Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Nasty Adware - difficult to remove after many attempts

08 Feb 2017   #1
7grant2

Windows 7
 
 
Nasty Adware - difficult to remove after many attempts

Hello everyone, first post here.

I'm usually savvy enough to get rid of most viruses, but this bugger has been deeply embedded somewhere I can't find it. Essentially this adware does two things: whenever starting on the google homepage, a "secure" search will automatically pop up, redirecting my search through bing or secure-search, and at random intervals (once every 3-5 minutes) a new tab opens up to a site called "weevah.[...]" or some site where I can chat with Emily. I also use Google Chrome.

So far I've uninstalled and reinstalled all plugins (I only use Adblock Plus and now Ublock Origin which prevents these pop-ups). I've ran Panda Security on full search, and used ESET Online Scanner, Junkware Removal Tool, TDSS Killer, and Adware Removal. During those searches I removed a trojan.

I'm open to going back through and doing these steps again, but just looking to see if you've guys got suggestions as to removing it. If anyone believes running these through Safe Mode will provide better results, I'll likely begin that.

EDIT: Don't know if this is much help, but after checking the uBlock logger, it appears a blocked domain on the google page is from "https://us.adloads.net/post"


My System SpecsSystem Spec
.
08 Feb 2017   #2
Layback Bear

Windows 7 Pro. 64/SP-1
 
 

Welcome to our forum.

I'm no infection removal expert.

Do you have this installed?

Weeva - Amazing Books - Delightfully Easy


Take a read through this and see if it might help. Do at your own risk.

How to Remove Weevah2.top Hijacker Virus | Updated

Jack
My System SpecsSystem Spec
08 Feb 2017   #3
7grant2

Windows 7
 
 

Went through the second link you posted, and have already done many of the things mentioned.

Nothing sketchy in the task manager. Nothing strange in the RegEdit
CurrentUser->CurrentVersion->Run: Default
LocalMachine->Currentversion->Run: Default, Apoint, HotKeysCmds, IgfxTray, Itunes Helper, SysTrayApp //All system32 or dell/apple stuff
LocalMachine->Wow6432: Default, PSUAMain (Panda Security), SunJavaUpdateSchedule

No unwanted IP Addresses in the hosts file in System32.

Deleted my current user from Chrome -> Adware still here. When I signed back in, it also said that an extension was automatically installed by another program, so its still here.

IP4/IP6 network connections set to automatic.

Chrome Shortcut does not lead to bad .exe file.
My System SpecsSystem Spec
.

11 Feb 2017   #4
Layback Bear

Windows 7 Pro. 64/SP-1
 
 

It could be a program you have installed.

You could use this tutorial by Brink to isolate it.

Troubleshoot Application Conflicts by Performing a Clean Startup


Jack
My System SpecsSystem Spec
13 Feb 2017   #5
7grant2

Windows 7
 
 

Tried that - didn't work. Virus even runs in safe mode.

EDIT: Deleted useless info
My System SpecsSystem Spec
Reply

 Nasty Adware - difficult to remove after many attempts




Thread Tools




Similar help and support threads
Thread Forum
How to remove Trafficfactory.biz adware?
Hi sevenforums.My browsers Chrome and opera are infected with "trafficfactory.biz" adware.Browsing leads to opening annoying ads.Tried adware cleaner but of no use.Any help in removing this adware?
System Security
Advice required to remove adware
On my relatives Win7 laptop she had over 2400 'files' found by Spycatcher which we attempted to remove. Removal was successful and re-scanning showed it was clean. However- in Programmes and Features there still appears a program called Dregol which is apparently a browser hijacker. ...
System Security
How do you remove soundfrost adware?
Several days ago, I installed soundfrost on my computer (win 7). From then on, I always get pop ups, ads, deals. That's really annoying. I have searched adware removal guide, but still failed.
System Security
Adware, Nasty search engines and overall frustration.
Greetings, A typical day in my life using my computer involves running: SUPERAntiSpyware, Malwarebytes Anti-Malware, AdwCleaner, ESET Online Scanner and Microsecurity Essentials. Every day I get a ton of things that are irritating and probably some that are very harmful. Right now the most...
System Security
adware how to remove
have had browser taken over by QVO6 how do I get rid of it , my avast is not picking it up
System Security


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 09:07.
Twitter Facebook Google+ Seven Forums iOS App Seven Forums Android App