Solved Obrona VPN Deals Help

blm1987

New Member
Thread author
Dec 21, 2014
5
0
3
38
Hello,

I have an issue with Obrona VPN Deals malware. I have ran the Malwarebytes Anti-Rootkit, and have attached the log files. After the Malwarebytes scan I restarted my system and scanned with the Farbar recovery tool. The log files from that scan are attached as well.

I thank you in advance for your assistance.
 

Attachments

FRST.gif
Fix with Farbar Recovery Scan Tool

icon_exclaim.gif
This fix was created for this user for use on that particular machine.
icon_exclaim.gif

icon_exclaim.gif
Running it on another one may cause damage and render the system unstable.
icon_exclaim.gif
Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

  • Right-click on
    FRST.gif
    icon and select
    RunAsAdmin.jpg
    Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • Press the Fix button just once and wait.
  • If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
  • When finished FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.





adwcleaner_new.png
Fix with AdwCleaner

Please download AdwCleaner by Xplode and save the file to your desktop.

  • Right-click on
    adwcleaner_new.png
    icon and select
    RunAsAdmin.jpg
    Run as Administrator to start the tool.
  • Follow the prompts and click Scan.
  • When finished, please click Clean.
  • Upon completion, click Report. A log (AdwCleaner[S*].txt) will open.

Please include the contents of that file in your reply.
 

Attachments

Unfortunately I receive the same error after re-installing the FRST tool and using the new fixlist. THe new fixlog is attached
 

Attachments

emtytemp:
emptytemp:

It's a mistake.

Run again fix, sorry, now corrected.
 
I deleted all versions of FRST and the fixlist and ran the Fix. It ran for a while, but eventually the same error occured. It did make some changes, my browser history was empty, but I still see the pop-up ads and videos. The fixlog from the most recent scan is attached. The product version of FRST I am using is 3.3.12.0.
 

Attachments

Cheers :)


Download DelFix by Xplode and save it to your desktop.
  • Run the tool by right click on the
    51a5ce45263de-delfix.png
    icon and Run as administrator option.
  • Make sure that these ones are checked:
    • Remove disinfection tools
    • Purge system restore
    • Reset system settings
  • Push Run and wait until the tool completes his work.
  • All tools we used should be gone. Tool will create an report for you (C:\DelFix.txt)
The tool will also record healthy state of registry and make a backup using ERUNT program in %windir%\ERUNT\DelFix
Tool deletes old system restore points and create a fresh system restore point after cleaning.
 

You may also like...