Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

How can I get rid of "QQinternational"?


  • Please log in to reply
7 replies to this topic

#1 Phxpcman

Phxpcman

  • Members
  • 96 posts
  • OFFLINE
  •  
  • Local time:06:59 PM

Posted 18 March 2016 - 01:49 AM

How can I get rid of "QQinternational"?

It is in my computer, bought less than a year ago, with windows 8.1, and I cannot remove it.

I got tricked into downloading "Spy hunter"...but after waiting an hour for a scan to complete, then came the announcement that I need to buy the full version to remove it.

 

I know this is a malicious program, and I really want it gone before I put any sensitive information on my laptop.

Help, anyone?


Edited by Orange Blossom, 18 March 2016 - 01:57 AM.
Moved from Windows 8 to AII. ~ OB


BC AdBot (Login to Remove)

 


#2 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,714 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:06:59 PM

Posted 18 March 2016 - 10:02 AM

Is the version of QQ International you have installed the 1.1 Build 2042?
 
What have you tried to uninstall this program?
 
Please run Malwarebytes AntiMalware
 
Please download Malwarebytes Anti-Malware
 
1)  Double-click on mbam-setup.exe, then click on Run to install the application, follow the prompts through the installation.
 
2)  Malwarebytes will automatically open.  If this is the first time you have run this version of Malwarbytes you will see an image like the one below.
 
mbam1_zps95cc812c.png
 
Click on Update Now, after Malwarebytes is updated click on Scan.
 
If this isn't the first time you have run this version, then you will see an image like the one below.  Click on Scan
 
mbam1_zps98e7fba9.png
 
You will be prompted to update Malwarebytes, to do so click on Update Now.
 
 mbam2_zps85f38f0c.png
 
3)  The scan will automatically run now.
 
malwarerun_zps9abd4ef1.png
 
4)  When the scan is complete the results will be displayed.  Click on Delete All.
 
malwarenew_zps34b58fdc.png
 
5)  Please post the Malwarebytes log.
 
To find your Malwarebytes log,download mbam-check.exe from here and save it to your desktop.
 
To open the log double click on mbam-check.exe on your desktop.  Copy and paste the log in your topic.
 
================

Please run AdwCleaner
 
Please download AdwCleaner and install it.
 
When AdwCleaner opens you will see an image like the one below.
 
adwcleaner11_zps48314883.png
 
Click on Scan to start the scan.
 
Once the search is complete a list of the pending items will be displayed.  If you see any which you do not want removed, remove the check mark next to it.
 
If there are no malicious programs are found you will receive the following message.
 
adwcleaner%20111_zpsiduqrrrp.png
 
Click on Clean to remove the selected items.  If you have any questions about any items in the list please copy and paste the list in your topic so we can review it.  
 
You will receive a message telling you that all programs will be closed so that the infections can be removed.  Click on OK.  The computer will be restarted to complete the cleaning process.
 
When the cleaning process is complete a log of what was removed will be presented.  Please copy and the paste this log in your topic.
 
=================

Please run the ESET OnlineScan

This scan takes quite a long time to run, so be prepared to allow this to run till it is completed.

***Please note. If you run this scan using Internet Explorer you won't need to download the Eset Smartinstaller.***

ESET Online Scanner

  • Click here to download the installer for ESET Online Scanner and save it to your Desktop.
  • Disable all your antivirus and antimalware software - see how to do that here.
  • Right click on esetsmartinstaller_enu.exe and select Run as Administrator.
  • Place a checkmark in YES, I accept the Terms of Use, then click Start. Wait for ESET Online Scanner to load its components.
  • Select Enable detection of potentially unwanted applications.
  • Click Advanced Settings, then place a checkmark in the following:
    • Remove found threats
    • Scan archives
    • Scan for potentially unsafe applications
    • Enable Anti-Stealth technology
  • Click Start to begin scanning.
  • ESET Online Scanner will start downloading signatures and scan. Please be patient, as this scan can take quite some time.
  • When the scan is done, click List threats (only available if ESET Online Scanner found something).
  • Click Export, then save the file to your desktop.
  • Click Back, then Finish to exit ESET Online Scanner.

