adnetworkme and araby online adware, I can't remove them

[kinan]

I have tried so many programs to rid me off this maleware ,all ,y browsers are infected , notthing seems to help

 

[TwinHeadedEagle]

Hello,


Run Adwcleaner again, press Scan, and Clean after it is done. Then run FRST, check Addition.txt, press Scan and attach both reports.

 

[kinan]

I did what you told me
here is the report

 

[TwinHeadedEagle]

Fix with Farbar Recovery Scan Tool

This fix was created for this user for use on that particular machine.

Running it on another one may cause damage and render the system unstable.

​

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• Press the Fix button just once and wait.
• If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
• When finished FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.

 

[kinan]

I did as you told me
the script doesn't seem to be able to open popups anymore
but I can still see it on my firefox pages scripts
here's is the fixlist as you ordered
plus a screenshot showing my firefox anti script addon (noscrpit ) displaying a list of a random page javascrpits that were blocked by it , you can still see adnetworkme.com injected into the page code

 

[TwinHeadedEagle]

Noscript doesn't allow pop-ups anymore. Your picture is option to allow script to run. How is computer now?

 

[kinan]

in the sceershot ,No script shows a list of the java scripts ready to run on this page ,including adnetworkme.com script ,which obviously ,is injected into every page code by some malware, thanks to NOscript, I'm still able to stop adnetwoekme.com from loading in every page I open,
but, I tried to suspend noscript and let the"adnetworkme.com " load after I did your fix, the script was loaded but no popups were opened , no homepage modification happened , I looks like the script is not functional anymore , but why does it still show whenever I use noscript to display the list of scripts in any given web page ,like you sow in that screenshot ????

 

[TwinHeadedEagle]

Maybe this setting are somehow stored in Noscript. I am not familiar with this extensions, so I cannot tell you how and why it works. Do you have some problems now?

 

[kinan]

I can't complain , everything seems ok , may be I need more time to check all the functions previously modified by this malware, so far so good anyway, and of course thank you very much

 

[TwinHeadedEagle]

Okay, let me know

 

[kinan]

Sorry bro for the quick disappointment, I have just enabled adnetworkme script long enough to see It was still active , without noscript's help , it's flooding my web pages with scam web site ads, wikipedia is full of ads for example , it looks like noscrpit was right, adnetworkme is still being injected into my web pages
I have never met such a persistent malware

 

[TwinHeadedEagle]

Okay, let's try resetting your router.

 

[kinan]

hmmm I don't think that would help , I connect to different networks throughout the day , home network, work network ...
"adnetworkme" is here all the time regardless of the network or the router I'm using , it's somewhere in my machine

 

[TwinHeadedEagle]

Ok, run FRST one more time, press Scan and attach report.

 

[kinan]

here's a re-run of farbar

 

[TwinHeadedEagle]

Fix with Farbar Recovery Scan Tool

This fix was created for this user for use on that particular machine.

Running it on another one may cause damage and render the system unstable.

​

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• Press the Fix button just once and wait.
• If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
• When finished FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.

 

[kinan]

sorry bro , it doesn't seem to work , it just keeps deleting my favorite dictionary babylon ,nothing else

 

[TwinHeadedEagle]

Try this


https://support.google.com/chrome/answer/3296214?hl=en

 

[kinan]

sorry I don't have google chrome but I do have firefox, and I did try to reset it once before and obviously it didn't work
maybe I'll try another reset today

 

[TwinHeadedEagle]

Sorry, then this should be the right link

https://support.mozilla.org/en-US/kb/reset-firefox-easily-fix-most-problems