whatwhat

I deleted the reg key and restarted the computer. On the restart the key was not there, so I used only application programs and now browsers for 2 hours. The key did not reappear during the 2 hours. I then briefly opened microsoft edge to check if the key would appear as soon as edge is opened, but it did not appear. After that, I opened chrome to see if they key would immediately appear after opening chrome, and it did not. I then left chrome open and about 5-7 minutes after chrome was open, the adware opened internet explore and displayed ads. Sure enough, the key was back in the registry after I checked it. From what I can gather it is definitely correlated to browsers being opened. Also, the moment the key reappears it displays ads. The adware does not remain dormant, it immediately executes what it is supposed to do if the key and deleted and then reappears. We know chrome likely causes the key to reappear and I'm fairly certain edge does as well, but I can run another test to verify this if you think it is needed.

Ok thank you. I will have to try it tomorrow, but I really appreciate your help so far.

I set microsoft edge to my default browser, uninstalled the registry key, and restarted my computer. After the restart I checked the registry and the key was not there. I only used microsoft edge, but eventually the adware opened internet explorer and displayed ads. I then checked the registry and sure enough the key was there again.

I deleted the registry key but the adware still came back.

It came back before I deleted the key in the registry. Since I do not have google sync on can I just delete the registry key and it should be gone, or do I need to do a malwarebytes scan, delete the registry key, and then reset chrome?

Ok so I have never had sync enabled on my pc so it did not give me the option to reset sync since sync had no data stored. Also, I went ahead and reset chrome to its default settings. I will let you know if that fixed the problem.

I had to turn off my computer between the malwarebytes and ESET scan. I don't know if that is important or not but I figured it wouldn't hurt to mention it. Autoruns log.zip malwarebyte1 log.txt ESET scan log.txt

Nevermind I figured it out

For autoruns the options tab is faded out and does not let me click on it.

When I click the first "here" link in your message above a new tab opens for a split second then closes and nothing happens and nothing is downloaded.

Addition.txt FRST.txt

I only use google chrome. I never used internet explore before; however, when the malware does its thing it opens up internet explore and shows ads.

Sorry for the weird formatting, I do not know what happened. Fixlog.txt

Ok so about 10 minutes after I ran the first scan with FRST the adware opened internet explore again to display ads. Seeing this, I decided to run FRST a second time with the same fixlist aFixlog.txtnd the logs came back different this time.

Fixlog.txt

Clearing the cache and cookies did not remove the virus. Just wanted to let you know that I will be away from the PC infected with adware until Sunday, so I will not be able to do any of the things you tell me to do until then. Thank you for your help so far.

The adware caused internet explorer to open up and show ads in the browser so I know it is still on my pc. Addition.txt FRST.txt

malwarebyte log.txt

I can confirm that the adware is still on my computer.

I ran a malwarebyte scan a few minutes ago and it found the adware again, but i'm not sure if that was the last one and it just didn't get deleted when the other stuff got removed. The adware did not pull up windows explorer like it used to before you had me run the fixlist so I'm not sure what the deal is. Thank you for your help so far.

The scanner said no viruses were found. msert.log

Fix log below Fixlog.txt

Logs attached below. Thank you for your help so far. malware byte log.txt adwcleaner log.txt FRST.txt Addition.txt

I recently accidently installed a piece of malware on my PC. I ran Malwarebytes to get rid of it, but it keeps coming back each time I boot up my PC. I have included a picture of it in quarantine below. Note: Even if it is quarantine, the adware still comes back.