Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Browser infected


  • Please log in to reply
9 replies to this topic

#1 januarius

januarius

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:08:43 PM

Posted 04 November 2014 - 09:30 AM

Hi,
 
In some sites appear pop-ups and sexual images in the head. if I disable js everything returns to normal .... I tried to run adwcleaner but I didn't solve it.
 
Do you can help me
 
Thanks

Edited by Queen-Evie, 04 November 2014 - 09:44 AM.
moved from MRL to Am I Infected. Required logs for MRL not included


BC AdBot (Login to Remove)

 


#2 buddy215

buddy215

  • Moderator
  • 13,255 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:08:43 PM

Posted 04 November 2014 - 09:58 AM

What is js? java scripting? If java scripting....how are you disabling it and in which browser(s)?

 

Use CCleaner to remove Temporary files, program caches, cookies, logs, etc. Use the Default settings. No need to use the

Registry Cleaning Tool...risky. Pay close attention while installing and UNcheck offers of toolbars...especially Yahoo.

CCleaner - PC Optimization and Cleaning - Free Download

 

 

Download Junkware Removal Tool to your desktop.

  • Shut down your protection software now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message.

ESET SCAN

  • Hold down Control and click on this link to open ESET OnlineScan in a new window.
  • Click the esetonlinebtn.png button.
  • For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
  • Click on esetsmartinstaller_enu.exe to download the ESET Smart Installer. Save it to your desktop.
  • Double click on the esetsmartinstaller_enu.png icon on your desktop.
  • Check "YES, I accept the Terms of Use."
  • Click the Start button.
  • Accept any security warnings from your browser.
  • Under scan settings, check "Scan Archives" and "Remove found threats"
  • Click Advanced settings and select the following:
  • Scan potentially unwanted applications
  • Scan for potentially unsafe applications
  • Enable Anti-Stealth technology
  • ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
  • When the scan completes, click List Threats
  • Click Export, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
  • Click the Back button.
  • Click the Finish button.
  • NOTE:Sometimes if ESET finds no infections it will not create a log.

“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#3 januarius

januarius
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:08:43 PM

Posted 05 November 2014 - 02:10 PM

Hi,
 
Thanks for the support.
 
Yes js I mean Javascript, when disabling in ie and chrome the broblem is "solved"

 

Here the logs of scan

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.3.5 (10.31.2014:1)
OS: Windows 7 Home Premium x64
Ran by Colombo Ida on 05/11/2014 at 10:15:24,95
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

~~~ Services

 

~~~ Registry Values

 

~~~ Registry Keys

 

~~~ Files

 

~~~ Folders

 

~~~ Event Viewer Logs were cleared

 

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 05/11/2014 at 10:20:22,22
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

 

