How do i remove a malware that opens new tabs to http://loa.teebik.com

Page 1 of 2 12 LastLast

  1. Posts : 123
    win 7 64 bit
       #1

    How do i remove a malware that opens new tabs to http://loa.teebik.com


    Firefox keeps opening up new tabs for http://loa.teebik.com. Seems to be some kind of malware but malware anti bytes, spybot and microsoft security essentials cant detect it.

    Theres no suspicious programs in add/remove programs nor can i find any suspicious processes.

    Any ideas?
      My Computer


  2. Posts : 10,485
    W7 Pro SP1 64bit
       #2

    Maybe the steps mentioned here:
    https://support.mozilla.org/en-US/questions/954802

    Then wait for someone to help you with other security related scans.
      My Computer


  3. Posts : 123
    win 7 64 bit
    Thread Starter
       #3

    Uh i dont see how thats related to malware? My search engine is still google and when i open a new tab it works normally.
      My Computer


  4. Posts : 1,491
    Win7 Pro-64 Bit
       #4

    Have a read of this and see if it helps with your problem.

    Remove Loa.teebik.com popup virus (Easy Removal Guide) | PC Infected
      My Computer


  5. Posts : 10,485
    W7 Pro SP1 64bit
       #5

    Then I misunderstood this part:

    Question2 said:
    Firefox keeps opening up new tabs for http://loa.teebik.com. Seems to be some kind of malware but malware anti bytes, spybot and microsoft security essentials cant detect it.

    Theres no suspicious programs in add/remove programs nor can i find any suspicious processes.

    Any ideas?
      My Computer


  6. Posts : 123
    win 7 64 bit
    Thread Starter
       #6

    Yea it opens up new tabs, but it has nothing to do with the search engine and when i open a new tab myself it works fine.

    Its just that randomly new tabs open with that website.

    I tried running adwcleaner but it just gives me a huge list of results that dont show any relation to the website, including my firefox profile file...i dont know what im supposed to delete exactly?
      My Computer


  7. Posts : 1,413
    Windows 7 Home Premium 64Bit
       #7

    Hey, So when you open up firefox, it opens up your google homepage but also opens up another tab thats page is League of Angels Teebik Official Site - Play League of Angels Now For Free!


    Oh must have posted at the same time lol, Can you post the logs and il have a look at them buddy?

    Please download Junkware Removal Tool to your desktop.



    • Shutdown your antivirus to avoid any conflicts.
    • Right click over JRT.exe and select Run as administrator on Windows Vista or Windows 7, double-click on XP.
    • The tool will open and start scanning your system.
    • Please be patient as this can take a while to complete.
    • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
    • Post the contents of JRT.txt into your next reply message
    • When completed make sure to re-enable your antivirus
      My Computer


  8. Posts : 8,608
    Windows 7 Ultimate 32bit SP1
       #8

    Please post the .txt log from the AdwCleaner scan.
      My Computer


  9. Posts : 123
    win 7 64 bit
    Thread Starter
       #9

    No, it only opens up the tab at random intervals.

    I tried running adwcleaner and removing most of the results, but that didnt help unfortunately.

    Report : # AdwCleaner v3.023 - Report created 08/04/2014 at 06:35:33
    # Updated 01/04/2014 by Xplode
    # Operating System : Windows 7 Ultimate Service Pack 1 (64 bits)
    # Username : Question - QUESTION-PC
    # Running from : C:\Downloads\adwcleaner(1).exe
    # Option : Scan

    ***** [ Services ] *****


    ***** [ Files / Folders ] *****

    File Found : C:\Users\Question\AppData\Roaming\Mozilla\Firefox\Profiles\9d6236fx.default\user.js

    ***** [ Shortcuts ] *****


    ***** [ Registry ] *****


    ***** [ Browsers ] *****

    -\\ Internet Explorer v11.0.9600.16521


    -\\ Mozilla Firefox v28.0 (en-US)

    [ File : C:\Users\Question\AppData\Roaming\Mozilla\Firefox\Profiles\8gkzekb8.test\prefs.js ]


    [ File : C:\Users\Question\AppData\Roaming\Mozilla\Firefox\Profiles\9d6236fx.default\prefs.js ]

    Line Found : user_pref("extensions.fvd_single.surfcanyon.ramp.start_time", "1396839510470");
    Line Found : user_pref("extentions.webcake.defaultEnableAppsList", "layers,brain/features,newOffers/wc");
    Line Found : user_pref("extentions.webcake.installId", "6ddefe77-0227-408f-9308-77a345300fa1");

    [ File : C:\Users\Question\AppData\Roaming\Mozilla\Firefox\Profiles\aoox848m.a\prefs.js ]


    -\\ Google Chrome v

    [ File : C:\Users\Question\AppData\Local\Google\Chrome\User Data\Default\preferences ]


    *************************

    AdwCleaner[R0].txt - [5919 octets] - [04/04/2014 20:27:36]
    AdwCleaner[R1].txt - [1395 octets] - [08/04/2014 06:35:33]
    AdwCleaner[S0].txt - [5986 octets] - [07/04/2014 12:57:28]

    ########## EOF - C:\AdwCleaner\AdwCleaner[R1].txt - [1515 octets] ##########
      My Computer


  10. Posts : 123
    win 7 64 bit
    Thread Starter
       #10

    Junkware :

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Junkware Removal Tool (JRT) by Thisisu
    Version: 6.1.4 (04.06.2014:1)
    OS: Windows 7 Ultimate x64
    Ran by Question on 04/08/2014 Tue at 6:36:48.44
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




    ~~~ Services



    ~~~ Registry Values



    ~~~ Registry Keys



    ~~~ Files



    ~~~ Folders

    Successfully deleted: [Empty Folder] C:\Users\Question\appdata\local\{06A296BE-98F4-40C4-A083-0A95E7DD1D3F}
    Successfully deleted: [Empty Folder] C:\Users\Question\appdata\local\{1D13CE89-C692-4D67-BE58-FBC610C22A56}
    Successfully deleted: [Empty Folder] C:\Users\Question\appdata\local\{33ABC095-2C68-4D78-A812-678F36A67C42}
    Successfully deleted: [Empty Folder] C:\Users\Question\appdata\local\{D7EA58A4-0812-4B6A-83C2-4D07D4A7DBCA}
    Successfully deleted: [Empty Folder] C:\Users\Question\appdata\local\{FD264330-CC9F-4F42-ACB8-C1519D864C5E}



    ~~~ FireFox

    Successfully deleted: [File] C:\Users\Question\AppData\Roaming\mozilla\firefox\profiles\9d6236fx.default\user.js
    Successfully deleted: [Folder] C:\Users\Question\AppData\Roaming\mozilla\firefox\profiles\9d6236fx.default\extensions\addon@freecor der.com
    Successfully deleted the following from C:\Users\Question\AppData\Roaming\mozilla\firefox\profiles\9d6236fx.default\prefs.js

    user_pref("extensions.fvd_single.surfcanyon.ramp.start_time", "1396839510470");
    user_pref("extensions.news@news.net.install-event-fired", true);
    Emptied folder: C:\Users\Question\AppData\Roaming\mozilla\firefox\profiles\9d6236fx.default\minidumps [212 files]



    ~~~ Event Viewer Logs were cleared





    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Scan was completed on 04/08/2014 Tue at 6:43:11.36
    End of JRT log
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
      My Computer


 
Page 1 of 2 12 LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 03:39.
Find Us