Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Infected with YoutubePlus


  • Please log in to reply
19 replies to this topic

#1 davidtherip

davidtherip

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:03:04 PM

Posted 03 November 2012 - 05:02 PM

I have no clue what to do. It reinstalls itself literally every 20 minutes. I'm using google chrome. Please help.

Edited by bloopie, 03 November 2012 - 05:55 PM.
Mod Edit: Moved from Windows 7 to AII ~bloopie


BC AdBot (Login to Remove)

 


#2 ex0syphen

ex0syphen

  • Members
  • 63 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:127.0.0.1
  • Local time:02:04 PM

Posted 03 November 2012 - 05:32 PM

Download and run ESET Online Scanner.


Then download and run MalwareBytes Free.


Edited by ex0syphen, 03 November 2012 - 05:35 PM.

What if there were no hypothetical situations?

 

 


#3 davidtherip

davidtherip
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:03:04 PM

Posted 04 November 2012 - 03:10 PM

I ran both, and malwarebytes seemed to fix it by deteting PUB.BundleInstaller, but it didn't delete the youtube plus folders and after I uninstalled yotube plus, it just came back.

#4 ex0syphen

ex0syphen

  • Members
  • 63 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:127.0.0.1
  • Local time:02:04 PM

Posted 04 November 2012 - 03:33 PM

Try MalwareBytes in safe mode. If you can, delete the folders. Then, without booting back into regular mode run this and this.

What if there were no hypothetical situations?

 

 


#5 davidtherip

davidtherip
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:03:04 PM

Posted 04 November 2012 - 04:07 PM

There's nothing on the second link, but okay. And how do I run MalwareBytes in safe mode?

#6 ex0syphen

ex0syphen

  • Members
  • 63 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:127.0.0.1
  • Local time:02:04 PM

Posted 04 November 2012 - 04:11 PM

The second link is a direct download of an iso. Check your downloads.

1. Start in safe mode

2. Look for MB icon, if you can't find it open it from the program files.

What if there were no hypothetical situations?

 

 


#7 davidtherip

davidtherip
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:03:04 PM

Posted 04 November 2012 - 04:27 PM

How do I run the kaspersky rescue disk?

#8 ex0syphen

ex0syphen

  • Members
  • 63 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:127.0.0.1
  • Local time:02:04 PM

Posted 04 November 2012 - 04:29 PM

This is from the website, not my writing.


1. Connect a removable USB device to your computer


Posted ImageIn order to successfully record Kaspersky Rescue Disk 10 to a removable USB device, space capacity of it must be not less than 256 MB. The connected USB device must have FAT16 or FAT32 file system. If NTFS file system is installed on the device, you are required to format it in FAT16 orFAT32.



Posted ImageDo not use an USB device with other operating systems installed on it. It may cause incorrect booting your computer from Kaspersky Rescue Disk 10.




2. Download the iso image of Kaspersky Rescue Disk 10 and a special utility


Download the following utilities from the official Kaspersky Lab server:

If desired (not mandatory) you can compare MD5 hash of the downloaded file with the actual hash:
http://rescuedisk.kaspersky-labs.com/rescuedisk/updatable/kav_rescue_10.md5.txt.





3. Record Kaspersky Rescue Disk 10 to your USB device


In order to do this, perform the following actions:

  • Run the downloaded file rescue2usb.exe.
  • On the Kaspersky USB Rescue Disk Maker window, click Browse... and select the iso image of Kaspersky Rescue Disk 10

Posted Image

  • Select the required USB device from the drop-down menu.
  • Click START.
  • Wait until the process is complete.

Posted Image

  • Click OK on the open window informing that Kaspersky USB Rescue Disk has been successfully created.

Posted Image




4. Configure the computer to boot from Removable Device
Posted ImageUse the Delete or F2 keys, to load the BIOS menu. The keys F1, F8, F10, F11, F12 might be used for some motherboards, as well as the following key combinations:

  • Ctrl+Esc
  • Ctrl+Ins
  • Ctrl+Alt
  • Ctrl+Alt+Esc
  • Ctrl+Alt+Enter
  • Ctrl+Alt+Del
  • Ctrl+Alt+Ins
  • Ctrl+Alt+S
Information how to enter the BIOS menu is displayed on the screen at the start of the OS boot:

Posted Image

  • In the BIOS settings on the Boot tab, select loading from a Removable Drive (you can find more detailed information in the documentation to the motherboard installed on your computer).
  • Connect a USB-drive with the recorded image of Kaspersky Rescue Disk 10 to your computer.
Kaspersky USB Rescue Disk 10 is ready for work. You can boot a computer from it and start the system scan.




