FASD

The problem just happened again with Chrome trying to go to careerbuilder.com in a new tab then another tab then another... I changed the default browser to IE since it has a setting to "Open links from other programs in" the current tab, so at least careerbuilder.com is only in one tab in IE, while I can hopefully continue to use Chrome (or Firefox?). Any other workaround or fix that I can try next time it happens?

Pinging careerbuilder.com [127.0.0.1] with 32 bytes of data: Reply from 127.0.0.1: bytes=32 time<1ms TTL=128 Reply from 127.0.0.1: bytes=32 time<1ms TTL=128 Reply from 127.0.0.1: bytes=32 time<1ms TTL=128 Reply from 127.0.0.1: bytes=32 time<1ms TTL=128 Ping statistics for 127.0.0.1: Packets: Sent = 4, Received = 4, Lost = 0 (0% loss), Approximate round trip times in milli-seconds: Minimum = 0ms, Maximum = 0ms, Average = 0ms NSLOOKUP careerbuilder.com Server: router.asus.com Address: 192.168.1.1 Non-authoritative answer: Name: careerbuilder.com Address: 208.82.7.22

Attached are the four log files from the three steps above. Thanks. MBscan.txt AdwCleaner[S1].txt Addition.txt FRST.txt

This malware of opening up a browser to go to careerbuilder.com has returned. ☹️ I have changed the hosts file and blocked the URLs, but eventually, the malware opens up Internet Explorer and tries to go to careerbuilder.com. I close IE but it keeps opening up. I tried to “Set program access and computer defaults” to disable access to IE, but now it opens infinite tabs in Google Chrome so I can’t do anything. ? Please help on what else I can do.

Adblock Plus is included in Chrome, but if I want to block a WEBSITE such as www.careerbuilder.com from being opened, would changing the hosts file in C:\Windows\System32\drivers\etc\ work? Is there a site blocking feature in Malwarebytes? : # localhost name resolution is handled within DNS itself. # 127.0.0.1 localhost # ::1 localhost 127.0.0.1 www.careerbuilder.com

I logged out of Google and opened Chrome. Unlike previous installs of Chrome, I was not asked if I wanted to sync. Clicking on "Settings" and "Sync" still shows all eleven sliders above in the off/left position. Clicking on "Manage synced data on Google Dashboard" shows "Last time synced on Today at 3:05 PM" (> 1.5 hours ago). What else should I test? Should I continue using Chrome to see if the careerbuilder.com problem will return?

I installed Chrome, clicked on Settings, and changed the "On - sync everything" to move all eleven sliders below from the right to left (off). What steps should I do next? The careerbuilder.com problem seems to only happen on weekends, and hasn't popped up since Sunday.

No, after I had uninstalled Chrome, I have not tried to log into Chrome or remove the Sync data (not sure how to do either). Is it necessary to do this in order to prevent the Careerbuilder.com tabs from popping up again? If so, how can I save my passwords and other synchronized data so I don't have to start all over after reinstalling Chrome? I have copied that ...\Default\Bookmarks file (424 KB) into both a backup folder and a USB stick.

I had uninstalled Google Chrome through Control Panel. I made a copy of %LOCALAPPDATA%\Google\Chrome\User Data\Default\Bookmarks. Do I need to do more than "Uninstall Google Chrome" to fully remove Chrome?

Attached are the four .txt files requested. Would it be safe to reinstall Google Chrome? MalwarebytesSummary.txt AdwCleaner[S0].txt Addition.txt FRST.txt

Attached are the FRST and Addition text files. If necessary, I have a USB 3.0 flash drive that has up to 64GB. Thank you. Addition.txt FRST.txt

www.careerbuilder.com suddenly kept popping up in new browser tabs on December 3. Microsoft Security Essentials deleted/quarantined Trojan:HTML/Broconer!rfm and Trojan:HTML/Vigorf.A, but careerbuilder.com resumed popping up again exactly one week later on December 10 (just after midnight again). Even when I close my browsers (Chrome then IE) or disconnect from the Internet, a browser opens up again trying to go to careerbuilder.com in never-ending tabs. Virus scans have detected no malicious items, but is this a malware issue? I have attached the Malwarebytes Threat Scan log so far. I will work on the FRST, Additions and fixlog files next. MB_ScanLog.txt