Jump to content
Ben7240

Help with removing Vipbox Malware

Recommended Posts

This just started this week from what I can tell but I'd suddenly receiving browser ad popups every couple of minutes when using any browser whether it's IE, Chrome, Firefox, etc. The ads are all random and have no ties to anything I've viewing. I work from home dealing with clients via webinars so it's a bit of a nuisance and embarrassment when these ads suddenly pop up during our sessions so I'm hoping one of the pros here can help me.

I've ran Malwarebytes a few times but no issues are ever found. I have ran the scan both in and out of safe mode with the same results. For reference, when the popups occur almost all of them say 'Google Chrome * Vipbox.im' at the bottom of the ad. I've scanned my installed programs and don't see anything that's a red flag. I have a feeling that this is my during when I was attempting to stream an NFL game this past Sunday via a streaming link; never again!

In any case, I'm sure it's easy enough to remove but I just don't have enough knowledge to fix it. Again, I appreciate any insight/help in this matter.

Share this post


Link to post
Share on other sites

Sorry. Posted in the wrong forum. This should be moved to Windows Malware Removal Help & Support.

Share this post


Link to post
Share on other sites

Hello  and :welcome:

Please take your time.

I'm not able to move this topic but I think one of the Admin will.

 NOTE: The tools and the information obtained is safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system.

Download Malwarebytes Support Tool
https://downloads.malwarebytes.com/file/mbst?src=Experts

    Once the file is downloaded, open your Downloads folder/location of the downloaded file
    Double-click mb-support-X.X.X.XXXX.exe to run the program
        You may be prompted by User Account Control (UAC) to allow changes to be made to your computer. Click Yes to consent.
    Place a checkmark next to Accept License Agreement and click Next
    You will be presented with a page stating, "Get Started!"
    Click the Advanced tab

Click the Gather Logs button

A progress bar will appear and the program will proceed with getting logs from your computer

Upon completion, a file named mbst-grab-results.zip will be saved to your Desktop. Click OK

Please attach the file in your next reply. 

Share this post


Link to post
Share on other sites

That didn't collect the all the logs I need.

Please download the Farbar Recovery Scan Tool and save it to your desktop.

FRST 64-bit version: https://downloads.malwarebytes.com/file/FRST64

Note: You need to run the version compatible with your system. You can check here https://support.microsoft.com/en-us/help/15056/windows-7-32-64-bit-faq if you're not sure if your computer is 32-bit or 64-bit

    Double-click to run it. When the tool opens, click Yes to disclaimer.
    Press the Scan button.
    It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
    The first time the tool is run, it also makes another log (Addition.txt). If you've, run the tool before you need to place a check mark here.
    Please attach the Additions.txt log to your reply as well.

 

Share this post


Link to post
Share on other sites

Not seeing much

I have attached A file I need you to download and save it to the same place that you saved the FRST program

Download attached **fixlist.txt** and save it to same location where the FRST tool is located.

NOTE: Both FRST.exe and the fixlist.txt must be in the same location or the fix will not work.
Close all browsers before running.

Double click FRST to run the tool. If the tool warns you the version is outdated, please download and run the updated version.
 •Click the **Fix Button**.
 
•If you receive a message that a reboot is required, please make sure you allow it to restart normally.

•The tool will complete its run after restart.

When finished, the tool will make a log (Fixlog.txt) in the same location from where it was run. Please attach the Fixlog.txt in your reply.

Restart the pc and let me know how it's running now.

fixlist.txt

Share this post


Link to post
Share on other sites

The issues appear to be only happening with Chrome.
We will need to create new profile.

If you have Chrome Bookmarks that you want to save, you want to do that first.
Export / Import Bookmarks.

https://support.google.com/chrome/answer/96816?hl=en

Open your Chrome on all devices using Chrome as we need to make sure Chrome sync doesn't allow it back in.

• Go to Settings > People > Sync (or alternatively, enter the following in the address bar: chrome://settings/syncSetup)

• On the page, you'll see what synced data is enabled. Move all sliders to the left in order to disable all the syncing.

Please make sure Chrome is closed before running the fix

Keep in mind the fix requires a restart of the computer

 

I have attached A file I need you to download and save it to the same place that you saved the FRST program

Download attached **fixlist.txt** and save it to same location where the FRST tool is located.

