Further advice on how to remove webalta.ru needed

Try reseting your browsers:

For IE: http://support.microsoft.com/kb/923737

For Chrome: Reinstall it.
 
Fiery said:
Try reseting your browsers:

For IE: http://support.microsoft.com/kb/923737

For Chrome: Reinstall it.
Click to expand...
I followed the steps for IE but webalta is still there.
 
Hi,

Please uninstall Anvisoft.

Next, Open OTL. Under custom scan/fixes, copy and paste the following:

:OTL
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = Preserve
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=SMSTDF&pc=MASM&src=IE-SearchBox
[2013/04/09 11:55:32 | 000,000,000 | ---D | M] -- C:\Users\Spiros\AppData\Roaming\Reason Software Company Inc
@Alternate Data Stream - 139 bytes -> C:\ProgramData\Temp:373E1720
@Alternate Data Stream - 127 bytes -> C:\ProgramData\Temp:430C6D84
@Alternate Data Stream - 119 bytes -> C:\ProgramData\Temp:5C321E34
@Alternate Data Stream - 105 bytes -> C:\ProgramData\Temp:DFC5A2B2

:Files
ipconfig /flushdns /c

:Commands
[EMPTYTEMP]
Click to expand...

Then click Run Fix. Let your PC reboot to normal mode. A new log will be created automatically, post the content in the next reply.
 
Fiery said:
Hi,

Please uninstall Anvisoft.

Next, Open OTL. Under custom scan/fixes, copy and paste the following:

:OTL
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = Preserve
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=SMSTDF&pc=MASM&src=IE-SearchBox
[2013/04/09 11:55:32 | 000,000,000 | ---D | M] -- C:\Users\Spiros\AppData\Roaming\Reason Software Company Inc
@Alternate Data Stream - 139 bytes -> C:\ProgramData\Temp:373E1720
@Alternate Data Stream - 127 bytes -> C:\ProgramData\Temp:430C6D84
@Alternate Data Stream - 119 bytes -> C:\ProgramData\Temp:5C321E34
@Alternate Data Stream - 105 bytes -> C:\ProgramData\Temp:DFC5A2B2

:Files
ipconfig /flushdns /c

:Commands
[EMPTYTEMP]
Click to expand...

Then click Run Fix. Let your PC reboot to normal mode. A new log will be created automatically, post the content in the next reply.
Click to expand...
Here's the new log.
 

Attachments

Right-click the IE and chrome icons. Select Properties. Under the shortcut tab, look for a line called Target. Copy and paste the content in the line
 
Fiery said:
Right-click the IE and chrome icons. Select Properties. Under the shortcut tab, look for a line called Target. Copy and paste the content in the line
Click to expand...
This looks problematic, here are the lines copied and pasted.
C:\Users\Dante\AppData\Local\Google\Chrome\Application\chrome.exe http://home.webalta.ru/?new
"C:\Program Files\Internet Explorer\iexplore.exe"
 
For chrome, go into Properties again. This time, delete the "http://home.webalta.ru/?new" extension so under the target, the value is only C:\Users\Dante\AppData\Local\Google\Chrome\Application\chrome.exe

For IE, are you using a shortcut on the desktop?
 
Fiery said:
For chrome, go into Properties again. This time, delete the "http://home.webalta.ru/?new" extension so under the target, the value is only C:\Users\Dante\AppData\Local\Google\Chrome\Application\chrome.exe

For IE, are you using a shortcut on the desktop?
Click to expand...
I deleted the extension on chrome but webalta still appears. I've just created a desktop shortcut for IE but the target still reads the same as the one I copied and pasted earlier.
 
Hi,

Please open up SystemLookup again but copy and paste this code into the text field:

:filefind
*webalta*

:folderfind
*webalta*

:Regfind
webalta

:service
webalta
Click to expand...

and press scan. Post the results back here
 
Fiery said:
Hi,

Please open up SystemLookup again but copy and paste this code into the text field:

:filefind
*webalta*

:folderfind
*webalta*

:Regfind
webalta

:service
webalta
Click to expand...

and press scan. Post the results back here
Click to expand...
Here are the results, seems similar to the previous scan.
 

Attachments

Hi,

Please use 64-bit version of SystemLookup from here: http://jpshortstuff.247fixes.com/SystemLook_x64.exe

And re-run the scan with

:filefind
*webalta*

:folderfind
*webalta*

:Regfind
webalta

:service
webalta
Click to expand...
 
This is an odd one.. Can't seem to find the root cause. Would you consider reformatting?
 
Fiery said:
This is an odd one.. Can't seem to find the root cause. Would you consider reformatting?
Click to expand...
If you think it would help I'd be happy to try it. Any advice for reformatting my hard drive without screwing any of my important files up?
 
Fiery said:
Do you have an external drive or USB that can hold your important files?
Click to expand...
I don't have an external drive at the minute and my USBs don't have a large capacity. Does reformatting put a lot of the vital files at risk so that it requires backup or is not necessary?
 
Reformatting will restore your PC back to factory default (the state in which you bought the PC in). It will delete all your files and reinstall windows.
 

You may also like...