Montechristos Posted December 13, 2018 ID:1286866 Share Posted December 13, 2018 (I am creating my own thread as suggested) Firefox and Chrome browsers started redirecting to https://go.microsoft.com/?69157 a few days back. After some digging, and with the help of MalwareBytes, I managed to identify the redirect URL cdn.immereeako.info. None of my antivirus/antimalware have managed to resolve the issue. Please assist Link to post Share on other sites More sharing options...
TwinHeadedEagle Posted December 13, 2018 ID:1286872 Share Posted December 13, 2018 (edited) Hello, Can you run one more MalwareBytes scan and export a log if something is detected? Please download Farbar Recovery Scan Tool and save it to your desktop. Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version. Double-click to run it. When the tool opens click Yes to disclaimer. Press Scan button. button. It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply. The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply. Edited December 13, 2018 by TwinHeadedEagle Link to post Share on other sites More sharing options...
Montechristos Posted December 13, 2018 Author ID:1286874 Share Posted December 13, 2018 Hi, I had MalwareBytes running the whole night and didn't detect any isues. Atteched are the files of Farbar FRST.txt Addition.txt Link to post Share on other sites More sharing options...
TwinHeadedEagle Posted December 13, 2018 ID:1286920 Share Posted December 13, 2018 Can you run run MalwareBytes scan from the Safe Mode? Link to post Share on other sites More sharing options...
Montechristos Posted December 14, 2018 Author ID:1287073 Share Posted December 14, 2018 Here it is: nothing found Malware_SafeMode.txt Link to post Share on other sites More sharing options...
Montechristos Posted December 14, 2018 Author ID:1287074 Share Posted December 14, 2018 Update: I noticed today that it doesn't redirect me anymore!!! Do you think it was the run in safe mode??? Link to post Share on other sites More sharing options...
TwinHeadedEagle Posted December 14, 2018 ID:1287076 Share Posted December 14, 2018 Has MalwareBytes detected anything while scanning in Safe Mode? Link to post Share on other sites More sharing options...
Montechristos Posted December 14, 2018 Author ID:1287088 Share Posted December 14, 2018 No, as I mentioned before, no threats were found. Maybe one of my previous attempts killed it... Link to post Share on other sites More sharing options...
TwinHeadedEagle Posted December 14, 2018 ID:1287090 Share Posted December 14, 2018 Probably. If everything runs fine, we can close this topic then? Link to post Share on other sites More sharing options...
Montechristos Posted December 14, 2018 Author ID:1287095 Share Posted December 14, 2018 When I sent you the files, the issue was still there, so maybe something to investigate? For me we can close the incident. Many thanks for your time! Link to post Share on other sites More sharing options...
TwinHeadedEagle Posted December 14, 2018 ID:1287141 Share Posted December 14, 2018 It is still unclear how it gets removed, people aren't always clear. But good thing is that it is removed. Link to post Share on other sites More sharing options...
TwinHeadedEagle Posted December 14, 2018 ID:1287142 Share Posted December 14, 2018 Glad we could help. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Thanks Link to post Share on other sites More sharing options...
Recommended Posts