Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

ScorpionSaver problem. Cannot right-click and open new tabs


  • Please log in to reply
72 replies to this topic

#1 Without_A_Monitor

Without_A_Monitor

  • Members
  • 339 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:teh bleepinverse
  • Local time:11:11 PM

Posted 15 November 2013 - 03:53 PM

So, this only my second time posting here. My old username/password was forgotten. I appreciate having the chance to receive help with this issue.

 

My laptop recently was infected with scorpionsaver. I quickly googled how to combat and remove scorpionsaver. I disabled it from google chrome as an extension; however, when I went to uninstall scorpionsaver, there was some message that I didn't have access to a speciifc registry key. So, I ran some of protection programs such as malwarebytes, microsoft security essentials, spyhunter and some others. After finding some infections, bugs, etc., I removed them, yet I still couldn't uninstall scorpionsaver.

 

After not really knowing what to do, I deleted the registry the specific scorpionsaver registry key, then removed scorpionsaver from my computer. I suppose that was stupid. Regardless, I noticed that all of my web browsers are malfunctioning with the same problem. When I right-click particular things on any web browser and select "open in a new tab," it doesn't do so. For example, if I go to google images, right click an image and select "open in a new tab," it opens a new window, but the page is blank and doesn't seemingly load. This problem isn't just for images. It evidently is just for right-clicking and opening new links in a new tab.

 

I uninstalled Chrome to see if that would change anything. It hasn't. I installed Opera, which I previously didn't have, to determine if the problem would still be present for a new web browser. It is.

 

Is this problem from scorpionsaver? Would anyone please be so kind as to assist me?

 

I read about junkware removal tool and adwcleaner after I had already  proceeded to remove scorpionsaver. apologize for my idiocy in handling this situation.

 

A many thanks.



BC AdBot (Login to Remove)

 


#2 Without_A_Monitor

Without_A_Monitor
  • Topic Starter

  • Members
  • 339 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:teh bleepinverse
  • Local time:11:11 PM

Posted 15 November 2013 - 05:11 PM

I was a wee bit of an imbecile. I should have realized this and done it earlier. I just checked my firefox extensions and found scorpionsaver to be there. I removed it. Now, I am no longer having the problem that I described in the OP. I'm going to run my protection programs again in order to determine if there are any lingering infections.

 

 

Scorpionsaver is back. crap. Please help


Edited by Without_A_Monitor, 15 November 2013 - 05:18 PM.


#3 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:01:11 PM

Posted 15 November 2013 - 06:02 PM

Hello -
Please check c:\program files\ScorpionSaver and delete it from there.
You do not list your Operating System version, but they are 99% the same for these items.
It is a BHO} ( Browser Helper Object )

Go - Start > Programs > Accessories > Windows Explorer > (My) Computer > (If you have not found ) Continue to > Local disc > Look there (if not listed) > Program Files and look for ScorpionSaver -
Once you find it, Right Click and Delete it .......

If you are not able to find it, please tell me ....
 
Thank You -


#4 Without_A_Monitor

Without_A_Monitor
  • Topic Starter

  • Members
  • 339 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:teh bleepinverse
  • Local time:11:11 PM

Posted 15 November 2013 - 06:14 PM

Much obliged for the help, noknojon. Indeed, there were multiple sources of scoropionsaver throughout my computer. I think that I found all of traces of it. I deleted all that I found. I appreciate it, man.


Edited by Without_A_Monitor, 15 November 2013 - 06:14 PM.


#5 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:01:11 PM

Posted 15 November 2013 - 06:34 PM

From the team at B.C. - You are welcome to any help we can provide   :thumbup2:



#6 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:01:11 PM

Posted 21 November 2013 - 08:03 PM

Most areas only give a basic removal for this, but I would search Windows Explorer for any remains.

 

1. On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
Windows Vista/7/8: Click Uninstall a Program.
Windows XP: Click Add or Remove Programs.
2. When you find the program ScorpionSaver Services, click it, and then do one of the following:
Windows Vista/7/8: Click Uninstall.
Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
3. Follow the prompts. A progress bar shows you how long it will take to remove ScorpionSaver Services.

