Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Having problem with toolbar named safesear.ch using internet explorer


  • Please log in to reply
9 replies to this topic

#1 jelogz30

jelogz30

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:59 PM

Posted 10 August 2014 - 12:41 PM

I already tried using different tools like adwcleaner, JRT, combofix, malwarebytes, hitman pro, adware removal tool and any other stuffs but it seems like it is no being fixed. Everytime I open internet explorer it is still there. Any help from geeks or anyone who knows how to remove this? thanks alot!



BC AdBot (Login to Remove)

 


#2 Alex&Vanko

Alex&Vanko

  • Banned
  • 1,394 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:10:59 AM

Posted 10 August 2014 - 12:55 PM

Did you uninstall Combofix successfully?



#3 jelogz30

jelogz30
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:59 PM

Posted 10 August 2014 - 01:08 PM

Yes. And it seems that here is threat using Combofix. It might get your PC unbootable. Are you aware of the Safesear.ch toolbar?



#4 Alex&Vanko

Alex&Vanko

  • Banned
  • 1,394 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:10:59 AM

Posted 10 August 2014 - 01:14 PM

Yes if you don`t know why use it.How did you uninstall it?

We will see.

Please download MiniToolBox HERE to your desktop to run it.
Checkmark the following boxes:
* List content of Hosts
* Flush DNS
* Report IE Proxy Settings
* Reset IE Proxy Settings
* Report FF Proxy Settings
* Reset FF Proxy Settings
* List last 10 Event Viewer log
* List Installed Programs
* List Devices (do NOT change any settings here)
* List Users, Partitions and Memory size
Note: When using "Reset FF Proxy Settings" option Firefox should be closed.
Click Go and Copy / Paste the result. (result.txt)

 

Thank you!



#5 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,601 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:01:59 AM

Posted 10 August 2014 - 01:35 PM

 
Please download AdwCleaner and run it.
 
An image like the one below will open, click on Scan.
 
adwcleaner11_zps48314883.png
 
Once the search is complete a list of the pending items will be displayed.  If you see any which you do not want removed, remove the check mark next to it.  
 
Click on Clean to remove the selected items.  If you have any questions about any items in the list please copy and paste the list in your topic so we can review it.  
 
You will receive a message telling you that all programs will be close so that the infections can be removed.  Click on Ok.
 
When the cleaning process is complete a log of what was removed will be presented.  Please copy and the paste this log in your next post.
 
 

Please download Malwarebytes Anti-Malware.  After clicking on the link the download will start automatically.
 
1)  Double-click on mbam-setup.exe, then click on Run to install the application, follow the prompts through the installation.
 
2)  Malwarebytes will automatically open.  If this is the first time you have run this version of Malwarbytes you will see an image like the one below.
 
mbam1_zps95cc812c.png
 
Click on Update Now, after Malwarebytes is updated click on Scan.
 
If this isn't the first time you have run this version, then you will see an image like the one below.  Click on Scan
 
mbam1_zps98e7fba9.png
 
You will be prompted to update Malwarebytes, to do so click on Update Now.
 
 mbam2_zps85f38f0c.png
 
3)  The scan will automatically run now.
 
mbamreplace_zps3ead4824.png
 
 
4)  When the scan is complete the results will be displayed.  Click on Quarantine All, then click on Apply Actions
 
mbam4_zps23e52ad4.png
 
 
5)  To complete any actions taken you will be asked if you want to restart your computer, click on Yes
 
 mbam4_zps490948cc.png
 
6)  Please post the Malwarebytes log.
 
To find your Malwarebytes log,download mbam-check.exe from here and save it to your desktop.
 
To open the log double click on mbam-check.exe on your desktop.  When the log opens, scroll down toward the bottom of the log to Quarantined Items.  Copy and paste this in your next post.
 
 
You will need to remove Saresear.ch from your browser/s.
 

Remove from Internet Explorer
 
Press Alt+T and click Internet Options.
Open the General tab.
Change the home page and click OK.
Press Alt+T and click Manage Add-ons.
Click Toolbars and Extensions and remove unwanted extension.
Click Search Providers and set a new default search engine.
 
Remove from Google Chrome
 
Press Alt+F and point to Tools.
Click Extensions.
Remove unwanted extensions.
Click Settings.
Under On startup, select the last option and click Set pages.
Set a new startup page.
Under Search, click Manage search engines and click enter the URL of your new default search provider. Click Ok.
 
Remove from Mozilla Firefox
 
Press Alt+T and click Options.
Open the General tab and change the home page.
Click OK.
Press Ctrl+Shift+A and click Extensions.
Remove unwanted extensions.
Close the tab.
Click the search engine icon next to the search box and select a new search provider.

Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#6 jelogz30

jelogz30
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:59 PM

Posted 10 August 2014 - 01:52 PM

@DC3 I already tried those tools and yet same thing.



#7 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,601 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:01:59 AM

Posted 10 August 2014 - 02:13 PM

How about posting the logs.


Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#8 scotty_ncc1701

scotty_ncc1701

  • Members
  • 520 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:04:59 AM

Posted 10 August 2014 - 02:21 PM

http://malwaretips.com/blogs/remove-safesear-ch-virus/



#9 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,601 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:01:59 AM

Posted 10 August 2014 - 03:06 PM

That had been my suggestion, with the exception of Hitman Pro which occasionally makes data disappear.


Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#10 Alex&Vanko

Alex&Vanko

  • Banned
  • 1,394 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:10:59 AM

Posted 10 August 2014 - 03:32 PM

So what is that?Is there something in Programs and Features?May be like this:

Uninstall-all-unwanted-programs.png

 

You located it did this:

 

Internet Explorer
 

  • 1. Click Tools and select Manage add-ons.
  • 2. On the Toolbars and Extensions tab search for any unwanted add-on and remove it if located.
  • 3. Click on Search providers, remove the Safesear.ch engines from the list.
  • 3. Go to Tools> Internet Options> General > Replace  with a desired domain like www.google.com> Click Apply to complete the operation.

And still appears?


Edited by Alex&Vanko, 10 August 2014 - 03:44 PM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users