clickerer.com, qwik fix ??

Avast Free Antivirus / Premium Security
1

one of my machines is infected with the clickerer.com, does anybody know of a qwik fix or can it only be done manualy ?? AV blocks it but it pops up all the time…
anybody dealt with this before ??

2

hi Gio7707,

Reports on above domain here:
http://www.mywot.com/en/scorecard/clickerer.com
http://sitecheck.sucuri.net/results/clickerer.com
http://www.pagesinventory.com/domain/www.clickerer.com.html
http://zulu.zscaler.com/submission/show/e02b81095441a72f0f46a4467ff2fb04-1378790710
http://urlquery.net/report.php?id=5055864

Appears to be a site located in India.

As zulu zscaler has identified the site as elevated in risk due to geographical location, I’d suggest the following to ensure you are clean.

http://forum.avast.com/index.php?topic=53253.0 Run both AdwCleaner and Malwarebytes and use the cleansing routine to remove and quarantine any baddies. If not fully resolved, then attach resulting logs from both and also run OTL and aswMBR.exe and attach those logs as well.

A certified malware expert will be notified should you need assistance with this.

3

thanks, so far I have used Adwcleaner and Malwarebytes, I also did a boot cleaner with AV, but no luck so far …will follow up with OTL and MBR…

thanks

4

OK. Certified malware expert has been notified. As we will need all logs attached to see what is on this system, please attach in next reply.

[EDIT:] Fixed typos.

5

Is there any update on how to fix this annoying malware, on my url it also mentions something about gcrunner.exe…can’t find it on my harddrive …any suggestions ??

6

Hi without the OTL log we can go no further I am afraid. So if you could attach that and a screenshot of the alert if possible

7

Logs attached? essexboy is a teacher in malware removal, so you’re in the best of hands, but is hand-tied with out the logs, as he cannot see what is on your system without the logs.

8

Thanks, sorry but I will have to schedule a day for that , it’s time consuming , however is this a brandnew type of virus or is it a known issue ??

9

Hello,

I had exactly the same problem today. It seems to be a new virus/worm/malware?

So I tried AdwCleaner / Malwarebytes / OTL / aswMBR and TSSDKiller. They found several malwares but after cleaning and rebooting, Avast kept on poping up a threat box with clickerer.com and runner.exe.

Then I managed to find the file runner.exe. I deleted the folder where it was (GC), in safe mode. And it seems to be OK now.

I’ll tell you if the problem happens again.

10

Whenever you’re ready, essexboy will step in. As he does this in his free time after work and likely lives in a different time zone, might be a lag between posts, so just be aware of that.

Likely to be a variant or newer malware rather than a virus. Not a known issue. essexboy cannot see what you have until the logs are attached.

Help here is still free, and does not matter how long it takes.

11

I have tried to find the runner.exe file , but was not sucessfull, can you please give me some instructions where this folder is located , or the steps/instructions on how to remove it ?? This seems to be the major issue here…

your help is highly appreciated … thanks

12

I believe essexboy asked you to run OTL and supply the log file so that help can be provided.

13

Thanks for the help, really appreciated but if mafou’s instructions are right and work then it would be the fastest way to get rid of the malware.I will have to wait and see…

quote from mafou :

I had exactly the same problem today. It seems to be a new virus/worm/malware?

So I tried AdwCleaner / Malwarebytes / OTL / aswMBR and TSSDKiller. They found several malwares but after cleaning and rebooting, Avast kept on poping up a threat box with clickerer.com and runner.exe.

Then I managed to find the file runner.exe. I deleted the folder where it was (GC), in safe mode. And it seems to be OK now.

I’ll tell you if the problem happens again.

14

As mafou’s first and last post was 8 days ago the fastest avenue to your cure would have been to supply the OTL log file and you would more than likely have been fixed up within hours, another thing to point out is even if mafou did manage to find and delete the “runner.exe” there is a high probability their may still be remnants on his system also but it’s your choice.

15

This is not a virus but an addon/extension that is masquerading as something else

16

Thanks essexboy, sorry I was not able yet to provide some logs, but AV will always block it , it just keeps poping up about every 10 minutes, it must be associated with chrome broswer as it will open the infection details :

Infection Details

URL: http://clickered.com/cen?ag
Process: C:\Users\Gio7707\AppData\Local\GC\Runner…
Infection: URL:Mal

however hopefully tonight I have the time to get more info and logs …

thanks

17

No problem, the thing is that automated tools never really get to the root of the problem. It usually requires a manual tweak

18

Ok , I do know that this malware is associated with google chrome, it sometimes ask to connect to the site ,thank god AV always gets me always an abort connection message.

I have uninstalled chrome for now and it seems to work …

unfortunately mafou is not responding yet … we will see … but I think the uninstall of chrome works fine as of now…

it really seems to work …

19

Ok this really works …no pop ups since then !!

20

That is the problem with chrome, it is easy to subvert