Hi,
I have the problem of new tabs opening automatically on Firefox, with adds.
Could anyone please analyze the two files produced by FRST and provide the cleaning script?
Thanks,
Nicolas
Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!
Hi,
I have the problem of new tabs opening automatically on Firefox, with adds.
Could anyone please analyze the two files produced by FRST and provide the cleaning script?
Thanks,
Nicolas
CreateRestorePoint:
R2 CFJtiElGkYs; C:\ProgramData\LVeksufBCLe\CFJtiElGkYs.exe [2733536 2015-03-13] (Useful Technology)
R2 wWUbmEKUQw; C:\ProgramData\UBiVkxu\wWUbmEKUQw.exe [3001328 2016-01-04] (Rational Thought Solutions)
2016-04-20 20:52 - 2016-04-20 20:52 - 00000000 ____D C:\ProgramData\Oltroofovr
2016-04-20 20:52 - 2016-03-04 17:35 - 00003448 _____ C:\Windows\System32\Tasks\Oltroofovr
2016-04-20 20:52 - 2015-12-11 22:23 - 00003466 _____ C:\Windows\System32\Tasks\Wuexnepeahe
2015-01-03 16:54 - 2015-01-03 16:54 - 0000036 _____ () C:\Users\Nicolas\AppData\Roaming\SuYZkvrV.tmp
2015-03-13 21:15 - 2015-03-13 21:15 - 1465344 _____ (InstallMoonV13.03) C:\Users\Nicolas\AppData\Roaming\WC.exe
2015-03-13 21:16 - 2015-03-13 21:16 - 0613255 _____ (CMI Limited) C:\Users\Nicolas\AppData\Local\nsnAB8.tmp
2015-03-13 09:59 - 2015-03-13 09:59 - 0613255 _____ (CMI Limited) C:\Users\Nicolas\AppData\Local\nss8151.tmp
2015-03-19 20:39 - 2015-03-19 20:39 - 0613255 _____ (CMI Limited) C:\Users\Nicolas\AppData\Local\nsz5F60.tmp
Task: {4D3A8E38-DF2E-4B8F-A953-22E1355EB0DA} - System32\Tasks\Oltroofovr => C:\ProgramData\Oltroofovr\1.0.7.1\omisloeh.exe [2016-04-20] ()
Task: {D7D9D2E8-E2C3-4583-857C-268F5DF35074} - System32\Tasks\Wuexnepeahe => C:\ProgramData\Wuexnepeahe\1.0.7.1\wruannef.exe [2015-12-11] ()
C:\ProgramData\UBiVkxu
C:\ProgramData\LVeksufBCLe
C:\ProgramData\Wuexnepeahe
Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
RemoveProxy:
EmptyTemp:
CMD: bitsadmin /reset /allusers
Hello Essexboy,
Thank you so much! It seems to work (15 minutes of surfing on FF without strange adds...).
It's magical, I hope one day I will be able to make the script myself ;-)
I enclosed the logs, in case ou see something.
Best,
Nicolas
Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.
If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.
Everyone else please begin a New Topic.
0 members, 0 guests, 0 anonymous users
Community Forum Software by IP.Board
Licensed to: Geeks to Go, Inc.