1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

searching.com won't remove

Discussion in 'Virus & Other Malware Removal' started by scorpio613, Jan 31, 2015.

Thread Status:
Not open for further replies.
Advertisement
  1. scorpio613

    scorpio613 Thread Starter

    Joined:
    Jan 20, 2015
    Messages:
    65
    I had posted in another forum about my HD filling up - found out it was Kaspersky. Completely uninstalled it & now I have maleware or something a few days later. I ran Malewarebytes & it found a bunch of stuff it quarantined but now when I open Firefox or explorer www-searching.com comes up. I'm getting new browser windows opening when I click on anything. Firefox is now CONSTANTLY freezing on me & I uninstalled everything in the add/remove area that didn't belong. I did many searches to see how to get rid of this www-searching.com thing & nothing is working. I even right clicked on the firefox desktop icon & took out the searching.com stuff that was after the firefox stuff in the "Target" line. Any help I'd greatly appreciate!! Thank you.
     
  2. Nevan

    Nevan

    Joined:
    Jan 26, 2015
    Messages:
    216
    Hello, scorpio613. My nickname is Nevan and I will be helping you getting your system back on its electronic feet.

    Before we get started, please keep these things in mind:

    • Always read every part of my post carefully. If you don't, you may do something wrong and there could be more problems to solve.
    • If your security programs give you any warnings when using tools I asked you to, don't be afraid. Every tool I provide to you is 100% safe.
    • Only run tools that I ask you to. Some of them can be dangerous to your system as they have much power.
    • You should save or print my instructions. It is possible that we will be using Safe mode, which will cut you off from your internet connection and without access to them, you might be stuck.
    • Malware removal is a complicated process that takes multiple steps to be completed. Don't give up, be patient.
    • The tools we are going to use and your software may cause unwanted interactions. Because of that, I recommend you to make backups of any important files from your machine before proceeding as they might be lost.
    • I recommend you to stay with me until I tell you that we are done. It is important because when your system does not show any bad symptoms anymore it does not mean that it is 100% clean.
    • Every program I ask you to download should be saved to and run from desktop. If you don't know how to choose the direction of where a download is saved, check this site. You can also just copy these programs to your desktop manually and then run them from there.
    • Remember that the fixes I give you are only for your machine. Using it on other systems may (and probably will) cause problems.
    • Finally, if you have any questions or are unsure about something, just ask. I will not blame you for it. It is better to ask rather than regret it later.

    Also, please note that I'm currently in training, so my answers to you will have to be checked first by an experienced helper before I can post them. This can lengthen the time between my answers to you, but in return you will have an extra person reviewing your log.

    Let's get started :)



    First, I'd like to have a look at your system. Please, do the following:

    FRST Scan

    Download Farbar Recovery Scan Tool and save it to your Desktop. There are two different versions:
    • Click here to download the 32-bit version.
    • Click here to download the 64-bit version.
    If you don't know which version you should use, download one of them and check if it's working or not. If it doesn't, download the second one. Once you have the right one, perform the instructions below.

    1. Right click FRST.exe (or FRST64.exe) and click Run as administrator. When the tool opens click Yes to disclaimer.
    2. Make sure that Addition.txt is checked and press the Scan button.
    3. It will produce two logs - one called FRST.txt and another one called Addition.txt in the same directory the tool is run from.
    4. Select all (CTRL+A) the content of the logs, copy them (CTRL+C) and paste (CTRL+V) them into your next reply.



    Things that should appear in your next post:
    • FRST.txt log content
    • Addition.txt log content
     
  3. scorpio613

    scorpio613 Thread Starter

    Joined:
    Jan 20, 2015
    Messages:
    65
    I tried sending both reports together & separately. Said I'm only allowed 1000 characters
     
  4. Nevan

    Nevan

    Joined:
    Jan 26, 2015
    Messages:
    216
    Could you please try adding them as attachments?
     
  5. scorpio613

    scorpio613 Thread Starter

    Joined:
    Jan 20, 2015
    Messages:
    65
    Ok I know how to add an attachment when there's a paperclip, there's no paper clip on here. I just see a button for an image & a link attachment.
     
  6. Nevan

    Nevan

    Joined:
    Jan 26, 2015
    Messages:
    216
    I hope that you like images :)

    Step #1
    [​IMG]

    Step #2
    [​IMG]

    Step #3
    [​IMG]

    You should be able to do the rest :)
     
  7. scorpio613

    scorpio613 Thread Starter

    Joined:
    Jan 20, 2015
    Messages:
    65
    I actually LOVE visuals!! Thank you!!! Before I do what I THINK will work, let me make sure it will. Can I go on Notepad where the list is & hit file save to desktop & attach it that way? Will you be able to see the whole thing?
     
  8. Nevan

    Nevan

    Joined:
    Jan 26, 2015
    Messages:
    216
    Now you've lost me :)

    After clicking the "Browse..." button, go to Desktop on the window that appears (assuming that you saved FRST on Desktop), then find FRST.txt and click Open, then click Upload near the file name. After that, do the same thing for Addition.txt.

    If you can't figure it out then tell me and I'll provide more images :)
     
  9. scorpio613

    scorpio613 Thread Starter

    Joined:
    Jan 20, 2015
    Messages:
    65
    The txt. files popped up in Notepad & there's A LOT of info. If I save it to the desktop & put it on here will you be able to see the entire thing? I'll just try it.
     

    Attached Files:

  10. Nevan

    Nevan

    Joined:
    Jan 26, 2015
    Messages:
    216
    Alright, you've done it :)

    I'll now take a look at these logs and will come back with instructions once they are approved by my teacher.
     
