It seems like I contacted some kind of chrome hijacker which changes my homepages to start.qone8.com and qvo6.com. This always happens when I connect with my google chrome account.
I removed the file from the system with SpyHunter, but after logging in again into chrome, the system got the infection again.
I really have no clue what to do in such cases and I do not have any knowledge regarding digital security, I would appreciate any suggestion on this problem
Thanks in advance!
Been working on this infection for the better part of two days and finally just won. Run Combofix, ADWCleaner, and then MalwareBytes. Run them again to make sure they come back clean (if you are pressed for time, i suppose you don't have to check again, but i strongly recommend checking again). the home page of firefox, chrome, and IE will still be pointing to start.qone8.com/blahblahblah
Remove firefox. Remove chrome. Restart. Reinstall firefox, chrome, and test it out. They are fine again.
IE: Programs and Features, Turn Windows Features On or Off. Remove the check box from your flavor of IE. Remove the shortcuts from your start menu (if they are in there still).
Restart.
Programs and Features, Turn Windows Features On or Off. Put the check box back in front of your version of Internet Explorer. Once re-installed, click on the start button, type in iexplore, the top listing should have the icon, right click, paste to start menu.
This was what worked here. Hope it works for you. No combination of resetting the browsers, disabling toolbars/extensions/search providers had any effect in our experience removing this pesky little sucker.
Sounds like you may be re-syncing the problem.
You might want to try going into Chrome's settings, and under the Sign In section there's a link to Manage your synced data on Google Dashboard.
On the dashboard page, there's a button titled Stop and Clear that will cause your browser stop syncing and clear all existing saved data.
If, at that point, you can log in and not have the problem resurface, you'll know that was the culprit.
there is nothing special about this adware. Search for "qone8" and remove its references from registry. Recreate your browser shortcuts on desktop, start menu and start menu programs list. Check browser settings and remove the qone8 url if its in home page, or new tab page, or bookmarks, or addons/plugins/extensions, or search engines list.
For tips on how to remove Qvo6, see this: http://deletemalware.blogspot.com/2013/04/qvo6-removal-how-to-uninstall.html
For tips on how to remove Qone8, see this: http://malwaretips.com/blogs/remove-start-qone8-virus/
I had to deal with this some time back. The sneaky thing about this hijacker is... it changes all your browser link URLs to point at your site, and once you've done the usual (cleared out suspecious extentions, reset firefox and so on), you're going to have to rightclick and edit the link to the browsers on the system - all of them, to remove stop them pointing at the Qvo6 site. Seriously annoying that I didn't catch that earlier.
Okay, here's what I did:
Backuped whatever data I needed and was synced (bookmarks, etc)
Stopped sync and cleared
Ran Malwaredytes and SpyBot (both are real good- cleared all)
Reset the home page to blank page.
No more problems :)
This virus has changed... It now hijacks the start menu shortcuts.
Navigate to %appdata%/Microsoft/Windows/Start Menu/Programs and change your internet explorer shortcuts.
Alternatively, you may follow this manual guide that is absolutely free http://www.system-tips.net/guide-to-fix-browser-redirection-and-remove-browser-hijackers/ This will help you understand how to get rid of start.qone8.com manually.
I just
removed the chrome shortcut from my desktop / taskbar / start menu
then I found the chrome.exe in program files and then right clicked then send to desktop (create shortcut)
this solved the problem for me
the corruption was with the shortcut target not the browser.
Read a lot about these two nasty browser hijackers. Just go to your browsers' settings and choose add-on/extensions. Search for anything that is related to qvo6 or qzone8 (and also any other suspiciuos file names) and remove them.
Open your Windows Explorer and search again for any left file or folder containing ask search or ask toolbar in their name.
I suggest you also read this step-by-step ask toolbar removal guide.
I think it's better to try and remove it manually, however you still might need to do a scan just to be sure everything is gone.
There are a lot of free antivirus software on the internet, you just need to choose a reliable one. When I had to deal with Qvo6 I followed the instructions from here.
I hope it helps you too!
My recommendation for you to remove qone8.com browser hijacker is that you follow this guide
