Malware/Spyware Removal Guide

aliEnRIK

olbas_oil wrote: »

If I enter Fairfx into google, the top link returned is a sponsored link. This goes to FairFX, but via a site called http://rudywoofwoof.com/woof/woof.php?id=46

which then does a re-direct to fairfx.

Is this likely to be:
1) Malware on my machine (and on another I tried)
2) RudyWoof trying to intercept a call to a financial site by getting a high google rank
3) FairFX doing some kind of affilliate deal

I've emailed Fairfx and got a non-committal reply:
Thanks for your email.

Not sure about the technical background of why you get that web address and then get redirected, but I can confirm that it is out website, and you are not being compromised. Also, though that is part of our website, rather than choosing the first option your get from the google search, I usually direct customers to the second option, because it is much easier to navigate around the second one in future, for example when you want to view your balance or mini statement, or top up your card.

Download MALWAREBYTES (Make sure you click 'DOWNLOAD LATEST VERSION')
http://www.filehippo.com/download_malwarebytes_anti_malware/
Open malwarebytes and goto UPDATE and click 'check for updates'. After its updated goto SCANNER and click PERFORM FULL SCAN then click SCAN
Remove everything thats found (needs to be ticked)
Post the COMPLETE log in a NEW thread AFTER youve deleted everything it finds


reboot

Download HIJACK THIS (Make sure you click 'DOWNLOAD THIS VERSION')
http://www.filehippo.com/download_hijackthis/2894/
Click MAIN MENU then DO A SYSTEM SCAN AND SAVE A LOGFILE(Takes seconds) then post the log so we can see whats running
(do NOT do anything else with Hijack but scan and post the FULL log)

invisiblecabbage

Hi any advice welcome. DD cannot connect to internet although the little symbol at bottom left shows excellent wireless connectivity. I have done a full scan overnight on daughters PC (she is always on facebook!) and it has removed and quarantined a host of trojans. still refusing to display internet though.

aliEnRIK

invisiblecabbage wrote: »

Hi any advice welcome. DD cannot connect to internet although the little symbol at bottom left shows excellent wireless connectivity. I have done a full scan overnight on daughters PC (she is always on facebook!) and it has removed and quarantined a host of trojans. still refusing to display internet though.

Reboot and keep pressing F8 to get into SAFE MODE WITH NETWORKING

assuming it works then please open malwarebytes, goto LOGS and post the WHOLE of the last log in a new thread

invisiblecabbage

where is malwarebytes ...on my laptop or on MSE site (sorry, rather dense female):o

invisiblecabbage

didn't work when I logged on as dd but internet no problem when logged on as administrator ...?

aliEnRIK

invisiblecabbage wrote: »

didn't work when I logged on as dd but internet no problem when logged on as administrator ...?

I assumed you had malwarebytes the way you worded it

Download MALWAREBYTES (Make sure you click 'DOWNLOAD LATEST VERSION')
http://www.filehippo.com/download_malwarebytes_anti_malware/
Open malwarebytes and goto UPDATE and click 'check for updates'. After its updated goto SCANNER and click PERFORM FULL SCAN then click SCAN
Remove everything thats found (needs to be ticked)
Post the COMPLETE log in your NEW thread AFTER youve deleted everything it finds


reboot

Download HIJACK THIS (Make sure you click 'DOWNLOAD LATEST VERSION')
http://www.filehippo.com/download_hijackthis/
Click MAIN MENU then DO A SYSTEM SCAN AND SAVE A LOGFILE(Takes seconds) then post the log in your NEW thread so we can see whats running
(do NOT do anything else with Hijack but scan and post the FULL log)

aliEnRIK

invisiblecabbage wrote: »

didn't work when I logged on as dd but internet no problem when logged on as administrator ...?

You tried safe mode with networking?

invisiblecabbage

yes, sfe mode with networking

invisiblecabbage

I'll get downloading, many thanks

Browntoa

entire start of this thread reviewed, updated and links confirmed as working


a reminder to people reading the thread that if you have specific virus infections/problems that the first few posts have not resolved that you need to start a new thread for your problem aand not add onto this thread (or anybody elses existing thread)