Help removing a virus or some-sort

[skinbin]

Whenever I boot my PC the command prompt opens for a second or 2, and then chrome opens and loads 'ooov.net', which then redirects me to 'gamezdoka.org'. I'm at a bit of a loss of what to do now though as I've already tried using Avast, Malwarebytes Anti-Malware and SUPERAntiSpyware, as well as a System Restore, and non of them fixed it, or even found any sort of malware/virus/whatever it is at all.

 

Thanks for any help you can offer

[Rashy]

Use HitmanPro and TDSSKiller

[gramzon]

open start menu in the search box type in msconfig. Launch it, click on boot then slick safe boot apply and restart computer. This will start your computer with only the bare essentials needed to run. Then use malwarebytes to do a scan and hopefully it should clean your pc up for you.

[skinbin]

I forgot to mention that I'd already tried running Malwarebytes in safe mode, and it simply returned that my system was clean. I'll use  HitmanPro and TDSSKiller though and see if they find anything.

[skinbin]

Just finished running them both, TDSSKiller found nothing and HitmanPro found 4 problems, though after a restart the problem still there. I've also tried running CCCleaner to see if it was a lingering registry entry or something but again, that didnt solve it either.

[Rashy]

Last Resort: Reformat. THIS IS VERY VERY LAST RESORT, USE IF DESPERATE.

[chicksoup]

I use Spybot, it has found more things than malwarebytes whenever I run it, maybe you can try that

 

maybe you can look in your startup folder what programs launch at boot and see if any weird ones are in there

[skinbin]

I'm running a Spybot scan as I'm typing this, so hopefully that will return something. I've taken a look at my startup folder and nothing is in there besides Dropbox so there cab't be a problem there, especially since the command prompt opens before chrome does which makes me think that the problem is a lot deeper than just a rogue programme. 

 

Also, after some more searching I found another LTT thread from yesterday (http://linustechtips.com/main/topic/255026-need-help-to-remove-trojan/) with someone having the same problem, and the last post says that FarCry 4 is causing the problem, and that ' You just need to remove it from startup and from the registry located here: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run' to fix it. I've never messed with the registry before, though I have found a registry with the value data of 'cmd.exe /c start http://ooov.net && exit' so this looks like the root of my problem so shall I just delete it as recommended in the other thread?

 

Edit: Spybot just finished and found a couple of things, but nothing relating to this problem specifically so.

[Rashy]

Ahhhh you're pirating FarCry 4, Joys and Troys of Pirating is always the best.

[skinbin]

I pirated it as a demo, yes, then I bought a legit copy about 20 minutes after testing how well it ran on my system. I pirated it last Sunday and have been playing the legit copy for the whole week, but the problem only occurred yesterday (6 days after the pirated version was uninstalled). I only mentioned Farcry because that post did. Obviously its a likely candidate for the root of my problem, just seems weird that it look almost a week to show itself. Anyway, is just deleting that registry entry a good or bad idea?

[FizzyFantom]

Deleting the registry entry may solve that issue, but there may be more than that one entry. Have you tried using AdwCleaner?

https://toolslib.net/downloads/viewdownload/1-adwcleaner/

I suggest you try this first, it's very good at finding adware that antivirus programs overlook. If it fails to solve your problem you could try deleting the registry entry.

[skinbin]

Nope, but I'll try it now. If that doesnt work then I'll just delete the registry entry and hope for the best I guess aha

[skinbin]

Fantastic! AdwCleaner detected a couple of bad registry entries and deleted them and that seems to have fixed it perfectly. 

 

Thanks for your help everyone