Advice on adware (or malware?)


  1. Posts : 81
    Windows 10 Pro
       #1

    Advice on adware (or malware?)


    Hi there folks
    My browsers are being hijacked every now and then, suddenly i have the homepages set as e.g. "ourluckysites.com", or something like funnysearch, all my browsers shortcuts suddenly lead me to other weird folders with copies of the browser inside (e.g.today my Google Chrome was sitting inside a folder called "Everness").
    This has been happening for a while and it affects all browsers (firefox, edge and chrome).
    Until now i was using MalwareBytes free trial, MalwareBytes's AdwareCleaner and Zemana's free trial to clean it but t always comes back. It's like I have installed something that is reinstalling the garbage.

    Haven't found a post talking about this sites, any help appreciated.

    thanks folks

    Marcos
      My Computer


  2. Posts : 936
    xp
       #2

    This is kind of a simplified guide going from step #2 to the end. https://malwarecomplaints.info/our-lucky-sites-removal/
    SuperAntiSpyware is also a great free program for finding things like Brower hijackers. If You don't have a restore point before the problems started, and cleaning out any "Suspicious" programs, services, and the Temp files doesn't work, You might have to resort to something Stronger like https://www.bleepingcomputer.com/download/rkill/ or the other four programs at the bottom of that page.
      My Computer


  3. Posts : 81
    Windows 10 Pro
    Thread Starter
       #3

    Bat 1 said:
    This is kind of a simplified guide going from step #2 to the end. https://malwarecomplaints.info/our-lucky-sites-removal/
    SuperAntiSpyware is also a great free program for finding things like Brower hijackers. If You don't have a restore point before the problems started, and cleaning out any "Suspicious" programs, services, and the Temp files doesn't work, You might have to resort to something Stronger like https://www.bleepingcomputer.com/download/rkill/ or the other four programs at the bottom of that page.
    Unbelievable, after malware bytes, zemana and adware cleaner, SuperAntiSpyware found 605 threats
      My Computer


  4. Posts : 6,969
    windows 10
       #4

    In a lot of these cases it's an add-on which doesn't get removed it then goes and gets more malware you can reset browser to remove all add-ons which is the best move
      My Computer


  5. Posts : 16,278
    W10Prox64
       #5

    marcosdipaolo said:
    Unbelievable, after malware bytes, zemana and adware cleaner, SuperAntiSpyware found 605 threats
    Superantispyware is finding mostly cookies.

    If you still l have problems after following the instructions posted by Bat in post#2, then we may have a rootkit on the system which we'll need to address.
    Let us know.
      My Computer


  6. Posts : 5,200
    Windows 11 Home
       #6

    Run CMD as admin and copy/paste (it should prevent reinfection by malware):

    reg add "HKLM\Software\Microsoft\Windows Script Host\Settings" /v "Enabled" /t REG_DWORD /d "0" /f

    Then run this to open HOSTS file:

    notepad c:\windows\system32\drivers\etc\hosts

    It should look like on the picture, if there is anything else bellow, remove it.
    Attached Thumbnails Attached Thumbnails Advice on adware (or malware?)-capture_04272017_223155.jpg  
      My Computer


  7. Posts : 81
    Windows 10 Pro
    Thread Starter
       #7

    TairikuOkami said:
    Run CMD as admin and copy/paste (it should prevent reinfection by malware):

    reg add "HKLM\Software\Microsoft\Windows Script Host\Settings" /v "Enabled" /t REG_DWORD /d "0" /f
    Hi there, what that command line does?

    My hosts file was actually corrupt (empty), i had to paste the code of the picture to restore it.
      My Computer


  8. Posts : 5,200
    Windows 11 Home
       #8

    It disables scripting within Windows (not in browsers), which is used to add startup entries, modify files, etc.

    In case, you need it, you will get a message, that WSH is disabled by administrator, then you can enable it.
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 07:47.
Find Us




Windows 10 Forums