rvzr-a.akamaihd.net virus

Humboldt · Post by **Humboldt** » Sat Nov 30, 2013 11:28 pm

This is really pissing me off, I can't get rid of it.

Have tried TDSSKiller, MalwareBytes, MSSE, SuperAntiSpyware.
Dont' see any weird processes or services.

Any other suggestions appreciated, thanks

loop2kil · Post by **loop2kil** » Sat Nov 30, 2013 11:38 pm

Does it go away with any scan but keeps coming back or you can't get rid of it at all? If the former then make sure to disable system restore. if the latter then try Combofix and see where that gets you.

Also, try another AV like Avira or Avast....I've been liking Avira lately with the really small footprint of around 20mb running in the system.

Also, make sure all temp files are gone before scanning...I like TFC by Oldtimer

http://www.bleepingcomputer.com/download/tfc/

I'm also thinking Host file could be infected/corrupted.

Humboldt · Post by **Humboldt** » Sun Dec 01, 2013 12:13 am

Thanks for the suggestions.
It's not that it's re-occurring, nothing finds it in the first place. Have tried safemode scans, system restore off, manual reg edit finds nothing.

I haven't tried combofix yet, think of it as a very last resort. Has saved my ass before though, thanks for the reminder.

loop2kil · Post by **loop2kil** » Sun Dec 01, 2013 12:34 am

Humboldt wrote:Thanks for the suggestions.
It's not that it's re-occurring, nothing finds it in the first place. Have tried safemode scans, system restore off, manual reg edit finds nothing.

I haven't tried combofix yet, think of it as a very last resort. Has saved my ass before though, thanks for the reminder.

Have you checked the hosts file yet?

http://support.microsoft.com/kb/972034

Humboldt · Post by **Humboldt** » Sun Dec 01, 2013 1:21 am

loop2kil wrote:Have you checked the hosts file yet?

http://support.microsoft.com/kb/972034

Huh. Ran combofix, thought it was all good, clicked your link and got a popup for http://rvzr-a.akamaihd.net/sd/wrap-0.01 ... D5040-1001

Back to work

Humboldt · Post by **Humboldt** » Sun Dec 01, 2013 1:24 am

Downed the .msi through your link but am getting http://fastonlinefinder.com/ads-clicktr ... product=iy as a popup.

Ran it, will see what happens.

Damnit, this is cutting into my "Lie To Me" time something fierce.

Post by **YeOldeStonecat** » Sun Dec 01, 2013 6:47 am

This ones not bad...just injects into your browsers.
ADWCleaner and (ad ware cleaner) and JRT (junkware removal tool) handle browser injects best.
This link here handles most of the steps fairly well...
http://malwaretips.com/blogs/rvzr-a-akamaihd-net-virus/

loop2kil · Post by **loop2kil** » Sun Dec 01, 2013 11:11 am

Humboldt wrote:Huh. Ran combofix, thought it was all good, clicked your link and got a popup for http://rvzr-a.akamaihd.net/sd/wrap-0.01 ... D5040-1001

Back to work

I am 99.9% convinced that it's the Hosts file now, that's why all the scans are coming up empty. There is nothing left to delete but the damage to the Hosts file is already done and will keep giving you the popups until it's repaired.

The link I posted should explain it more clearly.

Post by **YeOldeStonecat** » Sun Dec 01, 2013 11:52 am

Combofix usually flushes out the hosts file if it finds an infection there. Worth checking through, just in case it missed it or the file was locked..

Humboldt · Post by **Humboldt** » Sun Dec 01, 2013 4:05 pm

YeOldeStonecat wrote:This ones not bad...just injects into your browsers.
ADWCleaner and (ad ware cleaner) and JRT (junkware removal tool) handle browser injects best.
This link here handles most of the steps fairly well...
http://malwaretips.com/blogs/rvzr-a-akamaihd-net-virus/

That did it. Reset the hosts file last night and ran combofix. Still had it this morning.
ADWCleaner did the trick, ran JRT to make sure.
Looks like a codec pack was at fault.

Thanks guys. Appreciate the help.

loop2kil · Post by **loop2kil** » Sun Dec 01, 2013 4:53 pm

Well, I did say 99.9% sure

Glad you got it fixed.

Humboldt · Post by **Humboldt** » Sun Dec 01, 2013 5:00 pm

loop2kil wrote:Well, I did say 99.9% sure

Glad you got it fixed.

