d4nis Posted February 25, 2019 ID:1300539 Share Posted February 25, 2019 hello! adwcleaner_7.2.7.0 and Malwarebytes does not cure my computer substitution of sites for advertising www.756ds.vip www.wwdm36.loan:9905 0973cc.com:8888 etc help me please Addition.txt FRST.txt Link to post Share on other sites More sharing options...
d4nis Posted February 28, 2019 Author ID:1301226 Share Posted February 28, 2019 help Link to post Share on other sites More sharing options...
nasdaq Posted March 1, 2019 ID:1301397 Share Posted March 1, 2019 Hello, Welcome to Malwarebytes. I'm nasdaq and will be helping you. If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed. === ATTENTION: System Restore is disabled Turn your System Restore ON - Windows Help - Immediately.https://support.microsoft.com/en-us/help/17228/windows-protect-my-pc-from-viruses <<<>>> Remove this program in bold via the Control Panel > Programs > Programs and Features. MPC-HC 1.7.13 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.13 - MPC-HC Team) === Please download the attached Fixlist.txt file to the same folder where the Farbar tool is running from. The location is listed in the 3rd line of the FRST.txt log you have submitted. Run FRST and click Fix only once and wait. The tool will create a log (Fixlog.txt) please post it to your reply. === Please post the Fixlog.txt and let me know what problem persists. fixlist.txt Link to post Share on other sites More sharing options...
d4nis Posted March 1, 2019 Author ID:1301442 Share Posted March 1, 2019 Fixlog.txt Hello. The problem is not solved. When i open http://127.0.0.1 in any browser (IE, Chrome, Yandex, Opera) , it redirects me to an advertising site Link to post Share on other sites More sharing options...
nasdaq Posted March 1, 2019 ID:1301451 Share Posted March 1, 2019 Hi, Please download the attached Fixlist.txt file to the same folder where the Farbar tool is running from. The location is listed in the 3rd line of the FRST.txt log you have submitted. Run FRST and click Fix only once and wait. The tool will create a log (Fixlog.txt) please post it to your reply. === If the problem persists run the Farbar program and post fresh logs for my review. Link to post Share on other sites More sharing options...
d4nis Posted March 1, 2019 Author ID:1301455 Share Posted March 1, 2019 FRST.txt Addition.txt Link to post Share on other sites More sharing options...
nasdaq Posted March 2, 2019 ID:1301579 Share Posted March 2, 2019 (edited) Hello, Welcome to Malwarebytes. I'm nasdaq and will be helping you. If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed. === The last fix did not go as expected. I need more information of the bad file. The files will be sent to VirusTotal for inspection. All you have to do is run this fix in Normal Mode. Please download the attached Fixlist.txt file to the same folder where the Farbar tool is running from. The location is listed in the 3rd line of the FRST.txt log you have submitted. Run FRST and click Fix only once and wait. The tool will create a log (Fixlog.txt) please rename the file Fixlog_1.txt === Now it may just be that the fix in normal mode will failed again. Boot to SAFE MODE The tool will create a log (Fixlog.txt). Please post both fixlog files to your next reply. Wait for further instructions. === p.s. Is YANDEX LLC working well and did you have any problems with it prior to the infection? fixlist.txt Edited March 2, 2019 by nasdaq Link to post Share on other sites More sharing options...
nasdaq Posted March 7, 2019 ID:1302596 Share Posted March 7, 2019 Are you still with us? Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted March 15, 2019 Root Admin ID:1303940 Share Posted March 15, 2019 Due to the lack of feedback, this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread. Thanks Link to post Share on other sites More sharing options...
Recommended Posts