Another with a clickred.com problem

Hi,

I am another having a problem with Avast reporting a problem with clickred.com. Pops up three or four times in succession about every 10 minutes.

I have followed the instructions in the “Logs to assist in cleaning malware thread” I ran Malwarebytes which showed nothing. I then ran FRST and the two log files are attached. Finally ran aswMBR.exe and the log file is also attached.

Thanks in advance for your help.

Neil

The guys are notified, may take some hours before anyone is online

Hi :slight_smile:

https://sites.google.com/site/cannedfixes/junkware-removal-tool/JRTbythisisu.png
Fix with Junkware Removal Tool

Please download JRT by Thisisu and save the file to your desktop.
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.

[*]Right-click on
https://sites.google.com/site/cannedfixes/junkware-removal-tool/JRTbythisisu.png
icon and select
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg
Run as Administrator to start the tool.
[*]Follow the prompts and let this process run uninterrupted.
[*]This scan can take a while, depending on your System specs.
[*]Upon completion, a log (JRT.txt) will open on your desktop.

Please include the contents of that file in your reply.
Do not forget to re-enable your previously switched off protection software!
Please also manually reboot your machine after this procedure.

https://sites.google.com/site/cannedfixes/adwcleaner/adwcleaner_new.png
Fix with AdwCleaner

Please download AdwCleaner by Xplode and save the file to your desktop.

[*]Right-click on
https://sites.google.com/site/cannedfixes/adwcleaner/adwcleaner_new.png
icon and select
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg
Run as Administrator to start the tool.
[*]Follow the prompts and click Scan.
[*]When finished, please click Clean.
[*]Upon completion, click Report. A log (AdwCleaner[S*].txt) will open.

Please include the contents of that file in your reply.

Thanks for the prompt reply. I followed the instructions for JRT and after a reboot Avast was still giving me the warnings for clickred.com. I then ran AdwCleaner and it looks like it has solved the problem. I have attached the logs from both programs for information.

Many thanks for your help, you guys are stars!!

Neil

Looks like I spoke too soon! The problem is still there.

Is there anything else I can try?

Neil

We are not done yet, this is a multiple steps process.
Stay with me until I’ll say that you’re clean.

https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
Scan with Farbar Recovery Scan Tool

Please re-run Farbar Recovery Scan Tool.
[*]Right-click on
https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
icon and select
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg
Run as Administrator to start the tool.

XP users click run after receipt of Windows Security Warning - Open File.
8 users will be prompted about Windows SmartScreen protection - click More information and Run.
[*]Make sure that Addition option is checked.
[*]Press Scan button and wait.
[*]The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.

Please include their content in your next reply.

FRST re-run as requested and files attached.

Neil

Any news Naathim?

I really appreciate your efforts.

Neil

Please be patient, it’s weekend. :wink:

just to inform you. Naathim has had a computer breakdown and may be online somtime tomorrow

Thanks for the update. You guys are working really hard to solve our problems.

Neil

Hi and I’m very sorry for the delay. I had a short-circuit accident which deeply fried my home PC’s hard drive. As you may know, it’s quite hard to run a PC without it :wink:

http://up.programosy.pl/foto/ckscanner.jpg
Scan with CKScanner

Download CKScanner by askey127 and save it to your desktop.

[*]Right-click on
http://up.programosy.pl/foto/ckscanner.jpg
icon and select
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg
Run as Administrator to start the tool.
[*]click Search For Files.
[*]When finished, click Save List To File.
[*]Remember to run this tool once only, if not asked to run it again.

Please include the content of CKFiles.txt in your next reply.

That’s OK Naathim, I understand. It’s probably going to be tomorrow evening before I am able to do this due to work commitments.

Thanks,
Neil

No worries, now that I have a new hdd I am operational and will be somewhere around.

ckfiles.txt attached as requested.

Neil

Why you have blocked access to the Adobe servers?

I have no idea. I do have a legal copy of Photoshop Elements 11 installed though, and a not entirely legal copy of Photoshop Lightroom, but this has been installed for a couple of years without causing any problems.

Not entirely legal copy of photoshop could explain that. I’m sorry - I don’t support piracy and cannot help you further. Any help from me will be suspended until illegally obtained soft is removed from that machine.

OK. I will remove the copy of Lightroom tonight when I get home, then hopefully we can carry on.

Neil

Right, so I have un-installed Lightroom and all other software on the PC is legitimate. I don’t condone software piracy and it seems that the copy of Lightroom was installed by someone else 3 years ago.

Strangely, in the hour or so that the PC was being used before removing the software there have been no pop-ups from Avast warning clickred.com.

I have done nothing else apart from running CKScanner as instructed two days ago. Does this seem right to you?

Neil