Operating System
Windows 7
Infection date and initial symptoms
Probably about a month ago, I noticed lots of odd ads on Amazon and highlighted text in webpages linking to deals of some sort.
Current issues and symptoms
DIScOuNtExtennsi seems to be an extension on my browser, I remove it when I open the browser but it comes back upon restarting it, I mostly use Chrome but it is on the other browsers too.
Steps taken in order to remove the infection
I followed http://malwaretips.com/blogs/surf-and-keep-removal/ this guide and used all the scanners but it still remains, I did have surf and keep in my install list and it seemed to do the same things, so I figured it was related.

TwinHeadedEagle

Removal Expert
Verified
Staff member
Hi,


From Control Panel delete following:
- Browser faster
- Browser Stabilizer
- Prowebi
- Intelewin filter
- Intelismart webbing
- InteliWeb

Restart your system.


Then...



Download attached fixlist.txt on the same location as FRST (otherwise the fix won't work)

Open FRST, and click Fix. Attach me that report after it is finished.
 

Attachments

Cubey

New Member
I get an error saying "The specified module could not be found" when attempting to uninstall any of those..
 

TwinHeadedEagle

Removal Expert
Verified
Staff member
Please download zoek.zip or zoek.rar by smeenk (
) from here or here and save it to your Desktop.
Unpack the archive...
  • Close any open browsers
  • Temporarily disable your AntiVirus program. (If necessary)
    If you are unsure how to do this please read this or this Instruction.
  • Double click on zoek.exe to run the tool .
    Please wait while the tool does not start...
  • Copy the text present inside the code box below and paste it into the large window in the zoek tool:

    Code:
    createsrpoint; 
    StandardSearch; 
    installer-list; 
    installedprogs; 
    uninstall-list;
  • Click on
    button.
    Please wait until a logreport will open (this can be after reboot)
  • Save notepad to your Desktop and attach here zoek-results.log
    Note: It will also create a log in the C:\ directory named "zoek-results.log"
 

TwinHeadedEagle

Removal Expert
Verified
Staff member
> Re-run zoek with this script and attach here fresh zoek log results.


Code:
emptyalltemp;
C:\ProgramData\Browser faster;fs
[-HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{5837205}];r
[-HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{2db04d42}];r
[-HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{ef65f95a}];r
[-HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{88f4f04c}];r
[-HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{c8d49171}];r
[-HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{6ea8c3d5}];r
autoclean;
emptyclsid; 
emptyfolderscheck;delete
shortcutfix; 
resetIEproxy; 
netsh int ip reset >> %temp%\log.txt;b 
ipconfig /flushdns >> %temp%\log.txt;b 
resethosts;
 

Cubey

New Member
Opened chrome... and... it's gone! Thank goodness for that... hopefully things are good now. Thanks for your help!
 

TwinHeadedEagle

Removal Expert
Verified
Staff member
Good to hear it :)

We only need to remove used tools.


Please download DelFix by "Xplode" to your Desktop.

Run the tool and check the following boxes below;
  • Remove disinfection tools
  • Create registry backup
  • Purge System Restore

Now click on "Run" button. Wait for the programme completes his work.
All the tools we used should be gone.
Tool will create and open an log report (DelFix.txt)
[size=7pt] Note: The report will also be stored on C:\DelFix.txt[/size]


> I don't need DelFix log report.