How do i remove a malware that opens new tabs to http://loa.teebik.com

[Question2]

Firefox keeps opening up new tabs for http://loa.teebik.com. Seems to be some kind of malware but malware anti bytes, spybot and microsoft security essentials cant detect it.

Theres no suspicious programs in add/remove programs nor can i find any suspicious processes.

Any ideas?

 

[UsernameIssues]

Maybe the steps mentioned here:
https://support.mozilla.org/en-US/questions/954802

Then wait for someone to help you with other security related scans.

 

[Question2]

Uh i dont see how thats related to malware? My search engine is still google and when i open a new tab it works normally.

 

[BrightBlessings]

Have a read of this and see if it helps with your problem.

Remove Loa.teebik.com popup virus (Easy Removal Guide) | PC Infected

 

[UsernameIssues]

Then I misunderstood this part:

Firefox keeps opening up new tabs for http://loa.teebik.com. Seems to be some kind of malware but malware anti bytes, spybot and microsoft security essentials cant detect it.

Theres no suspicious programs in add/remove programs nor can i find any suspicious processes.

Any ideas?

 

[Question2]

Yea it opens up new tabs, but it has nothing to do with the search engine and when i open a new tab myself it works fine.

Its just that randomly new tabs open with that website.

I tried running adwcleaner but it just gives me a huge list of results that dont show any relation to the website, including my firefox profile file...i dont know what im supposed to delete exactly?

 

[ShamrockRig]

Hey, So when you open up firefox, it opens up your google homepage but also opens up another tab thats page is League of Angels Teebik Official Site - Play League of Angels Now For Free!


Oh must have posted at the same time lol, Can you post the logs and il have a look at them buddy?

Please download Junkware Removal Tool to your desktop.

• Shutdown your antivirus to avoid any conflicts.
• Right click over JRT.exe and select Run as administrator on Windows Vista or Windows 7, double-click on XP.
• The tool will open and start scanning your system.
• Please be patient as this can take a while to complete.
• On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
• Post the contents of JRT.txt into your next reply message
• When completed make sure to re-enable your antivirus

 

[Jacee]

Please post the .txt log from the AdwCleaner scan.

 

[Question2]

No, it only opens up the tab at random intervals.

I tried running adwcleaner and removing most of the results, but that didnt help unfortunately.

Report : # AdwCleaner v3.023 - Report created 08/04/2014 at 06:35:33
# Updated 01/04/2014 by Xplode
# Operating System : Windows 7 Ultimate Service Pack 1 (64 bits)
# Username : Question - QUESTION-PC
# Running from : C:\Downloads\adwcleaner(1).exe
# Option : Scan

***** [ Services ] *****


***** [ Files / Folders ] *****

File Found : C:\Users\Question\AppData\Roaming\Mozilla\Firefox\Profiles\9d6236fx.default\user.js

***** [ Shortcuts ] *****


***** [ Registry ] *****


***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16521


-\\ Mozilla Firefox v28.0 (en-US)

[ File : C:\Users\Question\AppData\Roaming\Mozilla\Firefox\Profiles\8gkzekb8.test\prefs.js ]


[ File : C:\Users\Question\AppData\Roaming\Mozilla\Firefox\Profiles\9d6236fx.default\prefs.js ]

Line Found : user_pref("extensions.fvd_single.surfcanyon.ramp.start_time", "1396839510470");
Line Found : user_pref("extentions.webcake.defaultEnableAppsList", "layers,brain/features,newOffers/wc");
Line Found : user_pref("extentions.webcake.installId", "6ddefe77-0227-408f-9308-77a345300fa1");

[ File : C:\Users\Question\AppData\Roaming\Mozilla\Firefox\Profiles\aoox848m.a\prefs.js ]


-\\ Google Chrome v

[ File : C:\Users\Question\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [5919 octets] - [04/04/2014 20:27:36]
AdwCleaner[R1].txt - [1395 octets] - [08/04/2014 06:35:33]
AdwCleaner[S0].txt - [5986 octets] - [07/04/2014 12:57:28]

########## EOF - C:\AdwCleaner\AdwCleaner[R1].txt - [1515 octets] ##########

 

[Question2]

Junkware :

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Ultimate x64
Ran by Question on 04/08/2014 Tue at 6:36:48.44
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Empty Folder] C:\Users\Question\appdata\local\{06A296BE-98F4-40C4-A083-0A95E7DD1D3F}
Successfully deleted: [Empty Folder] C:\Users\Question\appdata\local\{1D13CE89-C692-4D67-BE58-FBC610C22A56}
Successfully deleted: [Empty Folder] C:\Users\Question\appdata\local\{33ABC095-2C68-4D78-A812-678F36A67C42}
Successfully deleted: [Empty Folder] C:\Users\Question\appdata\local\{D7EA58A4-0812-4B6A-83C2-4D07D4A7DBCA}
Successfully deleted: [Empty Folder] C:\Users\Question\appdata\local\{FD264330-CC9F-4F42-ACB8-C1519D864C5E}



~~~ FireFox

Successfully deleted: [File] C:\Users\Question\AppData\Roaming\mozilla\firefox\profiles\9d6236fx.default\user.js
Successfully deleted: [Folder] C:\Users\Question\AppData\Roaming\mozilla\firefox\profiles\9d6236fx.default\extensions\[email protected]
Successfully deleted the following from C:\Users\Question\AppData\Roaming\mozilla\firefox\profiles\9d6236fx.default\prefs.js

user_pref("extensions.fvd_single.surfcanyon.ramp.start_time", "1396839510470");
user_pref("[email protected]", true);
Emptied folder: C:\Users\Question\AppData\Roaming\mozilla\firefox\profiles\9d6236fx.default\minidumps [212 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 04/08/2014 Tue at 6:43:11.36
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

[Jacee]

Please download TFC by Old Timer TFC - Temp File Cleaner by OldTimer - Geeks to Go Forum and save it to your desktop.
Save any unsaved work. TFC will close ALL open programs including your browser!
Double-click on TFC.exe to run it. If you are using Vista/Windows 7 right-click on the file and choose Run As Administrator.
Click the Start button to begin the cleaning process and let it run uninterrupted to completion.
Important! If TFC prompts you to reboot, please do so immediately. If not prompted, manually reboot the machine anyway to ensure a complete clean.


After the computer reboots and you've used it a while, tell me if you're having any more problems.

 

[matts6887]

have you tried running super anti spyware? If not; try downloading, installing, and running it:

SUPERAntiSpyware - Downloading File

 

[Question2]

Hmm...thanks for all the help guys. After running junkware, everything seems to be ok now...should i still run anything else?

 

[ShamrockRig]

Hey good! I would run Temp File buddy! Super Anti Spyware wouldn't hurt but i dont think its essentially needed.