Need help removing Claro

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by madriz, Aug 15, 2012.

  1. madriz

    madriz Private E-2

    Did some googling and stumbled into this thread. I had the same problem. I tried with the usual scan for malwares, virus, tdsskiller etc problem still persist. I figured I tried the OTL solutions, I know that my system is different and I don't really know how OTL works so I put 2 and 2 together until the log says my system is clean from Claro. I succeeded in that but each time I open Firefox the home page still redirects me to this damn link.

    What am I doing wrong? Can anyone help? Here's my OTL.txt too.

    Edit:
    Did another OTL scan, it reappeared. This happened before, did the same steps, it was gone, opened Firefox and then reappeared again! Need help, please advise.

    Updated the OTL.txt.
     

    Attached Files:

    • OTL.Txt
      File size:
      247.2 KB
      Views:
      4
    Last edited: Aug 15, 2012
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Welcome to Major Geeks!



    Now shut down your protection software now (antivirus, antispyware...etc) to avoid possible conflicts.
    • Double-click OTL.exe to run. (Vista/7 right-click and select Run as Administrator)
    • Copy the text in the code box below and paste it into the [​IMG] text-field.
    Code:
    :OTL
    FF - prefs.js..browser.search.defaultenginename: "Claro Search"
    FF - prefs.js..browser.search.order.1: "Claro Search"
    FF - prefs.js..browser.search.selectedEngine: "Claro Search"
    FF - prefs.js..browser.startup.homepage: "[URL]http://isearch.claro-search.com/?affID=115131&tt=120812_bandext_3312_3&babsrc=HP_iclro&mntrId=fc571201000000000000801f0242586f[/URL]"
    FF - user.js - File not found
    O2 - BHO: (no name) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - No CLSID value found.
    O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
    O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
    :Commands
    [PURITY]
    [EMPTYTEMP] 
    [EMPTYFLASH]
    
    [REBOOT]
    • Now click the [​IMG] button.
    • If the fix needed a reboot please do it.
    • Click the OK button (upon reboot).
    • When OTL is finished, Notepad will open. Close Notepad.
    • A log file will be located at C:\_OTL\MovedFiles\mmddyyyy_hhmmss.log, where mmddyyyy_hhmmss is the date of the tool run.
    • Attach this log to your next message. (See: How to attach)
    Then attach the below logs:
    • the log from OTL
    Make sure you tell me how things are working now! If you still have problems, you will have to run the below and attach the requested logs.

    READ & RUN ME FIRST. Malware Removal Guide
     
  3. madriz

    madriz Private E-2

    Hi, sorry for the late reply. The log is as attached.

    I've also followed all the guides from the sticky prior to my attempt with OTL.
     

    Attached Files:

  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Until you have attach all of the logs requested in the READ & RUN ME FIRST, you have not completed the instructions. Starting a thread here means you still have problems. If you still have problems, we need the logs as stated.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds