Question

USKOOO Virus? Malware? How do I rid this from computer?

Hello! I was searching CNET for a DL to open a DOCX file a few days ago. I was using Firefox as browser.

I came across one headline for: "Change DOCX to PDF". I thought it was a CNET DL, so I downloaded it, clicked "accept" a few times (without paying attention to what I was clicking - my bad), but I've never had any problems with programs from CNET before this.

Immediately, every click I made on Firefox opened a new window with an advertisement. I realized I'd DL'd a bad program.

I updated and ran my Norton 360. I updated and ran Spybot Search and Destroy. I opened Firefox and was redirected to a different home page: "google."

I uninstalled and re-installed Firefox - was redirected again, but noticed the flash of a link before the re-direct: USKOOO.info/assets2/cpmOUS/ etc, etc...

How do I get this program out of my computer? Hope someone knows...

Thank you!

Discussion is locked
Follow
Reply to: USKOOO Virus? Malware? How do I rid this from computer?
PLEASE NOTE: Do not post advertisements, offensive materials, profanity, or personal attacks. Please remember to be considerate of other members. If you are new to the CNET Forums, please read our CNET Forums FAQ. All submitted content is subject to our Terms of Use.
Reporting: USKOOO Virus? Malware? How do I rid this from computer?
This post has been flagged and will be reviewed by our staff. Thank you for helping us maintain CNET's great community.
Sorry, there was a problem flagging this post. Please try again now or at a later time.
If you believe this post is offensive or violates the CNET Forums' Usage policies, you can report it below (this will not automatically remove the post). Once reported, our moderators will be notified and the post will be reviewed.
Comments
- Collapse -
Answer
Was it the "DOCX to PDF Converter" from PDFConvertOnline ?

NotTechSmart,

IF it was and IF you installed the DOCX to PDF Converter from Download.com, chances are good to excellent, that's where your problems first began. It sounds like the "behavior" of Download.com's installer, as opposed to the online converter. Although, the converter itself can't be totally ruled out without additional information from you. (Note the first comment at Download.com.)

Just underneath "Download Now" (in bold green letters) is a small gray line titled "Installer Enabled". If you "hover" over it, a pop-up appears which reads in part:

'About the Download.com Installer. The Download.com installer securely delivers software from Download.com's servers to your computer. During the process the Download.com installer may offer free applications provided by our partners. ... <= I can only vouch for the"free applications". Nothing more.

You wrote: I opened Firefox and was redirected to a different home page: "google." Are you being redirected TO Google? Or were you only citing Google as your homepage? The answer makes a world of a difference.

It would also help to know if a window is opening with the same ad, or different one's. It's all in the details. Happy

As a start, I would suggest following Grif's set of instructions here:
http://www.cnet.com/forums/post/f742c795-5881-433b-a29b-6d758efe5cd3/

Additional information about some of the above-mentioned tools here:
https://malwaretips.com/blogs/remove-from-doc-to-pdf-toolbar/

Best of luck,
Carol

- Collapse -
I think you're spot on with 2nd link.

Dafydd.

CNET Forums