Jump to content

I have a virus that keeps adding extensions - can't get removed


Go to solution Solved by kevinf80,

Recommended Posts

Hi Kevin,

Good news: The extension is gone now! Thank you so much for helping me out! You've done some pretty great work here... So can you tell me more about this virus I've had? Was it a Trojan Horse? Do you think that my PC is clean now? 

Omar

Link to post
Share on other sites
  • Replies 80
  • Created
  • Last Reply

Top Posters In This Topic

Top Posters In This Topic

Popular Posts

Hiya Omar, Good to hear the extensions are now gone, this infection was a browser hijacker, have a read at the following link: https://en.wikipedia.org/wiki/Browser_hijacking It is very

Hi Kevin, Thank to @picasso for the great work as well! I will send you a small donation/gesture for helping me out. It's not much, but it's all I can miss for now... Let me know what needs to be

Hiya Omar, Thanks for the kind words. I got the zip file, thank you, I`ve attached to this reply so devs can download for analysis.. I will check over your thread and give clean up procedure

Posted Images

Hiya Omar,

Good to hear the extensions are now gone, this infection was a browser hijacker, have a read at the following link:

https://en.wikipedia.org/wiki/Browser_hijacking

It is very important that we get the zip file so that dev team can get a look at the content..

@picasso deserves the praise for this fix, a job well done...

I`ll go back over your thread a see what needs to be done to clean up...

Thank you,

Kevin

  • Thanks 1
Link to post
Share on other sites

Hi Kevin,

Thank to @picasso for the great work as well! I will send you a small donation/gesture for helping me out. It's not much, but it's all I can miss for now... Let me know what needs to be done to clean up my PC. 

Yours sincerely,

Omar

  • Thanks 1
Link to post
Share on other sites

Hiya Omar,

Delete the following:

C:\Users\Omar\Desktop\KVRT.exe,

Plus its folder: C:\KVRT_Data folder

C:\Users\Omar\Desktop\RogueKiller_portable64.exe

Plus its folder C:\Prgram Data\RogueKiller

Uninstall the following programs:

Sophos AV

Also delete this folder if still present: C:\ProgramData\Sophos

HitmanPro

http://www.askvg.com/how-to-completely-uninstall-remove-a-software-program-in-windows-without-using-3rd-party-software/

Next,

Right click on FRST here: C:\Users\Omar\Desktop\FRST.exe and rename uninstall.exe when complete right click on uninstall.exe and select "Run as Administrator"

If you do not see the .exe appended that is because file extensions are hidden, in that case just rename FRST to uninstall

That action will remove FRST and all created files and folders...

Next,

Remove all System Restore Points: https://www.tenforums.com/tutorials/33593-delete-system-restore-points-windows-10-a.html#option2

Create clean fresh Restore Point: http://www.thewindowsclub.com/create-system-restore-point

Run Windows Disk Clean Up Utility - https://neosmart.net/wiki/disk-cleanup/

Condsider the following:

Disable Remote Desktop: https://www.tenforums.com/tutorials/92433-enable-disable-remote-desktop-connections-windows-10-pc.html

Disable Windows Telemetry: https://helpdeskgeek.com/windows-10/how-to-disable-windows-10-telemetry/

Malwarebytes Browser Guard (Free) for Firefox: https://addons.mozilla.org/en-GB/firefox/addon/malwarebytes/

Malwarebytes Browser Guard (Free) for Chrome: https://chrome.google.com/webstore/detail/malwarebytes-browser-guar/ihcjicgdanjaechkgeegckofjjedodee Will also work for Opera and Edge..

PatchMyPC, keep all your software upto date - https://patchmypc.com/home-updater#download

From there you should be good to go...

Next,

Read the following links to fully understand PC Security and Best Practices, you may find them useful....

Answers to Common Security Questions and best Practices

Do I need a Registry Cleaner?

Take care and surf safe

Kevin... user posted image
  • Thanks 1
Link to post
Share on other sites

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Please review the following for Tips to help protect from infection

Thank you

 

 

  • Like 1
Link to post
Share on other sites
Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    No registered users viewing this page.


Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.