Pc: Browsersafeguard - Grrrrrrrrr!

[Chan110]

My sons Win8 seems to be taken over by millions of popups on every webpage.

I have set BLOCKED POPUPS on his Chrome and Internet Explorer - but no good :-(

Now installed Chrome AdBlocker - will see how that goes.

Then one night when going to www.google.co.uk we got message:

"Cannot validate this website, receiving bad credentials..." Or words to that affect!

So now neither IE nor Chrome can use google?!!!!

A little search on internet (non google :-( )

Reveals maybe a program called BROWSERSAFEGUARD is the culprit for:

1. The google block

2. Popup ads

Internet also say:

1. Uninstall via control panel - DID NOT WOTK :-(

2. Remove via SPY HUNTER - seem to have found it - but at REMOVAL time, it said "please purchase" - eeek

3. Tried MS Malware and other Spyware software - they couldnt find it (coz BrowserSafeGuard is legit????)

Any thoughts, folks?

Update: So far i disable the PROXY SERVER checkbox and that seem to work

- but each time laptop is reboot, the PROXY SERVER is auto checked and the popups are back and google is blocked :-(

[Jonny5ive]

Malwarebytes anti malware. Worked for me.

[Chan110]

Malwarebytes anti malware. Worked for me.

Yeah tried that as well - nope! :-(

[ChrisRs]

Tried iObit?

http://www.iobit.com/

[Daz716]

I run with 3 FREE programs.

Always clear everything and recomended by PCI mags.

They are :

Adaware,

spybot search and destroy,

and AVAST

They work alongside each other with no issues, and cover what's required

[GentleGiant]

Did you run MWB in safe mode??

 

This often stops malware from running scripts to hide itself at start-up - allowing MWB to find it and remove it.

 

If you still have no luck, you need something like COMBOFIX; but I am not sure if they do a Win8 version.

 

Once you get past the known malware, you may find it exposes multitudes of other crud that has been silently installed; be prepared for multiple reboots into safe mode to clear it all.

[Chan110]

Cheers guys! :-)

I will give em all a try tonight!

[kilted]

Definitely worth trying it from safe mode as a lot of the malware gets loaded in the normal startup.

[gadgetman]

And tell him to be careful where he goes for his porn

[Chan110]

And tell him to be careful where he goes for his porn

Lol

He can't - I set Parental Control "ON"

not had chance to test tonight ... :-(

[Chan110]

I run with 3 FREE programs.

Always clear everything and recomended by PCI mags.

They are :

Adaware,

spybot search and destroy,

and AVAST

They work alongside each other with no issues, and cover what's required

I already tried S&D.

Always used AVAST in the past - but since I got parental control j thought I leave it this time....maybe I should install it.

Chris: IOBit Free sounds a good all in one combo :-)

Right.

In Safe Mode - running MWB now ...

[GentleGiant]

Run S&D in safe mode as well .... safe mode is always the first choice against malware infections.

 

Disabling network connections/wifi is also advisable, because some malware can repair itself in real time as you try to delete it, by downloading each bit as you delete the original bit; some even have "spare" copies of itself that sdo the job; a bit like whack-a-mole.

[Chan110]

Run S&D in safe mode as well .... safe mode is always the first choice against malware infections.

 

Disabling network connections/wifi is also advisable, because some malware can repair itself in real time as you try to delete it, by downloading each bit as you delete the original bit; some even have "spare" copies of itself that sdo the job; a bit like whack-a-mole.

Oops - think i click the COMPLAINT on your post by mistake! sorry!!!

Yes - will do S&D in safe mode later, thks :-)

Look!

Didnt find before in normal mode ,

Now found and quarantine in Safe Mode :-)

RockeTab supposed to be linked to BrowserSafeGuard...

No time to test.

Will do more test tonight!

Thanks all for help thus far! :-)

[gadgetman]

Some of the major av companies have specialist programs to remove the top 50 nasties.

Might be worth trying out one of them.

[vindaloo]

http://www.tomsguide.com/us/browser-safeguard-remove-how-to,news-19273.html

 

I think if normal methods failed I'd go to the appdata folder and delete the Browsersafeguard folder. That might cause some issues for browsers if defaults and plugins have been installed but probably won't break anything completely and should be easily recoverable.

[Chan110]

Spybot in safe mode - found things NOT found in normal mode - YAY! :-)

[Chan110]

Nooooooooooooo!!!

Chrome

IE

[Chan110]

Its STILL there!

Even i have QUARANTINE RocketTab!

Try again to UNINSTALL -

It again says UNINSTALLED COMPLETE -

But its still there.

So what if i go into Safe Mode and uninstall:

Oh its NOT there (but it is installed with a normal user login):

So if installed using a normal login,

Can i unstall using ADMIN login?

[Chan110]

Ok

Back to UNCHECKING this then :-(

But every couple of minutes it RE-checks that box automatically :-( :/( :-(

[gadgetman]

What is that k9 Web protection app and grade1?

[vindaloo]

Start windows in safe mode with networking. Then try the uninstalls. Where is it installed? In the /program files.... (main windows repository) or /user/username/appdata etc? i.e. If you search for browsersafeguard.exe, WTH is it?

[Chan110]

What is that k9 Web protection app and grade1?

Dunno :-(

[Chan110]

Start windows in safe mode with networking. Then try the uninstalls. Where is it installed? In the /program files.... (main windows repository) or /user/username/appdata etc? i.e. If you search for browsersafeguard.exe, WTH is it?

Couldn't find it before.

I'll have another look.....

[gadgetman]

Most browser hijacks come bundled with some other nasty and they help repair each other.

Remove anything you and your lad can't id. Also look for other apps last modified or installed the same date as this nasty and bin them off in safe mode before running malware bytes again.

[Chan110]

Most browser hijacks come bundled with some other nasty and they help repair each other.

Remove anything you and your lad can't id. Also look for other apps last modified or installed the same date as this nasty and bin them off in safe mode before running malware bytes again.

I think the MAIN culprit is BROWSERSAFEGUARD :-(

Can't rid

Can't uninstall

And not showup in safe mode control panel :-(