Solved (gamereleasedate.info/kb-ribaki.org) auto open on startup/reboot

Koma0000

New Member
Thread author
Aug 19, 2017
3
0
1
Indonesia
Hello, My name is Sandy

This website(kb-ribaki.org to gamereleasedate.info) keep on opening everytime i turn on my computer.
using AV and delete it manually using regedit, and disable it from msconfig only work after 1 reboot, another reboot still making it appear

please help
Thanks.
 

Attachments

Hello,


51a46ae42d560-malwarebytes_anti_malware.png
Scan with Malwarebytes' Anti-Malware

Please download Malwarebytes Anti-Malware and save it to your desktop.
  • Install the progam.
  • Click the Settings tab, in the left panel choose Protection and tick Scan for rootkits.
  • Click the Scan tab, choose Threat Scan is checked and click Start Scan.
  • If threats are detected, click the Apply Actions button. You will now be prompted to reboot. Click Yes.
  • Upon completion of the scan (or after the reboot), click the Reports tab.
  • Double-click the Scan Log.
  • At the bottom click Export and choose Text file.
Save the file to your desktop and include its content in your next reply.



adwcleaner_new.png
Fix with AdwCleaner

Please download AdwCleaner by Xplode and save the file to your Desktop.
  • Right-click on
    adwcleaner_new.png
    icon and select
    RunAsAdmin.jpg
    Run as Administrator to start the tool.
  • Accept the Terms of use.
  • Wait until the database is updated.
  • Click Scan.
  • When finished, please click Clean.
  • Your PC should reboot now.
  • After reboot, logfile will be opened. Copy its content into your next reply.

Note: Reports will be saved in your system partition, usually at C:\Adwcleaner



Please download Zemana AntiMalware and save it to your Desktop.
  • Install the program and once the installation is complete it will start automatically.
  • Without changing any options, press Scan to begin.
  • After the short scan is finished, if threats are detected press Next to remove them.
Note: If restart is required to finish the cleaning process, you should click Reboot. If reboot isn't required, please restart your computer manually.

  • Open Zemana AntiMalware again.
  • Click on
    4zu6vb.jpg
    icon and double click the latest report.
  • Now click File > Save As and choose your Desktop before pressing Save.
  • The only left thing is to attach saved report in your next message.
 
Hello,

i have try on my own by deleting the registry in regedit in HKCU/windows/software/currentversion/run(if im not wrong) that contain explore.exe hhtp//rb-kibaki.org or something. after that i go to task scheduler and see the active task that named my computer name and checked it, it said something like explore.exe hhtp//rb-kibaki.org too so i delete it. after that, my computer seemed working good. but, would it be enough to rid this virus or i need to use farbar(or other) to clean it

Thanks

(i dont know if the files is right, because i take it from Adwcleaner folder)
 

Attachments