Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Ads by Dns Unlocker


  • Please log in to reply
9 replies to this topic

#1 ZoeMeow

ZoeMeow

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:10:38 PM

Posted 17 July 2015 - 06:28 AM

Looks like I am infected with adware yet again. I uninstalled Dns Unlocker from the control panel (not that I installed this program to begin with). I ran Malwarebtyes which detected the adware and removed it. After a reboot i'm still having the same symptoms. I included a picture of the problem. I am running Trojan Killer with the free trial to see if this removes it. It has detected a few things already. And on top of the picture below every so often i'll get redirected when I click on certain things such as a mute button for a video. I am running Windows 8.1 Norton is what originally alerted me to the trojan, and claimed it caught it and quarantined it, but apparently not!

 

 

 

 

 3rsNbX3.png jgsOUep.png


Edited by ZoeMeow, 17 July 2015 - 06:30 AM.


BC AdBot (Login to Remove)

 


#2 InadequateInfirmity

InadequateInfirmity

    I Gots Me A Certified Edumication


  • Banned
  • 5,180 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:38 AM

Posted 17 July 2015 - 06:52 AM

Download and run wipe.

 

https://privacyroot.com/software/www/en/wipe.php

 

Under details make sure the highlighted button is ticked prior to cleaning.

v9cPNDN.jpg?1

 

Then System ninja

https://singularlabs.com/software/system-ninja/

 

Scan for junk then delete.

 

r5APpdC.jpg

 

Then.....

 

Go ahead and install ccleaner Now that you have the program installed go ahead and run the cleaner function.

https://www.piriform.com/ccleaner/download
kwLN4uv.png


Now that you have cleaned out some temp files, lets go ahead and disable all of the items starting up with your machine except your antivirus. To do this you will need to click on tools then start up select each item then disable.

GjWwvEu.png

Now that you have disabled those un-needed start ups lets go into the settings, we will have Ccleaner run when your machine boots, so that you will never have to worry about cleaning temp files again.

To do this:

  • Hit options.
  • Settings.
  • Place a tick to run Ccleaner when the computer starts.


Lxioao1.png

Now go to the advanced tab, and select close program after cleaning, now run the cleaner again this will close Ccleaner.

SnqZ2JW.png

 

Reboot your machine and then follow the  instructions below.

 

Step 1: eScanAV.

 

Disable your antivirus prior to this scan.

http://www.bleepingcomputer.com/forums/t/114351/how-to-temporarily-disable-your-anti-virus-firewall-and-anti-malware-programs/

Download the eScanAV Anti-Virus Toolkit (MWAV)
http://www.escanav.com/english/content/products/downloadlink/downloadcounter.asp?pcode=MWAV&src=english_dwn&type=alter

 

Source

http://www.escanav.com/english/content/products/downloadlink/downloadproduct.asp?pcode=MWAV
Save the file to your desktop.
Right click run as administrator.
A new icon will appear on your desktop.
Right click run as administrator on new icon.
Click on the update tab.
ZCDJtZN.png
Once you have updated the program, make sure the settings are the same as the picture below.
7DUFn5c.png
Once you have made sure the settings match the picture, hit the Scan & Clean button.
Upon scan completion, click View Log.
ApSVXsQ.png
Copy and paste entire log into your next reply.

Note: Reboot after you remove infections.

 

Step 2: Zemana

 

Run a full scan with Zemana antimalware.

http://www.zemana.us/product/zemana-antimalware/default.aspx

Install and select deep scan.

jdmyscF.jpg

Remove any infections found.

Then click on the icon in the pic below.

DOLGyto.jpg

Double click on the scan log, copy and paste here in your reply.

Note: Reboot after you remove infections.

 

 

Step 3: Junkware Removal Tool.
 
Please download Junkware Removal Tool and save it on your desktop.

Source

http://thisisudax.org/

  • Shut down your anti-virus, anti-spyware, and firewall software now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista or Windows 7, right-click it and select Run as administrator.
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log is saved to your desktop and will automatically open.
  • Please post the JRT log.

Step 4: Adware Cleaner.
 
Please download AdwCleaner by Xplode onto your desktop.


  • Close all open programs and internet browsers.
  • Double click on adwcleaner.exe to run the tool.
  • Click on Scan button.
  • When the scan has finished click on Clean button.
  • Your computer will be rebooted automatically. A text file will open after the restart.
  • Please post the contents of that logfile with your next reply.
  • You can find the logfile at C:\AdwCleaner[S1].txt as well.


