Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Extendedunlimited/Gameharbor.org upon startup


  • This topic is locked This topic is locked
4 replies to this topic

#1 MK01

MK01

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:10:29 AM

Posted 12 September 2014 - 03:25 PM

I'm another poor bastard who is experiancing a flash of a run command prompt and then my primary web browser (firefox) automatically starting up and displaying gameharbor.org directly after I have signed into my computer.

 

Please help me rid my best and only friend from it's viruses.

Attached Files



BC AdBot (Login to Remove)

 


#2 aharonov

aharonov

  • Malware Response Team
  • 2,441 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:04:29 PM

Posted 13 September 2014 - 07:07 AM

Hi,

please try this fix:


Please download this attached Attached File  fixlist.txt   151bytes   3 downloads and save it in the same directory as FRST.
  • Start FRST with Administrator privileges.
  • Press the Fix button.
  • When finished, a log file (Fixlog.txt) pops up and is saved to the same location the tool was run from.
    Please copy and paste its contents in your next reply.


#3 MK01

MK01
  • Topic Starter

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:10:29 AM

Posted 13 September 2014 - 07:14 AM

Like magic. Thanks, dude.

 

I had seen

HKU\S-1-5-21-2438208747-2799929476-1874620352-1000\...\Run: [CMD] => cmd.exe /c start http://extendedunlimited.org && exit <===== ATTENTION

under registry and I was sure it was the problem but I didn't know what to do with it from there. In hindsight I should have posted it to make your job easier.

 

Thanks anyway.



#4 aharonov

aharonov

  • Malware Response Team
  • 2,441 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:04:29 PM

Posted 13 September 2014 - 07:31 AM

You're welcome.
Update Java.

My help is free for everybody.
If you want to support me fighting against malware or buy me a beer for the assistance you received, then you can consider a donation: btn_donate_SM.gif.
Thank you!

#5 aharonov

aharonov

  • Malware Response Team
  • 2,441 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:04:29 PM

Posted 19 September 2014 - 03:26 PM

It appears that this issue is resolved, therefore I am closing the topic. If that is not the case and you need or wish to continue with this topic, please send me or any Moderator a Personal Message (PM) that you would like this topic re-opened.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users