PDA

View Full Version : PC deleting history & an odd popup



Lovelee
27-12-2014, 10:51 AM
Hi all, Merry Christmas :)

I have something closing my browser maybe 2 - 3 times a day - no warning. My history deletes at that stage, never repeats O:)

Also when i click a new link another page opens http://www.vprgpt.com/sc?p=YTI4MDQ3MTQ5MDMKAuCIvkLMGYiLlZFH2WcsF34EvC%2B PdlGm0QAVKJAmRwGWzhZ2LWvOm0RMb6JMABxMm9%2Bm%2BW7nq xn1dkTY%2FLnx4tu5ynuZ38i1MXBqeA%2F%2B0mfOd8m0JpwuZ Y%2BGSsSkTn0%2B78hBBPQRlFxklf9fCjJfxAxHHQVtD4CfY3S 1ahtmJl6Uvhbs5NmIxjTRu48qUn5pRI10zTM%2FP7ZhvFYv9N7 UBICcnljpmdmzdsPwcJzEbccKIef%2BBW6HCXHOm8DPXgP9lyQ EiLVu1UUM4E9JnJ%2FXlJ1fBScEsQbYX6yORaaK97dZWkzxD%2 FTPGhgyNEkLciCkBYzgVmPy7gYJa5yDzejEJB8MqloiwXOC1el TErrCyH6758aQ51mVlWNIZ%2FME8n8%3D&ia=0&t=1&ndom=5

Showing though it cant do anything ...... Ive run scans, deleted a lot of crap I dont use. Does anyone recognise this - any thoughts about it.

Leigh

Speedy Gonzales
27-12-2014, 11:26 AM
Sounds like adware to me. Run adwcleaner (https://toolslib.net/downloads/viewdownload/1-adwcleaner/). Click on scan . Wait then click on clean. Wait. Then tell it to remove whatever. Close browsers first

Then reboot

wainuitech
27-12-2014, 11:28 AM
Run Malwarebytes as well, you have some sort of infection.

Lovelee
27-12-2014, 11:51 AM
Thank u guys ... I will run it for a while and see what pops up :O

This is the log from the JRT

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.4.0 (11.29.2014:1)
OS: Windows 8.1 x64
Ran by Leigh on Sat 27/12/2014 at 11:39:05.47
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files

Successfully deleted: [File] "C:\Users\Leigh\appdata\local\google\chrome\user data\default\local storage\http_www.superfish.com_0.localstorage"



~~~ Folders

Successfully deleted: [Folder] "C:\Users\Leigh\AppData\Roaming\optimizer pro"
Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\optimizer pro v3.2"
Successfully deleted: [Folder] "C:\Users\Leigh\documents\optimizer pro"



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~
Scan was completed on Sat 27/12/2014 at 11:47:41.41
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~

wainuitech
27-12-2014, 12:07 PM
That confirms it "optimizer pro" = installed when either updating or installing something. These types of programs can drag all sorts of rubbish in.

Lovelee
27-12-2014, 12:14 PM
Cheers, now I have the red 7 pointed star which is usually bottom left .. and its top left, appears to be ummmm stopping me typing when it flashes .. GRRRR

Lovelee
27-12-2014, 01:13 PM
All good now .. thank u guys xxxx

Lovelee
27-12-2014, 01:17 PM
Oops .. but Im still getting this page come up when I click a link

http://www.vprgpt.com/sc?p=OTI3NTY3ODY4MnMfM1xDrysL0PKaYBO0cHkZ43Ue8Y6r4 %2FA40Q%2Fpp9mntntgHakhVKKKM9PleG0hrzEYdmHP1sxch1Y jzIcDK9mqD%2BAYpxtd7X31EqN7qy46xn%2FlwyKda1YhDoK7N 5FHqUwpE0LPG3oBjO2Kb6p0afs439ZT9Go4ZzQRixFXVMJ02FW WUBFXQJheDsV5OwGakNLIQjsy7Xv4naqNYSTCeajUGwh1yayOh Bhw8sM%2FA8TPYclgeLach73r4a%2BITo8EaesLq6MmZJBf%2F CBqcx3x3qKLgIEmRyxMS9lHw4e8AdITx%2B5fyKOVstz5x6rUU 1eFamW1tcBaqBrP5fbPA05PHQu4ffSTu8dNEFa7CNoUBDrp&ia=0&t=1&ndom=5

Lawrence
28-12-2014, 07:53 AM
Looks like it will be a Browser Plugin that's causing the problem http://malwaretips.com/blogs/online-surveys-center-virus-removal/

Follow the instructions and scan with ADW cleaner and Hitman Pro plus the others as well