Mad_scientist Posted March 23, 2016 ID:1028075 Share Posted March 23, 2016 Despite having Malwarebytes Pro (MB_Pro) installed, dns unlocker still managed to infect my computer. After running MB_Pro several times, and some other removal programs, some PUP were detected and removed; however, after launching Mozilla Firefox and effecting a search, the adware problems returned. Please help. Link to post Share on other sites More sharing options...
TwinHeadedEagle Posted March 24, 2016 ID:1028080 Share Posted March 24, 2016 Hello and They call me TwinHeadedEagle around here, and I'll try to help your with your issue. Please download Farbar Recovery Scan Tool and save it to your desktop.Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version. Double-click to run it. When the tool opens click Yes to disclaimer. Press Scan button. It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply. The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply. Link to post Share on other sites More sharing options...
Mad_scientist Posted March 24, 2016 Author ID:1028351 Share Posted March 24, 2016 Hi TwinHeadedEagle, Thanks for responding to my post. Please find the requested files, obtained via use of Farbar Recovery Scan Tool, attached. I hope that my efforts to remove the stated adware infection, prior to finding this site, does not hamper your efforts to help me rid my computer of this infection. Thanks again. Addition.txt FRST.txt Link to post Share on other sites More sharing options...
TwinHeadedEagle Posted March 24, 2016 ID:1028360 Share Posted March 24, 2016 Fix with Farbar Recovery Scan Tool This fix was created for this user for use on that particular machine. Running it on another one may cause damage and render the system unstable. Download attached fixlist.txt file and save it to the Desktop:Both files, FRST and fixlist.txt have to be in the same location or the fix will not work! Right-click on icon and select Run as Administrator to start the tool. (XP users click run after receipt of Windows Security Warning - Open File). Press the Fix button just once and wait. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run. When finished FRST will generate a log on the Desktop, called Fixlog.txt. Please attach it to your reply. fixlist.txt Link to post Share on other sites More sharing options...
Mad_scientist Posted March 25, 2016 Author ID:1028725 Share Posted March 25, 2016 The text file was down loaded and placed on my desktop as instructed. After starting, the scan tool stopped working and my computer froze requiring me to reboot the system. The process was repeated several times each time with the same result. I ensured that the both FRST and fixlist.txt were in the same folder as well as on my desktop. A Fixlog.txt (attached) was generated on one of these attempts even though the scan did not appear to go to completion. I am not certain if the infection has been removed so no attempted has been made to use the browser on the infected computer. Please advise how to proceed from here. Thanks. Fixlog.txt Link to post Share on other sites More sharing options...
TwinHeadedEagle Posted March 25, 2016 ID:1028781 Share Posted March 25, 2016 Can you run the fix one more time? Link to post Share on other sites More sharing options...
Mad_scientist Posted March 26, 2016 Author ID:1029030 Share Posted March 26, 2016 I ran the scan tool several more times with the same result. It creates a restore point and indicates that "fixing is in progress" and to wait. At some point the process then stops without any further response. I have unplug abd restart the computer to try again. Link to post Share on other sites More sharing options...
TwinHeadedEagle Posted March 27, 2016 ID:1029140 Share Posted March 27, 2016 Can you try to do it within Safe Mode? Link to post Share on other sites More sharing options...
Mad_scientist Posted March 27, 2016 Author ID:1029272 Share Posted March 27, 2016 The fix tool finally ran in Safe Mode. I have attached the log file for your information. No restore point was created while running in this setting. Is that significant? Thanks. Fixlog.txt Link to post Share on other sites More sharing options...
TwinHeadedEagle Posted March 27, 2016 ID:1029292 Share Posted March 27, 2016 It is okay. How is your PC behaving now? Link to post Share on other sites More sharing options...
Mad_scientist Posted March 28, 2016 Author ID:1029437 Share Posted March 28, 2016 Will check over the next couple of days and report back. Thanks for your assistance so far. Link to post Share on other sites More sharing options...
Mad_scientist Posted March 29, 2016 Author ID:1029873 Share Posted March 29, 2016 (edited) You “Rock” TwinHeadedEagle. I have tested my computer off and on for a couple of days and it appears that the redirecting adware in no longer affecting my computer. Thanks very much for your assistance. I have Malwarebytes Pro and Microsoft Essential actively protecting my computer. Can you advise how this problematic software still got through? I would like to make a donation. Will it go through to you? Edited March 29, 2016 by Mad_scientist missing word Link to post Share on other sites More sharing options...
TwinHeadedEagle Posted March 29, 2016 ID:1029875 Share Posted March 29, 2016 Yes, I will receive it. Microsoft Security Essentials isn't a good choice. I would suggest to get some paid variant. This is very new malware and when it is very fresh it is almost impossible that security software detects it. Let me know if you have ever more questions. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted April 11, 2016 Root Admin ID:1033197 Share Posted April 11, 2016 Glad we could help. :)If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread. Thanks! Link to post Share on other sites More sharing options...
Recommended Posts