C:\Users\All Users\0EA390D1.dot a variant of Win64/Kryptik.GK trojan 
C:\Users\All Users\1D093AE0.cpp a variant of Win32/Kryptik.CPJB trojan 
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Advanced System Protector\AdvancedSystemProtector.exe.vir a variant of MSIL/AdvancedSystemProtector.E potentially unwanted application deleted - quarantined
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Advanced System Protector\AspManager.exe.vir a variant of MSIL/AdvancedSystemProtector.F potentially unwanted application deleted - quarantined
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Advanced System Protector\ASPUninstall.exe.vir a variant of Win32/Systweak.K potentially unwanted application deleted - quarantined
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Advanced System Protector\Communication.dll.vir Win32/Systweak.F potentially unwanted application deleted - quarantined
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Advanced System Protector\filetypehelper.exe.vir a variant of MSIL/AdvancedSystemProtector.F potentially unwanted application deleted - quarantined
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Advanced System Protector\scandll.dll.vir a variant of MSIL/AdvancedSystemProtector.F potentially unwanted application deleted - quarantined
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Advanced System Protector\SSDPTstub.exe.vir Win32/Systweak.G potentially unwanted application deleted - quarantined
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Advanced System Protector\Troubleshooter\asp-fixer.com.vir MSIL/AdvancedSystemProtector.G potentially unwanted application deleted - quarantined
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Advanced System Protector\Troubleshooter\asp-fixer.exe.vir MSIL/AdvancedSystemProtector.G potentially unwanted application deleted - quarantined
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Advanced System Protector\Troubleshooter\asp-fixer.pif.vir MSIL/AdvancedSystemProtector.G potentially unwanted application deleted - quarantined
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Advanced System Protector\Troubleshooter\asp-fixer.scr.vir MSIL/AdvancedSystemProtector.G potentially unwanted application deleted - quarantined
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Advanced System Protector\Troubleshooter\firefox.com.vir MSIL/AdvancedSystemProtector.G potentially unwanted application deleted - quarantined
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Advanced System Protector\Troubleshooter\iexplore.exe.vir MSIL/AdvancedSystemProtector.G potentially unwanted application deleted - quarantined
C:\AdwCleaner\Quarantine\C\Users\Monica\AppData\Roaming\Systweak\ssd\SSDPTstub.exe.vir Win32/Systweak.G potentially unwanted application deleted - quarantined
C:\AdwCleaner\Quarantine\C\Windows\System32\roboot64.exe.vir a variant of Win64/Systweak.A potentially unwanted application deleted - quarantined
C:\AdwCleaner\Quarantine\C\Windows\System32\sasnative64.exe.vir Win64/AdvancedSystemProtector.A potentially unwanted application deleted - quarantined
C:\ProgramData\0EA390D1.dot a variant of Win64/Kryptik.GK trojan cleaned by deleting - quarantined
C:\ProgramData\1D093AE0.cpp a variant of Win32/Kryptik.CPJB trojan cleaned by deleting - quarantined
C:\Users\Colombo Ida\AppData\Local\temp\eVC6.dll a variant of Win32/Kryptik.CPJB trojan cleaned by deleting - quarantined
C:\Users\Colombo Ida\Desktop\Collegamenti desktop inutilizzati\PDFCreatorSetup.exe a variant of Win32/InstallCore.BH potentially unwanted application deleted - quarantined
C:\Users\Monica\Downloads\DTLite4454-0315.exe Win32/Bundled.Toolbar.Google.D potentially unsafe application deleted - quarantined
C:\Users\Monica\Downloads\etypesetup (1).exe Win32/Somoto potentially unwanted application deleted - quarantined
C:\Users\Monica\Downloads\etypesetup.exe Win32/Somoto potentially unwanted application deleted - quarantined
C:\Users\Monica\Downloads\Firefox_Setup_16.0.2.exe a variant of Win32/InstallCore.AY potentially unwanted application deleted - quarantined
C:\Users\Monica\Downloads\SoftonicDownloader_per_free-dwg-viewer.exe Win32/SoftonicDownloader.D potentially unwanted application deleted - quarantined

 

 

Thanks for your reply ;-)



#4 buddy215

buddy215

  • Moderator
  • 13,255 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:08:43 PM

Posted 05 November 2014 - 02:49 PM

You had/ have some malware and a lot of adware.

 

Download Malwarebytes' Anti-Malware from Here

Double-click mbam-setup-2.X.X.XXXX.exe to install the application (X's are the current version number).

  • Make sure a checkmark is placed next to Launch Malwarebytes' Anti-Malware, then click Finish.
  • Once MBAM opens, when it says Your databases are out of date, click the Fix Now button.
  • Click the Settings tab at the top, and then in the left column, select Detections and Protections, and if not already checked place a checkmark in the selection box for Scan for rootkits.
  • Click the Scan tab at the top of the program window, select Threat Scan and click the Scan Now button.
  • If you receive a message that updates are available, click the Update Now button (the update will be downloaded, installed, and the scan will start).
  • The scan may take some time to finish,so please be patient.
  • If potential threats are detected, ensure that Quarantine is selected as the Action for all the listed items, and click the Apply Actions button.
  • While still on the Scan tab, click the link for View detailed log, and in the window that opens click the Export button, select Text file (*.txt), and save the log to your Desktop.
  • The log is automatically saved by MBAM and can also be viewed by clicking the History tab and then selecting Application Logs.

