This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Tricked by fake iTunes, need Adware Malware removal [Solved]

66 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

OK, I'm about to reinstall the Java and Adobe, will post again after that step. Thanks!

 

SystemLook 30.07.11 by jpshortstuff
Log created at 16:46 on 15/12/2013 by jeffhess
Administrator - Elevation successful
 
========== filefind ==========
 
Searching for "*QuickShare*"
No files found.
 
Searching for "*Scorpion*"
No files found.
 
Searching for "*Adpeak*"
C:\AdwCleaner\Quarantine\C\Windows\System32\AdpeakProxy.ini.vir –a—- 5360 bytes [20:42 06/11/2013] [20:42 06/11/2013] 18DFC8C69730221B2CFEFFCCB565A90E
C:\AdwCleaner\Quarantine\C\Windows\System32\AdpeakProxyOff.ini.vir –a—- 2312 bytes [20:32 06/11/2013] [20:32 06/11/2013] 1ED56540E72D15EA63DF19D70636A347
C:\AdwCleaner\Quarantine\C\Windows\SysWOW64\AdpeakProxy.ini.vir –a—- 5360 bytes [20:42 06/11/2013] [20:42 06/11/2013] 18DFC8C69730221B2CFEFFCCB565A90E
C:\AdwCleaner\Quarantine\C\Windows\SysWOW64\AdpeakProxyOff.ini.vir –a—- 2312 bytes [20:32 06/11/2013] [20:32 06/11/2013] 1ED56540E72D15EA63DF19D70636A347
C:\_OTL\MovedFiles\12102013_132949\C_Windows\SysNative\AdpeakProxy64.dll –a—- 439296 bytes [11:07 02/12/2013] [15:18 16/10/2013] 78857BF5996E9BC8E82C1B671CBF85E6
 
========== regfind ==========
 
Searching for "QuickShare"
No data found.
 
Searching for "Scorpion"
No data found.
 
Searching for "ScorpionSaver"
No data found.
 
Searching for "Adpeak"
No data found.
 
-= EOF =-

Internet Explorer is not working, but Chrome is. When I open IE I see a blank page. It will not refresh. When I manually type a page address it says "Navigation to the webpage was cancelled."

Thank you, I did successfully re-install IE. I also, unfortunately, had to uninstall Java 7 and re-install version 6 in order to use a program that we use at work. According to the most recent logs, does the computer look clean?

Hi jhess23a,

well done. :)

It Appears That Your Pc Is Now Clean!
 

***


Clean up:
We used Combofix.

Press the Windows key + R and this will open the Run text box. Copy/paste the following text into the Run box as shown and click OK.
Combofix /Uninstall
(Note: There is a space between the ..x and the /U that needs to be there.)

🖼Click to load external image (CF-Uninstall.png)


***


Right-click AdwCleaner.exe and select Run As Administrator.
  • Click on the Uninstall button.
  • A window will open, press the Confirm button.
  • AdwCleaner will uninstall now.

***


Run OTL.exe
  • Copy/paste the following text written inside of the code box into the Custom Scans/Fixes box located at the bottom of OTL
:OTL

:Commands
[emptytemp]
[clearallrestorepoints]
  • Close all other programs apart from OTL as this step may require a reboot
  • Then click the Run Fix button at the top
  • Let the program run unhindered.
  • Say Yes to the prompt and then allow the program to reboot your computer.

***


Clean up with delfix:
  • please download delfix to your desktop.
  • Close all other programms and start delfix.
  • Please check all the boxes and run the tool.
  • delfix will now delete all found traces of our removal process

***


Delete the log files our tools created; they are located at your desktop or at the
"c:\users\{…….}\Downloads" folder.
Highlight them, and press the del or delete key on the keyboard.
You can browse to the location of the file or folder using either My Computer or Windows Explorer.


***


Here are some Preventive tips to reduce the potential for spyware infection in the future:

1. Browse more secure
  • WOT - Know which websites to trust
    Web of Trust - this free browser add on warns you about risky websites that try to scam visitors, deliver malware or send spam.
2. Enable Protected Mode in Internet Explorer. This helps Windows Vista, 7 / 8 users stay more protected from attack by running Internet Explorer with restricted privileges as well as reducing the ability to write, alter or destroy data on your system or install malicious code. To make sure this is running follow these steps:
  • Open Internet Explorer
  • Click on Tools > Internet Options
  • Press Security tab
  • Select Internet zone then place check next to Enable Protected Mode if not already done
  • Do the same for Local Intranet, Trusted Sites and Restricted Sites and then press Apply
  • Restart Internet Explorer and in the bottom right corner of your screen you will see Protected Mode: On showing you it is enabled.
3. Make sure you keep your Windows OS current.
  • Windows XP users can visit Windows update regularly to download and install any critical updates and service packs.
  • Windows Vista / 7 users can update via
    Start menu > All Programs > Windows Update > Check for Updates (in left hand task pane).
4. Avoid P2P
  • If you think you're using a "safe" P2P program, only the program is safe, not the data.
  • You will share files from unsafe sources, and these may be infected.
  • Some bad guys use P2P filesharing as an important chanel to spread their wares.
5. Use only one anti-virus software and keep it up-to-date.

6. Firewall
Without a firewall your computer is succeptible to being hacked and taken over. I am very serious about this and see it happen almost every day with my clients. Simply using a Firewall in its default configuration can lower your risk greatly.

7. Backup regularly
You never know when your PC will become unstable or become so infected that you can't recover it.

8. Use Strong passwords!

9. Email attachments
Do not open any unknown email attachments, which you received without asking for it!


Extra note:
Keep your Browser, Java, pdf Reader and Adobe Flash Up to Date.
Make sure your programs are up to date - because older versions may contain Security Leaks.
To find out what programs need to be updated, please run the Secunia Software Inspector Scan. http://secunia.com/software_inspector/


***

You did a GREAT job. Very thorough. I will start these attempts today and tomorrow and post if I have any problems. Do you recommend keeping MalWareBytes? What anti-virus do you recommend. Which Internet browser do you prefer, IE, Chrome, or Firefox?

You are very welcome, jhess23a.
Glad we could help.
 

Do you recommend keeping MalWareBytes?
Which Internet browser do you prefer, IE, Chrome, or Firefox?

You can keep Malwarebytes Anti-Malware.
I'm using IE; if you use FF too, you should have installed the following add-ons to help make your Firefox browser more secure:
NoScript
AdBlock Plus

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI