Omniboxs
Why can't Lavasoft prevent Omniboxes from infecting my computer and not remove it?
-
Hi Jop,
I am not employed by Lavasoft, so I can only guess:
It isn't virus or any other kind of malware.
The Omniboxes' files are changing so fast that it's difficult for antivirus programs to be able to recognize them at all times.
Please, to get help with removing Omniboxes follow the instructions in the topic Read This Before You Post!.
Are you using Web Companion and/or Ad-Aware?
Web Companion is usually rather good at preventing browser hijackers as Omniboxes.
0 -
Thanks The two files are attached.
0 -
You're welcome
I think you'll get better protection with the latest version of WinPatrol.
1. Is Avast working?
I can see that an Avast process is running, but Avast isn't listed as an installed program nor in the Security Center.
2. Do you have Omniboxes ads in all three browsers?
I can't see any adware in them, only left-overs in Internet Explorer.
Do other computers connected to the same router/gateway get Omniboxes ads?
3. Please, save AdwCleaner by Xplode on the desktop: https://toolslib.net/downloads/viewdownload/1-adwcleaner/
Turn off all programs, including browsers.
Double-click on AdwCleaner to start the program.
Click on the Scan button.
Wait until the search has finished.
Click on the Log file button.
A report will be displayed, copy its content and paste into your reply.
If the report isn't displayed, it's available as C:\AdwCleaner\AdwCleaner[R0].txt.0 -
Thanks CecilliaB.
I had uninstalled Avast and thought it was gone
I only use explorer
The other computers in network are not in use.
I had tried to remove Omniboxes manually - maybe removing some of it?.
I installed and ran Malawarebytes - it seems to have removed the problem but, just in case, here is the Adwcleaner file.
# AdwCleaner v4.202 - Logfile created 25/04/2015 at 09:22:36
# Updated 23/04/2015 by Xplode
# Database : 2015-04-23.2 [server]
# Operating system : Windows 7 Professional Service Pack 1 (x86)
# Username : Mum and Dad - MUMANDDAD-PC
# Running from : C:\Users\Mum and Dad\Desktop\adwcleaner_4.202.exe
# Option : Scan***** [ Services ] *****
***** [ Files / Folders ] *****
Folder Found : C:\Program Files\BearShare Applications
Folder Found : C:\Program Files\EvilLyrics
Folder Found : C:\Program Files\WinZip Registry Optimizer***** [ Scheduled tasks ] *****
***** [ Shortcuts ] *****
Shortcut Infected : C:\Users\Mum and Dad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
Shortcut Infected : C:\Users\Mum and Dad\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk***** [ Registry ] *****
Key Found : HKCU\Software\APN PIP
Key Found : HKCU\Software\AppDataLow\Software\adawarebp
Key Found : HKCU\Software\Linkey
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8736C681-37A0-40C6-A0F0-4C083409151C}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect
Key Found : HKCU\Software\simplytech
Key Found : HKLM\SOFTWARE\AskPartnerNetwork
Key Found : HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Found : HKLM\SOFTWARE\Conduit
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Found : HKLM\SOFTWARE\SearchProtect
Key Found : HKLM\SOFTWARE\SpeedBit***** [ Web browsers ] *****
-\\ Internet Explorer v11.0.9600.17728
*************************
AdwCleaner[R0].txt - [2096 bytes] - [25/04/2015 09:22:36]
########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [2155 bytes] ##########
0 -
I suggest that you run Avast Uninstall Utility to remove everything of Avast: https://www.avast.com/uninstall-utility
There are a lot of Firefox and Chrome files in the computer.
AdwCleaner found many left-overs of adware programs.
Please, turn off all programs, including browsers.
Double-click on AdwCleaner to start the program.
Click on the Scan button.
Wait until the search has finished.
Click on the Clean button.
Click on OK.
Click on OK on any message that pops up.
The computer will be restarted.
A report will be displayed, copy its content and paste into your reply.
If the report isn't displayed, it exist as C:\AdwCleaner\AdwCleaner[s0].txtAny more questions before I give you the instruction for uninstalling FRST and AdwCleaner.
0 -
Do you still have Omniboxs problems?
0 -
I don't think so, it seems to have been resolved by Malwarebytes.
Thanks again for you help and your patience.
0 -
You're welcome
1, Please, turn off all programs, including browsers.
Double-click on AdwCleaner to start the program.
Click on the Uninstall button.
2. Download OTC http://oldtimer.geekstogo.com/OTC.exe
Close all programs.
Start OTC program.
Click the CleanUp! button.
Select Yes when asked "Begin cleanup process".
If you are asked to reboot, select Yes.
FRST should now be uninstalled.If any logs remain on the computer you can remove them.
3. Improve the security in the computer
It is very important to keep Windows and all programs updated. An old version of, for example, Flash contains vulnerabilities that makes it easy to infect the computer from a web page. To help you with keeping everything updated you can use the program Secunia Personal Software Inspector (PSI). http://www.bleepingcomputer.com/tutorials/detect-vulnerable-programs-with-secunia-psi/describes how to install and use the program.0 -
Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.
If you're the topic starter, and need this topic reopened, please contact the staff member who was helping you with your issue.
Everyone else please begin a New Topic.
Thank you !0 -
Thanks again!
0
Please sign in to leave a comment.
Comments
10 comments