POST THE LOG FOR REVIEW.

 

Open CCleaner and click on Tools. Then click on Uninstall. At the bottom of that page you will see a button when clicked on will allow you to

copy and paste the list of programs installed on your computer back here. Please post the list.

 

After running the scan using MBAM and posting the list the programs and MBAM's log, let me know if you are still seeing ads or have another problem.


“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#5 januarius

januarius
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:08:43 PM

Posted 05 November 2014 - 07:22 PM

Thanks for your reply !

 

Here the logs

 

Malwarebytes Anti-Malware
www.malwarebytes.org

Data scansione: 06/11/2014
Ora scansione: 00:36:14
File di log: logmmbam.txt
Amministratore: Si

Versione: 2.00.3.1025
Database malware: v2014.11.05.12
Database rootkit: v2014.11.01.02
Licenza: Prova
Protezione da malware: Attivata
Protezione da siti web nocivi: Attivata
Autoprotezione: Disattivata

SO: Windows 7 Service Pack 1
CPU: x64
File system: NTFS
Utente: Colombo Ida

Tipo di scansione: Scansione elementi nocivi
Risultati: Completata
Elementi analizzati: 413514
Tempo impiegato: 22 min, 41 sec

Memoria: Attivata
Esecuzioni automatiche: Attivata
File system: Attivata
Archivi compressi: Attivata
Rootkit: Attivata
Euristica: Attivata
PUP: Attivata
PUM: Attivata

Processi: 0
(Nessun elemento malevolo rilevato)

Moduli: 0
(Nessun elemento malevolo rilevato)

Chiavi di registro: 0
(Nessun elemento malevolo rilevato)

Valori di registro: 0
(Nessun elemento malevolo rilevato)

Dati di registro: 0
(Nessun elemento malevolo rilevato)

Cartelle: 0
(Nessun elemento malevolo rilevato)

File: 1
RiskWare.Tool.CK, C:\Users\Colombo Ida\AppData\Local\temp\NOD626A.tmp, , [3a61c96d1567a591a12734f04eb48b75],

Settori fisici: 0
(Nessun elemento malevolo rilevato)

(end)

 

