search.searchcompletion.com., pop-up malware Options

[Kennedy Marbella]

Any one know anything about search.searchcompletion.com? It shows itself as pop up windows that appear on the right of the screen saying "Did you also wish to search for (insert item you had no wish whatsoever to search for)". Hovering the mouse reveals the searchcompletion url. Google that and it seems to be quite nasty malware

A Mozilla forum links to /blog.teesupport.com/how-to-remove-search-searchcompletion-com-redirect-virus/ which has details on removal but I'm never sure about deleting registry entries

[richbuff]

Please see the first Important topic. There, you will find instructions for logs.

[Kennedy Marbella]

Please see the first Important topic. There, you will find instructions for logs.

Thankyou Richbuff, I didn't read to the end at first!

MalwareBytes and SuperAntiSpyware found nothing (well, the latter found 2 tracking cookies)

Heres the GSI log link

http://www.getsysteminfo.com/read.php?file...e412677a95470c1

[richbuff]

You're welcome. And the other log?

● Post an virusinfo_syscure.zip log using the AVZ tool so we can diagnose the active malware that can't be removed or unknown malware:

● To create a virusinfo_syscure.zip log using the AVZ tool, please follow THESE INSTRUCTIONS

Emphasis in the original.

[Kennedy Marbella]

You're welcome. And the other log? Emphasis in the original.

Here it is...

Attached File(s)

 virusinfo_syscure.zip ( 295.34K ) Number of downloads: 1

 

[richbuff]

Run this script, instructions: http://forum.kaspersky.com/index.php?showt...mp;#entry678368 PC will reboot:

CODE

begin
SetAVZGuardStatus(True);
SearchRootkit(true, true);
QuarantineFile('C:\Program Files\RelevantKnowledge\rlservice.exe','');
StopService('RelevantKnowledge');
DeleteService('RelevantKnowledge');
DeleteFile('C:\Program Files\RelevantKnowledge\rlservice.exe');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.

After run script, post back about any changes with the issue.

[SoBizarre]

You probably have vShare or similar Firefox add-on installed. It's not a malware, so no antivirus is going to detect it for you. Just remove all "unofficial" add-ons and you should be fine.