Ad Browser shop installed

Discussion in 'Malware Help (A Specialist Will Reply)' started by tadhgb, Mar 12, 2015.

  1. tadhgb

    tadhgb Private E-2

    Hi
    I converted a Youtube clip on 'clipconverter cc.' and downloaded some malware with the clip (of a friend talking!). Ads are poping up when I browse and when I restart Chrome something called 'Unishop' reinstalls itself in the extension.

    I was able to run all the programmes except RogueKiller which hangs at 80%. I looked on their site and others are having the same issue.

    I think I have attached the right logs.

    I have to admit that I had the same problem a few months ago. :-o
     

    Attached Files:

    tadhgb, Mar 12, 2015
    #1
  2. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    Re run Hitman, and have it remove all of the Potential Unwanted Programs (Unideal etc)

    Then rerun again (just a scan) and attach log - let me see what remains.

    What are these??

    • C:\ProgramData\24U
    • C:\ProgramData\8423676964265516501
    • C:\ProgramData\cfedagmmfcmalpfnadonejnegfmkhnja
    • C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7

    http://imageshack.us/a/img841/7292/thisisujrt.gif Please download Junkware Removal Tool to your desktop.
    • Shut down your protection software now to avoid potential conflicts.
    • Run the tool by double-clicking it. If you are using Windows Vista or Seven, right-mouse click it and select Run as Administrator.
    • The tool will open and start scanning your system.
    • Please be patient as this can take a while to complete depending on your system's specifications.
    • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
    • Attach JRT.txt to your next message.


    Explain how things are running.
     
    Kestrel13!, Mar 12, 2015
    #2
  3. tadhgb

    tadhgb Private E-2

    Hi
    Hitman pro kept asking me for my activation code, although it eventually worked.

    I have no idea what those programmes are.

    I have attached the logs. Every time I restart Chrome UniDeals is enabled in the extensions even though I removed it each time.

    Thanks for the help - really appreciated.
     

    Attached Files:

    tadhgb, Mar 13, 2015
    #3
  4. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    No problem. :)

    Delete these:
    • C:\ProgramData\24U
    • C:\ProgramData\8423676964265516501
    • C:\ProgramData\cfedagmmfcmalpfnadonejnegfmkhnja
    • C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7

    Now explain how things are running!
     
    Kestrel13!, Mar 13, 2015
    #4
  5. tadhgb

    tadhgb Private E-2

    Browser running fine.

    There are no popups and the Unideals has gone from the extensions.

    I have restarted a number of times and it has been running like this all day.:)

    Thanks for your help. Great stuff.
     
    tadhgb, Mar 14, 2015
    #5
  6. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    You are most welcome. :)

    If you are not having any other malware problems, it is time to do our final steps:
    1. We recommend you keep Malwarebytes Anti-Malware for scanning/removal of malware.
    2. If we had you download any registry patches like fixme.reg or fixWLK.reg (or any others) and running MGclean.bat did not remove them, you can delete these files now.
    3. Renable your Disk Emulation software with Defogger if you had disabled it in step 4 of the READ & RUN ME.
    4. Go to add/remove programs and uninstall HijackThis. If you don't see it or it will not uninstall, don't worry about it. Just move on to the next step.
    5. If running Vista, Win 7 or Win 8, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
    6. Now goto the C:\MGtools folder and find the MGclean.bat file. Double click ( if running Vista, Win7, or Win 8 Right Click and Run As Administrator ) on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.
    7. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.

    8. After doing the above, you should work thru the below link:
     
    Kestrel13!, Mar 14, 2015
    #6
  7. tadhgb

    tadhgb Private E-2

    All done - thanks for the help.:)
     
    tadhgb, Mar 14, 2015
    #7
  8. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    No problem, safe surfing! :)
     
    Kestrel13!, Mar 15, 2015
    #8

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds