AdCash, YourAdExchange, etc. on my Computer

[chessdude]

RogueKiller

I went ahead and had rogue killer delete the DNS files, and returned to Internet Explorer and so far no overlapping scripts have appeared. How can I ensure that these dns settings won't return?

 

[chessdude]

System Restart

After restarting the system, no infections appear present.

 

[Juliet]

Is it all browsers? And is it all web pages?

 

[Juliet]

After restarting the system, no infections appear present.

ooops, didn't see this
still seeing web ads?

 

[chessdude]

Only One

I had uninstalled firefox and google chrome prior to coming onto this forum. Do I need to download again and see?

 

[Juliet]

Download Google chrome from here
http://www.google.com/chrome/

Download Firefox from here
https://www.mozilla.org/en-US/firefox/new/

Before doing any surfing on any of the browsers please download AdBlock Plus
https://adblockplus.org/releases/adblock-plus-12-for-internet-explorer-released <-- for IE

https://adblockplus.org/ <-- for Firefox

https://chrome.google.com/webstore/detail/adblock-plus/cfhdojbkjhnklbpkdaibdccddilifddb <-- for Google chrome

if a banner pops up you should be able to right click on it and have it added to the block list.

 

[chessdude]

All 3 Downloaded...

No sign of the script...

 

[Juliet]

you mean we whooped it?





don't burst my bubble!

 

[chessdude]

Seems to be...

...gone. After almost 5 months of fighting with this.

 

[Juliet]

Yippeeee!!

Let's remove tools and quarantine folder, I'll post preventive tips.

Don't miss or skip this next step, this will remove malicious files from quarantine and set a clean restore point.

Go to Start > Run > copy and paste the full text path in the run box

ComboFix /Uninstall

Note the space between the x and the /U, it needs to be there.

~~~~~

DelFix

• Please download DelFix and save the file to your Desktop.
• Double-click DelFix.exe to run the programme.
• Place a checkmark next to the following items:
  • Activate UAC
  • Remove disinfection tools
  • Create registry backup
  • Purge system restore
  • Reset system settings
• Click the Run button.

-- This will remove the specialised tools we used to disinfect your system. Any leftover logs, files, folders or tools remaining on your Desktop which were not removed can be deleted manually (right-click the file + delete).

~~~~~~~~~~~~~~~

• Answers to common security questions - Best Practices by quietman7, MVP
• How Malware Spreads - How did I get infected? by quietman7, MVP
• Simple and easy ways to keep your computer safe and secure on the Internet by Lawrence Abrams, MVP
• How to Prevent Malware by miekiemoes, MVP
• How to backup and restore your data using Cobian Backup by YourHighness
• Slow Computer/browser? It May Not Be Malware by quietman7, MVP
  

The following programmes come highly recommended in the security community.

• 
  AdBlock is a browser add-on that blocks annoying banners, pop-ups and video ads.
• 
  CryptoPrevent places policy restrictions on loading points for ransomware (eg.CryptoPrevent), preventing your files from being encrypted.
• 
  Malwarebytes Anti-Exploit (MBAE) is designed to prevent zero-day malware from exploiting vulnerable software.
• 
  Malwarebytes Anti-Malware Premium (MBAM) works in real-time along side your Anti-Virus to prevent malware execution.
• 
  NoScript is a Firefox add-on that blocks the actions of malicious scripts by using whitelisting and other technology.
• Sandboxie isolates programmes of your choice, preventing files from being written to your HDD unless approved by you.
• 
  Secuina PSI will scan your computer for vulnerable software that is outdated, and automatically find the latest update for you.
• 
  SpywareBlaster is a form of passive protection, designed to block the actions of malicious websites and tracking cookies.
• 
  Web of Trust (WOT) is a browser add-on designed to alert you before interacting with a potentially malicious website.

 

[Juliet]

Glad we could help.

Since this issue appears resolved ... this Topic is closed.