Popup de virus d'infection sur malavida Solved

Question

Hello,
I wanted to install Sonic Stage 4.3 on my old PC, and since the access to the server from the link provided on the Comment ça marche site wasn't working: https://www.commentcamarche.net/telecharger/audio-musique/20673-sonicstage/
... I tried to find it elsewhere and wasn't careful enough. After attempting to install it via Malavida, I ended up with an infection.
I first cleaned up with CCleaner, then ran Malwarebytes.

Attached is the link to view the report: https://jnv0dphnwa.1fichier.com/

I await your response to know if I can delete everything or what I should do...

Additionally, if someone can tell me where I can download Sonic Stage safely, I would also appreciate it

Thank you in advance
Tricetop

Malekal_morte- · Answer

Hello,

You have installed adware and potentially unwanted programs on your PC that open advertisements and slow down the computer and web browsers.
Here is the procedure to follow to remove them:

Download https://www.malekal.com/adwcleaner-supprimer-virus-adwares-pup/?t=33839&start= AdwCleaner (from Xplode) to your desktop.
On the AdwCleaner page, to the right, click on the gray diskette with the green arrow to start the download.
Run AdwCleaner, click on [Scan].
The scan may take several minutes, please be patient.
Once the scan is complete, click on [Clean]

Once the cleanup is finished, a report will open. Copy/paste the content of the report in your next reply by copy/paste.
If that doesn’t work, use the site http://pjjoint.malekal.com to host the report, provide the link to the report in a new message.

Note: The report is also saved under C:\AdwCleaner[S1].txt

then reset your browsers:
==================================
Reset your browsers and/or manually reconfigure your web browsers (home page, search engine, etc.) but also delete/disable unnecessary/unwanted extensions:
* Internet Explorer and add-ons / search engines: https://forum.malekal.com/viewtopic.php?t=41399&start=
* Firefox: https://www.malekal.com/reparer-firefox/?t=36057&start=
* Google Chrome: https://www.malekal.com/reparer-google-chrome/?t=35837&start=

--
Like the angel you are, you laugh creating a lightness in my chest,
Your eyes they penetrate me,
(Your answer's always 'maybe')
That's when I got up and left

tricetop · Answer

Thank you for your response.
I downloaded AdwCleaner to the desktop, launched it, and then clicked on scan.
The scan takes 1 minute, but when I click on clean, it crashes and freezes the whole PC (it's old, to be fair), I've rebooted once and it does the same thing... I can't even access Ctrl+Alt+Del and I have to reboot
What can I do?

tricetop · Answer

The PC is very slow, but I still have access to Firefox.
I am on Windows XP Home Edition version 5.1 ... service pack 3
Do you think I can remove these unwanted programs using Malwarebytes?
While waiting for your response, I will try again ...

Malekal_morte- · Answer

Reset Firefox: https://www.malekal.com/reparer-firefox/?t=36057&start=

then:

Perform an OTL Scan - Time: About 40min
=============================================
OTL allows you to diagnose running programs and detect infections - The program will generate two reports OTL.txt and Extras.txt
Provide both reports:

You can follow the instructions on this page to help you: https://www.malekal.com/tutorial-otl/

* Download http://www.geekstogo.com/forum/files/file/398-otl-oldtimers-list-it/ to your desktop.
(On Vista/Win7, you need to right-click on OTL and choose Run as administrator)

In the case of Avast!, do not launch the program in the Sandbox (see help link above).

* Launch OTL
* At the top right of Quick analysis, check "all users"
* Click on the Analyze button.

**** If during the scan - OTL is not responding, do not touch anything and let the scan continue ****

* When the scan is finished, use the site http://pjjoint.malekal.com/ to send the OTL.txt report (and Extra.txt if present).
Provide the pjjoint links pointing to these reports here in a response.
I repeat: give the pjjoint report link here in response.

DO NOT COPY/PASTE THE REPORT HERE - PROVIDE THE PJJOINT LINK IN A NEW MESSAGE

--
Like the angel you are, you laugh creating a lightness in my chest,
Your eyes they penetrate me,
(Your answer's always 'maybe')
That's when I got up and left

tricetop · Answer

I reset Firefox and then launched OLT from the desktop
Here are the 2 files OTL.txt and Extra.txt

https://pjjoint.malekal.com/files.php?id=20140513_k11v12t15r15l12
https://pjjoint.malekal.com/files.php?id=20140513_c5c8b13f13k15

For your information, Avast raised an alert when I interacted with your link http://pjjoint.malekal.com/

Please let me know what I should do next

tricetop · Answer

I’m giving you some additional information...
In the meantime, without doing anything on the PC for 10 minutes, another Avast alert was triggered:

Infection blocked
URL: h_n95_hal9000_redintelligence_net__request_content_p...
Infection: URL:Mal

So this may have nothing to do with your link...