 

Hope you are clear now - :)



#7 Without_A_Monitor

Without_A_Monitor
  • Topic Starter

  • Members
  • 339 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:teh bleepinverse
  • Local time:11:11 PM

Posted 24 November 2013 - 03:48 PM

Ok, scorpionsaver returned to my computer. I deleted it again along with adpeak; however, I can no longer access my internet. My laptop shows that I am connected, but any program that is internet based does not connect to the internet. I am currently using another laptop. Can someone please help me? I don't know what to do.



#8 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:01:11 PM

Posted 24 November 2013 - 05:34 PM

Hi -

Unless you need it for a special reason, first Uninstall Chrome browser (will not hurt Google)

 

Please download and run RKill by Grinler. A black DOS box will briefly flash and then disappear.
This is normal and indicates the tool ran successfully.
If a log is produced, save it, or post it back here -

Important: Do not reboot your computer until you complete the next step.

Please download AdwCleaner by Xplode and save to your Desktop.
* Double-click on AdwCleaner.exe to run the tool.
* Vista/Windows 7/8 users right-click and select Run As Administrator.
* Click on the Scan button. (only once)
* AdwCleaner will begin...be patient as the scan may take some time to complete.
* After the scan has finished, click on the Report button...a logfile (AdwCleaner[R0].txt) will open in Notepad for review.
* Click on the Clean button. (only once)
* Press OK when asked to close all programs and follow the onscreen prompts.
+ Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
* After rebooting, a logfile report (AdwCleaner[S0].txt) will open automatically.
* Copy and paste the contents of the Clean logfile in your next reply.
* A copy of all logfiles are saved in the C:\AdwCleaner folder which was created when running the tool.

 

Next -

Shut down your protection software now to avoid potential conflicts.
* How To Temporarily Disable Your Anti-virus
* Please download Junkware Removal Tool to your desktop.
* Run the tool by double-clicking it.
* If you are using Windows Vista, 7, or 8, right click JRT.exe and select "Run as Administrator".
* The tool will open and start scanning your system.
* Please be patient as this can take a while to complete depending on your system's specifications.
* On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
* Post the contents of JRT.txt into your next message.

 

Next -

Download Malwarebytes' Anti-Malware Free (aka MBAM)

Do not install the Pro Trial Version at this time ...........................
* Double-click mbam-setup.exe and follow the prompts to install the program.
* At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select Perform quick scan, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected.
* When completed, a log will open in Notepad.
* Post the log back here.
Be sure to reboot the computer if required after you post the log.

NOTE - If you already had this program installed, just click Update and then Scan -

 

Next -

Download TFC Temp File Cleaner, to your desktop
 • Close any open windows.
• Double click the TFC icon to run the program
• TFC will close all open programs itself in order to run,
• Click the Start button to begin the process.

• Allow TFC to run uninterrupted.
• The program should not take long to finish it's job
• Once its finished it may automatically reboot your machine, if it doesn't, please manually reboot to ensure a complete clean

 

Last -

Download Security Check by Screen317 from HERE
* Save it to your Desktop.
* Double-click SecurityCheck.exe
* Follow the onscreen instructions inside of the black box.
* A Notepad document should open automatically called checkup.txt; please post the contents of that document.
Note: If a security program requests permission to access the Internet, allow it to do so.

 

 

Thank You -


Edited by noknojon, 24 November 2013 - 05:36 PM.


#9 Without_A_Monitor

Without_A_Monitor
  • Topic Starter

  • Members
  • 339 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:teh bleepinverse
  • Local time:11:11 PM

Posted 24 November 2013 - 05:38 PM

Thank you very much for replying, man. I am so distressed about this.

 

 

I actually already have rkill, mbam, and adwcleaner. I'm currently running mbam in "full scan mode" along with microsoft security essentials. Should I stop these scans and proceed with what you posted?



#10 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:01:11 PM

Posted 24 November 2013 - 05:52 PM

You have started them, so keep them running -

 

Your Antivirus may not find anything so that is why I listed the others.

I usually prefer to run RKill first as it "clears the pathway" for the other programs.

Always make sure that you Update, or fresh download, any program prior to a scan.

 

MBAM is updated (on average) about 8 to 10 times in every 24 hours.

