Adware takes over browser home page and default search engine

57FS

New Member
Thread author
Mar 29, 2014
1
In the process of downloading and installing Firefox, it appears that my son also said "yes" in installing a bunch of other programs, including something that is clearly adware. It appears to be executing some sort of script to change my home page to "feed.helpbar.com" which immediately re-directs to "www.browse-search.com". Initially it was throwing up a lot of pop-ups. I clamped down on the windows permissions, setting most of my "enable" switches to "prompt" for running scrips, activeX controls, cookies, and the like. This has dampened the activity somewhat but has not eliminated an "unknown program" from continuing the home page and search engine takeovers.

It just took a step up. It is now blocking my access to google, and seems to be forcing a firewall instruction to prevent chrome from getting to the internet - at least for some sites.

I ran the scanning tools mentioned in the instructions, but it didn't produce an "AdwCleaner" scan log that I can find.
 

Attachments

  • FRST.txt
    46.1 KB · Views: 171
  • aswMBR.txt
    2 KB · Views: 78
  • Addition.txt
    32.4 KB · Views: 158
Last edited:

TwinHeadedEagle

Level 41
Verified
Mar 8, 2013
22,627
Hello,

Welcome to MT :)


Please download AdwCleaner by Xplode and save to your Desktop.

Double click on AdwCleaner.exe to run the tool.
  • Click on the Scan button.
  • After the scan has finished click on the Clean button.

Press OK when asked to close all programs and follow the onscreen prompts.
Press OK again to allow AdwCleaner to restart the computer and complete the removal process.

  • After rebooting, a logfile report (AdwCleaner[S0].txt) will open automatically.
  • Post logfile will also be saved in the C:\AdwCleaner folder.





Please download zoek.zip or zoek.rar by smeenk (
Zoek_icon.png
) from here or here and save it to your Desktop.
Unpack the archive...
  • Close any open browsers
  • Temporarily disable your AntiVirus program. (If necessary)
    If you are unsure how to do this please read this or this Instruction.
  • Double click on zoek.exe to run the tool .
    Please wait while the tool does not start...
  • Copy the text present inside the code box below and paste it into the large window in the zoek tool:
    NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system

    Code:
    createsrpoint;
    gpt.ini;z 
    C:\Windows\System32\GroupPolicy;v
    C:\Windows\SysWOW64\GroupPolicy;v 
    StandardSearch; 
    emptyfolderscheck; 
    installer-list; 
    installedprogs; 
    uninstall-list;
  • Click on
    Run%20Script%20by%20zoek.png
    button.
    Please wait until a logreport will open (this can be after reboot)
  • Save notepad to your Desktop and attach here zoek-results.log
    Note: It will also create a log in the C:\ directory named "zoek-results.log"
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top