Many clicked links redirecting to pp.developunit.info

[Dorota Pankowska]

Some links and sites redirect to pp.developunit.info followed by other things. I've tried many attempts to get rid of it. It occurs on both of the browsers I use: Firefox & Chrome.

 

[TwinHeadedEagle]

Re-run Zoek again like previous, but now with this script:

Attach produced report.

C:\Users\Dori\AppData\Local\{f9d31825-4217-cd67-0172-164cfbfa97de}\L;fs
C:\Users\Dori\AppData\Local\{f9d31825-4217-cd67-0172-164cfbfa97de}\U;fs
C:\Windows\installer\{f9d31825-4217-cd67-0172-164cfbfa97de}\L;fs
C:\Windows\installer\{f9d31825-4217-cd67-0172-164cfbfa97de}\U;fs
C:\Users\Dori\AppData\Local\Temp\_iu14D2N.tmp;f
C:\ProgramData\BLockTheAdAAPp;fs
C:\ProgramData\a036e8f16f3c91ce;fs
C:\ProgramData\hpnjkljkajfpobnkcljmehpfcimnpiic;fs
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows];r
"AppInit_DLLs"=-;r
c:\\progra~2\\gsb779~1.ena;f
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SearchProtect];r
C:\\Program Files (x86)\\SearchProtect;fs
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SearchProtectAll];r
C:\Users\Dori\AppData\Local\FilesFrog Update Checker;f
BLockTheAdAAPp;ff
gllbdihjlcikdkimpponkfggdpjnhngg;chr
emptyalltemp;
autoclean;

 

[Dorota Pankowska]

I think that might have done the trick. So far so good! Thank you.

 

[TwinHeadedEagle]

I saw a presence of dangerous virus in the logs, so we need another check.



Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them.
Only one of them will run on your system, that will be the right version.

• Double-click to run it. When the tool opens click Yes to disclaimer.
• Press Scan button.
• It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.

Please download aswMBR and save it to your desktop.

Double click aswMBR.exe to start the tool.

• Select Yes if prompted to download the Avast database.
• Click Scan
• Upon completion of the scan ( Scan finished successfully ) click Save log and save it to your desktop, and post that log in your next reply for review.
  Note: do NOT attempt any Fix yet.

 

[Dorota Pankowska]

Thanks for the heads up. I'm running the scans, one is still going.
Although, I just tried to open my Photoshop CS6 and it now says amtlib.dll is missing. Any idea how to fix that?

 

[Dorota Pankowska]

Here are the scan results by the way.

 

[TwinHeadedEagle]

Download TDSSKiller and save it to your desktop

Execute TDSSKiller.exe by doubleclicking on it.
Confirm "End user Licence Agreement" and "KSN Statement" dialog box by clicking on Accept button.

• Press Start Scan
• If Suspicious object is detected, the default action will be Skip, click on Continue.
• If Malicious objects are found, select Cure.

Once complete, a log will be produced at the root drive which is typically C:\ ,for example, C:\TDSSKiller.<version_date_time>log.txt


Please post the contents of that log in your next reply.

 

[Dorota Pankowska]

I don't think it found anything. It was a very quick scan.

 

[TwinHeadedEagle]

How is the situation now?

 

[Dorota Pankowska]

It's good! Thank you! I was wondering if you knew how I could fix my broken Photoshop. I think I removed something with Zoek. Or do you recommend just re installing?

 

[TwinHeadedEagle]

I think you should reinstall



• The following will implement some post-cleanup procedures:

=> Please download DelFix by Xplode to your Desktop.

Run the tool and check the following boxes below;

Remove disinfection tools

Create registry backup

Purge System Restore
Click Run button and wait a few seconds for the programme completes his work.
At this point all the tools we used here should be gone. Tool will create an report for you (C:\DelFix.txt)

The tool will also record healthy state of registry and make a backup using ERUNT program in %windir%\ERUNT\DelFix
Tool deletes old system restore points and create a fresh system restore point after cleaning.