Adobe AIR Adobe Systems Incorporated 19/04/2012  2.6.0.19120
Adobe Flash Player 15 ActiveX Adobe Systems Incorporated 01/10/2014 6,00MB 15.0.0.167
AMD Catalyst Install Manager Advanced Micro Devices, Inc. 19/04/2012 22,7MB 3.0.842.0
Avast Free Antivirus AVAST Software 03/11/2014  10.0.2206
Canon MF Toolbox 4.9.1.1.mf17 CANON INC. 30/10/2014  4.9.1.1.mf17
Canon Serie MF4100  26/09/2012  
CCleaner Piriform 05/11/2014  4.19
Chiavetta Internet Olicard 200 Olivetti 14/10/2013 15,0MB 
Contatti Aziendali versione 1.0 COGESCO 01/06/2012 1,24MB 1.0
Crystal Reports XI R2 sp6 Runtime .NET2005 Business Objects 17/10/2012 242MB 11.5.12
Crystal Reports XI R2 sp6 Runtime COM Business Objects 17/10/2012 289MB 11.5.12
DAEMON Tools Lite DT Soft Ltd 26/05/2012  4.45.4.0315
Elenco Operazioni IVA 2013 (Locale)  29/01/2013  
EPSON Scan  26/05/2012  
ESET Online Scanner v3  05/11/2014  
Facebook Hewlett-Packard 19/04/2012 13,7MB 1.1.0004
Facebook for HP TouchSmart Hewlett-Packard 19/04/2012 13,7MB 1.1.0004
FastStone Image Viewer 4.6 FastStone Soft 02/07/2012  4.6
File di supporto installazione di Microsoft SQL Server 2008  Microsoft Corporation 29/01/2013 32,0MB 10.1.2731.0
FileViewPro Solvusoft Corporation 03/02/2014 60,1MB 4.0
Free DWG Viewer 7.1 IGC 17/07/2012  7.1
Google Chrome Google Inc. 16/10/2012  38.0.2125.111
Google Earth Google 10/12/2013 180MB 7.1.2.2041
HP Calendar Hewlett-Packard 19/04/2012 11,0MB 5.1.4245.23508
HP Clock Hewlett-Packard 19/04/2012 378KB 5.1.4244.16367
HP Games WildTangent 19/04/2012  1.0.2.5
HP LinkUp Hewlett-Packard 19/04/2012 71,7MB 2.01.029
HP Magic Canvas Hewlett-Packard 19/04/2012 124MB 5.1.15.0
HP Magic Canvas Hewlett-Packard 19/04/2012  5.1.15.0
HP Magic Canvas Tutorials Hewlett-Packard 19/04/2012 4,91MB 5.0.0.3
HP Notes Hewlett-Packard 19/04/2012 37,9MB 5.1.4274.30382
HP Odometer Hewlett-Packard 19/04/2012 48,0KB 2.10.0000
HP RSS Hewlett-Packard 19/04/2012 2,83MB 5.1.4301.21494
HP Setup Hewlett-Packard Company 19/04/2012 51,5MB 9.0.15130.3904
HP Setup Manager Hewlett-Packard Company 19/04/2012 8,69MB 1.2.15145.3905
HP Support Assistant Hewlett-Packard Company 27/01/2014 80,2MB 7.4.45.4
HP Support Information Hewlett-Packard 19/04/2012 1,68MB 11.00.0001
HP TouchSmart RecipeBox Hewlett-Packard 19/04/2012 43,6MB 3.0.3830.27730
HP TouchSmart RecipeBox Hewlett-Packard 19/04/2012  3.0.3830.27730
HP Update Hewlett-Packard 19/04/2012 3,98MB 5.003.001.001
HP Vision Hardware Diagnostics Hewlett-Packard 19/04/2012 12,1MB 2.12.1.0
LabelPrint CyberLink Corp. 19/04/2012 229MB 2.5.4507
Magic Desktop EasyBits Software AS 19/04/2012 107MB 3.0
Malwarebytes Anti-Malware versione 2.0.3.1025 Malwarebytes Corporation 06/11/2014 56,6MB 2.0.3.1025
Microsoft .NET Framework 4.5.1 Microsoft Corporation 26/02/2014 38,8MB 4.5.50938
Microsoft .NET Framework 4.5.1 (Italiano) Microsoft Corporation 27/02/2014 2,93MB 4.5.50938
Microsoft Mathematics Microsoft Corporation 26/05/2012 18,1MB 4.0
Microsoft Office Language Pack 2010 - Italian/Italiano Microsoft Corporation 24/09/2013  14.0.7015.1000
Microsoft Office Professional Plus 2010 Microsoft Corporation 10/12/2013  14.0.7015.1000
Microsoft Silverlight Microsoft Corporation 08/08/2014 249MB 5.1.30514.0
Microsoft SQL Server 2005 Compact Edition [ENU] Microsoft Corporation 19/04/2012 1,69MB 3.1.0000
Microsoft SQL Server 2008 R2 (64-bit) Microsoft Corporation 31/10/2014  
Microsoft SQL Server 2008 R2 Management Objects Microsoft Corporation 29/01/2013 1,14MB 10.50.1600.1
