Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: How do i remove a malware that opens new tabs to http://loa.teebik.com


04 Apr 2014   #1

win 7 64 bit
 
 
How do i remove a malware that opens new tabs to http://loa.teebik.com

Firefox keeps opening up new tabs for http://loa.teebik.com. Seems to be some kind of malware but malware anti bytes, spybot and microsoft security essentials cant detect it.

Theres no suspicious programs in add/remove programs nor can i find any suspicious processes.

Any ideas?

My System SpecsSystem Spec
.

04 Apr 2014   #2

W7 Pro SP1 64bit
 
 

Maybe the steps mentioned here:
https://support.mozilla.org/en-US/questions/954802

Then wait for someone to help you with other security related scans.
My System SpecsSystem Spec
04 Apr 2014   #3

win 7 64 bit
 
 

Uh i dont see how thats related to malware? My search engine is still google and when i open a new tab it works normally.
My System SpecsSystem Spec
.


04 Apr 2014   #4

Win7 Pro-64 Bit
 
 

Have a read of this and see if it helps with your problem.

Remove Loa.teebik.com popup virus (Easy Removal Guide) | PC Infected
My System SpecsSystem Spec
04 Apr 2014   #5

W7 Pro SP1 64bit
 
 

Then I misunderstood this part:

Quote   Quote: Originally Posted by Question2 View Post
Firefox keeps opening up new tabs for http://loa.teebik.com. Seems to be some kind of malware but malware anti bytes, spybot and microsoft security essentials cant detect it.

Theres no suspicious programs in add/remove programs nor can i find any suspicious processes.

Any ideas?
My System SpecsSystem Spec
04 Apr 2014   #6

win 7 64 bit
 
 

Yea it opens up new tabs, but it has nothing to do with the search engine and when i open a new tab myself it works fine.

Its just that randomly new tabs open with that website.

I tried running adwcleaner but it just gives me a huge list of results that dont show any relation to the website, including my firefox profile file...i dont know what im supposed to delete exactly?
My System SpecsSystem Spec
04 Apr 2014   #7

Windows 7 Home Premium 64Bit
 
 

Hey, So when you open up firefox, it opens up your google homepage but also opens up another tab thats page is League of Angels Teebik Official Site - Play League of Angels Now For Free!


Oh must have posted at the same time lol, Can you post the logs and il have a look at them buddy?

Please download Junkware Removal Tool to your desktop.


  • Shutdown your antivirus to avoid any conflicts.
  • Right click over JRT.exe and select Run as administrator on Windows Vista or Windows 7, double-click on XP.
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next reply message
  • When completed make sure to re-enable your antivirus
My System SpecsSystem Spec
04 Apr 2014   #8
Microsoft MVP

Windows 7 Ultimate 32bit SP1
 
 

Please post the .txt log from the AdwCleaner scan.
My System SpecsSystem Spec
07 Apr 2014   #9

win 7 64 bit
 
 

No, it only opens up the tab at random intervals.

I tried running adwcleaner and removing most of the results, but that didnt help unfortunately.

Report : # AdwCleaner v3.023 - Report created 08/04/2014 at 06:35:33
# Updated 01/04/2014 by Xplode
# Operating System : Windows 7 Ultimate Service Pack 1 (64 bits)
# Username : Question - QUESTION-PC
# Running from : C:\Downloads\adwcleaner(1).exe
# Option : Scan

***** [ Services ] *****


***** [ Files / Folders ] *****

File Found : C:\Users\Question\AppData\Roaming\Mozilla\Firefox\Profiles\9d6236fx.default\user.js

***** [ Shortcuts ] *****


***** [ Registry ] *****


***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16521


-\\ Mozilla Firefox v28.0 (en-US)

[ File : C:\Users\Question\AppData\Roaming\Mozilla\Firefox\Profiles\8gkzekb8.test\prefs.js ]


[ File : C:\Users\Question\AppData\Roaming\Mozilla\Firefox\Profiles\9d6236fx.default\prefs.js ]

Line Found : user_pref("extensions.fvd_single.surfcanyon.ramp.start_time", "1396839510470");
Line Found : user_pref("extentions.webcake.defaultEnableAppsList", "layers,brain/features,newOffers/wc");
Line Found : user_pref("extentions.webcake.installId", "6ddefe77-0227-408f-9308-77a345300fa1");

[ File : C:\Users\Question\AppData\Roaming\Mozilla\Firefox\Profiles\aoox848m.a\prefs.js ]


-\\ Google Chrome v

[ File : C:\Users\Question\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [5919 octets] - [04/04/2014 20:27:36]
AdwCleaner[R1].txt - [1395 octets] - [08/04/2014 06:35:33]
AdwCleaner[S0].txt - [5986 octets] - [07/04/2014 12:57:28]

########## EOF - C:\AdwCleaner\AdwCleaner[R1].txt - [1515 octets] ##########
My System SpecsSystem Spec
07 Apr 2014   #10

win 7 64 bit
 
 

Junkware :

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Ultimate x64
Ran by Question on 04/08/2014 Tue at 6:36:48.44
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Empty Folder] C:\Users\Question\appdata\local\{06A296BE-98F4-40C4-A083-0A95E7DD1D3F}
Successfully deleted: [Empty Folder] C:\Users\Question\appdata\local\{1D13CE89-C692-4D67-BE58-FBC610C22A56}
Successfully deleted: [Empty Folder] C:\Users\Question\appdata\local\{33ABC095-2C68-4D78-A812-678F36A67C42}
Successfully deleted: [Empty Folder] C:\Users\Question\appdata\local\{D7EA58A4-0812-4B6A-83C2-4D07D4A7DBCA}
Successfully deleted: [Empty Folder] C:\Users\Question\appdata\local\{FD264330-CC9F-4F42-ACB8-C1519D864C5E}



~~~ FireFox

Successfully deleted: [File] C:\Users\Question\AppData\Roaming\mozilla\firefox\profiles\9d6236fx.default\user.js
Successfully deleted: [Folder] C:\Users\Question\AppData\Roaming\mozilla\firefox\profiles\9d6236fx.default\extensions\addon@freecor der.com
Successfully deleted the following from C:\Users\Question\AppData\Roaming\mozilla\firefox\profiles\9d6236fx.default\prefs.js

user_pref("extensions.fvd_single.surfcanyon.ramp.start_time", "1396839510470");
user_pref("extensions.news@news.net.install-event-fired", true);
Emptied folder: C:\Users\Question\AppData\Roaming\mozilla\firefox\profiles\9d6236fx.default\minidumps [212 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 04/08/2014 Tue at 6:43:11.36
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
My System SpecsSystem Spec
Reply

 How do i remove a malware that opens new tabs to http://loa.teebik.com




Thread Tools



Similar help and support threads for2: How do i remove a malware that opens new tabs to http://loa.teebik.com
Thread Forum
IE10 opens 2 tabs Browsers & Mail
Solved IE8 opens new windows insteadof tabs Browsers & Mail
Browser opens never-ending chain of tabs when I click on send mail to Browsers & Mail
Solved IE9 32bit opens empty new tabs Browsers & Mail
Spyware problem: Firefox opens up random tabs System Security

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 07:42 PM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33