adnetworkme and araby online adware, I can't remove them

Hello,


Run Adwcleaner again, press Scan, and Clean after it is done. Then run FRST, check Addition.txt, press Scan and attach both reports.
 
FRST.gif
Fix with Farbar Recovery Scan Tool

icon_exclaim.gif
This fix was created for this user for use on that particular machine.
icon_exclaim.gif

icon_exclaim.gif
Running it on another one may cause damage and render the system unstable.
icon_exclaim.gif
​

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

  • Right-click on
    FRST.gif
    icon and select
    RunAsAdmin.jpg
    Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • Press the Fix button just once and wait.
  • If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
  • When finished FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.
 

Attachments

I did as you told me
the script doesn't seem to be able to open popups anymore
but I can still see it on my firefox pages scripts
here's is the fixlist as you ordered
plus a screenshot showing my firefox anti script addon (noscrpit ) displaying a list of a random page javascrpits that were blocked by it , you can still see adnetworkme.com injected into the page code
 

Attachments

  • fixlist.txt
    fixlist.txt
    1.7 KB · Views: 55
  • adnetwork.jpg
    adnetwork.jpg
    222 KB · Views: 128
in the sceershot ,No script shows a list of the java scripts ready to run on this page ,including adnetworkme.com script ,which obviously ,is injected into every page code by some malware, thanks to NOscript, I'm still able to stop adnetwoekme.com from loading in every page I open,
but, I tried to suspend noscript and let the"adnetworkme.com " load after I did your fix, the script was loaded but no popups were opened , no homepage modification happened , I looks like the script is not functional anymore , but why does it still show whenever I use noscript to display the list of scripts in any given web page ,like you sow in that screenshot ????
 
Maybe this setting are somehow stored in Noscript. I am not familiar with this extensions, so I cannot tell you how and why it works. Do you have some problems now?
 
I can't complain , everything seems ok , may be I need more time to check all the functions previously modified by this malware, so far so good anyway, and of course thank you very much
 
Sorry bro for the quick disappointment, I have just enabled adnetworkme script long enough to see It was still active , without noscript's help , it's flooding my web pages with scam web site ads, wikipedia is full of ads for example , it looks like noscrpit was right, adnetworkme is still being injected into my web pages
I have never met such a persistent malware
 
hmmm I don't think that would help , I connect to different networks throughout the day , home network, work network ...
"adnetworkme" is here all the time regardless of the network or the router I'm using , it's somewhere in my machine
 
FRST.gif
Fix with Farbar Recovery Scan Tool

icon_exclaim.gif
This fix was created for this user for use on that particular machine.
icon_exclaim.gif

icon_exclaim.gif
Running it on another one may cause damage and render the system unstable.
icon_exclaim.gif
​

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

  • Right-click on
    FRST.gif
    icon and select
    RunAsAdmin.jpg
    Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • Press the Fix button just once and wait.
  • If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
  • When finished FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.
 

Attachments

sorry bro , it doesn't seem to work , it just keeps deleting my favorite dictionary babylon ,nothing else
 

Attachments

  • Fixlog.txt
    Fixlog.txt
    22.7 KB · Views: 101
  • malware.jpg
    malware.jpg
    174.2 KB · Views: 133
sorry I don't have google chrome but I do have firefox, and I did try to reset it once before and obviously it didn't work
maybe I'll try another reset today
 

You may also like...