#3 GCNgamer128

GCNgamer128

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:10:38 PM

Posted 18 July 2015 - 04:09 AM

That worked beautifully, I tried about 20 different anti-virus softwares, malware, you name it, and nothing worked.  Can you PM me your PayPal so I can drop a little in your tip jar?  I am truly grateful.



#4 InadequateInfirmity

InadequateInfirmity

    I Gots Me A Certified Edumication


  • Banned
  • 5,180 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:38 AM

Posted 18 July 2015 - 07:33 PM

That worked beautifully, I tried about 20 different anti-virus softwares, malware, you name it, and nothing worked.  Can you PM me your PayPal so I can drop a little in your tip jar?  I am truly grateful.

 

No payment is needed, I make plenty of money at my job, I just enjoy helping people. :guitar:



#5 TheEmpathicEar

TheEmpathicEar

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:01:38 AM

Posted 24 July 2015 - 07:50 PM

I originally followed this guide: https://www.bleepingcomputer.com/virus-removal/remove-dnsunlocker-advertisements
Thx for your guide!
I tried to follow your guide faithfully. The Zemana download failed and I browsed their site and went directly to a download link which failed. I think all is well. But, I am curious. Can you elaborate on your thought process a bit? I would like to understand this a bit more if it all possible. i.e. Why have JRT after previously using CCleaner previously? I am probably showing my ignorance here, as I said, I am curious!

#6 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:03:38 PM

Posted 24 July 2015 - 08:08 PM

Hello TheEmpathicEar and Welcome. :welcome:

As you tagged this onto this older topic (Posted 19 July ) it may not get recognized as a new call for help.

 

Please see the top Right side and follow   >>  Start New Topic << then add a related title to it.

 

I may not get time to reply to you, but another helper should be able to assist you soon ..

 

Thanking You -


Edited by noknojon, 24 July 2015 - 10:04 PM.


#7 InadequateInfirmity

InadequateInfirmity

    I Gots Me A Certified Edumication


  • Banned
  • 5,180 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:38 AM

Posted 25 July 2015 - 03:21 PM

Can you elaborate on your thought process a bit? I would like to understand this a bit more if it all possible.

 

 

 

I would be happy to explain........... First, can you tell me if you are still having any issues?



#8 TheEmpathicEar

TheEmpathicEar

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:01:38 AM

Posted 25 July 2015 - 05:42 PM

 

Can you elaborate on your thought process a bit? I would like to understand this a bit more if it all possible.

 

 

 

I would be happy to explain........... First, can you tell me if you are still having any issues?

 

No. I have checked both browsers, IE and Chrome. It presented itself as a "sidebar" [to the right] with coupon offers. This is gone.



#9 TheEmpathicEar

TheEmpathicEar

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:01:38 AM

Posted 16 August 2015 - 08:29 PM

[ouch] I am still seeing [hxxp://prosperent.com/click/api/linkaffiliator/apikey/efccdf85a6a700008d1300e755cd91fa/location/http%3A%2F%2Fwww.amazon.com%2FThe-Essential-Bill-Withers%2Fdp%2FB00DQRHNPY/url/http%3A%2F%2Famazon.com%2FThe-Essential-Bill-Withers%2Fdp%2FB00DQRHNPY] come up sometimes in connection with "valid" web sites. This site was part of DNS UnLocker. i.e. I may try to go to [amazon.com] and this web site briefly appear as a "referral". I thought I did everything above [and then some]. I am not sure how to proceed?

Edited by Orange Blossom, 17 August 2015 - 05:02 PM.
Deactivated link. ~ OB


#10 TheEmpathicEar

TheEmpathicEar

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:01:38 AM

Posted 17 August 2015 - 12:45 PM

I thought I was done. But, I am still seeing [ hxxp://prosperent.com/click/api/linkaffiliator/apikey/efccdf85a6a700008d1300e755cd91fa/location/http%3A%2F%2Fwww.amazon.com%2FThe-Essential-Bill-Withers%2Fdp%2FB00DQRHNPY/url/http%3A%2F%2Famazon.com%2FThe-Essential-Bill-Withers%2Fdp%2FB00DQRHNPY ] come up as a redirect to some "legimate" web sites. i.e. I saw it last night redirect to [ Amazon.com ].
 
EDIT: I am using Google Chrome. Sometimes it seems "sluggish" in response to clicking on a new link. This could be related [or not]. In any case, I am thinking about removing Chrome very thoroughly. And, after a reinstall, see what happens

Edited by Orange Blossom, 17 August 2015 - 05:05 PM.
Deactivated link. ~ OB Merged topics. ~ OB





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users