SaitoEXE

Ok I'll try that. Thank you for your help.

Yeah, I'm not getting any more popups in my browsers, but the steam client is a separate application.

and I got another popup.

Correction, I currently am not getting any more popups in steam. I was about 1 hour ago, but it seems to have stopped. I'll keep checking every once in awhile to see if they are gone or not.

I still get the popups on the steam store page when using the steam client though.

That does seem to work but I don't think it was a pop-up from the website since it was the main page of twitch.tv but I could be wrong. I also saw a new window open for a split second and then close when I went to that website. I also cleared all my browsers.

I installed firefox because I uninstalled google chrome and I am getting popups of the same kind in Firefox I might have been getting them on chrome but I had a popup blocker.

I re-installed windows on my laptop since I didn't have any important documents on it, and it seemed to fix the issue. I'm not sure if that helps you at all.

Yes, I still get the same pop-ups.

Results of screen317's Security Check version 1.009 Windows 7 Service Pack 1 x64 (UAC is disabled!) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` Windows Firewall Enabled! Avira Antivirus Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Google Chrome (46.0.2490.71) Google Chrome (46.0.2490.80) ````````Process Check: objlist.exe by Laurent```````` Avira Antivir avgnt.exe Avira Antivir avguard.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: 22% Defragment your hard drive soon! (Do NOT defrag if SSD!) ````````````````````End of Log``````````````````````

JavaRa 1.16 Removal Log. Report follows after line. ------------------------------------ The JavaRa removal process was started on Sat Nov 07 07:34:19 2015 There was an error removing C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-ABCDEFFDCBA}. The error returned was 124. There was an error removing C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0001-ABCDEFFDCBA}. The error returned was 124. There was an error removing C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0002-ABCDEFFDCBA}. The error returned was 124. There was an error removing C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0003-ABCDEFFDCBA}. The error returned was 124. There was an error removing C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0004-ABCDEFFDCBA}. The error returned was 124. There was an error removing C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0005-ABCDEFFDCBA}. The error returned was 124. There was an error removing C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0006-ABCDEFFDCBA}. The error returned was 124. There was an error removing C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0007-ABCDEFFDCBA}. The error returned was 124. There was an error removing C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0008-ABCDEFFDCBA}. The error returned was 124. There was an error removing C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0009-ABCDEFFDCBA}. The error returned was 124. There was an error removing C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0010-ABCDEFFDCBA}. The error returned was 124. There was an error removing C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0011-ABCDEFFDCBA}. The error returned was 124. There was an error removing C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0012-ABCDEFFDCBA}. The error returned was 124. There was an error removing C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0013-ABCDEFFDCBA}. The error returned was 124. There was an error removing C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0014-ABCDEFFDCBA}. The error returned was 124. There was an error removing C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0015-ABCDEFFDCBA}. The error returned was 124. There was an error removing C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0016-ABCDEFFDCBA}. The error returned was 124. There was an error removing C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0017-ABCDEFFDCBA}. The error returned was 124. There was an error removing C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0018-ABCDEFFDCBA}. The error returned was 124. There was an error removing C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0019-ABCDEFFDCBA}. The error returned was 124. There was an error removing C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0020-ABCDEFFDCBA}. The error returned was 124. There was an error removing C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0021-ABCDEFFDCBA}. The error returned was 124. There was an error removing C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0022-ABCDEFFDCBA}. The error returned was 124. Found and removed: Applications\java.exe Found and removed: Applications\javaw.exe Found and removed: Software\JavaSoft\Java Update Found and removed: SOFTWARE\Classes\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501} Found and removed: SOFTWARE\Classes\CLSID\{5852F5ED-8BF4-11D4-A245-0080C6F74284} Found and removed: SOFTWARE\Classes\CLSID\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} Found and removed: SOFTWARE\Classes\CLSID\{DBC80044-A445-435b-BC74-9C25C1C588A9} Found and removed: SOFTWARE\Classes\Interface\{5852F5EC-8BF4-11D4-A245-0080C6F74284} Found and removed: SOFTWARE\Classes\MIME\Database\Content Type\application/java-deployment-toolkit Found and removed: SOFTWARE\Classes\TypeLib\{5852F5E0-8BF4-11D4-A245-0080C6F74284} Found and removed: SOFTWARE\Classes\.jar Found and removed: SOFTWARE\Classes\jarfile Found and removed: SOFTWARE\Classes\JavaWebStart.isInstalled Found and removed: SOFTWARE\Classes\JavaWebStart.isInstalled.1.7.0.0 Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects Found and removed: SOFTWARE\JavaSoft Found and removed: SOFTWARE\JreMetrics ------------------------------------ Finished reporting.

