can't get rid of that redirecting chrome malware

sungreolsungreol

New Member
Thread author
Feb 28, 2014
4
I understand it's quite a common malware problem because I keep reading a lot of topics about it on this board. Like a lot of other people I get that "pp.developunit.info" fake link and also a blank page titled "sup!" with another link I didn't copy, and another one telling me to update my adobe reader software.
Oh and I've tried running aswMBR as recommended by posting rules, but it keeps crashing during the scan, so I'm uploading the log from AdwCleaner.
Send help~~~!
 

Attachments

  • FRST.txt
    31.3 KB · Views: 99
  • AdwCleaner[R2].txt
    1 KB · Views: 58

TwinHeadedEagle

Level 41
Verified
Mar 8, 2013
22,627
Hi,



Download attached fixlist.txt on the same location as FRST (otherwise the fix won't work)

Open FRST, and click Fix. Attach me that report after it is finished.




Please download zoek.zip or zoek.rar by smeenk (
Zoek_icon.png
) from here or here and save it to your Desktop.
Unpack the archive...
  • Close any open browsers
  • Temporarily disable your AntiVirus program. (If necessary)
    If you are unsure how to do this please read this or this Instruction.
  • Double click on zoek.exe to run the tool .
    Please wait while the tool does not start...
  • Copy the text present inside the code box below and paste it into the large window in the zoek tool:

    Code:
    autoclean;
    emptyclsid;
    emptyalltemp;
  • Click on
    Run%20Script%20by%20zoek.png
    button.
    Please wait until a logreport will open (this can be after reboot)
  • Save notepad to your Desktop and attach here zoek-results.log
    Note: It will also create a log in the C:\ directory named "zoek-results.log"




Download TDSSKiller and save it to your desktop

Execute TDSSKiller.exe by doubleclicking on it.
Confirm "End user Licence Agreement" and "KSN Statement" dialog box by clicking on Accept button.
  • Press Start Scan
  • If Suspicious object is detected, the default action will be Skip, click on Continue.
  • If Malicious objects are found, select Cure.

Once complete, a log will be produced at the root drive which is typically C:\ ,for example, C:\TDSSKiller.<version_date_time>log.txt


Please post the contents of that log in your next reply.
 

Attachments

  • fixlist.txt
    2.5 KB · Views: 82

sungreolsungreol

New Member
Thread author
Feb 28, 2014
4
Okay so I ran FRST with your fix and I'm attaching the report now.

I tried running zoek but it never started and gave me error messages saying they couldn't find certain files, I'm attaching them as well. I'm sorry it's in French, but I'm pretty sure you can guess what they say: "Windows couldn't find those files"...

Should I try running TDSSKiller without zoek?
 

Attachments

  • Fixlog.txt
    5.8 KB · Views: 123
  • zoek err.JPG
    zoek err.JPG
    34.5 KB · Views: 94
  • zoek err2.JPG
    zoek err2.JPG
    34.8 KB · Views: 108
  • zoek err3.JPG
    zoek err3.JPG
    34.4 KB · Views: 92
  • zoek err4.JPG
    zoek err4.JPG
    34.7 KB · Views: 107

sungreolsungreol

New Member
Thread author
Feb 28, 2014
4
TDSSKiller scan came back clean, here's the log from both this and Zoek, which worked after disabling Windows Security Essentials...
I think I should be okay now as the corrupted extension is gone from my chrome extensions page.

There's a bunch of AdwCleaner and Zoek and other logs and txt files everywhere in my pc now, can I delete those once I'm done?
Would you recommend keeping the software I had to install?
 

Attachments

  • zoek-results.txt
    8.8 KB · Views: 168
  • TDSSKiller.3.0.0.25_01.03.2014_15.33.06_log.txt
    193.9 KB · Views: 66

TwinHeadedEagle

Level 41
Verified
Mar 8, 2013
22,627
Yes, your computer is clean :)


I can recommend you this software to avoid Adware in the future:

http://unchecky.com/

Read here how it works --> http://www.howtogeek.com/179758/how-to-avoid-junkware-offers-with-unchecky/



The following will implement some post-cleanup procedures:

=> Please download DelFix by Xplode to your Desktop.

Run the tool and check the following boxes below;
checkmark.png
Remove disinfection tools
checkmark.png
Create registry backup
checkmark.png
Purge System Restore

Click Run button and wait a few seconds for the programme completes his work.
At this point all the tools we used here should be gone. Tool will create an report for you (C:\DelFix.txt)

The tool will also record healthy state of registry and make a backup using ERUNT program in %windir%\ERUNT\DelFix
Tool deletes old system restore points and create a fresh system restore point after cleaning.
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top