RKill is updated on a regular basis, and all other listed tools are updated on a regular basis. Xplode has just, in the last month, fully updated and altered AdwCleaner

 

Thank You -

EDIT - Remove spyhunter as soon as you can, since this will install these add-ons.

http://www.bleepingcomputer.com/forums/t/513298/which-is-the-best-antivirus-for-windows7-os/page-2#entry3206930
Read the above by quietman7, our Antivirus / Antimalware expert -


Edited by noknojon, 24 November 2013 - 06:20 PM.


#11 Without_A_Monitor

Without_A_Monitor
  • Topic Starter

  • Members
  • 339 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:teh bleepinverse
  • Local time:11:11 PM

Posted 24 November 2013 - 06:28 PM

Thank you so much for all the help. Both the mbam and mse scans are still in progress. Subsequently, I'll run adwcleaner, then jrt. After that, I will proceed with the rest of the content in your post. Thanks a hell of a lot, once again.

 

 

 

To be honest, I've already run mbam and mse for the past several days, but neither program has detected anything. Should I still run them? I also do not have spyhunter.


Edited by Without_A_Monitor, 24 November 2013 - 07:10 PM.


#12 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:01:11 PM

Posted 24 November 2013 - 08:25 PM

So, I ran some of protection programs such as malwarebytes, microsoft security essentials, spyhunter and some others.

I based the reply of Spyhunter on your first post, and the program hides once installed.



#13 Without_A_Monitor

Without_A_Monitor
  • Topic Starter

  • Members
  • 339 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:teh bleepinverse
  • Local time:11:11 PM

Posted 24 November 2013 - 08:35 PM

Ah, crap. Sorry. I meant spybot. I'm currently running TFC by the way. After that, I'll run security check. Subsequently, I'll post all those logs. I really appreciate the help.


Edited by Without_A_Monitor, 24 November 2013 - 08:36 PM.


#14 Without_A_Monitor

Without_A_Monitor
  • Topic Starter

  • Members
  • 339 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:teh bleepinverse
  • Local time:11:11 PM

Posted 24 November 2013 - 08:57 PM

Here is the info from adwcleaner:

 

# AdwCleaner v3.012 - Report created 24/11/2013 at 20:05:45
# Updated 11/11/2013 by Xplode
# Operating System : Windows ™ Vista Home Premium Service Pack 2 (64 bits)
# Username : El Diego - EL_DIEGO
# Running from : C:\Users\El Diego\Downloads\AdwCleaner.exe
# Option : Clean
 
***** [ Services ] *****
 
 
***** [ Files / Folders ] *****
 
 
***** [ Shortcuts ] *****
 
 
***** [ Registry ] *****
 
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}
Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}
 
***** [ Browsers ] *****
 
-\\ Internet Explorer v7.0.6002.18005
 
 
-\\ Mozilla Firefox v25.0.1 (en-US)
 
[ File : C:\Users\El Diego\AppData\Roaming\Mozilla\Firefox\Profiles\z7ozoluc.default\prefs.js ]
 
 
-\\ Google Chrome v31.0.1650.57
 
[ File : C:\Users\El Diego\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
 
*************************
 
AdwCleaner[R0].txt - [3787 octets] - [14/11/2013 04:32:33]
AdwCleaner[R1].txt - [1247 octets] - [15/11/2013 03:49:41]
AdwCleaner[R2].txt - [1319 octets] - [15/11/2013 17:26:19]
AdwCleaner[R3].txt - [1441 octets] - [22/11/2013 22:16:03]
AdwCleaner[R4].txt - [1501 octets] - [23/11/2013 03:45:43]
AdwCleaner[R5].txt - [1561 octets] - [24/11/2013 14:59:58]
AdwCleaner[R6].txt - [1621 octets] - [24/11/2013 18:46:36]
AdwCleaner[S0].txt - [3451 octets] - [14/11/2013 04:38:29]
AdwCleaner[S1].txt - [1384 octets] - [15/11/2013 17:36:17]
AdwCleaner[S2].txt - [1542 octets] - [24/11/2013 20:05:45]
 
########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [1602 octets] ##########
 
 
 
 
 
 
 
 
 
here is the info from jrt
 
 


