Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Reverted from Win 10 back to 8.1, and now this....


  • Please log in to reply
12 replies to this topic

#1 FrankOtheMountaiN

FrankOtheMountaiN

  • Members
  • 514 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NY
  • Local time:07:51 AM

Posted 02 August 2015 - 09:50 PM

I upgraded an installation to Win 10, and I didn't like it too much, so I did the revert back to 8.1 feature (you have 30 days to change back). When I went back to 8.1, a pop up malware started happening. I had it about a year ago, and thought it was gone. Voicefive survey browser pop up. Seems kind of weird how it returned out of the blue.

 

Anyhow, I've tried a bunch of tools to attempt ridding this thing from the PC, but it keeps coming back. Also read online for hours, and there does not seem to be a way to kill this thing short of resetting the browser. I really don't want to do that. Passwords, settings, favs, plugins. I use firefox as main browser, but I remember this bug going across all browsers.

 

What's even more strange is that I have a dual boot to Win 7 also, and the same infection appeared on that one as well. Just seeing if anyone knows about a program that can get rid of the voicefive popup. It appears as a pop-under ad in a small window. Still no combofix for Win 8.1?

 

Frank


Edited by hamluis, 03 August 2015 - 06:13 PM.
Moved from Win 8 to Am I Infected - Hamluis.


Frank O' The Mountain
Doing more stupid before 5AM than most people do all day.


BC AdBot (Login to Remove)

 


m

#2 reckonankit

reckonankit

  • Members
  • 86 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:06:21 PM

Posted 03 August 2015 - 02:31 AM

Hey you need to clean boot of your PC or trys ome purchase antimalware product which gives you gurantee to use and help to remove your all malware or trojans in PC. After that clean boot is necessary to remove parmanently



#3 FrankOtheMountaiN

FrankOtheMountaiN
  • Topic Starter

  • Members
  • 514 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NY
  • Local time:07:51 AM

Posted 03 August 2015 - 04:43 PM

Thank you for your reply, but it's kind of vague. Especially since I've tried about 20 programs so far without any luck. A google search of remove voicefive yields a bunch of scam sites, and zero solutions about this adware virus, which looks like it's been around for a few years.

 

No one has ever seen this one? I could just block it, but I'd rather destroy it.



Frank O' The Mountain
Doing more stupid before 5AM than most people do all day.


#4 yu gnomi

yu gnomi

  • Members
  • 532 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Chicago suburb
  • Local time:07:51 AM

Posted 03 August 2015 - 04:48 PM

hxxp://malwaretips.com/blogs/ar-voicefive-com-removal/ not a scam site.

Mod Edit by quietman7: link to non-Bleeping Computer malware removal guide disabled per this policy.

#5 FrankOtheMountaiN

FrankOtheMountaiN
  • Topic Starter

  • Members
  • 514 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NY
  • Local time:07:51 AM

Posted 03 August 2015 - 04:51 PM

Thanks. I followed that one yesterday, and ran all of those programs. No dice.

Guess I'm gonna try backing up passwords, favs, and take note of addons, then reset firefox.

Yesterday it was popping up like crazy, but it hasn't shown up yet today, other than once this morning.


Edited by FrankOtheMountaiN, 03 August 2015 - 05:14 PM.


Frank O' The Mountain
Doing more stupid before 5AM than most people do all day.


#6 yu gnomi

yu gnomi

  • Members
  • 532 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Chicago suburb
  • Local time:07:51 AM

Posted 03 August 2015 - 05:06 PM

no problem. 



#7 FrankOtheMountaiN

FrankOtheMountaiN
  • Topic Starter

  • Members
  • 514 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NY
  • Local time:07:51 AM

Posted 03 August 2015 - 05:30 PM

I reset Firefox. See if that works....



Frank O' The Mountain
Doing more stupid before 5AM than most people do all day.


#8 NickAu

NickAu

    Bleepin' Fish Doctor


  • Moderator
  • 11,786 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:127.0.0.1 Australia
  • Local time:11:51 PM

Posted 03 August 2015 - 05:39 PM

If you suspect malware issues please start a new post here Am I infected? What do I do? And somebody who knows what they are doing will help you.

http://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/



#9 FrankOtheMountaiN

FrankOtheMountaiN
  • Topic Starter

  • Members
  • 514 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NY
  • Local time:07:51 AM

Posted 03 August 2015 - 05:42 PM

Thanks, if it comes back again, I'll do that.



Frank O' The Mountain
Doing more stupid before 5AM than most people do all day.


#10 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,031 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:04:51 AM

Posted 04 August 2015 - 11:41 AM

Open Programs and Features in the Control Panel and look for any of the titles below.  If you find one uninstall it.

