Searchinterneat Malware Removal

THE_CANADIAN · Dec 3, 2015

Hey guys haven't been on needing malware help for a while! which i guess is a good thing since i have learned to be a lot more careful and keeping all my software up to date.

Problem lately has been infecting my browsers (Firefox and chrome) even tho i only use chrome. The problem seems to be changing my default search engine when using chrome to yahoo.com but mostly searchinterneat-a.akamaihd (not going to post the link in case its not allowed) Even if i try to switch it back to google.com which says that it is .. when searching it goes back to those websites and its really frustrating.

Ive run all the read and run me with my UAC off and here are the logs. if i did anything wrong just let me know

Once again thanks anyone for your help in advance its very much appreciated.

TimW · Dec 3, 2015

Rerun Hitman and have it delete all the items under Potential Unwanted Programs.

Then rerun Roguekiller and have it delete these items:
¤¤¤ Registry : 11 ¤¤¤
[PUM.HomePage] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main | Start Page : http://searchinterneat-a.akamaihd.n...FIk0FA1ADB0VXfVBdFElXTwhwJVhKAlE8TkdGC1dXFg== -> Found
[PUM.HomePage] (X64) HKEY_USERS\S-1-5-21-2468954732-3929307020-2745918708-1000\Software\Microsoft\Internet Explorer\Main | Start Page : http://searchinterneat-a.akamaihd.n...FIk0FA1ADB0VXfVBdFElXTwhwJVhKAlE8TkdGC1dXFg== -> Found
[PUM.HomePage] (X86) HKEY_USERS\S-1-5-21-2468954732-3929307020-2745918708-1000\Software\Microsoft\Internet Explorer\Main | Start Page : http://searchinterneat-a.akamaihd.n...FIk0FA1ADB0VXfVBdFElXTwhwJVhKAlE8TkdGC1dXFg== -> Found

And also these items:
¤¤¤ Files : 11 ¤¤¤
[PUP][File] C:\ProgramData\3a08aecf-996c-434c-872d-c3768a6d9134\plugincontainer.exe -> Found
[PUP][File] C:\ProgramData\3a08aecf-996c-434c-872d-c3768a6d9134\plugins\10\Plugin.exe -> Found
[PUP][File] C:\ProgramData\3a08aecf-996c-434c-872d-c3768a6d9134\plugins\2\Plugin.exe -> Found
[PUP][File] C:\ProgramData\3a08aecf-996c-434c-872d-c3768a6d9134\plugins\3\Plugin.exe -> Found
[PUP][File] C:\ProgramData\3a08aecf-996c-434c-872d-c3768a6d9134\plugins\5\Plugin.exe -> Found
[PUP][File] C:\ProgramData\3a08aecf-996c-434c-872d-c3768a6d9134\plugins\6\Plugin.exe -> Found
[PUP][File] C:\ProgramData\3a08aecf-996c-434c-872d-c3768a6d9134\plugins\7\Plugin.exe -> Found
[PUP][File] C:\ProgramData\3a08aecf-996c-434c-872d-c3768a6d9134\plugins\8\Plugin.exe -> Found
[PUP][Folder] C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001} -> Found

Reboot and rescan with both Hitman and RogueKiller and attach the new logs.

Now lets reset your browsers:

Reset Chrome to Defaults

Reset Firefox to Defaults

Be sure to tell me how things are running.

THE_CANADIAN · Dec 3, 2015

Hey Tim! thanks for the quick reply.

Im still having the exact same problems and have done what you said. Although after running hitman i did not find all the files on Rogue. I reseted both browsers as well.

Logs have been attached

TimW · Dec 3, 2015

So it is mainly your browsers that are the trouble?

http://imageshack.us/a/img841/7292/thisisujrt.gif Please download Junkware Removal Tool to your desktop.

Shut down your protection software now to avoid potential conflicts.

Run the tool by double-clicking it. If you are using Windows Vista or Seven, right-mouse click it and select Run as Administrator.

The tool will open and start scanning your system.

Please be patient as this can take a while to complete depending on your system's specifications.

On completion, a log (JRT.txt) is saved to your desktop and will automatically open.

Attach JRT.txt to your next message.

Please download AdwCleaner by Xplode and save to your Desktop.

Double click on AdwCleaner.exe to run the tool.
Vista/Windows 7/8 users right-click and select Run As Administrator

Click on the Scan button.

AdwCleaner will begin...be patient as the scan may take some time to complete.

After the scan has finished, click on the Report button...a logfile (AdwCleaner[R#].txt) will open in Notepad for review (where the largest value of # represents the most recent report).

The contents of the log file may be confusing. Unless you see a program name that you know should not be removed, don't worry about it. If you see an entry you want to keep, let me know about it.

Attach the logfile to your next next reply.

A copy of all logfiles are saved in the C:\AdwCleaner folder which was created when running the tool.

THE_CANADIAN · Dec 4, 2015

Alright well i ran both those programs and the problem still persists. When i go to my chrome settings i set my default search engine to google.com and it says that its google but when i search i see searchinterneat-a.akamaihd and then yahoo.com.

Both logs have been attached. Referring to the AdwCleaner log Bitlord is a program i use for torrents and have for years with out any issues or malware (unless you download the wrong torrent etc..)

Thanks for your help.

TimW · Dec 4, 2015

Let's try uninstalling Chrome,:

Uninstall Chrome but also delete these folders:
C:\Users\User Name\AppData\Local\Google\Chrome
C:\Program Files (x86)\Google\Chrome

Run CCLeaner and after a reboot, reinstall Chrome.

THE_CANADIAN · Dec 5, 2015

Hey TimW,

i have uninstalled chrome and did what you said and the problem seems to have gone away. The search bar stays to google even after use and restart.

Let me know if you want me to run any kind of scans or whatnot to know if im clean.

thank you for all your help thus far.

TimW · Dec 5, 2015

Good to know.

If you are not having any other malware problems, it is time to do our final steps:

We recommend you keep Malwarebytes Anti-Malware for scanning/removal of malware.

Renable your Disk Emulation software with Defogger if you had disabled it in step 4 of the READ & RUN ME.

Go to add/remove programs and uninstall HijackThis. If you don't see it or it will not uninstall, don't worry about it. Just move on to the next step.

If running Vista, Win 7 or Win 8, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.

Now goto the C:\MGtools folder and find the MGclean.bat file. Double click ( if running Vista, Win7, or Win 8 Right Click and Run As Administrator ) on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.

Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.

After doing the above, you should work thru the below link:

How to Protect yourself from malware!

THE_CANADIAN · Dec 5, 2015

Alright i did everything in the finals steps and everything seems to still be fine!

Thank you so much for your help i really appreciate what you guys do!

Have a good one!

TimW · Dec 5, 2015

You are most welcome. Safe surfing.

Log in or Sign up

Searchinterneat Malware Removal

THE_CANADIAN Specialist

Attached Files:

HitmanPro_20151203_1853.log

Malwarebytes.txt

MGlogs.zip

Rogue.txt

TDSSKiller.3.1.0.7_03.12.2015_18.39.41_log.txt

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

THE_CANADIAN Specialist

Attached Files:

HitmanPro_20151203_2148.log

Rogue.txt

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

THE_CANADIAN Specialist

Attached Files:

AdwCleaner[S1].txt

JRT.txt

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

THE_CANADIAN Specialist

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

THE_CANADIAN Specialist

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member