kunalv Posted January 6, 2016 ID:1011044 Share Posted January 6, 2016 Hello. For the last month or so, my pc & android phone have been affected by the tradeadexchange malware. But funnily it only happens when im on my office wifi. It almost never occurs when im at home or im browsing on 3G when outside. Any help will be appreciated. Thanks, KV Link to post Share on other sites More sharing options...
kunalv Posted January 6, 2016 Author ID:1011045 Share Posted January 6, 2016 Also occurs when I switch over from WiFi to 3G on my phone when I'm in the office. This does not happen anywhere else. Link to post Share on other sites More sharing options...
TwinHeadedEagle Posted January 6, 2016 ID:1011064 Share Posted January 6, 2016 Hello, They call me TwinHeadedEagle around here, and I'll try to help your with your issue. Before we start please read and note the following:We're primarily oriented on malware removal here, so you must know that some issues just cannot be solved and you must be prepared for this. Some tools we use here will remove your browser search history, so backup your important links and all the files whose loss is unacceptable.Limit your internet access to posting here, some infections just wait to steal typed-in passwords.Please be patient. I know it is frustrating when your PC isn't working properly, but malware removal takes time. Keep in mind that private life gets in the way too. Note that we may live in totally different time zones, what may cause some delays between answers.Don't run any scripts or tools on your own, unsupervised usage may cause more harm than good.Do not paste the logs in your posts, attachments make my work easier. There is a More reply options button, that gives you Upload Files option below which you can use to attach your reports. Always attach reports from all tools.Always execute my instructions in given order. If for some reason you cannot completely follow one instruction, inform me about that.I volunteer to help you, so please, do not ask for help for your company/business PC. Companies are making revenue via computers, so it is good thing to pay someone to repair it.If I don't hear from you within 3 days from this initial or any subsequent post, then this thread will be closed. I can't foresee everything, so if anything not covered in my instructions happens, please stop and inform me! There are no silly questions. Never be afraid to ask if in doubt! Rules and policies We won't support any piracy. That being told, if any evidence of illegal OS, software, cracks/keygens or any other will be revealed, any further assistance will be suspended. If you are aware that there is this kind of stuff on your machine, remove it before proceeding! The same applies to any use of P2P software: uTorrent, BitTorrent, Vuze, Kazaa, Ares... We don't provide any help for P2P, except for their removal. All P2P software has to be uninstalled or at least fully disabled before proceeding! Failure to follow these guidelines will result with closing your topic and withdrawning any assistance. Scan with Farbar Recovery Scan Tool Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.Right-click on icon and select Run as Administrator to start the tool. (XP users click run after receipt of Windows Security Warning - Open File).Make sure that Addition option is checked.Press Scan button and wait.The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.Please upload them into your next reply. Link to post Share on other sites More sharing options...
kunalv Posted January 7, 2016 Author ID:1011234 Share Posted January 7, 2016 Thanks for the response. PFA desired logs. KVAddition.txtFRST.txt Link to post Share on other sites More sharing options...
TwinHeadedEagle Posted January 7, 2016 ID:1011262 Share Posted January 7, 2016 Scan with ZOEKPlease download ZOEK by Smeenk and save it to your desktop.Temporary disable your AntiVirus and AntiSpyware protection - instructions here.Right-click on icon and select Run as Administrator to start the tool.Wait patiently until the main console will appear, it may take a minute or two.In the main box please paste in the following script:createsrpoint;autoclean;emptyclsid;emptyalltemp;ipconfig /flushdns >>"%temp%\log.txt";bMake sure that Scan All Users option is checked.Push Run Script and wait patiently. The scan may take a couple of minutes.When the scan completes, a zoek-results logfile should open in notepad.If a reboot is needed, it will be opened after it. You may also find it at your main drive (usually C:\ drive)Upload it in your next reply. Link to post Share on other sites More sharing options...
kunalv Posted January 7, 2016 Author ID:1011272 Share Posted January 7, 2016 Here's the Log file.zoek-results.log Link to post Share on other sites More sharing options...
TwinHeadedEagle Posted January 7, 2016 ID:1011278 Share Posted January 7, 2016 How is the situation now? Link to post Share on other sites More sharing options...
kunalv Posted January 7, 2016 Author ID:1011281 Share Posted January 7, 2016 How is the situation now?Hey. I haven't had any re-directions ever since I did what you advised. But the problem still persists on my phone. Every time i click on a link, it opens the tradeadexchange website, or some other random pop-ups. Any help on that would be greatly appreciated. KV Link to post Share on other sites More sharing options...
TwinHeadedEagle Posted January 7, 2016 ID:1011321 Share Posted January 7, 2016 What is the browser on your mobile phone? Do you have a home router/modem? How is your phone connected to the internet? Link to post Share on other sites More sharing options...
kunalv Posted January 8, 2016 Author ID:1011429 Share Posted January 8, 2016 What is the browser on your mobile phone? Do you have a home router/modem? How is your phone connected to the internet?I have faced the same issue with multiple browsers viz. Chrome, FF, UC, CM etc. Currently i'm using Maxthon. This problem occurs in my office. We have 4 computers connected via LAN. It was only my PC facing the re-direction issues (which have disappeared now). I use my phone via WiFi when in office & 3G when out. Link to post Share on other sites More sharing options...
TwinHeadedEagle Posted January 8, 2016 ID:1011431 Share Posted January 8, 2016 So, is everything okay now? Link to post Share on other sites More sharing options...
kunalv Posted January 8, 2016 Author ID:1011436 Share Posted January 8, 2016 No the problem still remains on the phone. My computer is free of the menace. Link to post Share on other sites More sharing options...
TwinHeadedEagle Posted January 8, 2016 ID:1011446 Share Posted January 8, 2016 It happens on WiFi or when using mobile network? Link to post Share on other sites More sharing options...
kunalv Posted January 8, 2016 Author ID:1011472 Share Posted January 8, 2016 It happens on WiFi or when using mobile network?Strangely it happens on both i.e WiFi and on mobile network when I'm in office. When im out, or even at home, I can browse both on WiFi and 3G without any problems. Link to post Share on other sites More sharing options...
TwinHeadedEagle Posted January 8, 2016 ID:1011498 Share Posted January 8, 2016 So other people do not experience this problem? Link to post Share on other sites More sharing options...
kunalv Posted January 10, 2016 Author ID:1011776 Share Posted January 10, 2016 So other people do not experience this problem?Yes it's just me Link to post Share on other sites More sharing options...
TwinHeadedEagle Posted January 10, 2016 ID:1011782 Share Posted January 10, 2016 You can try to reset browser on your phone, but I am not sure I can help you with mobile phone. Link to post Share on other sites More sharing options...
LDTate Posted January 28, 2016 ID:1015673 Share Posted January 28, 2016 Glad we could help. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Thanks! Link to post Share on other sites More sharing options...
LDTate Posted February 15, 2016 ID:1019475 Share Posted February 15, 2016 Topic reopened per request Link to post Share on other sites More sharing options...
kunalv Posted February 16, 2016 Author ID:1019650 Share Posted February 16, 2016 Hello. The tradeadexchange redirection has started again! Link to post Share on other sites More sharing options...
kunalv Posted February 16, 2016 Author ID:1019652 Share Posted February 16, 2016 Here are FRST log files.Addition.txtFRST.txt Link to post Share on other sites More sharing options...
TwinHeadedEagle Posted February 16, 2016 ID:1019765 Share Posted February 16, 2016 In which browser is it happening now? Link to post Share on other sites More sharing options...
kunalv Posted February 17, 2016 Author ID:1019874 Share Posted February 17, 2016 In which browser is it happening now?Chrome & Firefox both Link to post Share on other sites More sharing options...
TwinHeadedEagle Posted February 17, 2016 ID:1019956 Share Posted February 17, 2016 You mentioned it happens in office. Where is it happening now? Link to post Share on other sites More sharing options...
kunalv Posted February 26, 2016 Author ID:1021771 Share Posted February 26, 2016 You mentioned it happens in office. Where is it happening now?Sorry for the delay in response as I was travelling for work. It is happening on the same computer in office. Link to post Share on other sites More sharing options...
Recommended Posts