Appreciated the help regardless.

Glad I got it fixed to, it was really starting to piss me off.

Post by **YeOldeStonecat** » Sun Dec 01, 2013 8:24 pm

Humboldt wrote: Looks like a codec pack was at fault.

VERY popular source of malware infections..see that as the cause so many times..those, and special "viewers" to watch online movies.

Humboldt · Post by **Humboldt** » Sun Dec 01, 2013 8:44 pm

YeOldeStonecat wrote:VERY popular source of malware infections..see that as the cause so many times..those, and special "viewers" to watch online movies.

Always looking for a better player. Have WMP, GOM, and VLC. Scan everything I download but looks like this one fell through.

Humboldt · Post by **Humboldt** » Mon Dec 02, 2013 1:15 am

Now that I uninstalled the codec pack I can no longer watch one of my favorite streaming videos.

Any suggestions?

20 different links and they all ask for a video player upgrade (running latest WMP) or an .exe download to watch.

Suggestions appreciated, feel free to PM.

Thanks

Post by **YeOldeStonecat** » Mon Dec 02, 2013 6:00 am

Humboldt wrote:Now that I uninstalled the codec pack I can no longer watch one of my favorite streaming videos.

Try uninstalling VLC, download and install the latest version. VLC is a good player (assuming you get it from a trusted source).

If that doesn't work, look for K-Lite Mega Codec pack from a trusted source like filehippo if reinstalling VLC doesn't work. K-Lite has several bundles..."Mega" is the largest and most inclusive.

TonyT · Post by **TonyT** » Mon Dec 02, 2013 7:07 am

Humboldt wrote:Now that I uninstalled the codec pack I can no longer watch one of my favorite streaming videos.

Any suggestions?

20 different links and they all ask for a video player upgrade (running latest WMP) or an .exe download to watch.

Suggestions appreciated, feel free to PM.

Thanks

What file format is the video? Have a look at the page source code or javascript file from the page. The streaming video format will be available there. VLC should handle all formats. Or post the url to the page with that video & I'll tell you the file format to associate with VLC.

loop2kil · Post by **loop2kil** » Mon Dec 02, 2013 7:18 am

Humboldt wrote:Now that I uninstalled the codec pack I can no longer watch one of my favorite streaming videos.

Any suggestions?

20 different links and they all ask for a video player upgrade (running latest WMP) or an .exe download to watch.

Suggestions appreciated, feel free to PM.

Thanks

There's plenty of nakid women at other websites that don't require special codecs

Post by **YeOldeStonecat** » Mon Dec 02, 2013 8:09 am

loop2kil wrote:There's plenty of midget porn at other websites that don't require special codecs

***fixed***

Humboldt · Post by **Humboldt** » Mon Dec 02, 2013 2:37 pm

TonyT wrote:What file format is the video? Have a look at the page source code or javascript file from the page. The streaming video format will be available there. VLC should handle all formats. Or post the url to the page with that video & I'll tell you the file format to associate with VLC.

http://www.alluc.to/tv-shows/watch-the- ... 86401.html

Post by **YeOldeStonecat** » Mon Dec 02, 2013 3:23 pm

Humboldt wrote:http://www.alluc.to/tv-shows/watch-the- ... 86401.html

Our UTM appliance at the office (a fancy firewall that checks for threats) blocked that site.

Humboldt · Post by **Humboldt** » Mon Dec 02, 2013 3:33 pm

YeOldeStonecat wrote:Our UTM appliance at the office (a fancy firewall that checks for threats) blocked that site.

Because of content issues, or malicious threats at the site itself?

Post by **YeOldeStonecat** » Mon Dec 02, 2013 4:35 pm

Pornography....but often where that's present, malware is close behind. Seek your sources of porn wisely. My wife showed me some good safe porn sites...her step brother ran one.

Humboldt · Post by **Humboldt** » Mon Dec 02, 2013 4:42 pm

YeOldeStonecat wrote:Pornography....but often where that's present, malware is close behind. Seek your sources of porn wisely. My wife showed me some good safe porn sites...her step brother ran one.

Any suggestions where I can watch the latest episode of Walking Dead?

Never been able to figure out the legality of streaming videos like that that.

If NetFlix can do it, is it legal to watch on sites like alluc?
And if alluc is questionable, does anyone have other suggestions?