Malekal_morte- · Answer

Relance OTL.
o under Custom Scan, copy and paste the content from the box below (make sure to start with:OTL).
Click Fix, a report will appear, copy/paste the content here:

:OTL
SRV - [2014/05/13 14:54:06 | 000,317,720 | ---- | M] () [Auto | Running] -- C:\Program Files\webget\bin\utilwebget.exe -- (Util webget)
SRV - [2014/05/13 10:46:50 | 000,317,720 | ---- | M] () [Auto | Stopped] -- C:\Program Files\webget\updatewebget.exe -- (Update webget)
SRV - [2014/05/12 02:59:36 | 000,549,008 | ---- | M] (Cherished Technololgy LIMITED) [Auto | Running] -- C:\Documents and Settings\All Users\Application Data\WPM\wprotectmanager.exe -- (Wpm)
SRV - [2014/05/08 12:52:32 | 000,704,112 | ---- | M] (Cherished Technololgy LIMITED) [Auto | Running] -- C:\Documents and Settings\All Users\Application Data\IePluginServices\PluginService.exe -- (IePluginServices)
DRV - [2014/05/12 16:40:56 | 000,055,224 | ---- | M] (StdLib) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\{9edd0ea8-2819-47c2-8320-b007d5996f8a}Gt.sys -- ({9edd0ea8-2819-47c2-8320-b007d5996f8a}Gt)
IE - HKLM\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86}
IE - HKLM\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: URL = https://www.google.com/webhp?gws_rd=ssl{searchTerms} <b>[US - 50.97.32.133]</b>
IE - HKU\S-1-5-21-2108417415-1229122426-3256438479-1007\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: URL = https://www.google.com/webhp?gws_rd=ssl{searchTerms} <b>[US - 50.97.32.133]</b>
O2 - BHO: (IETabPage Class) - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - C:\Program Files\SupTab\SupTab.dll (Thinknice Co. Limited)
O2 - BHO: (webget) - {dc264a72-fa75-4948-b881-ea8eff8e5dd2} - C:\Program Files\webget\webgetBHO.dll (webget)
[2014/05/13 16:06:57 | 000,055,224 | ---- | C] (StdLib) -- C:\WINDOWS\System32\drivers\{9edd0ea8-2819-47c2-8320-b007d5996f8a}Gt.sys
[2014/05/13 13:54:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Daniel\Application Data\SupTab
[2014/05/13 13:54:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\IePluginServices
[2014/05/13 13:54:07 | 000,000,000 | ---D | C] -- C:\Program Files\SupTab
[2014/05/13 13:54:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\WPM
[2014/05/13 13:53:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Daniel\Application Data\sweet-page
[2014/05/13 13:53:24 | 000,000,000 | ---D | C] -- C:\Program Files\webget

* post the report here

Restart the computer

Like the angel you are, you laugh creating a lightness in my chest,
Your eyes they penetrate me,
(Your answer's always 'maybe')
That's when I got up and left

tricetop · Answer

Here it is, and the report is below  https://pjjoint.malekal.com/files.php?id=20140513_u15b9k11n8g13

Malekal_morte- · Answer

Scan Malwarebytes (duration: approximately 40 minutes of scanning):
==================================================
Download and install Malwarebyte: https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
Update it and then start a scan.

At the end of the scan, click "Quarantine All" at the bottom left.
Restart the computer if needed.
After restarting, reopen Malwarebytes.
Find the report in the History tab.
On the left, Exam logs.
Double-click on the scan in the list.
Then at the bottom, Copy to Clipboard
Go to http://pjjoint.malekal.com and at the bottom, right-click/paste to paste the Malwarebytes scan report.
Click send.
In a new message here in response, provide the pjjoint link so that the report can be reviewed.

Like the angel you are, you laugh creating a lightness in my chest,
Your eyes they penetrate me,
(Your answer's always 'maybe')
That's when I got up and left.

tricetop · Answer

Hello,  Here is the report: https://pjjoint.malekal.com/files.php?id=20140514_h13k7q138c10

Malekal_morte- · Answer

I think we’re at the end, no more problems?

--
Comme l'ange que tu es, tu ris en créant une légèreté dans ma poitrine,
Tes yeux me pénètrent,
(Ta réponse est toujours 'peut-être')
C'est à ce moment-là que je me suis levé et je suis parti.

tricetop · Answer

It seems good even though the PC is still slow (but it wasn't very fast before)
If you have any tips to fix this, I'm all ears...
Otherwise, I think it's fine
A big thank you for your help and the time you've dedicated to me!

Malekal_morte- · Answer

good :)

To no longer be taken in.
Read - Potentially Unwanted Programs (PUPs): https://www.malekal.com/adwares-pup-protection/

--
Like the angel you are, you laugh creating a lightness in my chest,
Your eyes they penetrate me,
(Your answer's always 'maybe')
That's when I got up and left

tricetop · Answer

I'm getting back to you with a question.
The PC is running very slowly since the actions above. I feel like Malwarebytes is still running and using a lot of memory.
Can I uninstall it even though it has quarantined viruses? If I uninstall it, will I not "release" the viruses? Sorry for this question that will surely make you laugh!!!
Thank you

tricetop · Answer

It's done. Should I use other cleaning software like ADW Cleaner or not?

tricetop · Answer

ok, thank you

Popup de virus d'infection sur malavida

16 réponses

Samsung j5 unable to answer

Scam of the suvedene highway

No sound with ps3 and hdmi

Wake up from sleep mode in windows 10.

Internet connection problem with my ipad

Free box: remote control broken

Suspicious number text message

I receive calls from unallocated numbers.

Minecraft restore the cursor and the bar.

My ps3 keeps shutting down on its own...