper's direct supervision, and don't include your name, email, or other personal details in a follow-up question. See our privacy page for details on how this works.