cdn.immereeako.info trojan

[HarlesPilter]

Hi,

As so many others on this forum, I also encountered this trojan, that injects the malicious code in webpages and sometimes tries to redirect to go.microsoft. I have run Malwarebytes and quarantined everything it found, but the problem persist. I read other topics in this forum about this, but it seems, that the fixlist.txt files are specific to their computers, so better not to try those.

I will attach the FRST log.

Thank you!
 

FRST.txt

Addition.txt

[HarlesPilter]

I also scanned the computer in safe mode and quarantined all the things MB found, but I sometimes still get a notification from MB about cdn.immereeako.info when visiting different sites.

mb_report.txt

[nasdaq]

Hello, Welcome to Malwarebytes.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

To remove this infection the computer must be Restarted in SAFE MODE.
How to:
https://support.microsoft.com/en-ca/help/12376/windows-10-start-your-pc-in-safe-mode

You can download the Fixlist.txt attached but run the Farbar fix in Safe Mode.
===

Please download the attached Fixlist.txt file to  the same folder where the Farbar tool is running from.
The location is listed in the 3rd line of the FRST.txt log you have submitted.

Run FRST and click Fix only once and wait.

The tool will create a log (Fixlog.txt) please post it to your reply.
===

Please let me know if the problem persists.

fixlist.txt

[nasdaq]

Are you with us?

[HarlesPilter]

Yeah,
Sorry for not replying back. 
I tried MB in safemode again, and it seemed to do the trick this time. No need to run the fixlist.txt. Hopefully it won't come back.

Thanks for the quick replys!

[nasdaq]

Good work.

[AdvancedSetup]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Thanks