HTTP 404 error with advertisements

Hi, so it started with some random popup of a website when my computer restarted (like gameszooka or something). I think YAC removed that. I have run security essentials, malwarebytes malware remover, combofix (I apologize below), and, as previously mentioned, YAC. Now I just get redirected to HTTP 404 errors with advertisements asking, "Check your internet speed" (it also gives a rough estimate of my IP address, which is scary). These redirects are rare, and occur when I'm clicking a link on an already visited page or searching on an on-site search bar (like forums or wikipedia). Beforehand, let me apologize because I used combofix while following another topic with a similar problem as mine (I had not seen any of the warnings to not use malware removal without approval). There are no noticeable consequences. 

 

 

 

Our recommendation is to remove this program.
Remove it using the Add/Remove program listed under
Yet Another Cleaner!

Later I can supply you with antivirus and malware cleaners.

~~~~~~~~~~~~~

Running from C:\Users\[removed]\Downloads
This wont work.

Please go to your downloads folder, locate Farbar's Recovery Scan Tool
Right click and select CUT
Next, go to an open spot on your desktop and select PASTE
There should be an icon for Farbar's Recovery Scan Tool on your desktop now.

Please do the above before preceding.

~~~~~~~~~~

Also, in your next reply please locate and post
C:\ComboFix.txt



Open notepad. Please copy the contents of the quote box below. To do this highlight the contents of the box and right click on it and select copy.
Paste this into the open notepad. save it to the Desktop as fixlist.txt
NOTE. It's important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work.
It needs to be saved Next to the "Farbar Recovery Scan Tool" (If asked to overwrite existing one please allow)
 

start
CloseProcesses:
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
C:\Users\Jacob\AppData\Local\Temp\CH.dll
C:\Users\Jacob\AppData\Local\Temp\Copy.dll
EmptyTemp:
Hosts:
CMD: ipconfig /flushdns
CMD: netsh winsock reset all
CMD: netsh int ipv4 reset
CMD: netsh int ipv6 reset
End

Open FRST/FRST64 and press the Fix button just once and wait.
If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.

~~~~~~~~~

-AdwCleaner-by Xplode

Click on this link to download : ADWCleaner
Click on ONE of the Two Blue Download Now buttons That have a blue arrow beside them and save it to your desktop.

Do not click on any links in the top Advertisment.


[external image: adwcleaner_download.png]

• Close all open programs and internet browsers.
• Double click on AdwCleaner.exe to run the tool.
• Click on Scan.
• After the scan is complete click on "Clean"
• Confirm each time with Ok.
• Your computer will be rebooted automatically. A text file will open after the restart.
• Please post the content of that logfile with your next answer.
• You can find the logfile at C:\AdwCleaner[S1].txt as well.
• NOTE: If you see AVG Secure Search being targeted for deletion, Here's Why and Here. You can always Reinstall it.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


[external image: thisisujrt.gif]
Please download Junkware Removal Tool to your desktop.

• Shut down your protection software now to avoid potential conflicts.
• Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
• The tool will open and start scanning your system.
• Please be patient as this can take a while to complete depending on your system's specifications.
• On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
• Post the contents of JRT.txt into your next message.

~~~~~~~~~~~
please post
Fixlog.txt
C:\AdwCleaner.txt
JRT.txt
C:\ComboFix.txt

Here are the first three. I can't find the combofix.txt. Is there a default save location for the file that you can relay to me? Or do you wish me to rerun it? Sorry for the misplaced log. 

 

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 20-11-2014

Ran by [removed] at 2014-11-20 17:27:10 Run:1

Running from C:\Users\[removed]\Desktop

[removed]

Boot Mode: Normal

==============================================

 

Content of fixlist:

*****************

start

CloseProcesses:

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

C:\Users\Jacob\AppData\Local\Temp\CH.dll

C:\Users\Jacob\AppData\Local\Temp\Copy.dll

EmptyTemp:

Hosts:

CMD: ipconfig /flushdns

CMD: netsh winsock reset all

CMD: netsh int ipv4 reset

CMD: netsh int ipv6 reset

End

*****************

 

Processes closed successfully.

"HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully.

"C:\Users\Jacob\AppData\Local\Temp\CH.dll" => File/Directory not found.

"C:\Users\Jacob\AppData\Local\Temp\Copy.dll" => File/Directory not found.

C:\Windows\System32\Drivers\etc\hosts => Moved successfully.

Hosts was reset successfully.

 

=========  ipconfig /flushdns =========

 

 

Windows IP Configuration

 

Successfully flushed the DNS Resolver Cache.

 

========= End of CMD: =========

 

 

=========  netsh winsock reset all =========

 

 

Sucessfully reset the Winsock Catalog.

You must restart the computer in order to complete the reset.

 

 

========= End of CMD: =========

 

 

=========  netsh int ipv4 reset =========

 

Reseting Global, OK!

Reseting Interface, OK!

Restart the computer to complete this action.

 

 

========= End of CMD: =========

 

 

=========  netsh int ipv6 reset =========

 

Reseting Interface, OK!

Restart the computer to complete this action.

 

 

========= End of CMD: =========

 

EmptyTemp: => Removed 380.3 MB temporary data.

 

 

The system needed a reboot.

 

==== End of Fixlog ====

 

# AdwCleaner v4.101 - Report created 20/11/2014 at 17:55:46

# Updated 09/11/2014 by Xplode

# Database : 2014-11-16.1 [Live]

# Operating System : Windows 7 Professional Service Pack 1 (64 bits)

# Username : Jacob - JACOB-PC

# Running from : C:\Users\Jacob\Desktop\AdwCleaner.exe

# Option : Clean

 

***** [ Services ] *****

 

 

***** [ Files / Folders ] *****

 

File Deleted : C:\Windows\System32\log\iSafeKrnlCall.log

File Deleted : C:\Users\Jacob\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.azlyrics.com_0.localstorage

File Deleted : C:\Users\Jacob\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.saveur.com_0.localstorage

File Deleted : C:\Users\Jacob\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.ask.com_0.localstorage

 

***** [ Scheduled Tasks ] *****

 

 

***** [ Shortcuts ] *****

 

 

***** [ Registry ] *****

 

 

***** [ Browsers ] *****

 

-\\ Internet Explorer v11.0.9600.17420

 

 

-\\ Google Chrome v39.0.2171.65

 

 

-\\ Chromium v

 

 

*************************

 

AdwCleaner[R0].txt - [1193 octets] - [20/11/2014 17:41:30]

AdwCleaner[S0].txt - [1122 octets] - [20/11/2014 17:55:46]

 

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1182 octets] ##########

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.3.9 (11.15.2014:2)

OS: Windows 7 Professional x64

Ran by [removed] on Thu 11/20/2014 at 23:59:01.22

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

 

 

 

~~~ Services

 

 

 

~~~ Registry Values

 

 

 

~~~ Registry Keys

 

 

 

~~~ Files

 

 

 

~~~ Folders

 

 

 

~~~ Event Viewer Logs were cleared

 

 

 

 

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on Fri 11/21/2014 at  0:00:45.13

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~