Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Had Vosteran "infection" a year ago and thought I had it licked .... its baaack.


  • Please log in to reply
27 replies to this topic

#16 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,022 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:01:44 AM

Posted 19 July 2017 - 07:37 PM

You did just fine.

Try to re-run AdwCleaner.

If same issue, continue with Sophos.


My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 


BC AdBot (Login to Remove)

 


#17 JoshRoss

JoshRoss

  • Members
  • 33 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:United States
  • Local time:01:44 AM

Posted 20 July 2017 - 01:25 AM

You could also try RKill and anti-malware combo immediately. That might help you solve the issues. Broni posted the steps requires before. If you followed them and now these, you should be clean.



#18 Blueheel

Blueheel
  • Topic Starter

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:44 AM

Posted 22 July 2017 - 05:15 AM

# AdwCleaner 7.0.0.0 - Logfile created on Sat Jul 22 10:06:22 2017
# Updated on 2017/17/07 by Malwarebytes 
# Running on Windows 7 Home Premium (X64)
# Mode: clean
 
***** [ Services ] *****
 
No malicious services deleted.
 
***** [ Folders ] *****
 
Deleted: C:\Users\All Users\Documents\iwin games
Deleted: C:\Users\Public\Documents\iwin games
Deleted: C:\Users\All Users\Documents\iWin
Deleted: C:\Users\Public\Documents\iWin
Deleted: C:\Windows\System32\config\systemprofile\AppData\Local\YSearchUtil
Deleted: C:\Users\Default\AppData\Local\YSearchUtil
Deleted: C:\Users\Default User\AppData\Local\YSearchUtil
Deleted: C:\Users\Blakey\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pogo Games
 
 
***** [ Files ] *****
 
No malicious files deleted.
 
***** [ DLL ] *****
 
No malicious DLLs cleaned.
 
***** [ WMI ] *****
 
No malicious WMI cleaned.
 
***** [ Shortcuts ] *****
 
No malicious shortcuts cleaned.
 
***** [ Tasks ] *****
 
No malicious tasks deleted.
 
***** [ Registry ] *****
 
Deleted: [Key] - HKLM\SOFTWARE\PogoDGC
Deleted: [Key] - HKU\S-1-5-21-3284045449-4290529641-1170652869-1000\Software\PogoDGC
Deleted: [Key] - HKCU\Software\PogoDGC
Deleted: [Key] - HKLM\SOFTWARE\Trymedia Systems
 
 
***** [ Firefox (and derivatives) ] *****
 
No malicious Firefox entries deleted.
 
***** [ Chromium (and derivatives) ] *****
 
SearchProvider deleted: AOL - aol.com
SearchProvider deleted: Softonic EN - google-earth.en.softonic.com
SearchProvider deleted: Softonic EN - google-earth.en.softonic.com
SearchProvider deleted: Ask - ask.com
SearchProvider deleted: Ask.com - search.ask.com
SearchProvider deleted: iWin Customized Web Search - search.conduit.com
 
 
*************************
 
::Tracing keys deleted
::Winsock settings cleared
::Additional Actions: 0
 
 
 
*************************
 
C:/AdwCleaner/AdwCleaner[S0].txt - [2689 B] - [2017/7/19 10:1:14]
C:/AdwCleaner/AdwCleaner[S1].txt - [2206 B] - [2017/7/22 10:1:33]
 
 
########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt ##########


#19 Blueheel

Blueheel
  • Topic Starter

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:44 AM

Posted 22 July 2017 - 05:17 AM

malware program keeps popping up and refusing to let many programs run what do I do  with it?



#20 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,022 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:01:44 AM

Posted 22 July 2017 - 03:42 PM

Are you getting any error messages?


My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 


#21 Blueheel

Blueheel
  • Topic Starter

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:44 AM

Posted 23 July 2017 - 02:50 AM

no error messages but the Vosteran search engine is still lurking 



#22 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,022 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:01:44 AM

Posted 23 July 2017 - 11:47 AM

In what browser?


My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 


#23 Blueheel

Blueheel
  • Topic Starter

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:44 AM

Posted Yesterday, 12:45 AM

well, good question, I have switched back and forth between Google Google Chrome and Internet Explorer and it will not pop up like it does from time to time. Do you suppose we beat it, or is it just hiding out like it has done in the past?



#24 JoshRoss

JoshRoss

  • Members
  • 33 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:United States
  • Local time:01:44 AM

Posted Yesterday, 01:21 AM

If you followed the advice that was given here, did a full thorough PC clean up, removed all the issues and additional scans are not showing any threats, then, in theory, you should be good enough. Keep us posted in case anything else happens!



#25 Blueheel

Blueheel
  • Topic Starter

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:44 AM

Posted Yesterday, 08:40 AM

well I followed the directions and I just went fo check my eBay store and there it was again. I took screenshots of  URLS  and info on its location it also blocked (sort of) by Malwarebytes. I have about 10 photos but can not seem to attach them to this post, I have to go to work now but if someone could explain how I can send pics to this site and attach them I would be happy to load them tonight.  Oh, I tried to copy and paste the URLs but Vostern will not allow anything to do with it to be selected so it can be copied and pasted, therefore the picture were taken. hopefully, will see you this evening.  



#26 JoshRoss

JoshRoss

  • Members
  • 33 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:United States
  • Local time:01:44 AM

Posted Yesterday, 08:42 AM

You could upload them to any site like Imgur, imgbb, tinypic and just gives us the links here if you are certain that you cannot attach the files. I am interested to see what is happening with your eBay.



#27 Blueheel

Blueheel
  • Topic Starter

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:44 AM

Posted Yesterday, 08:53 AM

its odd sometimes it happens when I go to ebay  sometimes when I simply switch from Chrome to a site. Malware bytes has it shown as  IP address 212.124.124. 178 Domain  www.-1-lads..com

 

type  Outbound      

 

file   C:(back slash the actual back slash cant find the darn thing on my keyboard) Program Files(x86)...Application(again back slash) chrome exe

 

I will have to try to find somplace to upload photos to this evening I am going to be late and i dont upload photos to a site except ebay normally. thank you.



#28 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,022 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:01:44 AM

Posted Yesterday, 04:10 PM

You're not saying whuch browser is having this issue.


My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users