Edited by dc3, 18 March 2016 - 10:03 AM.

Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#3 Phxpcman

Phxpcman
  • Topic Starter

  • Members
  • 96 posts
  • OFFLINE
  •  
  • Local time:06:59 PM

Posted 19 March 2016 - 12:22 AM

My dear friend,

Thank you for responding.

 

The entry in programs and features says this:

 

QQ International ............. Tencent Technology(Shenzhen) Company Limited........... (Installed on) 1/21/2016...........179 MB............(version)1.91.1369.0

 

And when I try to uninstall it, a box pops up that says,
"The feature you are trying to us is on a network resource that is unavailable."

And the source url is,

 

C:\Users\Larry\AppData\Roaming\Tencent\QQ\STemp\~TXQQIntl~0\

 

And, when I cancel that window, another one pops up that says,

"The installation source for this product is not available. Verify that the source exists and that you can access it."

 

..............................................................

 

Here are the scan logs you requested...I hope you will be able to provide a solution for me.

 

..............................................................

 

Malwarebytes Anti-Malware
 
Scan Date: 3/18/2016
Scan Time: 1:40 PM
Logfile: 
Administrator: Yes
 
Version: 2.2.0.1024
Malware Database: v2016.03.18.05
Rootkit Database: v2016.03.12.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled
 
OS: Windows 8.1
CPU: x64
File System: NTFS
User: Robby
 
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 359372
Time Elapsed: 27 min, 17 sec
 
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled
 
Processes: 0
(No malicious items detected)
 
Modules: 0
(No malicious items detected)
 
Registry Keys: 0
(No malicious items detected)
 
Registry Values: 0
(No malicious items detected)
 
Registry Data: 0
(No malicious items detected)
 
Folders: 0
(No malicious items detected)
 
Files: 0
(No malicious items detected)
 
Physical Sectors: 0
(No malicious items detected)
 
 
(end)
 
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
# AdwCleaner v5.102 - Logfile created 18/03/2016 at 13:17:16
# Updated 13/03/2016 by Xplode
# Database : 2016-03-16.1 [Server]
# Operating system : Windows 8.1 Single Language  (x64)
# Username : Robby - MINISTRYHQ2
# Running from : C:\Program Files\UVK - Ultra Virus Killer\Third party\adwCleaner.exe
# Option : Clean
 
***** [ Services ] *****
 
 
***** [ Folders ] *****
 
[-] Folder Deleted : C:\Program Files (x86)\tencent
[-] Folder Deleted : C:\Program Files (x86)\Common Files\tencent
[-] Folder Deleted : C:\ProgramData\Avg_Update_0116avz
[-] Folder Deleted : C:\Users\Larry\AppData\Roaming\tencent
[-] Folder Deleted : C:\Users\Public\Documents\tencent
 
***** [ Files ] *****
 
 
***** [ DLLs ] *****
 
 
***** [ Shortcuts ] *****
 
 
***** [ Scheduled tasks ] *****
 
 
***** [ Registry ] *****
 
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\DownloadProxy.EXE
[-] Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@qq.com/TXSSO
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{51BEE30D-EEC8-4BA3-930B-298B8E759EB1}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E7270EC6-0113-4A78-B610-E501D0A9E48E}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{E7270EC6-0113-4A78-B610-E501D0A9E48E}
[-] Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{BE335E01-E7D7-4D89-BF41-D008DD06B04B}]
[-] Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{50DD47B6-E3FF-453A-8555-7CCDECA44D7C}]
[-] Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{981E9683-E601-4F9C-B7E4-90F85D1173A1}]
[-] Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{5D7C4770-B4F2-4BF0-92B6-69B9BD73EF1C}]
 
