WARNING: Your flash player may be out of date.

[djslota]

Keep getting: "WARNING: Your flash player may be out of date ..."

Tried all steps in the ""ReDirector Virus Removal Guide" twice; it is still here!

Could be possible that this is on (4) of my computers and it is hiding over the network?

I need help getting rid of this thing!

 

[TwinHeadedEagle]

Hi,


Before we start:

• Note that the removal process is not immediate. Depending on the severity of your infection, it could take a long time.
• Malware removal can be dangerous. I cannot guarantee the safety of your system as malware can be unpredictable. It is possible that we might encounter situations where the only recourse is to re-format and re-install your operating system. Therefore, I would advise you to backup all your important files before we start.
• Please be patient and stay with me until I give you the green lights and inform you that your PC is clean.
• Like everyone, I have a private life, so be patient with me. Sometimes I will respond immediately, sometimes it will take a coupe hours.
• Some tools may be flagged by your antivirus as harmful. Rest assure that ALL the tools we use are safe, the detections are false positives.
• The absence of symptoms does not mean your PC is fully disinfected.
• If you are unclear about the instructions, please stop and ask. Following the steps in the order that I post them in is vital.
• Lastly, if you have requested help on other sites, that will delay and hinder the removal process. Please only stick to one site.

Because of this, I advise you to backup any personal files and folders before you start.


<ol><li>Download AdwCleaner from the below link.
<><a href="http://general-changelog-team.fr/fr/downloads/finish/20-outils-de-xplode/2-adwcleaner" target="_blank">ADWCLEANER DOWNLAOD LINK</a></> (This link will automatically download Security Check on your computer)</li>

<li>Close all open programs and internet browsers.</li>
<li>Double click on <>adwcleaner.exe</> to run the tool.</li>
<li>Click on <>Delete</>,then confirm each time with <>Ok</>.</li>
<li>Your computer will be rebooted automatically. A text file will open after the restart.</li>
<li>Please post the contents of that logfile with your next reply.</li>
<li>You can find the logfile at <>C:\AdwCleaner[S1].txt</> as well.</li>
</ol>




Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them.
Only one of them will run on your system, that will be the right version.

• Double-click to run it. When the tool opens click Yes to disclaimer.
• Press Scan button.
• It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
• The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

 

[djslota]

I included the files you requested.
There were many versions of the AdwCleaner[x].tst file since I ran this program before when executing the steps in your "ReDirector Virus Removal Guide". I included the last two versions.

DS

 

[TwinHeadedEagle]

Download fixlist.txt below, make sure that it is on the same location as FRST.exe

[attachment=6072]

Open FRST, click on Fix, and attach the report after the fixing.

 

[djslota]

Report Attached.

Will I have to go through a similar procedure for my laptops?

DS

 

[TwinHeadedEagle]

How are the things now?

 

[djslota]

The first affiliate link I click on from Peerfly, I get the "WARNING: Your flash player may be out of date" message again!

 

[TwinHeadedEagle]

Rerun FRST and post me the fresh report...

 

[djslota]

I noticed the first occurrence of the message was a little different. I attached an image of the message.

 

[djslota]

FRST64 text attached!

 

[TwinHeadedEagle]

That site looks legit, what browser does this happen in?

 

[djslota]

Firefox, but I have seen in IE when I was trying to debug.

 

[TwinHeadedEagle]

We need to reset Mozilla settings

In Mozilla, click on Help --> Troubleshooting Information --> Reset Firefox

Do you have a pop-ups now?

 

[djslota]

It didn't come up right away, but clicking on a list of 4 affiliate links it came up about the third time through the list. The first few times through the list was OK. I did try clicking on a URL shortener from google (goo.gl), which I created a few days ago and shortly after doing this the "WARNING: Your flash player may be out of date." cane up.

 

[djslota]

Anything else to try?

DS

 

[TwinHeadedEagle]

Sorry, I really don't know how to help you...

Is this happening in Chrome?

Did you try using Adblock?

 

[TwinHeadedEagle]

Hi, are you still with me?

 

[djslota]

Sorry I was busy this weekend.
It happens with Chrome.

I am not sure what Adblock is?
Can you elaborate?

DS

 

[TwinHeadedEagle]

Hi,


Download TDSSKiller and save it to your desktop

Execute TDSSKiller.exe by doubleclicking on it.
Confirm "End user Licence Agreement" and "KSN Statement" dialog box by clicking on Accept button.

• Press Start Scan
• If Suspicious object is detected, the default action will be Skip, click on Continue.
• If Malicious objects are found, select Cure.

Once complete, a log will be produced at the root drive which is typically C:\ ,for example, C:\TDSSKiller.<version_date_time>log.txt


Please post the contents of that log in your next reply.



Download ComboFix from one of the following locations:

COMBOFIX DOWNLOAD LINK #1 (This link will automatically download Combofix on your computer)
COMBOFIX DOWNLOAD LINK #2 (This link will automatically download Combofix on your computer)
----------------------------------------------------------------
VERY IMPORTANT !!! Save ComboFix.exe to your Desktop

<ul>
<li>Close any open browsers.</li>
<li>Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
<>Very Important!</> Temporarily <>disable</> your <>anti-virus</>, <>script blocking</> and any <>anti-malware</> real-time protection <em><>before</></em> performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause <em>"unpredictable results"</em>.</li>
<li><>WARNING: Combofix will disconnect your machine from the Internet as soon as it starts</>.Please do not attempt to re-connect your machine back to the Internet until Combofix has completely finished.
If there is no internet connection after running Combofix, then restart your computer to restore back your connection.</li>
</ul>
-----------------------------------------------------------------

How to run the Combofix scan :

1. Double click on ComboFix.exe & follow the prompts.
2. Accept the disclaimer and allow to update if it asks
3. When finished, it shall produce a log for you.
   [*]Please include the C:\ComboFix.txt in your next reply.

Additional notes:
<ol><li> Do not mouse-click Combofix's window while it is running. That may cause it to stall.</li>
<li> Do not "re-run" Combofix. If you have a problem, reply back for further instructions.</li>
<li> If after the reboot you get errors about programms being marked for deletion then reboot, that will cure it.</li></ol>