Malware / adware problem

Forums › Microsoft Windows › Malware / adware problem

Bee

732 posts

Ultimate Geek

#116361 26-Apr-2013 17:26

Hi,

I seem to have downloaded something and now have programs on my Laptop that wont go away!

Programs are:

Mixidj toolbar
Yontoo toolbar
Lyrics Tube
Free twittube
Software version updater

Mixidj especially, hijacks all my browsers and makes itself the default page and search engine...

I uninstall them using revo uninstaller and run Malwarebytes anti-Malware and all is fine until I restart and they all come back!

Any ideas whats going n here and how to get rid of them completely?

Doing your best is much more important than being the best.

jeffnz

2870 posts

Uber Geek

Trusted

Lifetime subscriber

#806027 26-Apr-2013 17:29

http://malwaretips.com/blogs/mixi-dj-toolbar-virus/

http://fixingcomputervirus.blogspot.co.nz/2013/03/easy-way-to-remove-mixidj-toolbar-step.html

Galaxy S10

Garmin Fenix 5

Bee

732 posts

Ultimate Geek

#806050 26-Apr-2013 18:13

PrivitizeVPN also seems to be a part of it...

I uninstalled them all and then restart PC and they are all back!
It just doesnt make sense at all!

Doing your best is much more important than being the best.

SATTV

1648 posts

Uber Geek

ID Verified

#806053 26-Apr-2013 18:19

Run Rkill first - then run MBAM ( full scan )

Rkill stops the process first.

Once it has removed the infections remove the toobars and reset your search engines

I know enough to be dangerous

jeffnz

2870 posts

Uber Geek

Trusted

Lifetime subscriber

#806060 26-Apr-2013 18:34

did some reading and seems like it is very convoluted if its the same as the following

http://forums.malwarebytes.org/index.php?showtopic=123940

Galaxy S10

Garmin Fenix 5

Oblivian

7296 posts

Uber Geek

ID Verified

#806100 26-Apr-2013 19:59

http://www.bleepingcomputer.com/download/combofix/

I'm yet to have it nuke a PC like it keeps warning it may do.

But the beauty is it bombs out of explorer and any running services, then kills the TSR then attempts to eradicate before explorer reloads them all again.

bigdipper

6 posts

Wannabe Geek

#807002 29-Apr-2013 01:01

AS the above replies state use rkill, then Malwarebytes Antivirus and Combofix.

If that still fails try the Kaspersky Rescue Disk - https://support.kaspersky.com/viruses/rescuedisk

Bee

732 posts

Ultimate Geek

#807064 29-Apr-2013 08:58

I tried all of that and tried running and uninstalling in safe mode and that got rid of 2 of them...

So still:
Lyrics Tube
MyPC Backup
& Yontoo Toolbar left...

Doing your best is much more important than being the best.

Equinox IT

Cloud spending continues to surge globally, but most organisations haven’t made the changes necessary to maximise the value and cost-efficiency benefits of their cloud investments. Download the whitepaper From Overspend to Advantage now.

bigdipper

6 posts

Wannabe Geek

#809716 1-May-2013 17:33

Bee: I tried all of that and tried running and uninstalling in safe mode and that got rid of 2 of them...

So still:
Lyrics Tube
MyPC Backup
& Yontoo Toolbar left...

Try Combofix and a rootkit scanner such as the malwarebytes one or even tdsskiller.

There is also Superantispyware for adware.

mattwnz

20141 posts

Uber Geek

#809741 1-May-2013 18:09

Sometimes reinstalling is the best solution, as you don't know what these tools will not be able to find. If it was my computer and I couldn't fix it, I would probably reinstall. Or apply an old image backup if you have one.