PDA

View Full Version : tradeadexchange spyware? trojan?



earthshoes
2016-01-06, 21:04
This has been an incredibly persistent problem and the first one I haven't been able to solve on my own for quite some time. It seems to attach Chrome as an unwanted extension that renames itself every time it appears, but the results are the same every time. It redirects links and searches to either the tradeadexchange page (Eset blocks it, but the pop up tells me that I need to update my flash, etc) or some other page that announces I've won money. I've been pulling my hair out for a couple of days trying to find the source. I finally remembered Spybot which I used regularly back when we had Windows XP. Spybot (I am newly in love with this software) finds everything it introduces into my system and deletes it. But it's back a few hours later.

Could you create some sort of immunization for this?

tashi
2016-01-06, 22:09
Hello earthshoes, :welcome:


This has been an incredibly persistent problem and the first one I haven't been able to solve on my own for quite some time. It seems to attach Chrome as an unwanted extension that renames itself every time it appears, but the results are the same every time. It redirects links and searches to either the tradeadexchange page (Eset blocks it, but the pop up tells me that I need to update my flash, etc) or some other page that announces I've won money. I've been pulling my hair out for a couple of days trying to find the source. I finally remembered Spybot which I used regularly back when we had Windows XP. Spybot (I am newly in love with this software) finds everything it introduces into my system and deletes it. But it's back a few hours later.

Could you create some sort of immunization for this?

Did you elevate Spybot's permissions?

Right-click the Spybot - Search & Destroy entry in your start menu, instead of just left-clicking to start it.
Choose Run as administrator from the context menu.

But you may need some help removing tradeadexchange.

To start that process please start a new topic in the Malware Removal Forum (http://forums.spybot.info/forumdisplay.php?f=22) and a volunteer analyst will provide assistance.

First see that forum's FAQ which also includes instructions in post #2 on how to provide the logs from Farbar Recovery Scan Tool and aswMBR, which are the logs used in the preliminary analysis.

http://forums.spybot.info/showthread.php?t=288

Best regards.