skegness asc virus

Viruses and worms
1

Hey, i got some trash on my PC and dont know how to remove it. Every 5 minutes Avast! is blocking some object “htpp//skegnessasc.org/accounts/restorefunction.css”. Run both Avast! scan and Malwarebytes Anti-malware, and it didint change anything. Please help :frowning:

2

Step 1

Unisntall:

Free Zip 9.20
OptimizerPro

Step 2

[*]Otvori Notepad i iskopiraj sljedeći tekst koji se nalazi unutar Kod polja.

CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia <==== UWAGA
Task: {B0D91F02-6253-4030-9CB3-4EF60BDC0DAE} - System32\Tasks\Steam-S-1-8-22-9865GUI => C:\Users\Odbiorca\AppData\Roaming\Steam\Reversed\steam.exe <==== UWAGA
C:\Users\Odbiorca\AppData\Roaming\Steam

[*] U okviru Notepad-a klikni na File → Save As
[*] Pod Encoding izaberi UTF-8.
[*] Fajl nazovi Fixlist i sačuvaj na Desktop
[*] Dvoklikom ponovo pokreni FRST.exe
[*] Klikni na Fix i sačekaj dok program ne završi.
[*] Ukoliko program zatraži restart računara, omogući mu da to nesmetano obavi.
[*] Nakon završetka rada, otvoriće se fixlog.txt, sa sadržajem koji treba da kopiraš u temu.
Takođe, na Desktop-u će se nalaziti b.

3

Hi, it might help to post the English instructions…

Edit: OK, I checked the logs… :wink:

4

Sorry, I used wrong canned speech.

  • Open Notepad (click Start button → type notepad.exe → press Enter)
  • Copy text from code block below and paste it into Notepad
CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia <==== UWAGA
Task: {B0D91F02-6253-4030-9CB3-4EF60BDC0DAE} - System32\Tasks\Steam-S-1-8-22-9865GUI => C:\Users\Odbiorca\AppData\Roaming\Steam\Reversed\steam.exe <==== UWAGA
C:\Users\Odbiorca\AppData\Roaming\Steam
  • Go to File → Save As
  • Make sure that UTF-8 is selected as Encoding (left side of Save button)
  • Save it as fixlist.txt on Desktop
  • Open again FRST and click on button Fix
  • Wait until FRST finishes
  • fixlog.txt should be genereted and opened. Attach it your post and wait further instructions.
5

Ok, just run FRST

6

Does Avast still reports bloked URL messages?

7

Yeah, it didnt help.

8

Can you make screenshot of Avast message?

Please post new FRST.txt and Addition.txt.

9

Here you have it, hope language wont be a problem.

10

This fix will restart your PC so save your work before doing this.

  • Open Notepad (click Start button → type notepad.exe → press Enter)
  • Copy text from code block below and paste it into Notepad
RemoveProxy:
cmd: reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters" /v SearchList /d "" /f
Reboot:
  • Go to File → Save As
  • Make sure that UTF-8 is selected as Encoding (left side of Save button)
  • Save it as fixlist.txt on Desktop
  • Open again FRST and click on button Fix
  • Wait until FRST finishes
  • fixlog.txt should be genereted and opened. Attach it your post and wait further instructions.
11

Sadly, it didnt help either, still got the messages.

12
  • Run FRST again
  • In Search box paste:
skegnessasc.org
  • Click on Search registry
  • Attach SearchReg.txt
13

Actually, strangely, a day after the fix the messages stop to appear. I dont understand why, immedially after fix and even a few boot ups later messages were still on, but then they stop. I still fear if my PC may be in danger though. I’m attaching SearchReg just in case, but it is empty anyway.

14

Strange. Had you certain web pages constately loaded in browser during those popups?