5. Boot your computer from Kaspersky Rescue Disk 10


  • Restart your computer. After reboot, a message will appear on the screen: Press any key to enter the menu.
Posted Image

  • Press any key.
Posted ImageIf you do not press any key in 10 seconds, the computer boots from hard drive automatically.



  • In the start up wizard window that opens, select the graphic interface language using the cursor moving keys. Press the ENTER key on the keyboard.
Posted Image

  • Read carefully the license agreement of Kaspersky Rescue Disk. If you agree with all terms, press 1 on the keyboard. To reboot the computer, press2. To shut down the computer, press 3.
Posted Image

  • Select one of the following start up methods:
    • Kaspersky Rescue Disk. Graphic Mode loads the graphic subsystem.
    • Kaspersky Rescue Disk. Text Mode loads the text user interface represented by the Midnight Commander (MC) console file manager.
    • Boot from Hard Disk.
  • Press the ENTER key on the keyboard.
Posted Image

Once the actions described above have been performed, the operating system starts. It scans your computer for connected devices and searches for file systems of your local and removable disks. Once the operating system has started, you can start work with Kaspersky Rescue Disk 10. Update anti-virus databases and start a scan task.


What if there were no hypothetical situations?

 

 


#9 davidtherip

davidtherip
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:03:04 PM

Posted 04 November 2012 - 04:45 PM

I tried launching it in safe mode, that didn't work. I tried kaspersky- that didn't fix it either.

#10 ex0syphen

ex0syphen

  • Members
  • 63 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:127.0.0.1
  • Local time:02:04 PM

Posted 04 November 2012 - 04:46 PM

Try ESET online scanner in safemode with networking, otherwise I'm stumped.

What if there were no hypothetical situations?

 

 


#11 davidtherip

davidtherip
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:03:04 PM

Posted 04 November 2012 - 04:57 PM

If ESET didn't find anything before, I doubt it'd find anything in safe mode.. Besides, I've already called a professional to see if he can do anything.
Thanks for all your help, though.

#12 ex0syphen

ex0syphen

  • Members
  • 63 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:127.0.0.1
  • Local time:02:04 PM

Posted 04 November 2012 - 04:59 PM

Sorry I couldn't help more, hope it gets fixed.

What if there were no hypothetical situations?

 

 


#13 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,212 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:04:04 PM

Posted 04 November 2012 - 05:26 PM

Hello sorry to see you are running all these tools to remove something that probably is not a virus.
What makes you (both for that matter) think it is??

f you look in your Control Panel's remove Programs do you see anything, Youtube Plus?
What di you install when this started?

Please run these 2 next.



Please download MiniToolBox, save it to your desktop and run it.Checkmark the following checkboxes:
  • Flush DNS
  • Report IE Proxy Settings
  • Reset IE Proxy Settings
  • Report FF Proxy Settings
  • Reset FF Proxy Settings
  • List content of Hosts
  • List IP configuration
  • List Winsock Entries
  • List last 10 Event Viewer log
  • List Installed Programs
  • List Users, Partitions and Memory size.

Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run. Note: When using "Reset FF Proxy Settings" option Firefox should be closed.






Please download AdwCleaner by Xplode onto your desktop.


  • Close all open programs and internet browsers.
  • Double click on adwcleaner.exe to run the tool.
  • Click on Delete.
  • Confirm each time with Ok.
  • You will be prompted to restart your computer. A text file will open after the restart.
  • Please post the contents of that logfile with your next reply.
  • You can find the logfile at C:\AdwCleaner[S1].txt as well.

How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#14 davidtherip

davidtherip
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:03:04 PM

Posted 04 November 2012 - 06:41 PM

I fixed it, guys. I found a file in my ProgramFiles(86) folder, called update. I'm fairly certain that THAT was what kept on reinstalling YoutubePlus, since, after I force-deleted it, Youtube Plus has not come back.

#15 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,212 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:04:04 PM

Posted 04 November 2012 - 07:04 PM

That was my point. It was not a malware at all. Glad you fixed it and for the future see the red link in my sig ... How do I get help? Who is helping me?
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users