Jump to content
icashootnstar

BrowserModifier:Win32/Beilextec Sends me to ownza.com/featured

Recommended Posts

Hi,

I noticed that my Chrome browser has been hijacked and sends me to "https://ownza.com/featured"

I ran Malwarebytes and it didn't detect anything.

So I ran Defender, which identified the malware as BrowserModifier:Win32/Beilextec. (It also identified SoftwareBundler:Win32/Somoto.) Unfortunately, Defender said that the removal was incomplete for Beilextec after trying twice. The problem continues. (It said that Somoto was successfully removed.)

Can you help me get rid of this?

 

Thanks,

Shannon

 

200210 Malwarebytes Scan Report.txt FRST.txt Addition.txt

Share this post


Link to post
Share on other sites

Hello, Welcome to Malwarebytes.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

Please download the attached Fixlist.txt file to  the same folder where the Farbar tool is running from.
The location is listed in the 3rd line of the FRST.txt log you have submitted.

Run FRST and click Fix only once and wait.

The Computer will restart when the fix is completed.

It will create a log (Fixlog.txt) please post it to your reply.
===

If the problem persists and Chrome is Synced with other Devices reset it.

https://forums.malwarebytes.com/topic/214325-chrome-secure-preferences-detection-always-comes-back/
https://support.google.com/chrome/answer/185277

Execute the suggested fix.

Restart the computer normally.

Please post the Fixlog.txt and let me know what problem persists.

fixlist.txt

Share this post


Link to post
Share on other sites

Update- I just got home from work and, yes, one of the two computers that I use at work has the same problem. I've unsynced it and will reset it tomorrow. Odd that it is not happening on the other computer I use for work. However, I will repeat the process there, as well, just to be sure.

Share this post


Link to post
Share on other sites

I completely uninstalled Chrome on the office computer. Than I ran both Malwarebytes and Farber and they came up clean on that computer.

But the problem is ongoing on my home computer where it first manifested.

Would you like me to run the scans again or how should I proceed?

Share this post


Link to post
Share on other sites

Hi,

Execute this on your Home computer.

Remove and re-install Chrome. Follow these instructions.

step1.gif Remove Chrome from your Computer and reinstall a fresh copy later.

step2.gifIf you remove the syncing of your account you must remove it before you save your bookmarks etc...
Delete Your Google Chrome Browser Sync Data if you sync with other devices. <- Important ...
https://forums.malwarebytes.com/topic/214325-chrome-secure-preferences-detection-always-comes-back/

step3.gif Before you remove Chrome Export your Bookmarks
Chrome will export your bookmarks as a HTML file, which you can then import into another browser.
How To: http://ccm.net/faq/31791-how-to-backup-your-google-chrome-bookmarks

step4.gif Before you remove Chrome Export your Passwords
How to export your saved passwords from Chrome
https://www.google.com/search?q=chrome+export+password&oq=chrome+export+password&aqs=chrome..69i57j69i60l2.7991j0j7&sourceid=chrome&ie=UTF-8

step5.gif Clear your Chrome cache and cookies
https://support.google.com/chromebook/answer/183083?hl=en

step6.gif Remove Chrome using the the instructions on this page.
https://support.google.com/chrome/answer/95319?hl=en

step7.gif Re-install Chrome and the Bookmarks.
<<<>>

If the problem persists post start a new topic for this computer.
The solution may not be the same.
Run the Farbar program and post fresh logs. 

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.