Aura Posted June 18, 2017 ID:1136579 Share Posted June 18, 2017 Hi NinoKoen, Any other questions before I close this thread? Link to post Share on other sites More sharing options...
NinoKoen Posted June 18, 2017 Author ID:1136606 Share Posted June 18, 2017 (edited) hi yoan, i just opened my chrome, and the start page is again a russian website so i think the hijack is still there. and on my firefox i have this too and after i did a adwcleaner scan it didn't found anything Edited June 18, 2017 by NinoKoen Link to post Share on other sites More sharing options...
Aura Posted June 18, 2017 ID:1136611 Share Posted June 18, 2017 Alright, run a new scan with FRST and provide me a fresh set of logs. Link to post Share on other sites More sharing options...
NinoKoen Posted June 20, 2017 Author ID:1137037 Share Posted June 20, 2017 hey yoan sorry for the delay, here are the logs FRST.txt Addition.txt Link to post Share on other sites More sharing options...
Aura Posted June 20, 2017 ID:1137048 Share Posted June 20, 2017 Once again, your web browsers don't show any signs of the hijack. Let's try something, remove the hijacks like you did before, but this time, reset your Google Chrome sync data, and Mozilla Firefox as well. Google Chrome: https://support.google.com/chrome/answer/6386691?hl=en Mozilla Firefox: https://support.mozilla.org/en-US/kb/profile-manager-create-and-remove-firefox-profiles (basically, create a new profile, and see if the hijack affects it) Link to post Share on other sites More sharing options...
NinoKoen Posted June 23, 2017 Author ID:1137819 Share Posted June 23, 2017 Hi yoan, Again sorry for waiting i'm really busy atm, but i did what you said i'll wait 3 days and then i will give you an update Link to post Share on other sites More sharing options...
Aura Posted June 23, 2017 ID:1137881 Share Posted June 23, 2017 Alright, I'll be waiting Link to post Share on other sites More sharing options...
Aura Posted June 27, 2017 ID:1138568 Share Posted June 27, 2017 It's been 3 days, how's the situation now? Link to post Share on other sites More sharing options...
NinoKoen Posted June 28, 2017 Author ID:1138871 Share Posted June 28, 2017 it looked like it was gone but yesterday it came back again a russian or japanes starter page Link to post Share on other sites More sharing options...
Aura Posted June 28, 2017 ID:1138917 Share Posted June 28, 2017 Are you able to take a screenshot of these pages so I can see what they look like? Make sure that I can see the address bar/URL as well please. Link to post Share on other sites More sharing options...
NinoKoen Posted June 30, 2017 Author ID:1139573 Share Posted June 30, 2017 hi yoan. Sorry but the pages aren't there anymore but i don't think they are gone?! I did a scan recently and this is what it found Link to post Share on other sites More sharing options...
Aura Posted June 30, 2017 ID:1139574 Share Posted June 30, 2017 Please export the content of the last Scan log where these detection occurs so I can review it. Link to post Share on other sites More sharing options...
NinoKoen Posted July 3, 2017 Author ID:1140107 Share Posted July 3, 2017 Hey Yoan, i don't understand what to do so can you explain what to do, and a \s i said the startpages aren't gone: Link to post Share on other sites More sharing options...
Aura Posted July 3, 2017 ID:1140112 Share Posted July 3, 2017 Alright, follow the instructions below for Google Chrome. Reset your sync data, then log out from your Google profile on Chrome. https://support.google.com/chrome/answer/6386691?hl=en Once done, uninstall Google Chrome and reinstall it, then log back in. Let me know if the start page in Chrome come back. Link to post Share on other sites More sharing options...
Aura Posted July 6, 2017 ID:1140845 Share Posted July 6, 2017 Hi Nino, Are you still with me? Link to post Share on other sites More sharing options...
NinoKoen Posted July 7, 2017 Author ID:1141186 Share Posted July 7, 2017 Hi yoan Again sorry for waiting i did what you said and we'll see if its gone Link to post Share on other sites More sharing options...
Aura Posted July 7, 2017 ID:1141229 Share Posted July 7, 2017 Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread. Thanks! Link to post Share on other sites More sharing options...
Aura Posted August 2, 2017 ID:1148794 Share Posted August 2, 2017 Topic reopened per request Link to post Share on other sites More sharing options...
NinoKoen Posted August 5, 2017 Author ID:1150092 Share Posted August 5, 2017 Hi yoan, I still got this weird russian starter pages do you know what they are and how to remove them? Link to post Share on other sites More sharing options...
Aura Posted August 8, 2017 ID:1150953 Share Posted August 8, 2017 Alright, I'm back I was gone this weekend and didn't manage to answer all my threads yesterday. Since it's been a good month, run a new scan with FRST and attach the logs here for me to review (FRST.txt and Addition.txt). Link to post Share on other sites More sharing options...
Aura Posted August 11, 2017 ID:1152216 Share Posted August 11, 2017 Hi NinoKoen, Are you still with me? Link to post Share on other sites More sharing options...
Aura Posted August 13, 2017 ID:1152926 Share Posted August 13, 2017 Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread. Thanks! Link to post Share on other sites More sharing options...
Recommended Posts