pp.developunit.info page is getting open...how to fix?

[Don Ultimate]

Hi, pls help how to remove AdRemOVerUTUoBe1.9 extension installed by enterprise policy and how to fix the problem of unexpected opening of pp.developunit.info..... page

 

[TwinHeadedEagle]

Hi,


Please download zoek.zip or zoek.rar by smeenk (

) from here or here and save it to your Desktop.
Unpack the archive...

• Close any open browsers
• Temporarily disable your AntiVirus program. (If necessary)
  If you are unsure how to do this please read this or this Instruction.
  
• Double click on zoek.exe to run the tool .
  Please wait while the tool does not start...
  
• Copy the text present inside the code box below and paste it into the large window in the zoek tool:
  
  

  createsrpoint;
  gpt.ini;z 
  C:\Windows\System32\GroupPolicy;v
  C:\Windows\SysWOW64\GroupPolicy;v 
  StandardSearch; 
  emptyfolderscheck; 
  installer-list; 
  installedprogs; 
  uninstall-list;

• Click on
  
  button.
  Please wait until a logreport will open (this can be after reboot)
  
• Save notepad to your Desktop and attach here zoek-results.log
  Note: It will also create a log in the C:\ directory named "zoek-results.log"

 

[Don Ultimate]

Done...

 

[TwinHeadedEagle]

Your system is Windows 8, and you're attaching me Zoek report with Windows 7? Where did you dig this report?

Please follow my instruction above and attach proper report

 

[Don Ultimate]

Oh sorry, I attached someone else's report by mistake which was there in my Downloads. Here's my report

 

[TwinHeadedEagle]

> Re-run zoek with this script and attach here fresh zoek log results.

AdRemOVerUTUoBe;u
Torch;u
YoutubeAdblocker;u
C:\Program Files (x86)\Mobogenie;fs
C:\Users\Prashant Waiker\AppData\Local\Torch\Update;fs
C:\Windows\System32\GroupPolicy;fs
C:\Windows\SysWOW64\GroupPolicy;fs
C:\PROGRA~2\Mobogenie;fs
C:\PROGRA~2\SNT;fs
C:\PROGRA~2\YoutubeAdblocker;fs
C:\PROGRA~2\greeatsaveer;fs
C:\Users\Prashant\AppData\Local\Torch;fs
C:\ProgramData\hinphdjpeinfmbfijmlfnllmjagdfkgm;fs
C:\ProgramData\AdRemOVerUTUoBe;fs
C:\ProgramData\YoutubeAdblocker;fs
C:\ProgramData\greeatsaveer;fs
C:\ProgramData\3e138d46e343b41e;fs
[HKEY_USERS\S-1-5-21-3016663791-3790322429-1471767267-1001\Software\Microsoft\Windows\CurrentVersion\Run];r
"NextLive"=-;r
C:\ProgramData\InstallMate;fs
C:\Users\Prashant Waiker\AppData\Roaming\newnext.me;fs
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run];r
"mobilegeni daemon"=-;r
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run];r
"NextLive"=-;r
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows];r
"AppInit_DLLs"=-;r
c:\\progra~2\\gsb779~1.ena;f
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows];r64
"AppInit_DLLs"=-;r64
C:\\PROGRA~2\\GS_X64~1.ENA;f
ajmofckdaiigjfmanjkegedonpccfdop;chr
angaagkcbafedijliccdbeaplpenkgbd;chr
eagpehgkkdlooimbabfjhhnlpfpdagba;chr
eonffnnfmbfnmjpaiigdclmfelolemah;chr
emptyalltemp;
autoclean;

 

[Don Ultimate]

It worked...thank you so much

Report attached.

 

[TwinHeadedEagle]

Please download aswMBR and save it to your desktop.

Double click aswMBR.exe to start the tool.

• Select Yes if prompted to download the Avast database.
• Click Scan
• Upon completion of the scan ( Scan finished successfully ) click Save log and save it to your desktop, and post that log in your next reply for review.
  Note: do NOT attempt any Fix yet.
  

Tell me how is the situation now?

 

[Don Ultimate]

Do not know what's the problem...may be with my computer but everytime i run aswMBR, after a while it shows avast antirootkit has stopped working...it thought there's a problem in my windows, tried to fix but couldn't figure it out...I will try again and let you know asap..

 

[TwinHeadedEagle]

Sorry, my bad, Aswmbr doesn't work on Windows 8. We'll scan with its alternative


Download TDSSKiller and save it to your desktop

Execute TDSSKiller.exe by doubleclicking on it.
Confirm "End user Licence Agreement" and "KSN Statement" dialog box by clicking on Accept button.

• Press Start Scan
• If Suspicious object is detected, the default action will be Skip, click on Continue.
• If Malicious objects are found, select Cure.

Once complete, a log will be produced at the root drive which is typically C:\ ,for example, C:\TDSSKiller.<version_date_time>log.txt


Please post the contents of that log in your next reply.

 

[Don Ultimate]

Hi,
I did it and attached the results.
thanks

 

[TwinHeadedEagle]

How is the situation now?

 

[Don Ultimate]

Now my PC is working fine....no adwares, no malware...Thank you very much

 

[TwinHeadedEagle]

Good, we are finished here


• The following will implement some post-cleanup procedures:

=> Please download DelFix by Xplode to your Desktop.

Run the tool and check the following boxes below;
[size=8pt]

Remove disinfection tools

Create registry backup

Purge System Restore[/size]
Click Run button and wait a few seconds for the programme completes his work.
At this point all the tools we used here should be gone. Tool will create an report for you (C:\DelFix.txt)

[size=7pt]The tool will also record healthy state of registry and make a backup using ERUNT program in %windir%\ERUNT\DelFix
Tool deletes old system restore points and create a fresh system restore point after cleaning.[/size]

 

[Don Ultimate]

Done...Thanks