can't get rid of totaladperformance malware!!!!

Viruses and worms
1

hey :smiley: can anyone please please help me out to get rid of this malware. it infected all my browsers (google chrome and internet explorer) when i click on any link, a new tab opens directing me to totaladperformance page. sometimes even without clicking a link, the page just opens. Also it infected the browsers i have on my cellphone!! the browsers keeps opening this totaladperfromance page but not in a new tab, in the same tab and of course this prevents me from browsing anything on my cellphone anymore. :cry:

avast actually detects it on my laptop but doesn’t remove it. I tried adwcleaner and spyhunter but both didn’t remove it as well.
i scanned by FRST and attached the .txt or log files

i’ll really appreciate your help :slight_smile:
and please tell me if you have a solution for my cellphone too…thanks!

2

Hello,

https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/warning.gif
Multiple Resident Protection warning!

Always have one (and no more than one!) AntiVirus program! In this case having more of them will not provide you with better protection - instead they may cause slowness, lock-ups and even mark another ones as harmful, leading to leave your system unstable and even damaged. Please choose only one from the listed below to stay with and uninstall the others:

[]Norton Internet Security
[]avast! Antivirus

Uninstallation procedure:

[*]Press the
https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/WindowsKey.png

  • R on your keyboard at the same time. Type appwiz.cpl and click OK.
    [*]Search for each uninstalled entry, right-click it and select Uninstall.

This should be done until any other steps will be taken.

https://sites.google.com/site/cannedfixes/home/hosted-images-tools/51a612a8b27e2-Zoek.png
Scan with ZOEK

Please download ZOEK by Smeenk and save it to your desktop (preferred version is the *.exe one)
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.

[*]Right-click on
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/51a612a8b27e2-Zoek.png
icon and select
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg
Run as Administrator to start the tool.
[]Wait patiently until the main console will appear, it may take a minute or two.
[]In the main box please paste in the following script:

createsrpoint;
autoclean;
emptyalltemp;
ipconfig /flushdns >>"%temp%\log.txt";b

[*]Make sure that Scan All Users option is checked.
[*]Push Run Script and wait patiently. The scan may take a couple of minutes.
[*]When the scan completes, a zoek-results logfile should open in notepad.
[*]If a reboot is needed, it will be opened after it. You may also find it at your main drive (usually C:\ drive)

Post its content into your next reply.

3

here’s the zoek result file

4

How is your PC behaving now?

5

my pc is behaving the same way
still totaladperformance page keeps showing up :cry:

6

Can you reset your router to factory settings?

7

I don’t think I can :confused:
do I have to?

8

Yes, you have to.

9

totaladperformance still appears :frowning:

10

Does it happen in all browsers?

11

it used to happen in both chrome and IE but now it’s happening only in chrome.

however, now when I open any link in IE, avast keeps showing messages that it blocked some sites and the infection is
JS:Redirector-BXI [Trj]

i don’t know if it’s related to the same malware or not.

12

https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
Scan with Farbar Recovery Scan Tool

Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.

[*]Right-click on
https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
icon and select
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg
Run as Administrator to start the tool.
(XP users click run after receipt of Windows Security Warning - Open File).
[*]Make sure that Addition option is checked.
[*]Press Scan button and wait.
[*]The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.

Please include their content into your next reply.

13

here you go :slight_smile:

14

anyone got a solution??!! ???

15

hy twinheadedeagle will be back later today and keep help out with this. so be pachent.

16

okayy ;D

17

These are not fresh reports.

18

they are fresh ??? i did scan again

do you want me to scan for a third time then :-\

19

Yes, please do it:

https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
Scan with Farbar Recovery Scan Tool

Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.

[*]Right-click on
https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
icon and select
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg
Run as Administrator to start the tool.
(XP users click run after receipt of Windows Security Warning - Open File).
[*]Make sure that Addition option is checked.
[*]Press Scan button and wait.
[*]The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.

Please include their content into your next reply.