-----Junkware Removal Tool----- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Malwarebytes Version: 7.6.4 (09.28.2015:1) OS: Windows 7 Ultimate x64 Ran by Owner on 2015/11/06 at 16:14:09.76 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Tasks ~~~ Registry Values ~~~ Registry Keys ~~~ Files ~~~ Folders Successfully deleted: [Folder] C:\Users\Owner\Appdata\Local\crashrpt ~~~ Chrome [C:\Users\Owner\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - default search provider reset [C:\Users\Owner\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted: [C:\Users\Owner\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset [C:\Users\Owner\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted: [] ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 2015/11/06 at 16:16:21.76 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -----Adwcleaner----- # AdwCleaner v5.018 - Logfile created 06/11/2015 at 16:19:56 # Updated 05/11/2015 by Xplode # Database : 2015-11-03.2 [server] # Operating system : Windows 7 Ultimate Service Pack 1 (x64) # Username : Owner - SAITO-PC # Running from : C:\Users\Owner\Desktop\AdwCleaner.exe # Option : Cleaning # Support : http://toolslib.net/forum ***** [ Services ] ***** ***** [ Folders ] ***** ***** [ Files ] ***** ***** [ DLLs ] ***** ***** [ Shortcuts ] ***** ***** [ Scheduled tasks ] ***** ***** [ Registry ] ***** ***** [ Web browsers ] ***** [-] [C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [startup_URLs] Deleted : hxxp://isearch.avg.com/?cid={408E8525-0E31-4F90-B9AE-F599BA9F8C4F}&mid=1d9c2fd5f17047d08daed16f5e1a95d4-414aea6313dd925d09dd1828a7ce0ca7c1d2825f〈=en&ds=st011&pr=sa&d=2012-06-26%2002:32:08&v=11.1.0.7&sap=hp [-] [C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [startup_URLs] Deleted : hxxp://isearch.avg.com/?cid={B985F085-F8B1-4B3A-809B-BF0A1D278009}&mid=e00e0424594047d09753d16f5e1a95d4-414aea6313dd925d09dd1828a7ce0ca7c1d2825f〈=en&ds=st011&pr=sa&d=2013-01-25%2015:51:13&v=13.2.0.4&sap=hp ************************* :: "Tracing" keys removed :: Winsock settings cleared ########## EOF - C:\AdwCleaner\AdwCleaner[C3].txt - [1314 bytes] ########## -----Malwarebytes Anti-Malware----- www.malwarebytes.org Scan Date: 2015/11/06 Scan Time: 16:22 Logfile: Administrator: Yes Version: 2.2.0.1024 Malware Database: v2015.11.06.01 Rootkit Database: v2015.11.04.02 License: Free Malware Protection: Disabled Malicious Website Protection: Disabled Self-protection: Disabled OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: Owner Scan Type: Threat Scan Result: Completed Objects Scanned: 403828 Time Elapsed: 13 min, 40 sec Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Enabled Deep Rootkit Scan: Enabled Heuristics: Enabled PUP: Enabled PUM: Enabled Processes: 0 (No malicious items detected) Modules: 0 (No malicious items detected) Registry Keys: 0 (No malicious items detected) Registry Values: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Folders: 0 (No malicious items detected) Files: 0 (No malicious items detected) Physical Sectors: 0 (No malicious items detected) (end) -----ESET Online Scanner----- C:\Users\Owner\AppData\Roaming\PowerISO\Upgrade\PowerISO6-x64.exe a variant of Win32/FusionCore.C potentially unwanted application C:\Users\Owner\AppData\Roaming\PowerISO\Upgrade\PowerISO6.exe a variant of Win32/FusionCore.C potentially unwanted application E:\Games\Heroes of Might and Magic 3 Complete HotA\HotA_launcher.exe Win32/GameTool.BV potentially unsafe application E:\Translation Tools\TA\agth.dll a variant of Win32/AGTH.A potentially unwanted application -----Farbar Recovery Scan Tool----- Files have been attached to post. Addition.txt FRST.txt

