My dad has caught on the laptop (Win7) malware.
When the browser (Firefox) is started, first the homepage appears. If you enter a link / search term, you will be directed to lifesearch16.club. It follows 1 page with "Search Results" page 2ff. Empty, as if nothing had been found.
I have tried:
Firefox scanned for AddOns
Firefox search engine settings controlled
Taskmanager looked for lifesearch16 something
Watched programs and functions under Windows
Avira antivirus program updated manually + search
Kaspersky Rescue CD and search
Avira PC Cleaner
Malwarebytes
In each case the current version, nothing was found.
What else could help?
You know what your dad does on the internet.
Go to about: config (but watch what you do there)
And look for the url. Put everything on "standard" what is with this link.
With luck it is enough
I try, thanks.
Something bumpy translated, but that should be all right
http://spywarenotfall.de/gewusst-wie-lifesearch16-club-adware-entfernen/
Do not try to install any lifesearch uninstallers. These are usually viruses or Trojans.
The program can also have a different name. Ask the father when it is and reconfigure e.g. Via the download folder, what he has installed.
Deactivate in the Task Manager ALL processes that are not necessary for operation and try by which ones they are not.
Reinstall the browser and check your DNS settings in the last step.
My dad says "there was a window that could not be closed, then I clicked around, it twitched and then it was gone." In other words, he agreed to the installation, I would say. But I can't find it under programs, in the download folder or in the task manager. Not similar names.
Thanks for the link, I'm writing out the relevant. When editing regedit appears "and delete the display name: [RANDOM]" is meant that I should delete everything that is displayed to me? Do you know that?
This is the autostart folder in the registry.
Thou shalt throw out any entries that you can't assign, or just the one that has something to do with the malware.
If you are unsure, you should always make a backup there.
OK thanks.