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Windows ™ Vista Home Premium x64
Ran by El Diego on Sun 11/24/2013 at 20:24:35.40
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 
~~~ Services
 
 
 
~~~ Registry Values
 
 
 
~~~ Registry Keys
 
 
 
~~~ Files
 
 
 
~~~ Folders
 
 
 
~~~ FireFox
 
Emptied folder: C:\Users\El Diego\AppData\Roaming\mozilla\firefox\profiles\z7ozoluc.default\minidumps [2377 files]
 
 
 
~~~ Event Viewer Logs were cleared
 
 
 
 
 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Sun 11/24/2013 at 20:32:12.95
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 
 
 
here is the info from mbam
 
 


Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org
 
Database version: v2013.11.22.12
 
Windows Vista Service Pack 2 x64 NTFS
Internet Explorer 7.0.6002.18005
El Diego :: EL_DIEGO [administrator]
 
11/24/2013 3:38:01 PM
mbam-log-2013-11-24 (15-38-01).txt
 
Scan type: Full scan (C:\|)
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 386394
Time elapsed: 2 hour(s), 55 minute(s), 28 second(s)
 
Memory Processes Detected: 0
(No malicious items detected)
 
Memory Modules Detected: 0
(No malicious items detected)
 
Registry Keys Detected: 0
(No malicious items detected)
 
Registry Values Detected: 0
(No malicious items detected)
 
Registry Data Items Detected: 0
(No malicious items detected)
 
Folders Detected: 0
(No malicious items detected)
 
Files Detected: 0
(No malicious items detected)
 
(end)
 
 
 
 
 
 
 
 
 
 
here is the info from security check
 
 

 Results of screen317's Security Check version 0.99.77  
 Windows Vista Service Pack 2 x64 (UAC is disabled!)
 Internet Explorer 7 Out of date!
``````````````Antivirus/Firewall Check:``````````````
 Windows Firewall Enabled!  
Microsoft Security Essentials   
 Antivirus up to date!  
`````````Anti-malware/Other Utilities Check:`````````
 Advanced Spyware Remover Free Edition 
 Spybot - Search & Destroy 
 SUPERAntiSpyware Free Edition   
 Malwarebytes Anti-Malware version 1.75.0.1300  
 Wise Registry Cleaner 7.89  
 Java™ SE Runtime Environment 6 
 Java version out of Date!
 Adobe Flash Player 11.8.800.94  
 Adobe Reader 9 Adobe Reader out of Date!
 Mozilla Firefox (25.0.1) 
 Google Chrome 31.0.1650.57  
````````Process Check: objlist.exe by Laurent````````
 Microsoft Security Essentials MSMpEng.exe 
 Microsoft Security Essentials msseces.exe 
 Spybot Teatimer.exe is disabled!
 IObit IObit Malware Fighter IMFsrv.exe  
`````````````````System Health check`````````````````
 Total Fragmentation on Drive C: 1 % 
````````````````````End of Log``````````````````````
 
 
 
 
 
 
 
Just  to clarify, I still have the same aforesaid problem. I also searched my registry and found adpeak/scorpionsaver to be all over it.
 
 
 

Edited by Without_A_Monitor, 24 November 2013 - 09:00 PM.


#15 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:01:11 PM

Posted 24 November 2013 - 09:37 PM

Well you will never remove it untill you fully update Windows and fix these programs.

 

A long list from a small report -

Internet Explorer 7 Out of date! This should be I.E.9 by now
Go Start Orb > Programs > Windows Updates and install all "Express Updates", you will be missing dozens

 

Wise Registry Cleaner 7.89 Is not recommended (ever)

 

 Java™ SE Runtime Environment 6 <= Version7 Update45 is current
Go to Programs and Features and Delete all other versions .....
Java version out of Date!

 

Advanced Spyware Remover Free Edition from evonsoft.com is rated at 2 / 100
Advanced Spyware Remover download: Reports give the rating and then add .........
NOT RECOMMENDED (as it is Scamware)

 

Spybot - Search & Destroy is no longer considered worth the effort (Delete it)

 

IObit IObit Malware Fighter IMFsrv.exe <= remove as it includes Registry Cleaners

 

There is a start -






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users