I still have malware! HELP Please

Discussion in 'Malware Help (A Specialist Will Reply)' started by peapod, Feb 5, 2013.

  1. peapod

    peapod Private E-2

    Hello! :)

    I'm here because I have two, maybe more, malware viruses. I got rid of one, but then when the second attached to my computer the first one came back.

    They are: Browse to Save & Dealply.com

    I have done all the requested actions from the Read Me First File and I have now attached all the selected logs. There is one missing because nothing was detected and I couldn't (or didn't understand how to) save the log.

    Browse to Save and Dealply act the same way. On any website I will see random highlight words and if I hover my mouse over the word a pop-up appears and says something like click here for this deal or that deal. This has been happening since probably about October 2012. I fixed in November 2012. That was Dealplay.com. Also every time I looked/opened a webpage at the far left at the bottom I could see its thread loading first. If I went anywhere near it with my mouse, it would jump over to the far right side. If I ran over to the right it would jump back over to the left. I'm sure you get the picture. This would continue until the page loaded.

    Then about two weeks maybe a little more, I kept noticing on Facebook that whenever I loaded a picture from a friend's page or even my page to the right of the pic and below the description it would have row upon row of "AD by Browse to Save" and then a i mark at the end. Shortly after the other one returned. I followed the instructions on their website on how to uninstall but it never showed up in my add-ons nor in my programs in control panel. It's hidden really well.

    Since following your instructions, the random highlighted word on a webpage are still and the line upon line on Facebook is still happening.

    I hope that I've explained myself and that you can help me :-o:-o:-o

    PeaPod
     

    Attached Files:

    Last edited: Feb 5, 2013
    peapod, Feb 5, 2013
    #1
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Welcome to Major Geeks!

    Run Hitman Pro again this time allow it to fix all those Potential Unwanted Programs it reported. Then reboot your PC.

    After reboot, follow the instructions in the below link:

    Reset Firefox to Defaults

    Now reboot one more time. Then come back and tell me if you are still having problems.
     
    chaslang, Feb 5, 2013
    #2
  3. peapod

    peapod Private E-2

    I did Hitman again and no threats or traces showed up this time so there was nothing to fix. I do have to mention though that as I was waiting for a reply I read other threads and came across one that I tried. I followed the instructions from this link <http://www.2-viruses.com/remove-browse-to-save>.
    It seemed to have worked but still wanted to wait for a reply.

    So it looks like I'm a clean, working machine again :) Thanks to you and Major Geeks!
     
    peapod, Feb 6, 2013
    #3
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You're welcome.

    If you are not having any other malware problems, it is time to do our final steps:
    1. We recommend you keep Malwarebytes Anti-Malware for scanning/removal of malware.
    3. Go back to step 4 oof the READ ME and renable your Disk Emulation software with Defogger if you had disabled it.
    4. Go to add/remove programs and uninstall HijackThis. If you don't see it or it will not uninstall, don't worry about it. Just move on to the next step.
    5. If running Vista or Win 7, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
    6. Goto the C:\MGtools folder and find the MGclean.bat file. Double click ( if running Vista, Win7, or Win 8 Right Click and Run As Administrator ) on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.
    8. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
    10. After doing the above, you should work thru the below link:
     
    chaslang, Feb 7, 2013
    #4

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds