Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

searchinterneat-a.akamaihd.net and PUP.Optional.Yontoo unable to remove? T


  • Please log in to reply
1 reply to this topic

#1 ididntmeanto

ididntmeanto

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:04:54 PM

Posted 23 November 2015 - 12:15 PM

Hi everyone,

I have never posted in an online forum before so please forgive my ignorance.

I installed a playstation 1 emulator which told me I needed to download a BIOS to run the games on it. It told me to search for "scph1001.bin" in my browser search engine. I did so and installed the BIOS from what didn't look like a suspicious website. When I saw that I still couldn't run my game (Bugs life...brings back memories), I tried again and that's when I noticed "searchinterneat-a.akamaihd.net showing up in my address bar on chrome. I ran malwarebyes anti-malware and it detected "trojan.crypt" and a number of "yontoo" PUPs. When the scan was complete I removed them like it said to. I knew it couldn't be that simple so I showed my dad and he ran adwcleaner and also somehow removed the "searchinterneat" code from the address bar. It hasn't shown up since. I ran spyhunter 4 and it said I have two browser hijackers with the search interneat name and around 6 PUPs called propccleaner. Every time I scan with malwarebytes it only identifies PUP.Optional.Yontoo and I remove it and restart my computer but when I run the scan again it still detects it. I really need some help here and I don't have a lot of computer knowledge so I really really appreciate any help I can get. The only thing important I need from my computer are my pictures and documents for school. 


Thank you for replying!! I've already tried to do my own research and remove it but either the instructions aren't clear enough for me and I'm scared to mess something up or it just hasn't worked.


-Ididntmeanto 


Edited by ididntmeanto, 23 November 2015 - 12:23 PM.


BC AdBot (Login to Remove)

 


#2 olgun52

olgun52

  • Malware Response Team
  • 3,784 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:54 AM

Posted 23 November 2015 - 02:11 PM

Hello ididntmeanto and Welcome to the BleepingComputer. :welcome:  
My name is Yılmaz and I'll help you with the cleanup of malware from your computer.

Before we move on, please read the following points carefully.

  • Please complete all steps in the specified order.
  • Even if tools don't find malware, I want you to post the logfiles anyway.
  • Please copy and paste the logfiles directly into your posts. Please do not attach them unless you are instructed to do so.
  • Read the instructions carefully. If you have problems, stop what you  were doing and describe the problems you encountered as precisely as  you can.
  • Don't install or uninstall software during the cleanup unless you are told to do so.
  • Ensure your external and/or USB drives are inserted during always the scan.
  • If you can't answer for the next few days, please let me know. If  you haven't answered within 5 days, I am assuming that you don't need  help anymore and your topic will be closed.
  • I can not guarantee that we will find and be able to remove all  malware. The cleaning process is not instant. Please continue to review  my answers until I tell you that your computer is clean
  • Please reply to this thread. Do not start a new topic
  • As my first language is not English, please do not use slang or idioms. It could be hard for me to understand.
  • Please open as administrator  the computer. How is open as administrator  the computer?
  • Disable your AntiVirus and AntiSpyware applications, as they will  interfere with our tools and the removal. If you are unsure how to do  this, please refer to get help here

Thanks
  

 "trojan.crypt"

This is an important virus. Do you have documents you can not opening?

=======================================================================
Step 1:
 Please download AdwCleaner by Xplode onto your desktop.

  • Double click on AdwCleaner.exe to run the tool.
  • Click on Delete or Clean.
  • A logfile will automatically open after the scan has finished.
  • Please post the contents of that logfile with your next reply.
  • You can find the logfile at C:\AdwCleaner[S1].txt as well.

Step 2:
Please download Junkware Removal Tool to your desktop.

  • Shut down your protection software now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista / 7 / 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message.

Step 3:
Please download ZHPcleaner to your desktop.

  • Double click on ZHPCleaner to run the tool.
  • If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click ZHPCleaner and select "Run as Administrator".
  • Please klick Ashampoo_Snap_20140819_13h09m50s_001__zp
  • Then press ''Repair'' button.
  • Browsers will automatically shut down.
  • A logfile will automatically open after the scan has finished.
  • Please post the contents of that logfile with your next reply.

Step 4:

  • Temporarily disable your Antivirus protection - if you don't know how to do that, please consult the article below.

How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs

  • Please download ZOEK and save it to your desktop (preferred version is the *.exe one - upper left corner).

http://hijackthis.nl/smeenk/

  • Attached to this message you will find a file called zoekscript

txt.gif  zoekscript.txt   188bytes 0 downloads

  • Download it too and save to your desktop - _it needs to be in the same location as the ZOEK tool
  • Drag zoekscript file and drop it onto ZOEK icon - this should launch the program:
  • The scan may take a while and may need a reboot.
  • Upon completion a file zoek-results should appear.
  • Attach it for my review.

Edited by olgun52, 23 November 2015 - 03:36 PM.

Best regards
 
paypal.gif
If you wish to show appreciation and support me personally fighting against malware, then you can consider a donation. Thank you. :thumbup2:
Malware fix forum
If I don't reply within 24 hours please PM me!

 


 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users