  11. Nevan

    Nevan

    Joined:
    Jan 26, 2015
    Messages:
    216
    In the meantime, please, do the following:

    CKScanner


    1. Download CKScanner and save it to your Desktop.
    2. Right click CKScanner.exe and select Run as administrator.
    3. Give permission if necessary, and click Search For Files.
    4. After a very short time, when the cursor hourglass disappears, click Save List To File.
    5. A message box will verify the file saved. Please run the program once only.
    6. Double-click the CKFiles.txt on your desktop and copy/paste the content in your next reply.

    You should be able to paste it without any problems, but in case you are not, just attach it :)
     
  12. scorpio613

    scorpio613 Thread Starter

    Joined:
    Jan 20, 2015
    Messages:
    65
    CKScanner 2.4 - Additional Security Risks - These are not necessarily bad
    c:\users\jen\downloads\keygen.exe
    scanner sequence 3.AP.11.BONAOZ
    ----- EOF -----
     
  13. Nevan

    Nevan

    Joined:
    Jan 26, 2015
    Messages:
    216
    Hello, scorpio613.

    Let's start with a warning.

    P2P Warning

    I noticed that you have or have had a P2P (Peer-to-Peer) file sharing program on your machine:

    • ĀµTorrent

    It is important to stay away from them as they are used to share pirated material. The programs themselves can be safe, but majority of the files shared through them is infected.

    Some of things to keep in mind when using P2P programs:


    • Your computer is more likely to get infected with malware, which will result in coming back to our or other forums for help.
    • You may have your important data stolen, including passwords, photos or personal information.
    • You help to share pirated material, which may result in arrest, fines, or even jail time for illegal downloads of copyrighted material.

    If I still didn't convince you, please read these short reports about how dangerous it can be to use P2P programs:


    Whether you remove them or not is your decision. Though I strongly recommend you to uninstall your P2P programs as they most likely will cause problems in the future.

    If you choose not to remove them, please refrain from using them until we are done on cleaning your computer.



    Step #1
    AntiVBS/VBE

    Download Anti VBS/VBE to your desktop

    • download the appropriate version (32 bit or 64 bit) and double click the file to run it.
    • After a couple of seconds (might also take a whole minute if the machine is heavily infected and/or slow) a report will open in Notepad.
    • Post that report

    Be aware this is a very new programme and as such is not recognised by any Antivirus or Windows, it is safe so allow it to run



    Step #2
    FRST Fix


    1. Download attached fixlist.txt file to your desktop.
      >> fixlist.txt <<
      NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system
    2. Right click FRST64.exe on your desktop and click Run as administrator. When the tool opens click Yes to disclaimer.
    3. Press the Fix button just once and wait.
      NOTE: It's important that both FRST64.exe and fixlist.txt are in the same location or the fix will not work.
    4. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
    5. When finished, FRST will generate a log on the desktop (Fixlog.txt). Select all (CTRL+A) the content of the log, copy it (CTRL+C) and paste (CTRL+V) it into your next reply.




    Step #3
    Uninstall programs

    Go to Start Menu>Control Panel>Programs>Uninstall a program (or Control Panel>Programs and Features if using icon view) and remove the following programs:

    • Booster-Web

    Optional programs to uninstall:

    • ĀµTorrent



    Things that should appear in your next post:

    • Fixlog.txt log content
    • AntiVBS/VBE log content
    • Please tell me if you have successfully uninstalled Booster-Web
    • Please tell me if you still have any problems with your computer
     

    Attached Files:

  14. scorpio613

    scorpio613 Thread Starter

    Joined:
    Jan 20, 2015
    Messages:
    65
    I hope these two things are what you need. There's so much stuff on my desktop right now I'm not sure if those are the right files. I did finally see Booster-Web in the Add/Remove section. I clicked uninstall & it said it was already gone but it still removed it. After the system had to restart, I pulled up Explorer again to get back to the forum. I also opened Firefox. Both still have www-searching.com as the homepage.
     

    Attached Files:

  15. Nevan

    Nevan

    Joined:
    Jan 26, 2015
    Messages:
    216
    Hello, scorpio613.

    Let's try something different.

    Step #1
    Junkware Removal Tool

    1. Download Junkware Removal Tool to your Desktop
    2. Close any open windows
    3. Disable your Antivirus program (click here if you don't know how to do this)
    4. Double click JRT.exe on your desktop to run it
    5. Click any button to start the scan
    6. Wait for Junkware Removal Tool to finish the scan
    7. When the scan is finished, JRT.txt will be saved to your desktop and it will automatically open
    8. Select all (CTRL+A) the content of the log, copy it (CTRL+C) and paste (CTRL+V) it into your next reply.



    Step #2
    AdwCleaner

    1. Close any open windows
    2. Double click AdwCleaner.exe on your desktop to run it
    3. Click the [​IMG] button
    4. Wait for AdwCleaner to finish the scan
    5. When the scan is finished, there will be "Pending. Please uncheck elements you don't want to remove" message. Leave everything as it is and click [​IMG] button.
    6. When the cleaning is finished, the program will ask you to reboot the system. Please do so.
    7. Once your machine has rebooted, a Notepad window will be opened. If it won't, you can find it in C:\AdwCleaner. The report will be saved as AdwCleaner[S0].txt.
    8. Select all (CTRL+A) the content of the log, copy it (CTRL+C) and paste (CTRL+V) it into your next reply.

    Remember to enable your Antivirus program once you're done!



    Things that should appear in your next post:

    • JRT.txt log content
    • AdwCleaner[S0].txt log content
     
  16. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/1142230

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice