PDA

View Full Version : Help Needed - malware/virus removal



mrbluu
20th June 2014, 11:21 AM
My PC has been over run with a malware called surfvox which amongst other things takes over your search engine of your browser.

Does anyone know how to get rid of it??

Thanks

mrbluu

coalesce
20th June 2014, 11:22 AM
http://malwaretips.com/blogs/remove-surfvox-virus/

Mububban
20th June 2014, 11:24 AM
Do a search for Malware Bytes as well, it's free and extremely effective against malware. Download it, run the quick scan first, get rid of whatever it finds, reboot then run the full scan which will take longer.

Steve57
20th June 2014, 11:24 AM
http://malwaretips.com/blogs/remove-surfvox-virus/

Dr Google is your friend but you may not be able to get to it!!

mrbluu
20th June 2014, 11:30 AM
Thanks guys, I've tried most of that and it hasn't worked, I'll get on the rest of it.

LeftyHoges
20th June 2014, 11:34 AM
SuperAntiSpyware is the shiznit. Gets rid of 99% of stuff.

mrbluu
20th June 2014, 11:35 AM
Thanks lefty, I'll run that as well.

markTHEblake
20th June 2014, 12:17 PM
All of the above but first,
Disable browser extensions.
Reset home page setting.
Stop looking at porno.

oncewasagolfer
20th June 2014, 03:58 PM
All of the above but first,
Disable browser extensions.
Reset home page setting.
Stop looking at porno.

I did most of the above last night to remove some spyware.

Mububban
21st June 2014, 03:14 PM
All of the above but first,
Disable browser extensions.
Reset home page setting.
Stop looking at porno.

2/3 good suggestions, 1 cruel and unusual punishment

mrbluu
22nd June 2014, 09:01 PM
I've done everything suggested and it's still coming up on the surfvox webpage with I open my browser...what other options do I have??

Daves
22nd June 2014, 09:48 PM
Have you worked out what software it came with? I gather it gets installed when you install another program or browser extension. Happens a lot with "free" software downloads these days. Norton is the worst leech "virus" going, but you can avoid it if you actually read the install page prompts and don't just click them through.

mrbluu
22nd June 2014, 09:50 PM
Have you worked out what software it came with? I gather it gets installed when you install another program or browser extension. Happens a lot with "free" software downloads these days. Norton is the worst leech "virus" going, but you can avoid it if you actually read the install page prompts and don't just click them through.
It's probably is Norton but I'm sure we got a paid version of it, would this still have viruses?

Daves
22nd June 2014, 11:17 PM
It's probably is Norton but I'm sure we got a paid version of it, would this still have viruses?

No, I meant Norton comes as a "free extra", when you download other free software. You get the option to not install it on the install screens, but most people don't read and just click through.

I had a similiar Adware type "virus" extension that came with a Firefox Extension. It didn't hijack the home page like yours is, it was more subtle and kept throwing up links to its sales page by doing a similar items type dropbox on eBay etc. It was easy enough to get rid of, once I knew what it was.

Have you downloaded any other software or browser extension(s) recently? Have a look at Control Panel, Programs and see what your most recent installs were?

mrbluu
22nd June 2014, 11:59 PM
Gotcha. I'll keep hunting. Thanks.

jasonb
23rd June 2014, 12:08 AM
I had a similar occurrence after installing ilivid to watch live sport from overseas , it would redirect the browser . Uninstalled it, ran spybot seek & destroy , did a couple if scans was then all good .

mrbluu
23rd June 2014, 12:15 AM
Ok now the issue seems to be isolated to Google Chrome. When I start up chrome, it defaults to the surfvox home page. Everything else seems normal.

Daves
23rd June 2014, 12:17 AM
Ok now the issue seems to be isolated to Google Chrome. When I start up chrome, it defaults to the surfvox home page. Everything else seems normal.

Try resetting your home page, then close the browser. Then run Spybot or similar. Then do a restart.

mrbluu
23rd June 2014, 12:21 AM
Try resetting your home page, then close the browser. Then run Spybot or similar. Then do a restart.

I've reset the browsers each time and so far I've ran Malware, Superantispy and I'm currently running Hitman.

I will run spybot next.

Daves
23rd June 2014, 12:24 AM
I've reset the browsers each time and so far I've ran Malware, Superantispy and I'm currently running Hitman.

I will run spybot next.

Make sure you clean out anything in the Quarantine box(s) before the restart.

mrbluu
23rd June 2014, 12:27 AM
Make sure you clean out anything in the Quarantine box(s) before the restart.

Is that recycling bin??

Also out of interest what browsers do u guys use??

Daves
23rd June 2014, 12:33 AM
Is that recycling bin??

Also out of interest what browsers do u guys use??

No, each of the Spyware programs will likely have a Quarantine Box/Bin. In MalwareByte it in the History Tab. In Superantispyware it is in the Tools Tab. And in Spybot it has its own folder. They hold them pending final deletion, in case something goes wrong and you need to restore files.

I use Waterfox (Firefox 64bit).

mrbluu
23rd June 2014, 12:36 AM
I had a similar occurrence after installing ilivid to watch live sport from overseas , it would redirect the browser . Uninstalled it, ran spybot seek & destroy , did a couple if scans was then all good .

Hi JB

Do you mind getting me a link for spybot please.

Daves
23rd June 2014, 12:39 AM
http://www.safer-networking.org/

mrbluu
23rd June 2014, 12:43 AM
http://www.safer-networking.org/

Thanks

Johnny Canuck
23rd June 2014, 01:15 AM
Ok now the issue seems to be isolated to Google Chrome. When I start up chrome, it defaults to the surfvox home page. Everything else seems normal.

I had similar issues with Trovigo not too long ago.

Scroll down to the Chrome section on the link and follow the steps to delete it within Chrome. Just substitute your virus for conduit.


http://forums.anvisoft.com/viewtopic-53-8507-0.html

mrbluu
23rd June 2014, 01:30 AM
Thanks I think I'm on top of it. I uninstalled chrome and ran more scans and reinstalled it. Fingers cross that has done the trick.


Once again thanks for all your help!!

Lobsta
2nd July 2014, 11:27 PM
I had similar issues with Trovigo not too long ago.

Scroll down to the Chrome section on the link and follow the steps to delete it within Chrome. Just substitute your virus for conduit.


http://forums.anvisoft.com/viewtopic-53-8507-0.html

Conduit is a focker to get rid of. Symptoms similar to what bluu is describing. Spent better part of half an hour dealing with it alone on the out-law's computer. Finally bested it, can't remember how.

mrbluu
2nd July 2014, 11:44 PM
No, each of the Spyware programs will likely have a Quarantine Box/Bin. In MalwareByte it in the History Tab. In Superantispyware it is in the Tools Tab. And in Spybot it has its own folder. They hold them pending final deletion, in case something goes wrong and you need to restore files.

I use Waterfox (Firefox 64bit).

Do u find waterfox laggy??

Daves
3rd July 2014, 03:51 AM
Do u find waterfox laggy??

It leaks memory badly, and you have to restart it sometimes, but it is a little better than Firefox. I am also not sure how much Windows 8 is part of the problem. Prick of an OS imo, and Defender seems to slow everything to a crawl at times.

mrbluu
3rd July 2014, 08:38 AM
It leaks memory badly, and you have to restart it sometimes, but it is a little better than Firefox. I am also not sure how much Windows 8 is part of the problem. Prick of an OS imo, and Defender seems to slow everything to a crawl at times.

Yeah I'm finding that I don't like windows 8 or waterfox.