BleepingComputer.com: Firefox hijacked - roicharger.com / Yourprofitclub

Split from this topic http://www.bleepingcomputer.com/forums/topic379702.html which also had this topic http://www.bleepingcomputer.com/forums/topic381006.html split from it. This one and the other split one were intertwined somewhat. ~ OB

I had the exact same issue, and I have run Ad-Aware from Lavasoft early this morning and have not seen an ad or a highlighted word all day! It seems Ad-Aware fixed this, although it picked up a lot of false positives. I ran Ad-Aware at full scan settings, took like four hours to finish and wanted to reboot twice. Just a friendly tip for others with the issue coming here through google, maybe a mod can make my answer more professional looking ;)

Thanks a lot for all the advice you guys!

This post has been edited by Orange Blossom: 22 February 2011 - 11:53 PM

AccIn, on 20 February 2011 - 09:52 PM, said:

Hello are you sayimg AdAware removed the TDSS rootkit?

I don't know what a TDSS rootkit is, but I too got the fullscreen ad pages, the highlighted words that made ads pop up, and the blue 'did you mean' ads on google, that all lead to roicharger.com, as well as something called "yourprofitclub" in my autoruns entries. Since I ran Ad-Aware, all of those are gone, with the exception of yourprofitclub in my autoruns, but I disabled that manually a while ago so it's probably just a leftover.

OK, it's the infection found in post 11 by the tool in post 10. We are now unfortunately hijacking the OP's thread.

Hello,

Please follow the instructions in ==>This Guide<==. If you cannot complete a step, skip it and continue.

Once the proper logs are created, then make a NEW TOPIC and post it ==>HERE<== Please include a description of your computer issues and what you have done to resolve them.

If you can produce at least some of the logs, then please create the new topic and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the topic and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.

Orange Blossom