Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Started with TornTV


  • Please log in to reply
5 replies to this topic

#1 robertjrichardson

robertjrichardson

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:01:38 AM

Posted 11 January 2015 - 12:43 AM

Well as the subject states this all started with torntv torrent installing itself. I've ran avast which found other programs such as reverse page and a few others but even after uninstalling both it and something called Taplika? Taplika still remains as my main page when I open mozilla. And additinally I'm still seeing torntv be part of my start up programs. D: I'm not sure how else to procceed at this point.



BC AdBot (Login to Remove)

 


#2 robertjrichardson

robertjrichardson
  • Topic Starter

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:01:38 AM

Posted 11 January 2015 - 12:45 AM

Also now getting popups even on bleepingcomputer.com which I'm sure is an adware program but also underlining of certain words on any website. Again I'm sure thats just some adware. But I need to ensure its gone this time as I don't wanna do a zero boot from scratch.

 



#3 bill343

bill343

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:04:38 PM

Posted 11 January 2015 - 01:13 AM

Might try ADWcleaner.



#4 robertjrichardson

robertjrichardson
  • Topic Starter

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:01:38 AM

Posted 11 January 2015 - 10:31 AM

Attempted adware in the process of it doing its cleaning it threw an aut.exe error and closed program?



#5 robertjrichardson

robertjrichardson
  • Topic Starter

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:01:38 AM

Posted 11 January 2015 - 10:40 AM

# AdwCleaner v4.107 - Report created 11/01/2015 at 09:34:21
# Updated 07/01/2015 by Xplode
# Database : 2015-01-03.1 [Live]
# Operating System : Windows 8  (64 bits)
# Username : rac - STORE
# Running from : C:\Users\rac\Downloads\AdwCleaner(2).exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

[!] Folder Deleted : C:\Program Files (x86)\Reverse Page

***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\1ClickDownload
Key Deleted : HKCU\Software\GlobalUpdate
Key Deleted : HKCU\Software\InstallCore
Key Deleted : HKCU\Software\Reverse Page
Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
Key Deleted : HKLM\SOFTWARE\GlobalUpdate
Key Deleted : HKLM\SOFTWARE\InstallCore
Key Deleted : HKLM\SOFTWARE\Reverse Page
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\1ClickDownload
Key Deleted : [x64] HKLM\SOFTWARE\TornTv Downloader
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Reverse Page

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16384


-\\ Mozilla Firefox v34.0.5 (x86 en-US)


-\\ Google Chrome v39.0.2171.95

[C:\Users\rac\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://search.aol.com/aol/search?q={searchTerms}
[C:\Users\rac\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.ask.com/web?q={searchTerms}

*************************

AdwCleaner[R0].txt - [5002 octets] - [11/01/2015 09:26:40]
AdwCleaner[R1].txt - [3081 octets] - [11/01/2015 09:31:36]
AdwCleaner[S0].txt - [3145 octets] - [11/01/2015 09:30:03]
AdwCleaner[S1].txt - [2461 octets] - [11/01/2015 09:34:21]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [2521 octets] ##########
 

 

Theres the ADWcleaner logs. I've seem to have rid myself of the pop ups and the underlining of words. But if someone could look over that and be sure its done its job?



#6 bill343

bill343

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:04:38 PM

Posted 11 January 2015 - 01:34 PM

  |Key Deleted : HKCU\Software\Reverse Page

 |Key Deleted : HKLM\SOFTWARE\Reverse Page

|[!] Folder Deleted : C:\Program Files (x86)\Reverse Page

 

Thos are good signs. I would run Malwarebytes as well to be on the safe side. Those might have been some of the main components but I would not be surprised it there was more. 






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users