 

 
PriceMeter, Supra Savings, weDownload Manager, PureLead, Search Assist, Re-Markable, Zombie Alert, Wajam, Coupon Server, Lollipop, HD-Total-Plus, UTUobEAdaBlock, Safe Saver, SupTab, ValueApps, Lollipop, Software Updated Version, DP1815, Video Player, Convert Files for Free, Plus-HD 1.3, BetterSurf, Trusted Web, PassShow, LyricsBuddy-1, PureLeads, Media Player 1.1, RRSavings, Feven Pro 1.2, Websteroids, Savings Bull, HD-Plus 3.5, Re-markit
 

Please run Malwarebytes AntiMalware
 
Please download Malwarebytes Anti-Malware.  After clicking on the link the download will start automatically.
 
1)  Double-click on mbam-setup.exe, then click on Run to install the application, follow the prompts through the installation.
 
2)  Malwarebytes will automatically open.  If this is the first time you have run this version of Malwarbytes you will see an image like the one below.
 
mbam1_zps95cc812c.png
 
Click on Update Now, after Malwarebytes is updated click on Scan.
 
If this isn't the first time you have run this version, then you will see an image like the one below.  Click on Scan
 
mbam1_zps98e7fba9.png
 
You will be prompted to update Malwarebytes, to do so click on Update Now.
 
 mbam2_zps85f38f0c.png
 
3)  The scan will automatically run now.
 
malwarerun_zps9abd4ef1.png
 
4)  When the scan is complete the results will be displayed.  Click on Delete All.
 
malwarenew_zps34b58fdc.png
 
5)  Please post the Malwarebytes log.
 
To find your Malwarebytes log,download mbam-check.exe from here and save it to your desktop.
 
To open the log double click on mbam-check.exe on your desktop.  Copy and paste the log in your topic.
 
================
 

Please run AdwCleaner
 
Please download AdwCleaner and install it.
 
When AdwCleaner opens you will see an image like the one below.
 
adwcleaner11_zps48314883.png
 
Click on Scan to start the scan.
 
Once the search is complete a list of the pending items will be displayed.  If you see any which you do not want removed, remove the check mark next to it.  
 
Click on Clean to remove the selected items.  If you have any questions about any items in the list please copy and paste the list in your topic so we can review it.  
 
You will receive a message telling you that all programs will be closed so that the infections can be removed.  Click on OK.  The computer will be restarted to complete the cleaning process.
 
When the cleaning process is complete a log of what was removed will be presented.  Please copy and the paste this log in your topic.
 
================
 

Please do the following to clean your Extensions.
 
Internet Explorer
 
Press Alt+T and click Internet Options.
Open the General tab.
Change the home page and click OK.
Press Alt+T and click Manage Add-ons.
Click Toolbars and Extensions and remove unwanted extension.
Click Search Providers and set a new default search engine.
 
Google Chrome
 
Press Alt+F and point to Tools.
Click Extensions.
Remove unwanted extensions.
Click Settings.
Under On startup, select the last option and click Set pages.
Set a new startup page.
Under Search, click Manage search engines and click enter the URL of your new default search provider. Click Ok.
 
Mozilla Firefox
 
Press Alt+T and click Options.
Open the General tab and change the home page.
Click OK.
Press Ctrl+Shift+A and click Extensions.
Remove unwanted extensions.
Close the tab.
Click the search engine icon next to the search box and select a new search provider.

Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#11 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,606 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:07:51 AM

Posted 04 August 2015 - 05:59 PM

@ yu gnomi

Posting referral links to non-Bleeping Computer malware removal guides is generally NOT permitted in this or any other forum with the exception of well known security vendors like Kaspersky, ESET, Symantec, etc which sometimes release specialized fix tools with instructional documentation. This is because there are far too many untrustworthy and scam sites which mis-classify detections, provide misleading information, poor removal advice and/or the recommendation of dubious software. It is impractical for our staff to monitor and review all such guides for accuracy, therefore, we reserve the right to remove or disable such links.

Instructions for posting advice

For this reason your link has been disabled or removed.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#12 FrankOtheMountaiN

FrankOtheMountaiN
  • Topic Starter

  • Members
  • 514 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NY
  • Local time:07:51 AM

Posted 04 August 2015 - 08:37 PM

Thank you Arachibutyrophobia. The pop up has stopped since I reset the browser (firefox). I did run malbytes and adw cleaner earlier, but the problem remained. I never had any of those programs you listed installed, and the addons I use with firefox have been used for a long time with no issues.

 

It was a good thing to reset the browser. I've been copying the same profile for years with FEBE, and it was pretty clogged up. It's running really fast now. The thing that held me to the old profile for so long was fireFTP. I didn't want to rebuild all of the settings again. Firefox browser reset saves passwords and bookmarks, so that's most of the battle. I am going to install addons slowly, one by one over a week to make sure one of them isn't the culprit.

 

This one seemed very odd (voicefive), and not much information on the net about it. Thanks again. Running OK for 2 days. If it rears it's ugly head again, I'll check in.


Edited by FrankOtheMountaiN, 04 August 2015 - 08:40 PM.


Frank O' The Mountain
Doing more stupid before 5AM than most people do all day.


#13 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,031 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:04:51 AM

Posted 05 August 2015 - 08:45 AM

Glad to hear the problem is resolved. :thumbup2:


Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users