Help needed . Think i'm infected [Solved]

If there are no more problems, let me know if you're happy to tidy up and I'll send instructions.

Give it a day or 2 and if no popups appear again we'll tidy up then

Well done ONewbieO; no problems I take it, so your computer appears to be clean.

Now that you’re free from malware, as long as your computer seems to be running well, please follow these simple steps to tidy up you computer and decrease the likelihood of getting infected again:

Uninstall AdwCleaner

• double click on adwcleaner.exe to run the tool
• click on Uninstall
• confirm with Yes.

===================================================

Download & run Delfix

• download Delfix from here to remove many of the tools we've used during the cleaning process.
• ensure “Remove disinfection tools” is checked.

Also place a checkmark next to:

o    Create registry backup
o    Purge system restore

• click the Run button.

You can delete all other logs and programs we’ve used that are on your desktop. Just click on them and press Delete.

===================================================

Recommended programs

Update and run Malwarebytes. This really is an excellent program that you should also update and run on a regular basis, probably weekly.

======================

It’s important to keep programs up to date so that malware doesn't exploit any old security flaws.

FileHippo Update Checker is an extremely helpful program that will tell you which of your programs need to be updated.

======================

MVPS Hosts file replaces your current HOSTS file with one containing well known ad sites and other bad sites. Basically, this prevents your computer from connecting to those sites by redirecting them to 127.0.0.1 which is your local computer, meaning it will be difficult to infect yourself in the future.

A couple of links with information here and here which can answer any questions you might have about installing/using it.

======================

Unchecky

Be careful when downloading free software. Many free programs come bundled with adware, many of which cause redirects/popups and verge on being malware. There is a program that automatically “unckecks” the boxes you may not notice when downloading programs.

Download and install Unchecky .

======================

Your computer desperately needs to be defragmented. See this

Download and run Auslogics Disc Defragmenter

Make sure when installing that you look out for, and say NO to, the ASK toolbar, (although, if you have taken my advice and installed UnChecky, that won’t be necessary).

===================================================

I also recommend that you read the following:

How to prevent malware by miekiemoes

Help! My computer is slow! by miekiemoes

Simple and easy ways to keep your computer safe and secure on the Internet  by Lawrence Abrams

I will keep this open for 24 hours in case you have any problems, after which I’ll close the topic.

Safe computing

Satchfan

Thanks for the help there . Many thanks !

You're welcome.

This topic has been re-opened at the request of the user.

Let’s have another look with a program you’ve run before. If we don’t find it we can always back up and re-install Chrome,

Run Zoek

Download zoek.exe to your Desktop:

Important : Disable your AntiVirus and AntiSpyware programs, so they do not interfere with the running of Zoek.exe. You can find instructions how to disable your security applications here.

• on Windows Vista, 7, and 8, right-click Zoek.exe and select: Run as Administrator
• give it a few seconds to appear
• copy/paste the entire script inside the codebox below into the input field of Zoek:
  
  

  process;
  filesrcm;
  startupall;
  installedprogs;
  installer-list;
  uninstall-list;
  firefoxlook;
  chromelook;  
  chrdefaults;
  emptyalltemp;
  emptyclsid;
  autoclean;
  

• close any open programs.
• click the Run script button, and wait. It takes a few minutes to run.
• when the tool finishes, the zoek-results.log is opened in Notepad: the log can also be found on the systemdrive, normally C:\
• if a reboot is needed, the log will be opened after the reboot.

After you've done that, please download AdwCleaner from here,  save it to your desktop and run it again. Please also send that log.

Thanks

Satchfan

Now i see a delete ad extension in my google chrome now . This is the extension which i was talking about previously .

Why have you not removed it?

How to Disable/remove Chrome Extensions or Plug-ins

Open up Chrome

• open Google Chrome
• click on the Customize icon 🖼Click to load external image (Chrome.gif), at the top right
• click on Settings
• on the left, click Extensions
• click the trash can icon by (extension)
• when the confirmation dialog appears, click Remove.

Disable Chrome Plug-ins
 

• type chrome://plugins in the address bar in chrome
• find the plug-in that you’d like to disable and click Disable.

Let me know how it is now.

Satchfan
 

Have not deleted that away this time round because the last time i did that it came back again . 

I thought u might have some other solutions to this problem . 

Anyway deleted it away . 

Time to test the browsers again . 

I think what may be happening here is the Sync data held in Google Chrome is replacing the Adware after a reboot or simply closing and reopening Google. See if the following will work:

• open Google Chrome and keep it open.
  
• run a scan with Malwarebytes so can remove what is currently there.
  

• go into Google Chrome, click on the three bars in the top right hand corner and select Settings.
  
• at the top in the text of the next window click on Google Dashboard
  
• at the Chrome sync screen click on Stop and Clear at the bottom
  
• wait to see the confirmation message:"Finished clearing synced Chrome data".
  
• close Google and reopen it, do another scan with Malwarebytes and see if it still finds anything.
  

nothing can be found . Looks like its gone .

Here’s hoping. If the problem returns, (Chrome is known for this behaviour), you may have to uninstall/reinstall Chrome, so keep this for future reference.

Uninstall/Reinstall Google Chrome

First save all your bookmarks/favourites.

• open Chrome, click on the 3 bars in the top right hand corner, select Bookmarks and then Bookmarks Manager
• click on Organise and then select Export Bookmarks to HTML file, then choose Desktop to save it
• again, click on the three bars in the top right hand corner and select Settings
• in the list of Settings under “Sign in” click on Disconnect your Google Account
• in the text of the next window click on “Google Dashboard” then, at the “Chrome sync” screen, click on Stop and Clear at the bottom
• a box will open and ask for confirmation, click on OK (wait for this to complete before doing the next step)
• when confirmation appears close that page and then click on Disconnect account
• shut Google Chrome, click on Start > Control Panel > Programs and Features (or Add/Remove Programs in XP) and uninstall Google Chrome. Select Everything for removal if asked.

Reboot the system and then reinstall Google Chrome from here

Repeat the process to reinstate your bookmarks by going to Bookmarks > Bookmarks Manager > Organise and select Import Bookmarks.

I’ll leave this open again for 24 hours in case you have other questions.

Satchfan