26 replies to this topic 2 votes

[Hum]

Rickkins, on 09 January 2013 - 15:57, said:

Uh, it looks like the built in "bookmarks toolbar"
view/toolbars/bookmarks toolbar - uncheck last one.

I should point out that I use wf 16.01, with the bookmarks toolbar enabled...

I do not install or use any toolbars.

I have updated to Firefox 18.

Ran a malware scan. Removed 8 things.

Did an Error check.

All clear.

[Hum]

Note: The AVG scan and removal of Java exploits, also damaged the Java files.

Had to do a Reinstall of Java.

[jnelsoninjax]

GreyWolf, on 09 January 2013 - 16:01, said:

I think everything from release to experimental builds uses %APPDATA%\Mozilla\Firefox as the profile directory.

@jnelson: Did you run HJT as administrator? There are a bunch of "file missing" warnings in your log.

Yes I did. ran it twice just to make sure.
Ran a virus scan and a MWB on it, nothing pops up.

[firey]

[night_stalker_z]

Right click on an empty area of the tab bar and deselect 'Add-on Bar'

[jnelsoninjax]

Now this is odd, I have the address blocked via noscript and that works just fine (for FF), however, it still shows up in IE and Chrome. I attempted to add the address to the host file but that does not seem to work. Also as noted before: I did run a virus and malware scan and nothing shows up, but something has taken over IE's default start page (see screenshot)

I have checked the installed programs and can not locate anything with the name claro search. According to a search online, Claro search is malware, and that I can uninstall it from the control panel (which is not there) and then I can restore IE to default setting from internet options, which I did and it did not fix the issue.

[Hum]

^ I would temp. install and run Adw-Cleaner.

Did you look at the Task Manager processes running when 'claro' pops up ?

You should be able to see an odd program, find it, and Delete.

http://malwaretips.c...o-search-virus/

Claro Search is an adware program that has changed your browser home page and default search engine to claro-search.com. Apart from this unwanted changes, Claro Search has added a useless toolbar on your browser and whenever your are doing a search,it will display on the first search results their own ads.

Claro Search got on your computer after you have installed another program that had bundled in their installer the Claro Search.
You should always pay attention when installing software because often, a software installer includes optional installs, such as this Claro Search. Be very careful what you agree to install. Always opt for the custom installation and deselect anything that is not familiar, especially optional software that you never wanted to download and install in the first place. It goes without saying that you should not install software that you don’t trust.

[episode]

Hum, on 15 January 2013 - 15:38, said:

^ I would temp. install and run Ad-aware.

Did you look at the Task Manager processes running when 'claro' pops up ?

You sholud be able to see an odd program, find it, and Delete.

http://malwaretips.c...o-search-virus/

You use/recommend Ad-aware and AVG? What, did you stop updating your programs in 2006? Both are junk now. Use MalwareBytes and ComboFix to scan. Then ditch AVG and use MSE or Avast.

[jnelsoninjax]

episode, on 15 January 2013 - 15:46, said:

You use/recommend Ad-aware and AVG? What, did you stop updating your programs in 2006? Both are junk now. Use MalwareBytes and ComboFix to scan. Then ditch AVG and use MSE or Avast.

I have MWB and Kaspersky Pure. I have run both on the OS drive and nothing pops up. Hum- When I have IE open there is no claro process running. So I have no clue where this is coming from.

[Hum]

^ This site does a pretty thorough explanation of getting rid of Claro:

http://malwaretips.c...o-search-virus/

As I quoted above, Claro could have installed as part of some other program.

Look at what programs you may have recently added.


And Adw-Cleaner seems to be a good detection and removal proggy.

[episode]

jnelsoninjax, on 15 January 2013 - 22:40, said:

I have MWB and Kaspersky Pure. I have run both on the OS drive and nothing pops up. Hum- When I have IE open there is no claro process running. So I have no clue where this is coming from.

You might, but Hum doesn't. Try ComboFix from BleepingComputer.com

[jnelsoninjax]

I ran combofix and it did something, however Claro search is still in IE, but the toolbar seems to have disappeared, so do I call this a success?