***** [ Web browsers ] *****
 
[-] [C:\Users\Larry\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : aol.com
[-] [C:\Users\Larry\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : ask.com
 
*************************
 
:: "Tracing" keys removed
:: Winsock settings cleared
 
*************************
 
C:\Program Files (x86)\AdwCleaner\AdwCleaner[C1].txt - [2256 bytes] - [18/03/2016 13:17:16]
C:\Program Files (x86)\AdwCleaner\AdwCleaner[S1].txt - [2267 bytes] - [18/03/2016 13:09:31]
 
########## EOF - C:\Program Files (x86)\AdwCleaner\AdwCleaner[C1].txt - [2442 bytes] ##########
 
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
 
C:\Users\Larry\Downloads\ccsetup515.exe Win32/Bundled.Toolbar.Google.D potentially unsafe application deleted
C:\Users\Larry\Downloads\spsetup129.exe Win32/Bundled.Toolbar.Google.D potentially unsafe application deleted
C:\Users\Larry\Dropbox\juanscafecopy\juanscafeandcantina.com\employement\wp-content\plugins\wp-db-backup-made\libworker.so a variant of Linux/Roopre.A trojan cleaned by deleting
C:\Users\Larry\Dropbox\juanscafecopy\juanscafeandcantina.com\employement\wp-content\plugins\wp-db-backup-made\pas.php PHP/Kryptik.AJ trojan cleaned by deleting


#4 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,714 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:06:59 PM

Posted 19 March 2016 - 09:11 AM

What about the ESET Online Scan?

 

Download and use Revo Uninstaller to remove the QQ  International.


Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#5 Phxpcman

Phxpcman
  • Topic Starter

  • Members
  • 96 posts
  • OFFLINE
  •  
  • Local time:06:59 PM

Posted 19 March 2016 - 09:48 PM

Dear friend,

The ESET online scan results are attached at the bottom of the last entry.

Here it is again:

 

C:\Users\Larry\Downloads\ccsetup515.exe Win32/Bundled.Toolbar.Google.D potentially unsafe application deleted
C:\Users\Larry\Downloads\spsetup129.exe Win32/Bundled.Toolbar.Google.D potentially unsafe application deleted
C:\Users\Larry\Dropbox\juanscafecopy\juanscafeandcantina.com\employement\wp-content\plugins\wp-db-backup-made\libworker.so a variant of Linux/Roopre.A trojancleaned by deleting
C:\Users\Larry\Dropbox\juanscafecopy\juanscafeandcantina.com\employement\wp-content\plugins\wp-db-backup-made\pas.php PHP/Kryptik.AJ trojan cleaned by deleting
 
I will try that Revo uninstaller, and let you know how it goes...thank you.


#6 Phxpcman

Phxpcman
  • Topic Starter

  • Members
  • 96 posts
  • OFFLINE
  •  
  • Local time:06:59 PM

Posted 19 March 2016 - 10:29 PM

Ok... I just tried the Revo uninstaller, and I got the same result...

 

A window pops up that says:

 

'C:\Users\Larry\AppData\Roaming\Tencent\QQ\STemp\~TXQQIntl~0\QQ.Msi' cannot be found.

Verify that you have access to this location and try again, or try to find the installation package.

'QQ.Msi' is in a folder from which you can install the product QQ International.



#7 Phxpcman

Phxpcman
  • Topic Starter

  • Members
  • 96 posts
  • OFFLINE
  •  
  • Local time:06:59 PM

Posted 19 March 2016 - 11:09 PM

Hey, my friend,

 

Praise the Lord!

\o/ !

 

I was able, with the program you suggested (Revo uninstaller), to go into the registry, and systematically uninstall the components of QQ International, and it is gone!

Thank you so much for your help, and may God bless you for your time and kindness.

 

~PhxPCman



#8 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,714 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:06:59 PM

Posted 20 March 2016 - 08:47 AM

I'm glad it worked. :thumbup2:


Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users