How Do I Kill Terraclicks??

Dear Everyone.

My computer started acting odd, all the signs I associate with Something Having Got Me, slowing down, ordinary software playing up, all that kinda stuff. So I scanned with Malwarebytes and came up clean - and didn't believe it. On the 'scan finished' screen of Malwarebytes, top right corner, is a little bell symbol. Dunno what it means but it's there and it had a red 5 on it. Clicked on it and got the following addy....

198.134.112.241

which turned out to be for Adterra. So I reckon I've got Adterra/Terraclicks (which I'm PRETTY SURE are the same thing though tell me otherwise, you're the experts) as a P.U.P.

Thing IS, the system's getting worse. I'm still coming up clean in Malwarebytes (save for the little bell symbol) and the number on the bell's getting bigger and bigger. I've heard that Zemina can get rid of it but can't find any non-suspicious reviews of Zemina, so I'm wondering if it's OK to trust it. If it's NOT, do any of you wonderful geekheads know of any other ways to defeat Terrorclicks (sic!)

It's the first time I've ever had anything defeat Malwarebytes, even if only partially. I've got a feeling I'm being infested with more stuff Malwarebytes can't find (hence the increasing number on the bell even though the scan's still clean) and I wanna get rid of this before ransomware strikes!

I'm using Windows XP SP3 (just call me Fred Flintstone!) and Firefox 52.9ESR browser.

HELP!?!

Yours hopefully

Chris.

 

It's unusual for Malwarebytes not to remove Terraclicks.
I suggest you go here.
https://forums.majorgeeks.com/forums/malware-help-mg-a-specialist-will-reply.35/

Follow the instructions in the sticky and upload all the required log files.

 

Malwarebytes couldn't even FIND Terraclicks, not properly. Only with that addy I showed you in the little bell symbol. They're obviously getting better! Mind you, I HAVE had Avast find things before that Malwarebytes couldn't find. Thing about Avast IS, it does want to take over your whole computer given half a chance. It means well, but it's a control freak.

Off to your address now, thanks for your help so far!!

This is an update. This could be a doozy. I couldn't even do the first step - the AdwCleaner by Xplode one - because it came up 'This application has failed to start because dwmapi.dll was not found. Re-installing the application may fix this problem.' So I've tried reinstalling AdwCleaner a few times but hit the above error message every single time.

Yours respectfully

Chris.

 

Here are the instructions for Windows XP.
https://forums.majorgeeks.com/threads/windows-xp-malware-removal-cleaning-procedure.139313/

 

Hi!

Basically, I'm having zero luck with your software. As in I've had more luck on the lottery!

Rogue Killer never gets started. It comes up 'Access Violation at address 100C1BEF' when I try to run/install it.
When I try to save a log with HitmanPro, it comes up 'HitmanPro.exe has encountered a problem and needs to close. We are sorry for the inconvenience.' It never actually gets as far as saving the log before it does that, so I'm afraid I can't show you any output.
And Malwarebytes comes up clear, apart from the list of blocked websites, starting with address 198.134.112.241 and ending with address 198.134.112.243, all of which come up as AdTerra websites. That's the only reason I know somethng's got me. They all came up under that little bell symbol, I've no idea what that symbol means or what it's for but that's where they were.

MIGHT make you experts go 'AARGH!!' ths, but I'm running all these things in SAFE mode with networking. Should I be running them in normally started mode?

I'm uploading screenshots of the software crashes if it lets me, so you can glean what information you can from them.

 

Do you have the Windows XP SP3 disk?