Microsoft SQL Server 2008 R2 Native Client Microsoft Corporation 31/10/2014 6,12MB 10.52.4033.0
Microsoft SQL Server 2008 R2 Setup (English) Microsoft Corporation 31/10/2014 137MB 10.52.4033.0
Microsoft SQL Server Browser Microsoft Corporation 31/10/2014 9,25MB 10.52.4000.0
Microsoft SQL Server Compact 3.5 SP2 ITA Microsoft Corporation 04/06/2012 3,68MB 3.5.8080.0
Microsoft SQL Server Compact 3.5 SP2 x64 ITA Microsoft Corporation 04/06/2012 4,80MB 3.5.8080.0
Microsoft SQL Server System CLR Types Microsoft Corporation 29/01/2013 617KB 10.50.1600.1
Microsoft SQL Server VSS Writer Microsoft Corporation 31/10/2014 3,71MB 10.52.4000.0
Microsoft Visual C++ 2005 Redistributable Microsoft Corporation 31/05/2012 300KB 8.0.59193
Microsoft Visual C++ 2005 Redistributable (x64) Microsoft Corporation 11/02/2011 708KB 8.0.61000
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 Microsoft Corporation 11/02/2011 788KB 9.0.30729
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 Microsoft Corporation 19/04/2012 784KB 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 Microsoft Corporation 31/05/2012 788KB 9.0.30729.6161
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Corporation 11/02/2011 596KB 9.0.30729
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Microsoft Corporation 19/04/2012 592KB 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 Microsoft Corporation 31/05/2012 600KB 9.0.30729.6161
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 Microsoft Corporation 22/06/2012 18,0MB 10.0.30319
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 Microsoft Corporation 22/06/2012 14,8MB 10.0.30319
Mind Organizer http://www.agendissima.it 08/08/2012 55,3MB 1.00.0000
MKT-Director Freeware (Build 3.2.3.8) MKT 27/08/2012  
Mozilla Maintenance Service Mozilla 09/11/2012 216KB 16.0.2
MSXML 4.0 SP2 Parser and SDK Microsoft Corporation 29/01/2013 38,0KB 4.20.9818.0
Nitro Reader 2 Nitro PDF Software 26/05/2012 120MB 2.3.1.7
PDF Complete Special Edition PDF Complete, Inc 19/04/2012  4.0.65
PlayReady PC Runtime amd64 Microsoft Corporation 19/04/2012 2,05MB 1.3.0
PlayReady PC Runtime x86 Microsoft Corporation 19/04/2012 1,65MB 1.3.0
Power2Go CyberLink Corp. 19/04/2012 175MB 6.1.5705
Realtek High Definition Audio Driver Realtek Semiconductor Corp. 19/04/2012  6.0.1.6387
Remote Graphics Receiver Hewlett-Packard 19/04/2012  5.4.5
Samsung Kies Samsung Electronics Co., Ltd. 28/01/2014 160MB 2.6.1.13105_7
SAMSUNG USB Driver for Mobile Phones SAMSUNG Electronics Co., Ltd. 28/01/2014 22,9MB 1.5.29.0
Skype Click to Call Microsoft Corporation 30/10/2014 6,91MB 7.3.16540.9015
Skype™ 6.11 Skype Technologies S.A. 07/03/2014 26,9MB 6.11.102
Software per stampante EPSON  26/05/2012  
TeamViewer 9 TeamViewer 05/11/2014  9.0.32494
Thread Manager 3.1.0.0 Digital Generation 13/12/2013 1,73MB 3.1.0.0
TP-LINK 300Mbps Wireless USB Adapter Driver TP-LINK 20/11/2013  1.3.1
Utility di configurazione Wireless TP-LINK TP-LINK 20/11/2013  1.3.1
ViaLibera Azienda v3.5 Diamante spa 17/10/2012 468MB 3.5.3
ViaLibera Bilancio Cooperative 2013  29/01/2013  
ViaLibera Bilancio Europeo 2013  29/01/2013  
ViaLibera Dichiarativi Fiscali 2013 24ORE Software S.p.A. 29/01/2013  
Windows Live Essentials Microsoft Corporation 21/06/2012  15.4.3555.0308
Windows Live Mesh ActiveX Control for Remote Connections Microsoft Corporation 19/04/2012 5,57MB 15.4.5722.2
WinRAR 4.11 (32-bit) win.rar GmbH 26/05/2012  4.11.0
Zinio Reader 4 Zinio LLC 19/04/2012  4.2.4164

 

 

 

Unfortunately,  the problem is still here :-(

 

 

How I post an image whith head image and popups ...and after close redirect to http://bongacams.com/promo_popunder_tv_new_pop2?c=19425

 

Thank for your patience ;-)

 



#6 buddy215

buddy215

  • Moderator
  • 13,255 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:08:43 PM

Posted 05 November 2014 - 08:18 PM

Try installing Adblock Plus in both browsers.

Adblock Plus and (a little) more: Adblock Plus 1.1 for Internet Explorer released

 

Adblock Plus - Chrome Web Store

 

If the websites are allowing ads from legitimate ad servers and that is where the ads are coming from,

then Adblock Plus can block them.

You may be asked on some sites to disable Adblock Plus in order to view content. If that happens simply

click on the Adblock plus icon and choose to disable on that page.

 

There are two or more script blocking add-ons that work in Google Chrome.

I don't use Chrome so I will not recommend a script blocker. Your choice if you decide to try one.

Here is one: NotScripts - Chrome Web Store

 

Try resetting Google Chrome:

Google Chrome gives you the option to reset your browser settings in one easy click. In some cases, programs that you install can change your Chrome settings without your knowledge. You may see additional extensions and toolbars or a different search engine. Resetting your browser settings will reset the unwanted changes caused by installing other programs. However, your saved bookmarks and passwords will not be cleared or changed.

Reset your browser settings
  1. In the top-right corner of the browser window, click the Chrome menu
  2. Select Settings.
  3. At the bottom, click Show advanced settings.
  4. Under the section "Reset settings,” click Reset settings.
  5. In the dialog that appears, click Reset.

Edited by buddy215, 05 November 2014 - 08:20 PM.

“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#7 januarius

januarius
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:08:43 PM

Posted 06 November 2014 - 03:53 AM

Hi,

 

yhanks for your reply...I have already try to reset chrome and ie , I have also delete chrome user profile ... I'll try to install noscripts...

 

but: how is possible that i can't find the malicious script?

 

Could it help if I atthach the screenshot of one site infected?

 

Thanks for your patience ;-)


Edited by januarius, 06 November 2014 - 03:57 AM.


#8 buddy215

buddy215

  • Moderator
  • 13,255 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:08:43 PM

Posted 06 November 2014 - 05:56 AM

Finding the culprit will require the use of tools not allowed in this forum. Along with the expertise to use the tools.

 

Start a new topic after creating a DDS log by following instruction #6 found here: Preparation Guide For Use Before Using Malware Removal Tools and Requesting Help - Virus, Trojan, Spyware, and Malware Removal Logs

 

Post the DDS log along with a description of the problem in the Virus, Trojan, Spyware, and Malware Removal Logs Forum - BleepingComputer.com

 

Do not bump your topic once it is posted. Wait for a response. It could be a few days.


“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#9 januarius

januarius
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:08:43 PM

Posted 07 November 2014 - 03:21 AM

Ok,

 

Thanks very much for helping :)



#10 HaroldKGiles

HaroldKGiles

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:04:43 AM

Posted 09 June 2015 - 08:10 AM

Yes I had this problem after I visited onaircams a few times. This is a safe and fast fix.


Edited by computerxpds, 09 June 2015 - 10:53 AM.
Removed link to website that violates BC Rules.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users