Clickered url:mal causing alerts every 10 minutes. Please Help!

My issue is identical to the post below.
Jonno2 posted “Help needed to remove Clickered.com malware”
URL https://forum.avast.com/index.php?topic=152883.0

I read up on the replies and downloaded Farbar and ran it.
I attached both logs also.

Any help would be greatly appreciated!

Let me know if this stops it :slight_smile:

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

HKLM-x32\...\Run: [] => [X] SearchScopes: HKCU - {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = http://rocket-find.com/results.php?f=4&q={searchTerms}&a=rckt_ir_14_30_ch&cd=2XzuyEtN2Y1L1QzutDtDtC0Ezz0CyC0DtA0EyEzytBtAzzzytN0D0Tzu0SzytAtAtN1L2XzutBtFtBtCtFtCyEtFyEtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StCzyzy0B0A0FzzyDtG0EyDyByCtGtC0FtDyCtG0F0DyB0AtGtAzytBzzzytByBtAyBzy0D0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEyB0AtD0F0Dzy0FtG0A0B0DyCtGyByE0F0BtG0Dzy0FtAtGtDyD0A0ByD0F0E0D0DtByB0E2Q&cr=984477854&ir= BHO: No Name -> {11111111-1111-1111-1111-110611331111} -> No File Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File CHR StartupUrls: Default -> "hxxp://start.mysearchdial.com/?f=1&a=irmsd1103&cd=2XzuyEtN2Y1L1QzutDtDtC0Ezz0CyC0DtA0EyEzytBtAzzzytN0D0Tzu0SyBtDtBtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=1574016855&ir=", "hxxp://www.v9.com/?type=hp&ts=1400811825&from=irs&uid=395049983_397234_0C8D2389&i=psd&t=342f2ebea", "hxxp://www.v9.com/?type=hppp&ts=1400977752&from=irs&uid=395049983_397234_0C8D2389&i=psd&t=3430c3d72", "hxxp://www.v9.com/?type=hppp&ts=1401159039&from=irs&uid=395049983_397234_0C8D2389&i=psd&t=34327e6f9", "hxxp://www.v9.com/?type=hppp&ts=1401163862&from=irs&uid=395049983_397234_0C8D2389&i=psd&t=34328a35e", "https://www.yahoo.com?fr=hp-avast&type=odc278" CHR DefaultSearchKeyword: Default -> 4319F3DC0C70C9477C64F097BF62955CE6E9002D9BAC1857A2B2A6453147C312 CHR DefaultSearchURL: Default -> E8ED7F2EC63752CAE1AE1D49C7B042E313D51103A2C17CA27CF13085448E6975 CHR HKCU\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION S2 trntv; C:\Users\GAMING\AppData\Roaming\TornTV.com\TornTVSvc.exe [X] S2 Update Deal Keeper; "C:\Program Files (x86)\Deal Keeper\updateDealKeeper.exe" [X] 2014-08-26 11:05 - 2014-08-26 11:10 - 00000000 ____D () C:\Users\GAMING\AppData\Local\Idle~_~Crawler 2014-08-26 11:05 - 2014-08-26 11:05 - 00004590 _____ () C:\Windows\System32\Tasks\Idle~_~Crawler Runner Task: {03742AA0-7233-41EB-9E38-E22941DAF8D4} - System32\Tasks\Idle~_~Crawler Runner => %LOCALAPPDATA%\Idle~_~Crawler\Idle~_~Crawler.exe <==== ATTENTION Task: {967FB7B1-65A0-4DDF-B763-B99F710FDBCF} - System32\Tasks\Microsoft\Windows\Maintenance\Idle~_~Crawler Update => %LOCALAPPDATA%\Idle~_~Crawler\Idle~_~Crawler.exe <==== ATTENTION C:\Users\GAMING\AppData\Roaming\TornTV.com C:\Program Files (x86)\Deal Keeper C:\Users\GAMING\AppData\Local\Idle~_~Crawler EmptyTemp: CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe
Run FRST and press Fix
On completion a log will be generated please post that

:slight_smile:
Seems to have done the trick!
Thanks so much.

I believe this is the completion log.

Any further problems ?