trkjmp.com URL:Mal

[system]

at the top right of my Chrome browser was a little window that said codecv. when i removed it from Chrome the i.trkjmp.com/crossdomain.xml alert stopped popping up. thanks so much guys, especially Essexboy

jon!

[system]

Impressed by your professionalism!
I ran another scan on OTL, txt file attached:)

[system]

Thing is , i didnt install anything, no addons no nothing today.
The bugger appeared for the first time when i entered an e-shop found on google about soil lol
Must have been hacked i guess?

[system]

@essexboy post:9

Lets see if this stops it first

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL

[*]Under the Custom Scans/Fixes box at the bottom, paste in the following

https://dl.dropbox.com/u/73555776/OTL_Fix.GIF

:OTL
FF - prefs.js..extensions.enabledItems: crossriderapp435@crossrider.com:0.72.17
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (CrossRider) - {A876E312-7D08-401a-B7A6-FAFC5DC2F292} - C:\Program Files\CrossriderWebApps\Crossrider.dll ()

:Files
C:\Program Files\CrossriderWebApps
C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\jpnbdefcbnoefmmcpelplabbkfmfhlho
ipconfig /flushdns /c
netsh int ip reset c:\resetlog.txt  /c
ipconfig /release /c
ipconfig /renew /c

:Commands
[purity]
[resethosts]
[emptytemp]
[CREATERESTOREPOINT]
[Reboot]

[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
[*]Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

After running Malware and OTL, I did this and remove both pops (the first one and the crossdomain one).
I’m sorry that I don’t know much about this stuff, but thank you so very much for all the professionalism and help.
I attached the OTL. and EXTRA. logs if that helps some way.

Again! Thank you so much ;D

[DavidR]

@c4rl4c post:24

After running Malware and OTL, I did this and remove both pops (the first one and the crossdomain one). I'm sorry that I don't know much about this stuff, but [b]thank you so very much for all the professionalism and help[/b]. I attached the OTL. and EXTRA. logs if that helps some way.

Again! Thank you so much ;D

Please create your own new topic, here http://forum.avast.com/index.php?board=4.0 in the viruses and worms forum (click the New topic button at the top of the page) and we will try and help you there. It becomes too confusing with multiple users in the same topic. All of the fixes are unique to the person being helped and could have an adverse effect on another system.