gzj.jsopen.net - pop up nuisance

Viruses and worms
1

Hi guys, recently received this annoying pop up spam, read up on it today after getting so annoyed with it and it seems i am not the only one that has posted a topic about this threat on this forum so hopefully i can get some help from someone. I am currently following this thread;

http://forum.avast.com/index.php?PHPSESSID=19fko3dp78j511nfmuv42a10k2&topic=53253.0

I will attach any logs you may need to assess my problem.

Prior to today, i did my own investigation of this pop up nuisance, i took it upon myself to download Malwarebytes a couple days back. I did a scan before but didn’t finish it thought it did encounter some infected objects that i removed, however, i was still getting this pop up. (I have 2 log files of MWB, the one named ‘013-09=01’ obviously today’s, is a finished quick scan.)

Today (01/09/13), after being thoroughly annoyed with it now, i done a Google search to see if anyone else had this problem when i came across this forum. I don’t quite know what i have done, but i did delete a few files earlier that had viruses and at this point in time, I don’t seem to be having the pop up appearing but i don’t want to speak to soon so I have my logs, and I’ll post them anyway just in case there is something someone can spot that i have no idea about…

2

This reply consists of the OTL Logs

3

ASWMBR Log attached.

4

Hi try this and let me know the result

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL

[*]Under the Custom Scans/Fixes box at the bottom, paste in the following

https://dl.dropbox.com/u/73555776/OTL_Fix.GIF


:Commands
[CREATERESTOREPOINT]

:OTL
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd72&cd=2XzuyEtN2Y1L1QzutDtDtByDtBtB0AtCtCyDyEyBtDzz0B0FtN0D0Tzu0SyDyBtAtN1L2XzutBtFtBtFyEtFzzyDyDtN1L1Czu1L1C1H1B1QyBtB&cr=809143340&ir=
IE - HKU\S-1-5-21-133469807-2824888359-3128202640-1000\..\SearchScopes\3520EE07B5374915A1AD07D63E7CCD4F: "URL" = http://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd72&cd=2XzuyEtN2Y1L1QzutDtDtByDtBtB0AtCtCyDyEyBtDzz0B0FtN0D0Tzu0SyDyBtAtN1L2XzutBtFtBtFyEtFzzyDyDtN1L1Czu1L1C1H1B1QyBtB&cr=809143340&ir=
[2013/08/20 21:21:34 | 000,000,000 | ---D | M] (VisualBee V.1) -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\0rvft49h.default\extensions\{7aeae561-714b-45f6-ace3-4a8aed6e227b}
[2013/07/27 22:52:01 | 000,000,000 | ---D | M] ("MySearchDial" />;) -- C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\0rvft49h.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}

:Commands
[resethosts]
[emptytemp]
[Reboot]

[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
[*]Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.