Thanks

Post by **YeOldeStonecat** » Mon Dec 02, 2013 4:47 pm

I don't follow the Walking Dead...but can't you catch all their episodes right on the channels site? amctv.com
For catching TV shows I missed, I used to use a site called Hulu.com
Other than netflix, I'm not up other sites to stream current TV shows...if a show is high up on my list to watch, (which isn't many)....I just set it on the DVR.

Humboldt · Post by **Humboldt** » Mon Dec 02, 2013 5:44 pm

YeOldeStonecat wrote:I don't follow the Walking Dead...but can't you catch all their episodes right on the channels site? amctv.com
For catching TV shows I missed, I used to use a site called Hulu.com
Other than netflix, I'm not up other sites to stream current TV shows...if a show is high up on my list to watch, (which isn't many)....I just set it on the DVR.

Negative, my ATT DSL account is internet only, no TV.
Hence trying to find the right player/codecs that will work for alluc.

Worked fine for months but after taking a bunch of stuff off my system to get rid of that ****ing virus nothing will play now.

RaisinCain · Post by **RaisinCain** » Mon Dec 02, 2013 6:51 pm

If you install TeamViewer I can remote in and look at what is going on. If you decide to, just give me about a 1/2 window of time to work with you. Post or PM.

Post by **YeOldeStonecat** » Mon Dec 02, 2013 7:25 pm

Humboldt wrote:
Worked fine for months but after taking a bunch of stuff off my system to get rid of that ****ing virus nothing will play now.

Did you uninstall VLC and download/install the latest yet? Should repair the damage done by ripping out that rogue codec, and reassociate all the proper file types. VLC usually handles them all quite well.

Humboldt · Post by **Humboldt** » Mon Dec 02, 2013 7:41 pm

YeOldeStonecat wrote:Did you uninstall VLC and download/install the latest yet? Should repair the damage done by ripping out that rogue codec, and reassociate all the proper file types. VLC usually handles them all quite well.

Yes.
Still no luck from that site, but able to find another one.
Great mid-season finale

Humboldt · Post by **Humboldt** » Mon Dec 02, 2013 7:42 pm

RaisinCain wrote:If you install TeamViewer I can remote in and look at what is going on. If you decide to, just give me about a 1/2 window of time to work with you. Post or PM.

Appreciate the offer, but was able to find another site I could watch no problem.
Walking Dead doesn't pick up again for a couple months, so plenty of time to figure something out.

Thanks though

Post by **YeOldeStonecat** » Mon Dec 02, 2013 7:43 pm

And the K-Lite "Mega" codec pack?

Humboldt · Post by **Humboldt** » Mon Dec 02, 2013 7:48 pm

YeOldeStonecat wrote:And the K-Lite "Mega" codec pack?

K-Lite is the one I was looking at, and after your suggestion what I'll probably go with.

After the hassle of this virus I just held up to see if I could find another streaming site.

cybotron r_9 · Post by **cybotron r_9** » Sun Dec 08, 2013 12:07 pm

Humboldt wrote:This is really pissing me off, I can't get rid of it.

Have tried TDSSKiller, MalwareBytes, MSSE, SuperAntiSpyware.
Dont' see any weird processes or services.

Any other suggestions appreciated, thanks

http://www.emsisoft.com/en/software/eek/

DelanoR · Post by **DelanoR** » Thu Dec 19, 2013 9:38 am

Malwarebytes does not work
AdwCleaner free works but it popping again after restart.
Manual instructions like this (resetting browser settings) works for few days [link removed by admin] but then it comes again

Humboldt · Post by **Humboldt** » Thu Dec 19, 2013 1:19 pm

DelanoR wrote:Malwarebytes does not work
AdwCleaner free works but it popping again after restart.
Manual instructions like this (resetting browser settings) works for few days [link removed by admin] but then it comes again

Look at the post YeOlde made on the first page, those 2 programs worked well for me.

DelanoR · Post by **DelanoR** » Fri Dec 20, 2013 11:55 am

Humboldt wrote:Look at the post YeOlde made on the first page, those 2 programs worked well for me.

Thanks! Seems that we had different versions of this virus with YeOlde. Reinstalling Windows worked for me

Ta1l · Post by **Ta1l** » Tue Dec 24, 2013 10:36 am

Simple browser reset may help - [link removed by admin]

(+ adwcleaner (free) to clean any reg files)

SG Broadband Community

rvzr-a.akamaihd.net virus

rvzr-a.akamaihd.net virus

Rvzr-a.akamaihd.net pop-up