pop up browsers for games and new cars [Solved]

Hello electriccrayon and welcome to the WTT forum.

My name is Satchfan and I would be glad to help you with your computer problem.

IMPORTANT:

Please DO NOT install/uninstall any programs unless asked to.
Please DO NOT run any scans other than those requested

==================================================

Download and run AdwCleaner

Download AdwCleaner from here and save it to your desktop.

• run AdwCleaner by clicking on Scan
• when it has finished, leave everything that was found checked, (ticked), then click on Clean
• if it asks to reboot, allow the reboot
• on reboot a log will be produced; please attach the content of the log to your next reply.

===================================================

Run Security Analysis

Download Security Analysis by Rocket Grannie from here

• save it to your Desktop
• close your security software to avoid potential conflicts
• double-click RGSA.exe
• click OK on the copyright-disclaimer
• when finished, a Notepad window will open with the results of the scan
• the log named SALog.txt can also be found on the Desktop or, in the same folder from where the tool is run if installed elsewhere
• please copy and paste the contents of that log in the next post.

Note: If you get a Warning from Windows about running the program, click on More info and then click Run Anyway to run it even though Windows says it might put your PC at risk.
Logs to include with next post:

AdwCleaner log
Security Analysis log

Thanks

Satchfan

Thanks for the logs.

Uninstall programs

Uninstall this program:

Norton Security

• hold down the Windows logo key and press X to open a menu at the lower-left area of the screen
• select Programs and Features from the menu
• search and select the above program and click on Uninstall
• reboot your computer.

===================================================

Run Norton Removal Tool

Please download and run this to remove remnants of Norton from your system.

===================================================

Please run FRST again and make sure there is a checkmark next to 'Addition.txt' before you hit 'Scan'.

Logs to include with next post:

New Frst.txt
New Addition.txt

Thanks

Satchfan

You need to move Farbar Recovery Scan Tool to your desktop otherwise fixes will not work.

• go to your Downloads folder and locate Farbar Recovery Scan Tool
• right click and select Cut
• go to an empty spot on your desktop, right click and select Paste

Farbar Recovery Scan Tool should now be on your desktop.

================================================

Run Farbar Recovery Scan Tool

• right-click FRST/FRST64 and select ‘Run as administrator’
• highlight the contents of the code box below, then press Ctrl+c):

Start::
CloseProcesses:
HKU\S-1-5-21-4063568748-4076816247-424404103-1001\…\MountPoints2: {139723ed-d36b-11e3-8253-806e6f6e6963} - "D:\Setup.exe"
GroupPolicy: Restriction ? <==== ATTENTION
SearchScopes: HKLM -> DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-4063568748-4076816247-424404103-1001 -> {2211d4a5-48d0-47f5-a7cd-81e861470f7f} URL = hxxp://www.bing.com/search?FORM=U147DF&PC=U147&q={searchTerms}&src=IE-SearchBox
Toolbar: HKU\S-1-5-21-4063568748-4076816247-424404103-1001 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
Toolbar: HKU\S-1-5-21-4063568748-4076816247-424404103-1001 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
CHR Extension: (Norton Home Page for Chrome) - C:\Users\Judy\AppData\Local\Google\Chrome\User Data\Default\Extensions\gfoabcdjalmeenbjjngidappmppchblc [2017-04-27]
CHR Extension: (Norton Safe) - C:\Users\Judy\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbmobhkkblcgdifigjglcjneplefbkmh [2017-04-27]
S2 EraserSvc11620; "C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\NS.exe" /h ccCommon [X]
S2 GamesAppIntegrationService; "C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe" [X]
S3 GamesAppService; "C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe" [X]
S3 EraserUtilDrv11620; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilDrv11620.sys [X]
U0 msahci; system32\drivers\msahci.sys [X]
S3 SWDUMon; \SystemRoot\system32\DRIVERS\SWDUMon.sys [X]
2018-08-18 17:51 - 2018-08-18 17:52 - 013020688 _____ (Symantec Corporation) C:\Users\Judy\Downloads\NRnR.exe
2018-08-14 12:11 - 2018-08-14 12:11 - 000000166 _____ C:\Users\Judy\Downloads\ATT00003.htm
2018-08-14 12:11 - 2018-08-14 12:11 - 000000120 _____ C:\Users\Judy\Downloads\ATT00002.htm
2018-08-14 12:11 - 2018-08-14 12:11 - 000000120 _____ C:\Users\Judy\Downloads\ATT00001.htm
2018-08-04 14:12 - 2018-08-04 14:12 - 000127800 _____ C:\Users\Judy\AppData\Local\GDIPFONTCACHEV1.DAT
2018-08-18 17:48 - 2017-02-15 15:32 - 000000000 ____D C:\ProgramData\Norton
2017-01-26 15:15 - 2017-01-26 15:16 - 000007604 _____ () C:\Users\Judy\AppData\Local\resmon.resmoncfg
CustomCLSID: HKU\S-1-5-21-4063568748-4076816247-424404103-1001_Classes\CLSID\{91A41FCC-BC02-42D8-A36E-0D27FF9BFFC8}\InprocServer32 -> C:\Users\Judy\AppData\Local\Google\Update\1.3.33.7\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-4063568748-4076816247-424404103-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Judy\AppData\Local\Google\Update\1.3.33.17\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-4063568748-4076816247-424404103-1001_Classes\CLSID\{EA724FD3-844D-43A9-A8C9-A5BC35FC20E4}\InprocServer32 -> C:\Users\Judy\AppData\Local\Google\Update\1.3.33.17\psuser_64.dll (Google Inc.)
AlternateDataStreams: C:\Windows\system32\msln.exe:bf8057d0a0b7b01f76d755913d97a3ff [224]
CMD: ipconfig /flushdns
EmptyTemp:
End::

