Not what you were looking for? Ask our experts!
Reply
Visitor
timetofly
Posts: 1
Registered: ‎07-27-2013

My browsers all keep randomly opening to a page http://tv.channel157news.com..

[ Edited ]

I am using WIN 8 on relatively new PC with an Intel 3930k with comcast high speed 50 MBPS and a new ASUS router (RT-AC66U).

 

Periodically, and usually when I am away from the PC a browser window will open up  possibly at set times or when I come out of sleep mode and have the following link (similar with other browsers):

 

 

 

[Removed]

 

This link is a scam ad for a virus program of some sort.  Many people now are posting on other forums in the last week or so that are getting this with no resolution from anyone yet. Each day I see more and more postings from people getting this issue on various forums with no answers from anyone with a fix.  I run a clean PC and have only DLed things like adobe updates and reliable programs.

 

I contacted Norton live help and the TECH accessed my PC remotely and I actually showed him the page that keeps popping up. He did several internal checks and I believe ran Norton power eraser and was not able to find anything wrong.  I have run several full system scans that showed no issues. I then even tried (DL AFTER this issue) several reliable malware programs (ASC,  Super anti spyware) and the all come up with nothing.

 

I am concerned about this as it seems to be a new and growing issue. The only thing I came up with is that in my TASK SCHEDULER I see the following that I am not sure about:

 

AutoKMS (multiple triggers defined)  which shows READY

 

DSite (At 1:38PM and repeat every hour) which shows READY

 

GoogleUpdateTaskMachineCore (multiple triggers defined) READY

 

GoogleUpdateTaskMachineUA (at 1:50PM every day, repeat every hour)  READY

 

Optimize Start Menu Cache Files-S-1-5.......1001  (When computer is idle)  DISABLED

 

Optimize Start Menu Cache Files-S-1-5 ...1007 (When computer is idle)  DISABLED

 

Anyone that can help me with this would be much appreciated as I am very concerned about my safety with this and the fact that none of the best malware programs can detect this as of yet and the problems grows daily.  Thank you for looking and I look forward to getting rid of this garbage from my PC.

 

[edit: Please do not link to dangerous websites per the Participation Guidelines and Terms of Service.]

 

 

 

 

Bot Obliterator
Quads
Posts: 16,540
Registered: ‎07-21-2008

Re: My browsers all keep randomly opening to a page http://tv.channel157news.com..

[ Edited ]

AutoKMS (multiple triggers defined)  which shows READY   Usually is a Crack for MS Office products and sometimes for Windows also.

 

DSite (At 1:38PM and repeat every hour) which shows READY  Is part of a PUP or PUP's

 

 

Quads

 

 

 

Contributor
music-seed
Posts: 18
Registered: ‎05-07-2012

Re: My browsers all keep randomly opening to a page http://tv.channel157news.com..

I have it too, and only 1 or 2 security vendors are catching it as malicious according to virustotal

Regular Contributor
Ballistic
Posts: 60
Registered: ‎03-05-2013

Re: My browsers all keep randomly opening to a page http://tv.channel157news.com..

Hello,

 

In addition to Quads guidance:

 

@timetofly

 

AutoKMS (or KMService) is a program that must run for people using cracked versions of Office 2010. It allows the user to bypass Microsoft's activation servers. If you're using cracked software (or going to known dangerous websites and all the viruses associated with them), then you're on your own. There isn't an AV in the world that can protect you.

 

@music-seed

 

Which version of Norton are you using?

Win8.1 x64, NIS 21.5.0.19, AMD A6-5400K APU and 6GB RAM
Contributor
music-seed
Posts: 18
Registered: ‎05-07-2012

Re: My browsers all keep randomly opening to a page http://tv.channel157news.com..

20.4.0.40..

   the first time I saw that screenshot I posted along with a Window that has a download Internet Explorer 8.0 was when I used a feature of Norton IS I had never used before, probably just coincidence, but I ran NIS Full Scan right before I went to bed and used the automatically shut down computer after scan feature, when I got up around 4 AM to take a leak I went to the computer because rather than shutting down like it was supposed to do, there was the two Windows as aforementioned with computer still online, I'm on dial-up so my puter does not run 24/7 like a high speed cable IS would be doing..

Regular Contributor
Ballistic
Posts: 60
Registered: ‎03-05-2013

Re: My browsers all keep randomly opening to a page http://tv.channel157news.com..

Hi music-seed,

 

Was your Norton up to date with the latest virus definitions before you ran the scan?

 

Also, do you recall the NIS feature you used before you got the problem?

 

Regards,

Win8.1 x64, NIS 21.5.0.19, AMD A6-5400K APU and 6GB RAM
Contributor
music-seed
Posts: 18
Registered: ‎05-07-2012

Re: My browsers all keep randomly opening to a page http://tv.channel157news.com..

I ran ATF Cleaner.exe and perhaps it's cleaned this problem up.. in the mean time, I always keep up to date definitions Ballistic and have already answere part II of your questions

Contributor
music-seed
Posts: 18
Registered: ‎05-07-2012

Re: My browsers all keep randomly opening to a page http://tv.channel157news.com..

still happening, although the "url" has changed, also, checked a few minutes ago, and find tv.channel57news.com website server is down? maybe they have found something?

Contributor
music-seed
Posts: 18
Registered: ‎05-07-2012

Re: My browsers all keep randomly opening to a page http://tv.channel157news.com..

should I follow this instruction to get rid of malware infecting me and many others?

http://www.techspot.com/community/topics/sponsorship-virus.194777/

peterweb
Posts: 9,142
Kudos: 1,456
Solutions: 364
Registered: ‎04-17-2008

Re: My browsers all keep randomly opening to a page http://tv.channel157news.com..

[ Edited ]

music-seed wrote:

should I follow this instruction to get rid of malware infecting me and many others?

http://www.techspot.com/community/topics/sponsorship-virus.194777/


You should never follow directions to another user's system problems. No 2 systems are identical, and just one different program installed, or different setting could cause your system to stop functioning, while the other system was fixed. 

 

You are best to sign up yourself at one of these free malware removal sites and work one on one with a malware removal expert.

 

http://www.bleepingcomputer.com/
http://www.geekstogo.com/forum/
http://www.cybertechhelp.com/forums/
http://forums.whatthetech.com/
http://support.emsisoft.com/forum/6-help-my-pc-is-infected/

 

 


Things happen. Export/Backup your Identity Safe data.