Jump to content

"25 Search Engines for Internet Explorer"

pg9333

By pg9333
in Resolved Malware Removal Logs

 Share

Recommended Posts

Larusso

Larusso

Posted
Posted

Hy there and sorry for the delay.

Unfortunaly Marius is away for some time cause of real life things.

He asked me to take over his topicd but I didnot find yours. Sorry for this.

I am currently online with my mobile and will be back to you tomorrow.

Meanwhile, please re-run FRST and post the FRST.txt and also let me know how your system is behaving now.

Link to post
Share on other sites
Larusso

Larusso

Posted
Posted

Hy there.

The odd thing is, it does not appear as your default start or search page within the logfiles, so we have to dig around a little bit.

First of all, could you remember if you have installed anykind of software before the problem starts ?

If you replace your default page to Bing, will 25search Engine take over immediately or after a reboot only ?

Additionally please do the following.

  • Start FRST.
  • Paste the content of the following box into FRST after "Search:"

{665573D6-0B13-4FBE-A392-46328220C093};{0633EE93-D776-472f-A0FF-E1416B8B2E3A};25searchengines
  • Hit Search Registry
  • When the scan has finished, a Search.txt log is saved at the same location that FRST.exe is located. Please post its content here.
Link to post
Share on other sites
pg9333

pg9333

Posted
  • Author
Posted

Hi Daniel. To answer your questions first to my knowledge no software was installed before the problem started. Second, even if I go and make Bing my default homepage 25 searchengines takes over immediately. I can make Bing my default click apply and then ok. Close IE and then open it back up and 25 searchengines has taken over again. Search.txt is attached below.

Search.txt

Link to post
Share on other sites
Larusso

Larusso

Posted
Posted

Hy there.

I have one quick idea here.

Please download the attached regfix.zip to your desktop and extract it to your desktop.

Double-click on the regfix.reg and allow to merge the registry.

When done, reboot your system and let me know if 25search thingi is still your default one.

Link to post
Share on other sites
Larusso

Larusso

Posted
Posted

It is defenitely related to Adware or PuP ( for me both are the same )

Glad that this fixed your issue and I forwarded the method the Adware used here to our developers.

As all regular scans Marius advised to you didnot find anything, I want you to ran a final scan with Malwarebytes.

I am online with my mobile so I'll read through this topic again tomorrow and give you further instructions ( if needed )

Are there any other open issues ?

Link to post
Share on other sites
Larusso

Larusso

Posted
Posted

Great !!


Your Java is out of date. As we all recommend to remove Java completely, there are peoples out there who really need it.
Therefor, please make sure that your current installed version is the newest release.

Please go here Java 8u25 and download the JRE version to your desktop.

Close all open programms and install the newest version.
Make sure to uncheck anykind of third party software ( In most cases, ASK Toolbar )
When done, reboot your system and check if there are any older versions installed. If this is the case, please uninstall them.


Software you might not really need
McAfee Security Scan Plus
iolo technologies' System Mechanic



If there aren't any open issues left, you are good to go. Please follow these last few steps.


Please press the windows.jpg + R Key and Copy/Paste the following single-line command into the Run box and click OK

combofix /uninstall


This will uninstall ComboFix and delete ComboFix's quarantine folder. It will also implement some cleanup procedures, remove old System Restore Points which contain previous infections, and create a fresh, clean System Restore Point.

Please re-enable your antivirus program and any other antispyware programs disabled earlier if you haven't already.

You can safely delete any tools downloaded or any logs, files, and any shortcuts on your desktop that were created during this fix.

Empty your Recycle Bin if it does not do so automatically.




Please download delfix to your Desktop.

  • Close all running programms.
  • Doubleclick on the delfix.exe
  • Make sure that all options are checked.
  • Click Start.

This tool will delete most of the tools we have used for the cleanup procedure. If something remaints, simply delete it.


Now that you appear to be free from malware lets help you stay that way!

It is vital that you keep your system up to date
Please enable Automatic Updates to keep your system up to date.
Windows Updates

  • Win XP: Start --> Control Panel and double- click on Automatic Updates.
  • Vista / 7: Start --> Control Panel --> System and Security --> Windows Updates

Software Updates

  • Your installed Software also can have vulnerabilities that malware can use to infect your system.
  • To keep your installed Software up to date I recommend File Hippo.

 

 

Anti Virus Software
Make sure to have one Anti Virus programme installed and update it on a regular basis. It is useless with out of date definitions.

Additional Protection
Malwarebytes Anti Malware

  • The freeware Version is an on demand scanner which will check your system for malware. Update it once a week and run a Quick Scan. You can also buy a licence which offers more features.

WinPatrol

  • WinPatrol takes snapshot of your critical system resources and alerts you to any changes that may occur without your knowledge.

Safer Browsing
Web of Trust ( WOT )

  • This software helps you to stay away from sites that have malicious purposes.

SpywareBlaster

  • This software helps prevent the installation of ActiveX-based spyware. If you have MBAM Premium, than you dont need it.

Use an alternate browser
Other browsers tend to be more secure than IE as they do not make use of active x objects. Active x objects can be used by spyware as an infection point on your computer.

  • Opera

 

  • Firefox
  • Note: If you use Firefox you may want to have a look on this Add Ons.
  • AdblockPlus ( Blocks advertisments )
  • NoScript ( Blocks Java, Flash and JavaScript )

Computer Maintenance
Clean out your temp files on a regular basis -I recommend TFC ( Temp File Cleaner ).

 

Thinking while surfing
There is no software which will protect your system from yourself.
I have included some security related articles that I advise you read through in your own time. These articles will give you tips and advice on preventing infection, and how to stay safe whilst browsing the internet.
How did I get Infected in the first place
Making Internet Explorer Safer

 

If you have any questions kindly ask.

Please respond to this thread one more time so we can mark this thread as resolved.

Link to post
Share on other sites
  • 3 weeks later...
LDTate

LDTate

Posted
Posted

Glad we could help. :)

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.