a.marketsnet

Viruses and worms
1

Hi, I was infected by what feels like a virus or worm today that takes over my browser with ads and makes it almost unusable. If I accidentally click on something it takes me to a.marketsnet, not sure if that helps identify what it is. I upgraded to the paid version of Avast but it isn’t finding any viruses, malware or browser extension issues. this is happening in both IE and Chrome, but doesn’t happen on all websites (for example it isn’t happening on the Avast website or on the main google page.

How do I remove this? I saw other posts about this, and it appears I might need some code unique to my computer to remove it based on some other responses I have seen

2

Hello,

Logs to assist in cleaning malware.

https://forum.avast.com/index.php?topic=53253.0

3

Here are the logs. Thanks in advance for any help!

4

https://sites.google.com/site/cannedfixes/home/hosted-images-tools/51a612a8b27e2-Zoek.png
Scan with ZOEK

Please download ZOEK by Smeenk and save it to your desktop (preferred version is the *.exe one)
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.

[*]Right-click on
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/51a612a8b27e2-Zoek.png
icon and select
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg
Run as Administrator to start the tool.
[]Wait patiently until the main console will appear, it may take a minute or two.
[]In the main box please paste in the following script:

createsrpoint;
autoclean;
emptyalltemp;
ipconfig /flushdns;b

[*]Make sure that Scan All Users option is checked.
[*]Push Run Script and wait patiently. The scan may take a couple of minutes.
[*]When the scan completes, a zoek-results logfile should open in notepad.
[*]If a reboot is needed, it will be opened after it. You may also find it at your main drive (usually C:\ drive)

Post its content into your next reply.

5

Here it is. Thanks!

6

How is your PC behaving now?

7

Unfortunately no change. It looks like it is Dragon Branch - an adware/redirect bug.

8

In which browser is this happening?

9

Sorry for the wait on the reply - I was out for a bit of the day.

Originally, it was happening in Chrome and IE, but now it seems like IE is fine, whereas Chrome still has a problem. I don’t have FireFox installed.

I have gone to Chrome Settings:Extensions to remove any suspect extensions, but there is nothing there except Avast and GoogleDocs.

10

Can you reinstall Chrome?

11

uninstalling and reinstalling worked! Thanks! You’ve been so helpful, I really appreciate it.

12

Glad I could help :slight_smile:

• The following will implement some post-cleanup procedures:

=> Please download DelFix by Xplode to your Desktop.

Run the tool and check the following boxes below;
[i]
http://www.mcshield.net/personal/magna86/Images/checkmark.png
Remove disinfection tools

http://www.mcshield.net/personal/magna86/Images/checkmark.png
Create registry backup

http://www.mcshield.net/personal/magna86/Images/checkmark.png
Purge System Restore [/i]
Click Run button and wait a few seconds for the programme completes his work.
At this point all the tools we used here should be gone. Tool will create an report for you (C:[b]DelFix.txt[/b])

The tool will also record healthy state of registry and make a backup using ERUNT program in %windir%\ERUNT\DelFix
Tool deletes old system restore points and create a fresh system restore point after cleaning.