NOTE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

• in the FRST window, press the ‘Fix’ button once and wait
• please reboot the computer if requested
• it will create a log on your desktop, (Fixlog.txt); please post it to your reply.

================================================

Run Malwarebytes’ Anti-Malware

I noticed you have Malwarebytes on your system.

• open Malwarebytes
• on the Dashboard, click Update Now
• after the update completes, click the Scan Now' button
• if an update is available, clicking the Update Now button will update it
• a Threat Scan will begin.
• when the scan is complete, if malware has been detected, click Apply Actions to allow MBAM to clean what was found
• when the prompt to restart the computer appears, click Yes
• after the restart once you are back at your desktop, open MBAM once more
• click on the ‘History’ tab, the ‘Application Logs’
• double-click on the scan log which shows the date and time of the scan just performed
• click Copy to Clipboard
• please paste the contents of the clipboard into your reply.

Logs to include with the next post:

Fixlog.txt
Mbam.txt

Can you tell me if there are any outstanding problems.

Satchfan

Can you tell me if there are any outstanding problems.

the computer is running much faster now, but still got a pop up browser for some game. 

Was this in Chrome by any chance?

yes, it is in chrome. play this game, buy this car, etc…

Chrome is a total nuisance and we have countless problems with it. I think that uninstalling the wretched program may the best answer. You cannot remove some Chrome problems except with an uninstall/re-install of Chrome, (even though Google have been aware of this since 2008 and haven't bothered to do anything about it).

Uninstall/Reinstall Google Chrome

First save all your bookmarks/favourites.

• open Chrome, click on the 3 bars in the top right hand corner, select Bookmarks and then Bookmarks Manager
• click on Organise and then select Export Bookmarks to HTML file, then choose Desktop to save it
• again, click on the three bars in the top right hand corner and select Settings
• in the list of Settings under ‘Sign in’ click on Disconnect your Google Account – (if ‘Disconnect your Google Account’ is not there, you will have to sign in using your Chrome username and password first to make it visible)
• in the text of the next window click on ‘Google Dashboard’ then, at the ‘Chrome sync’ screen, click on Stop and Clear at the bottom
• a box will open and ask for confirmation, click on OK (wait for this to complete before doing the next step)
• when confirmation appears close that page and then click on Disconnect account
• shut Google Chrome, click on Start > Control Panel > Programs and Features (or Add/Remove Programs in XP) and uninstall Google Chrome. Select Everything for removal if asked.

Reboot the system and then reinstall Google Chrome from here

Repeat the process to reinstate your bookmarks by going to Bookmarks > Bookmarks Manager > Organise and select Import Bookmarks.

Let me know if that has solved the problem.

Satchfan

I got lost after the 'sign in' and disconnect your google account instruction. I'm signed in but I don't see that option on the settings page. 

I am not a chome fan or user so have no expertise here. Google also supply no advice on this so the best information I could find was here.

Let me know if you have any luck and if you don't, I'll direct you to another of our forums where they will know.

Satchfan

Hi electriccrayon

It has been several days since I replied and asked you about Chrome.

If I do not hear from you within 24 hours I'll assume that all is now OK and close this topic.

Thanks

Satchfan