Surf and Keep/AllCheapPrice/Tuvaro/WatchitNoAds

Polyphase Avatron

New Member
Thread author
Verified
Feb 1, 2014
25
Here it is:
abuKTSi.jpg
 

Polyphase Avatron

New Member
Thread author
Verified
Feb 1, 2014
25
Okay, I've got a new problem. I keep seeing random words underlined in website text and turned into links. I think I might have had this before but it hasn't gone away.
 

TwinHeadedEagle

Level 41
Verified
Mar 8, 2013
22,627
Please download AdwCleaner by Xplode and save to your Desktop.

Double click on AdwCleaner.exe to run the tool.
  • Click on the Scan button.
  • After the scan has finished click on the Clean button.

Press OK when asked to close all programs and follow the onscreen prompts.
Press OK again to allow AdwCleaner to restart the computer and complete the removal process.

  • After rebooting, a logfile report (AdwCleaner[S0].txt) will open automatically.
  • Post logfile will also be saved in the C:\AdwCleaner folder.



Then...



Run Zoek with this scrpit

Code:
createsrpoint;
StandardSearch;
emptyfolderscheck;
installer-list;
installedprogs;
uninstall-list;
 

Polyphase Avatron

New Member
Thread author
Verified
Feb 1, 2014
25
Still have the problem after using adwcleaner. Here is the log.

Will do the zoek thing now.
 

Attachments

  • AdwCleaner[S2].txt
    1.7 KB · Views: 128

Polyphase Avatron

New Member
Thread author
Verified
Feb 1, 2014
25
Here is the zoek log. BTW, I think the problem has to do with a program called "PEVZ.EXE" which I found running in my task manager (zoek didn't seem to start properly before I terminated it). I looked it up online and it says it's a trojan/malware program.
 

Attachments

  • zoek-results.log
    97.8 KB · Views: 86

TwinHeadedEagle

Level 41
Verified
Mar 8, 2013
22,627
Run Zoek with this script

Code:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce];r
"Target"=-;r
"Target"=-;r
"Target"=-;r
C:\PROGRA~1\YONTOO;fs
autoclean;


Then, re-run FRST and attach fresh report.
 

Polyphase Avatron

New Member
Thread author
Verified
Feb 1, 2014
25
Here are the logs, keep in mind to start zoek I had to terminate PEVZ.exe again
 

Attachments

  • zoek-results.log
    10.1 KB · Views: 124
  • FRST.txt
    29.9 KB · Views: 81

TwinHeadedEagle

Level 41
Verified
Mar 8, 2013
22,627
Download attached fixlist.txt on the same location as FRST (otherwise the fix won't work)

Open FRST, and click Fix. Attach me that report after it is finished.
 

Attachments

  • fixlist.txt
    220 bytes · Views: 76

Polyphase Avatron

New Member
Thread author
Verified
Feb 1, 2014
25
I did it, but the problem persists. BTW, if it helps, the links that appear often go to bizrate.com or viglink.pgpartner.com
 

Attachments

  • Fixlog.txt
    889 bytes · Views: 78

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top