Help with: secure-surf.net and Nova.rambler.ru

Hi everyone, please i need help on how to remove Nova.rambler.ru and secure-surf.net these two websites open automatically on my laptop, i scanned my system with avast but no virus was detected , i notice these two websites always open on chrome but not on opera nor Firefox, i didn’t download any software of recent and no suspicious extension in my chrome, please help me.

Attach your basic diagnostic logs. (MBAM and FRST)
Instructions: https://forum.avast.com/index.php?topic=194892

Monitoring for logs. Thanks.

Thank you so much, i have attached the logs, thanks

OK, now you’ve to wait a bit…

https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
Fix with Farbar Recovery Scan Tool

https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
[b] This fix was created for this user for use on that particular machine.
https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif

https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
Running it on another one may cause damage and render the system unstable.
https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
[/b]
Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

How is your system running now?

My system is still somehow slow. I noticed that my system does not connect to the internet whenever Malwarebytes is running, please . why is this so?

I attached the fixlog file

Please try and reboot your system into Safe Mode (if you need instructions on this, see https://support.microsoft.com/en-us/help/17419/windows-7-advanced-startup-options-safe-mode#1TC=windows-7 ) and then reboot it into Normal mode. Is your system still running slow now?

I have rebooted it to safe mode and normal mode, am still checking the performance. Can i uninstall Malwarebytes?

Yes you can uninstall Malwarebytes. Have you considered updating the version of Avast also?

Some background reporting on -nova.rambler.ru which website is redirecting to 1: -http://www.tns-counter.ru/V13a → -http://www.tns-counter.ru/V13b
Name of the game there is ads: TNS Gallup AdFact to be precise.
In code redirect to -https://r0.ru/ this is a browser hijacker, which dbrisendine came to deliver you from :wink:
often this BHO comes in with you not paying attention when you installed free software.

Read on the initial malcode here: https://www.securityspyware.com/nova-rambler-ru-virus-redirect-removal-r0-ru/
and the analysis by Redleg’s fileviewer:
https://aw-snap.info/file-viewer/?protocol=not-secure&tgt=nova.rambler.ru&ref_sel=GSP2&ua_sel=ff&fs=1

polonus

Yes,thank you so much for your kind assistance i will update the version, but the virus definition of this current version(avast 2015) is updated ,i don’t know the reason why avast didn’t detect the secure-surf.net and nova.rambler.ru virus? can i conclude that avast is not 100% secure?

Thank you. but i didn’t download any software of recent. And i am very annoyed that my system got infected under avast antivirus watch!! its very bad

You should conclude to keep it updated. :wink:

kindly help me with a link to a latest and full version not trial version

Update to the latest version (17.4.2294): https://forum.avast.com/index.php?topic=201729.0