How to remove 'simplesitescan.net' and 4 similar virusses?

system · July 8, 2015, 5:01pm

Hi there,
also my PC is infected by

TwinHeadedEagle · July 8, 2015, 5:03pm

Hello,

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

[*]Right-click on
https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
icon and select
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg
Run as Administrator to start the tool.
(XP users click run after receipt of Windows Security Warning - Open File).
[*]Press the Fix button just once and wait.
[*]If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
[*]When finished FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.

system · July 8, 2015, 6:57pm

Hello,

the virusses ‘simplesitescan.net’ and others now seem to be removed, many thanks .

But aswMBR is still reporting an infection, see line # 6 from bottom in the attached file.
How can this get repaired ?

TwinHeadedEagle · July 8, 2015, 7:39pm

Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.

[*]Right-click on
https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
icon and select
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg
Run as Administrator to start the tool.
(XP users click run after receipt of Windows Security Warning - Open File).
[*]Make sure that Addition option is checked.
[*]Press Scan button and wait.
[*]The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.

Please include their content into your next reply.

system · July 8, 2015, 9:53pm

Attached the two logfiles.

TwinHeadedEagle · July 9, 2015, 5:27am

Please uninstall Flash Player Packages

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

[*]Right-click on
https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
icon and select
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg
Run as Administrator to start the tool.
(XP users click run after receipt of Windows Security Warning - Open File).
[*]Press the Fix button just once and wait.
[*]If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
[*]When finished FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.

system · July 9, 2015, 2:25pm

Uninstalled
Flash Player 17 NPAPI and
Flash Player 18 ActiveX

Afterwards I ran FRST, Fixlog.txt ist attached.

Then I ran aswmbr, it is still reporting an Infection, see the attached file aswMBR.txt, line # 6 from bottom.

TwinHeadedEagle · July 9, 2015, 4:08pm

Is this fresh Aswmbr report?

system · July 9, 2015, 9:04pm

Yes, this was a fresh aswmbr report after uninstall flashplayers and running FRST.

system · July 13, 2015, 4:01pm

At now, 4 days later, aswmbr doesn’t report an infection yet.
How could this be done?

TwinHeadedEagle · July 13, 2015, 5:31pm

We removed it with FRST.

Announcements