Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Spyware or Malware, getting bad, personal information could be comprom


  • This topic is locked This topic is locked

#46
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
What site are you getting redirected to ?

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

CreateRestorePoint:
FF Extension: No Name - C:\Users\Nicole\AppData\Roaming\Mozilla\Firefox\Profiles\4j9itmdj.default\Extensions\[email protected] [2015-11-17] [not signed]
2015-11-29 15:28 - 2015-11-29 15:28 - 00000572 _____ C:\WINDOWS\Tasks\yljm
2015-11-30 08:33 - 2015-08-07 22:12 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
AlternateDataStreams: C:\ProgramData\Temp:56E2E879
Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
RemoveProxy:
EmptyTemp:
CMD: bitsadmin /reset /allusers


Save this as fixlist.txt, in the same location as FRST.exe
FRSTfix.JPG
Run FRST and press Fix
On completion a log will be generated please post that

THEN

Please download Junkware Removal Tool to your desktop.
  • Right-mouse click JRT.exe and select "Run as Administrator" the tool will open and start scanning your system
  • please be patient as this can take a while to complete depending on your system's specifications
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • post the contents of JRT.txt into your next message.

  • 0

Advertisements


#47
Destiny000

Destiny000

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 130 posts

Here are just some of the redirects I get:

 

http://pcfix.site/fi...L9HIVTO08BIK211

 

http://creditunionmo...for-bad-credit/

 

http://i4track.net/c...=ron&url_id=633

 

http://i4track.net/c...sub_id_4=279745

 

http://onclickads.ne...62561&r=/oc/han

 

http://www.market-bu...32defe623e1f9e9

 

http://zc1.zeroredir...b8-0a2a465e172d

 

http://goldengoosewa...ngoose&p=279745

 

http://www.trackingc...oVLwTfq4=&rm=DJ

 

http://offer.alibaba...23121dd&src=saf

 

http://top10binaryop....&zoneid=279745

 

http://startrek.game....com/lp/N?lp=n1

 

Also when it does redirects it will one of two things, redirect the page i am currently viewing and open a new tab opening the page I was looking at. 0.0 Or open a new tab for the redirect.

Attached Files


  • 0

#48
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts

Could you confirm that the redirects are only in Chrome and not FF  or IE


  • 0

#49
Destiny000

Destiny000

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 130 posts

I am getting redirected tabs in all browsers except for Opera, although I get the malwarebytes blocking things when I surf on Opera, it doesn't block and pop up to show me that it did so unless I am actually browsing on a browser, so it's trying to infiltrate it perhaps? 


  • 0

#50
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts

Let me know if this has an effect

 

CAUTION :  This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:



CreateRestorePoint:
Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
RemoveProxy:
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON
CMD: ipconfig /flushdns
CMD: netsh winsock reset catalog
CMD: netsh int ip reset c:\resetlog.txt
CMD: ipconfig /release
CMD: ipconfig /renew
CMD: netsh int ipv4 reset
CMD: netsh int ipv6 reset
EmptyTemp:
CMD: bitsadmin /reset /allusers


Save this as fixlist.txt, in the same location as FRST.exe
FRSTfix.JPG
Run FRST and press Fix
On completion a log will be generated please post that

 


  • 0

#51
Destiny000

Destiny000

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 130 posts

Things are still the same. :(

 

Before malwarebytes found those things that seemed to set things off again I had a system error and my computer restarted. I didn't get to a pen in time to write the code down, however before I applied your recent fix it happened again. I was not using any programs except for internet browsers. The error was called "system_service_exception"

 

Also when my computer restarts it takes longer each time now for it to load. It even sits at the screen where i type in my password in order to load my desktop for a really long time. This has never happened before. 

 

Also my Ethernet adapter keeps messing up, frequently and disconnects me. The wifi one is happening sometimes now as well. I do the find and fix problems and it keeps resetting the adapter and then it;s fixed for a little while.

 

The other thing when i do the fix it step sometimes it fixes what it calls "the default gateway is not available" then it works for a bit again as well.

 

I also added some pictures of screen pics i took hoping they might perchance be helpful.

 

Windows update started (or maybe already was) having problems so i did the auto fix it to it and it came back as it having fixed the problem called "Windows update components must be repaired". 

Attached Thumbnails

  • internet.jpg
  • internet2.jpg
  • internet3.jpg
  • internet4.jpg
  • internet5.jpg

Attached Files


Edited by Destiny000, 02 December 2015 - 12:29 AM.

  • 0

#52
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts

OK do other computers using your router experience the same problem


  • 0

#53
Destiny000

Destiny000

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 130 posts

I'm not sure right now as the person with another laptop isn't here today however they never mentioned any problems to me. I also plugged directly into our internet without the router in between and I was still having the same issues. :(


  • 0

#54
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts

Could you temporarily uninstall SoftEther VPN Client and see what that does


  • 0

#55
Destiny000

Destiny000

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 130 posts

I did as you asked. I have had no pop ups thus far. I have had vpn installed before and it never did this, even on my old laptop. Maybe it was holding files from being cleaned? Not sure, either way thanks. The windows update is still not functioning though. :( It needs a constant fix, the same fix i had mentioned, i can do the fix back to back and yet it still does nothing for it and can still be repaired again after and yet it still isn't repaired. 0.o


  • 0

Advertisements


#56
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
What error does windows updates give ?

Could you download and run the small repair programme from MS http://windows.micro...-troubleshooter
Click the link under step 3
  • 0

#57
Destiny000

Destiny000

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 130 posts

Windows update it'self doesn't give any errors, it just is never able to download anything. And the fix error is the same as always. I have a pic i added to show, this is from running the program you advised.

Attached Thumbnails

  • windows update fix.jpg

  • 0

#58
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
When you go to settings > Updates are there any updates queued to download or does it show any errors

Capture.JPG

When you go to control panel > programmes and features > view installed updates
When was the last one installed

Capture.JPG
  • 0

#59
Destiny000

Destiny000

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 130 posts

October 4th of this year was the last update. No errors when updating.

Attached Thumbnails

  • windows update 2.jpg

  • 0

#60
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
OK I see the problem now, the November refresh is stuck... 
 
The way around this is to download the entire package and then install it manually
 
Go to this page https://www.microsof...nload/windows10
and download, then run the media creation tool

Capture1.JPG

When it runs you will be given the option to install or save to USB/disc

Capture.JPG

I would recommend using Install now, and the November update will then be installed, this may take up to an hour
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP