Hello,
Shorte st page (http://ceesty.com/wV6s9W) open on Opera every day around 2.30 pm. I can’t delete it. I can’t even find where it is.
I used Farbar Recovery Scan Tool and give FRST.txt and Additions.txt.
Thank you in advance for the help.
It may be a while before one of the volunteer malware removal specialists can get back to you. It depends on available time and what time zones you are both in.
If not a false positive, then only one to detect as malware:
https://www.virustotal.com/#/url/862f48fd0707ba92a9eb4fd0e413a225c12c1332676b1afcfd058085147a8670/detection
Detected by malwares.com URL checker, other detections by Fortinet’s.
I see:
Suspicious URLs found in: -http://ceesty.com/wV6s9W redirecting to
1: hxxp://go·onclasrv·com/apu·php?zoneid=1543391 1: & -http://go.onclasrv.com/apu.php?zoneid=1543391 ->- -http://cobalten.com/apu.php?zoneid=1543391 which 3 detect as malicious and 1 says is suspicious:
https://www.virustotal.com/#/url/5e1a25ce43138f241455c797c89876f29ab2778df57175dcbbaee0edc17721b6/detection
which is a known infection source, -3 community score on VT for that file, still could be FP.
Wait for a final verdict from a qualified remover here.
polonus (volunteer 3rd party cold reconnaissance website security analyst and website error-hunter)