safesear.ch [Closed]

On my Windows 8.1 machine I find that 'SAFESEAR.CH' has infected my Google Chrome, IE and who knows what else.  Can someone help me remove this?  Thanks.

Hi djmjdj. My name is Firefly and I will help you with your computer. I ask you to follow a few ground rules while we are taking care of your computer:

I'm an Undergraduate trainee at MalwareRemovalUniversity (MRU), and as such my posts to you have to first be checked by a Teacher, because of this my replies to your posts may be slightly delayed. Please be patient and I'm sure we'll be able to resolve your problems.

Before we begin…please read and follow these important guidelines, so things will proceed smoothly. 

• The instructions being given are for YOUR computer and system only!

• Using these instructions on a different computer can cause damage to that computer and possibly render it inoperable!

• You must have Administrator rights, permissions for this computer.

• DO NOT run any other fix or removal tools unless instructed to do so or install any other software (or hardware) during the cleaning process.

• Only- post your problem at (1) one help site.  Applying fixes from multiple help sites can cause problems.

• Print each set of instructions…if possible…your Internet connection will not be available during some fix processes.

• Only- reply to this thread, do not start another …  Please, continue responding, until I give you the "All Clean". If you are in progress at another forum, please simply let me know so I can dedicate my time to others who need help.

• Failure to respond for 3 days, will result in your topic being closed.

Please take time to read the Forum Guidelines and Rules where the conditions for receiving help at this forum are explained.

Warning!

The steps presented in these posts are for this person and machine ONLY. Do not apply these steps to your own system, without the guidance of a trained malware removal helper. Doing so, may possibly damage your system, preventing it from starting.

Malware removal:

Please be aware that removing Malware is a potentially hazardous undertaking. I will take care not to knowingly suggest courses of action that might damage your computer. However it is impossible for me to foresee all interactions that may happen between the software on your computer and those we'll use to clear you of infection and I cannot guarantee the safety of your system. It is possible that we might encounter situations where the only recourse is to re-format and re-install your operating system, or to necessitate you taking your computer to a repair shop.

File Backup

For your safety and protection, I would advise backing up all your important documents, personal data files and photos as some infections may render your computer unbootable during or before the disinfection process. The safest practice is not to backup any files with the following file extensions:

exe, .scr, .ini, .htm, .html, .php, .asp, .xml, .zip, .rar, .cab as they may be infected.

All of the Windows systems we support have backup capabilities. These existing programs will allow you to back up your files to an external hard drive, USB drive or CD drive.

Do not back up your files to the hard drive of the computer we will be fixing. If the computer becomes unusable, your files will still be gone forever. Every photo, every document… gone. Seriously. Do this now.

Here are links to using the backup programs in the various versions of Windows:

• Windows Vista
• Windows 7

• Windows 8

If you have internet connectivity, an alternative to backing your files up locally is to back your files up to the cloud, and there are a number of free and paid for services of this type available.

Below are links to a couple of articles with details for both free and paid for backup services …

http://www.techsupportalert.com/content… -sites.htm

http://www.pcmag.com/article2/0,2817,22… 745,00.asp

A word of warning - if you have a lot of data to backup, an online service can take days, weeks, or months. In this case, please consider using a local backup method (external hard drive, USB, etc.)

One way or another, it is critical that you backup your data before proceeding.

Finally, there will be several items to handle in each post (usually) so I will try to break them into easier to digest sections which will be demarked with Green Bold Lettering

Restore Point

First, before we do anything, we want to make sure we have made a backup of your computer's key information so that we can be sure to not make anything worse. Since you are running Windows 8.1, we will both make a restore point and do a system backup.

To create a restore point:

1. Press the WinKey+X to display the system menu and click System.

2. On the left side menu, click System Protection.

3. In the Protection Settings section, click the C: (system) drive.

4. Click the Create button.

5. Type a name for the System Restore file (The Date and Time will be added automatically). Please call it “before malware fix”

Please also do the following:

Please download tweaking.com_registry_backup_setup.exe

Choose a download site for the installer… download and save it to your desktop.

Double click on the "…setup.exe" program and install the program.  Let the install use the default installation.  How to tutorial here.

Once the program is installed…

• Double click the Tweaking.com Registry Backup icon … on your Desktop to open the program.
• It should open with the Backup Registry tab selected and all file options checked.  Check any that are not already checked.

• Click on Backup Now to create a backup of your Registry.

• You'll see "Waiting for Volume Shadow Copy snapshot…" this may take a few moments, just be patient.

• When completed you should see a message saying something like … Successful ??/?? Registry Files Backed Up … ?? is total number of files, both numbers should match.

• Close and exit the program.

Once these are done, we can move forward with repairing the issues you are having. PLEASE DO NOT PROCEED IF YOU HAVE ANY PROBLEMS WITH THESE FIRST TWO STEPS OR IF YOU RECEIVED ANY ERROR MESSAGES.

In order to help you, I will need the logs specified in the Forum rules. Again, this can be found here:

http://forums.whatthetech.com/index.php?showtopic=106388

I will look for you to post those, and would be happy to help you get your computer working well. 

Due to inactivity this topic will be closed.
If you need help please start a new thread.

New members follow the instructions here http://forums.whatthetech.com/you_Infected_t106388.htmland start a new topic