Goobzo

[RavenCat]

Hy,

 

I recently installed a third party software and it infiltrated adwares without prior notice or chance tu uncheck the option.

The most vicious were YoutubeAcceleratorService and Goobzo.

 

Windows 7 Ultimate, 32-bit

Laptop, Pentium Dual-Core CPU T4300, 2.10GHz&2.10GHz

4Gb RAM

main protection: Avira (overhelmed by the situation)

 

YoutubeAcceleratorService also started a Service that I couldn't stop or uninstall.

 

 

What I did:

1. Searched and uninstalled all new software that I didn't wanted.

2. Restarted, entered in Safe Mode so that I could manually disable (not uninstall) YAS service in task manager.

3. Manually deactivated/cleaned/deleted all unwanted addons and taskbars in Mozilla while AdblockPlus kept the advertising under decent control.

4. Installed AdwCleaner and run a full scan. Quarantined/deleted most instances of the malwares and managed to delete the YAS service completely.

5. Installed Avast Browser Cleanup and cleaned all remaining traces of the malwares in Mozilla, IE and Chrome.

6. Everything seemed allright, but installed Malwarebytes Anti Malware for a doublecheck - 2.500 more instances found, quarantined and deleted.

 

What remaining effects I have:

Once every hour, at x:56min Avira detects  and blocks another instance of the Adware in C:\Users\Raven\AppData\Local\Temp\Install_29452\delay.exe containing the virus ADWARE/Goobzo.2825

Right after the detection/block, a window pops with the message: Windows cannot launch C:\Users\Raven\AppData\Local\Temp\Install_29452\delay.exe insufficient memory or system resources.

 

Please advise for further actions.

 

[Firefox]

Hello and Welcome to Malwarebytes

Being that you are probably infected, feel free to follow the instructions below to receive free, one-on-one expert assistance in checking your system and clearing out any infections and correcting any damage done by the malware.

Please see the following pinned topic which has information on how to get help with this: Available Assistance for Possibly Infected Computers

Thank you