Win 8.1 Notebook Suffering from Pop-Ups and Browser Redirects

• Double-click on the setup file (mbam-setup.exe), then click on Run to install.
• Malwarebytes will automatically open to it's Dashboard. If you have never run this version, you should see a red note at the top indicating "A scan has never been run on your system"
• Click on Update Now to download the current database definitions, then click the Scan Now >> button.
• If you have run this version before, you should see a green note at the top indicating "Your system is fully protected".
• You will be prompted to update Malwarebytes…click on the Update Now button.
• The THREAT SCAN will automatically begin.
• When the scan has completed, the results will be displayed. Click on Quarantine All, then click on Apply Actions.
• To complete any actions taken you will be prompted to restart your computer…click on Yes. Failure to reboot normally will prevent Malwarebytes from removing all the malware.
• After rebooting the computer, copy and paste the mbam.log in your next reply.

• Open Malwarebytes Anti-Malware.
• Click the History Tab at the top and select Application Logs.
• Select (check) the box next to Scan Log. Choose the most current scan.
• Click the View button.
• Click Copy to Clipboard at the bottom…come back to this thread, click Add Reply, then right-click and choose Paste.
• Alternatively, you can click Export and save the log as a .txt file on your Desktop or another location.
• Be sure to post the complete log to include the top portion which shows MBAM's database version and your operating system.

• Open Malwarebytes Anti-Malware.
• Click the Scan Tab at the top.
• Click the View detailed log link on the right.
• Click Copy to Clipboard at the bottom…come back to this thread, click Add Reply, then right-click and choose Paste.
• Alternatively, you can click Export and save the log as a .txt file on your Desktop or another location.
• Be sure to post the complete log to include the top portion which shows MBAM's database version and your operating system.

Still getting ads (CouponFactory). MBAM didn't work quite as specified. Only have xml file (mbam-log-2015-08-06 (11-30-25).xml), no log. Here it is:

• Please download ESET Online Scan and save the file to your Desktop.
• Temporarily disable your anti-virus software. For instructions, please refer to the following link.
• Double-click esetsmartinstaller_enu.exe to run the programme.
• Agree to the EULA by placing a checkmark next to Yes, I accept the Terms of Use. Then click Start.
• Agree to the Terms of Use once more and click Start. Allow components to download.
• Place a checkmark next to Enable detection of potentially unwanted applications.
• Click Advanced settings. Place a checkmark next to:
  • Scan archives
  • Scan for potentially unsafe applications
  • Enable Anti-Stealth technology
• Ensure Remove found threats is unchecked.
• Click Start.
• Wait for the scan to finish. Please be patient as this can take some time.
• Upon completion, click [external image: esetListThreats.png]. If no threats were found, skip the next two bullet points.
• Click [external image: esetExport.png] and save the file to your Desktop, naming it something such as "MyEsetScan".
• Push the Back button.
• Place a checkmark next to [external image: xKN1w2nv.png.pagespeed.ic.JWqIaEgZi7.png] and click [external image: SzOC1p0.png.pagespeed.ce.OWDP45O6oG.png].
• Re-enable your anti-virus software.
• Copy the contents of the log and paste in your next reply.

start
C:\Program Files (x86)\Google\Chrome\Application\chrome.dll
C:\Program Files (x86)\Google\Chrome\Application\GoogleUpdateHelper.dll
C:\Program Files (x86)\NCH Software\VideoPad\videopad.exe
C:\Program Files (x86)\NCH Software\VideoPad\videopadsetup_v4.00.exe
C:\Users\Carson\Downloads\vppsetup.exe
EmptyTemp:
End

Don't notice adware now. Does it appear to be fixed from the log? Thanks.

• [external image: U5NwUGc.png]Backup Chrome Bookmarks

• Double click Revo Uninstaller to run it.
• From the list of programs double click on Google Chrome
• When prompted if you want to uninstall click Yes.
• Be sure the Moderate option is selected then click Next.
• The program will run, If prompted again click Yes
• when the built-in uninstaller is finished click on Next.
• Once the program has searched for leftovers click Next.
• Check/tick the bolded items only on the list then click Delete
• when prompted click on Yes and then on next.
• put a check on any folders that are found and select delete
• when prompted select yes then on next
• Once done click Finish.
• ~~~~~~~~~~~~~~~~~~~~~
  Then, it can be reinstalled from
  http://www.google.com/chrome/
  
  If I'm correct,  an update came in from a place other then the original Google Chrome updater hence the adware.

Uninstalled and reinstalled Chrome. Ready to uninstall all debug stuff. Thanks.

• Please download DelFix or from Here and save the file to your Desktop.
• Double-click DelFix.exe to run the programme.
• Place a checkmark next to the following items:
• Activate UAC
• Remove disinfection tools
• Click the Run button.
• – This will remove the specialised tools we used to disinfect your system. Any leftover logs, files, folders or tools remaining on your Desktop which were not removed can be deleted manually (right-click the file + delete).
  
  ~~~~~~~~~~~~~~~`
  
  
• Answers to common security questions - Best Practices by quietman7, MVP
• How Malware Spreads - How did I get infected? by quietman7, MVP
• Simple and easy ways to keep your computer safe and secure on the Internet by Lawrence Abrams, MVP
• How to Prevent Malware by miekiemoes, MVP
• How to backup and restore your data using Cobian Backup by YourHighness
• Slow Computer/browser? It May Not Be Malware by quietman7, MVP
  
  The following programmes come highly recommended in the security community.
• [external image: xKsUqI5A.png.pagespeed.ic.vn1Hlvqi8h.jpg]AdBlock is a browser add-on that blocks annoying banners, pop-ups and video ads.
• [external image: E8I37RF.png]CryptoPrevent places policy restrictions on loading points for ransomware (eg.CryptoPrevent), preventing your files from being encrypted.
• [external image: EG85Vjt.png]Malwarebytes Anti-Exploit (MBAE) is designed to prevent zero-day malware from exploiting vulnerable software.
• [external image: x6YRrgUC.png.pagespeed.ic.HjgFxjvw2Z.jpg]Malwarebytes Anti-Malware Premium (MBAM) works in real-time along side your Anti-Virus to prevent malware execution.
• [external image: xjv4nhMJ.png.pagespeed.ic.A5YbWn1eDO.png]NoScript is a Firefox add-on that blocks the actions of malicious scripts by using whitelisting and other technology.
• [external image: 3O8r9Uq.png] Sandboxie isolates programmes of your choice, preventing files from being written to your HDD unless approved by you.
• [external image: DgW1XL2.png.pagespeed.ce.v1OlJl_ZAS.png]Secuina PSI will scan your computer for vulnerable software that is outdated, and automatically find the latest update for you.
• [external image: xj1OLIec.png.pagespeed.ic.k6hhwopU0q.jpg]SpywareBlaster is a form of passive protection, designed to block the actions of malicious websites and tracking cookies.
• [external image: xJEP5iWI.png.pagespeed.ic.4tmM1lM7DQ.png]Web of Trust (WOT) is a browser add-on designed to alert you before interacting with a potentially malicious website.
  
  Want to help others? Join the ClassRoom and learn how.
  
  

Thanks for your help, Juliet; I really appreciate it. I think we are done.