WOT-shopping virus removal

Arthur.S wrote on 2/22/2015, 6:16 AM
Well, somehow I've ended up with one of those damn shopping virus things - roll around it's called. The last thing I installed before it appeared was Nero disc speed from the official Nero website. Not installed anything else for ages. have uninstalled it now.

I've tried all the recommended software including adwcleaner, JRT, and Malware Bytes - which I already own anyway. Lots of crap found and removed. IE is now fine, but Chrome (my normal browser) is still infected terribly. Tried resetting etc, but still there. Now trying Bit Defender, which doesn't appear to be finding anything.

What I don't get, is who on earth would actually BUY anything from such an annoying piece of 'hijack' ware????


Arthur.S wrote on 2/22/2015, 7:49 AM
Bit Defender found zilch. I appear to have got rid of it by a system restore from safe mode.
Steve Grisetti wrote on 2/22/2015, 8:30 AM
If you're talking about that trojan that loads a bunch of shopping ads every time you hover over a link, mine snuck onto my computer through Firefox. Resetting Firefox and then running AdwCleaner finally zapped it from my computer.

But I reset all of my browsers and run Malware Bytes just for good measure. It's a persistent bug to be sure!
Derm wrote on 2/22/2015, 8:56 AM
+1 for AdwCleaner
Arthur.S wrote on 2/22/2015, 9:09 AM
Yeah, I was quite surprised that it worked on IE but didn't work on Chrome. The restore has definitely fixed it now though.
ddm wrote on 2/23/2015, 3:31 PM
have you tried going into the chrome settings under "extensions" and seeing if the offending software is checked?
rraud wrote on 2/23/2015, 4:38 PM
Those sneaky bastards. I recall this being sneaked onto one of my PCs as well. I think I was able to just uninstall it the usual way, though I used 'Revo Uninstall' which removes the leftover registry entries as well.
Arthur.S wrote on 2/23/2015, 5:15 PM
Yes ddm, that was the first place I looked. I followed all of the advice I could find. Worked on IE, but not on Chrome. Hooooray for windows restore. :-0
TheHappyFriar wrote on 2/23/2015, 8:15 PM
So it's not something stupid I did, I got it too.

It's still messing with my IE and my Metro IE browser doesn't work right because of it even though it's removed. I tried resetting IE to no avail.

I disabled it in Chrome & FF, then uninstalled. Those seem fine now.

Wonder where it came from if several of us got it. :?
Arthur.S wrote on 2/24/2015, 2:53 AM
Without getting paranoid, I first noticed it when I came here. Who would actually want to leave the thing in place, let alone buy something via it? Has anyone here actually made a purchase through this or a spam email??
Kimberly wrote on 2/24/2015, 3:09 AM
McAfee Stinger is free and is pretty good. I use paid McAfee but I've had occasion to use Stinger too and for me it worked great.


TheHappyFriar wrote on 2/24/2015, 5:26 AM
I first noticed it on the control panel for one of my websites so no reason to be paranoid. :)

TheHappyFriar wrote on 2/25/2015, 8:26 PM
Anyone find out how to definitely get this off? I just started up my computer & chrome had another one auto-installed it seemed.
Arthur.S wrote on 2/26/2015, 6:51 AM
The only way I found to get it off (of Chrome) was the system restore. Had to be from safe mode too.
monoparadox wrote on 2/26/2015, 8:51 AM
The first quick thing I do is download and run the Microsoft Malicious Software Removal tool. If you search for it, make sure you're downloading from a Microsoft.com domain (yes, I've gotten paranoid).

I've installed webroot on a few machines, but not my editing machine (which just runs the basic Microsoft defender). Webroot is recommended by PCmag, is effective and runs a smaller footprint than a lot of the others. Seems to be effective.