NOTE: Both FRST.exe and the fixlist.txt must be in the same location or the fix will not work.
Close all browsers before running.

Double click FRST to run the tool. If the tool warns you the version is outdated, please download and run the updated version.
 •Click the **Fix Button**.
 
•If you receive a message that a reboot is required, please make sure you allow it to restart normally.

•The tool will complete its run after restart.

When finished, the tool will make a log (Fixlog.txt) in the same location from where it was run. Please attach the Fixlog.txt in your reply.

Restart the pc and let me know how it's running now.

fixlist.txt

Share this post


Link to post
Share on other sites

Okay, ran the fix and Chrome came up as basically a new install. Haven't synced my Google account yet; want to review everything on my other devices before I do that. 

Fix log attached!

Fixlog.txt

Share this post


Link to post
Share on other sites

So far so good. I'll keep an eye on it and report back if I see any more popups. Thank you very much for your help!

Share this post


Link to post
Share on other sites

Great Job

You're quite welcome. I'm happy to have helped, and glad this is resolved. As there are no other issues which need addressing we can now close this ticket.

Thanks for choosing Malwarebytes!

Peace Be With You


Help Secure your browsers

Please install uBlock Origin for your browsers.

uBlock Origin For Fire Fox, Chrome and Safari

https://www.ublock.org/

Opera

https://addons.opera.com/en-gb/extensions/details/ublock/?display=en

Edge

https://www.microsoft.com/en-us/store/p/ublock-origin/9nblggh444l4

AdBlock for IE

https://adblockplus.org/releases/adblock-plus-10-for-internet-explorer-released


Cryptolocker Ransomware: What You Need To Know

http://blog.malwarebytes.org/intelligence/2013/10/cryptolocker-ransomware-what-you-need-to-know/

Tech Support Scams

http://blog.malwarebytes.org/tech-support-scams/#help

Seven tips to keep your PC safe

http://blog.malwarebytes.org/intelligence/2013/06/seven-tips-to-keep-your-pc-safe-this-summer/


LD Tate

Malware Removal Specialist

Share this post


Link to post
Share on other sites

Hi, I'm having a very similar problem on Mac. It only crops up when using Chrome.

I've downloaded the file you suggested - https://downloads.malwarebytes.com/file/mbst?src=Experts

This generates the file 'mb-support-1.3.1XXX.exe'. Then we I go to open this file, it uses decompressor.app to open it and it comes up that 'decompression is complete' but there's nothing else to open. Even when I click on 'show' nothing actually opens.

Can you help?

 

Many thanks

Share this post


Link to post
Share on other sites
On 12/7/2018 at 3:25 PM, LDTate said:

Hi there, this seems to be the exact same fix that I need for my vipbox popups on Chrome. Only problem is that I can't access the fixlist.txt file at the bottom of this post. It says there's a problem and that the file is missing, or that you didn't have permission to post it here?  Any help would be greatly appreciated!

 

On 12/7/2018 at 3:25 PM, LDTate said:

 

 

The issues appear to be only happening with Chrome.
We will need to create new profile.

If you have Chrome Bookmarks that you want to save, you want to do that first.
Export / Import Bookmarks.

https://support.google.com/chrome/answer/96816?hl=en

Open your Chrome on all devices using Chrome as we need to make sure Chrome sync doesn't allow it back in.

• Go to Settings > People > Sync (or alternatively, enter the following in the address bar: chrome://settings/syncSetup)

• On the page, you'll see what synced data is enabled. Move all sliders to the left in order to disable all the syncing.

Please make sure Chrome is closed before running the fix

Keep in mind the fix requires a restart of the computer

 

I have attached A file I need you to download and save it to the same place that you saved the FRST program

Download attached **fixlist.txt** and save it to same location where the FRST tool is located.

NOTE: Both FRST.exe and the fixlist.txt must be in the same location or the fix will not work.
Close all browsers before running.

Double click FRST to run the tool. If the tool warns you the version is outdated, please download and run the updated version.
 •Click the **Fix Button**.
 
•If you receive a message that a reboot is required, please make sure you allow it to restart normally.

•The tool will complete its run after restart.

When finished, the tool will make a log (Fixlog.txt) in the same location from where it was run. Please attach the Fixlog.txt in your reply.

Restart the pc and let me know how it's running now.

fixlist.txt

 

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.