-----Malwarebytes Scan Log----- Malwarebytes Anti-Malwarewww.malwarebytes.org Scan Date: 2015/11/06Scan Time: 15:28Logfile: Administrator: Yes Version: 2.2.0.1024Malware Database: v2015.11.06.01Rootkit Database: v2015.11.04.02License: FreeMalware Protection: DisabledMalicious Website Protection: DisabledSelf-protection: Disabled OS: Windows 7 Service Pack 1CPU: x64File System: NTFSUser: Owner Scan Type: Threat ScanResult: CompletedObjects Scanned: 405070Time Elapsed: 10 min, 51 sec Memory: EnabledStartup: EnabledFilesystem: EnabledArchives: EnabledRootkits: EnabledDeep Rootkit Scan: EnabledHeuristics: EnabledPUP: EnabledPUM: Enabled Processes: 0(No malicious items detected) Modules: 0(No malicious items detected) Registry Keys: 0(No malicious items detected) Registry Values: 0(No malicious items detected) Registry Data: 0(No malicious items detected) Folders: 0(No malicious items detected) Files: 0(No malicious items detected) Physical Sectors: 0(No malicious items detected) (end) -----RKill log----- Rkill 2.8.2 by Lawrence Abrams (Grinler)http://www.bleepingcomputer.com/Copyright 2008-2015 BleepingComputer.comMore Information about Rkill can be found at this link: http://www.bleepingcomputer.com/forums/topic308364.html Program started at: 11/06/2015 03:25:02 PM in x64 mode.Windows Version: Windows 7 Ultimate Service Pack 1 Checking for Windows services to stop: * No malware services found to stop. Checking for processes to terminate: * No malware processes found to kill. Checking Registry for malware related settings: * No issues found in the Registry. Resetting .EXE, .COM, & .BAT associations in the Windows Registry. Performing miscellaneous checks: * Windows Defender Disabled [HKLM\SOFTWARE\Microsoft\Windows Defender] "DisableAntiSpyware" = dword:00000001 Checking Windows Service Integrity: * Windows Defender (WinDefend) is not Running. Startup Type set to: Manual Searching for Missing Digital Signatures: * No issues found. Checking HOSTS File: * HOSTS file entries found: 194.145.200.27 pagead2.googlesyndication.com 127.0.0.1 secure.tune-up.com 127.0.0.1 www.order.tune-up.com 127.0.0.1 www.tune-up.com 127.0.0.1 www.tune-up.com/order 127.0.0.1 www.registertuneup.com 127.0.0.1 www.tuneup.de Program finished at: 11/06/2015 03:25:43 PMExecution time: 0 hours(s), 0 minute(s), and 40 seconds(s)---------------------------------------------------------------------------- I reset my Hosts according to the link you gave me and that was the only time I reset my computer during the process. I reset my Hosts after scanning, should I scan again and post the news logs or will that not be necessary?

Hello, I've been getting pop-ups when going into my Steam Store page. The popups won't let me click on anything until I close them and when I do another pops up. It's a total of 2 pop-ups each time, and some times it only pops up when I click somewhere on the Store page. The popups are only in steam and I don't get popups anywhere else. It is effecting 2 of my computers one is a Laptop and the other is my Desktop. I've uploaded some picture of the popups and Farbar Recovery Scans of both computers in question. I have run Malwarebytes scan both quick and full as well as Ccleaner and Adwcleaner but none of these have solved my problem. I would appreciate any help you can give. Addition Desktop.txt Addition Laptop.txt FRST Desktop.txt FRST Laptop.txt