mauricev

OK, thank you for all your help.

It made no difference.

Fixlog.txt attached. Fixlog.txt

ComboFix.exe extracts itself and just as it's about to run, it says it's expired. It offers to run in "reduced functionality" mode and then promptly quits and deletes itself after I click Yes.

Sorry, I wasn’t aware there was a second file, attaching now. Addition.txt

I have a 32-bit XP SP3 computer here (yes, they actually still exist) and it’s acting all weird. The WiseCare installer doesn’t run. Window complains falsely that it’s not a valid Win32 application. When I try to run the BIOS updater for this computer (a Dell Optiplex 745), Window claims a “Program Payload Error”. When I try to run the installer for CCleaner, it starts and then quits. Finally, when I try to run Malwarebytes (legacy version), it gives the error in the title, so it’s crossed my mind that the system could be infected. Tweaking.com did, however, run fine. I’m attaching a FRST scan log. FRST.txt

yes

I figured it out. There is a registry entry under (64-bit Windows) at HKEY_LOCAL_MACHINE\Software\Wow6432Node\Google\Chrome\Extensions This contains the identity of the extension and a URL where the extension is to be downloaded from. Once I removed this registry key, it no longer installs itself on new accounts.

I have an WIndows 7 image that I use for distribution. Somehow, the installer for Yahoo's Chrome extension got installed. That means whenever a user logs in and opens Chrome, the Yahoo Chrome extension get installed into their browser. Does anyone know where the installer is located so that I can remove it? I don't see anything in the registry and I don't see anything listed in AutoRuns. Chrome might have some location where it looks for extensions waiting to be installed. Where might that be? Malwareantibytes doesn't detect it because technically it's a legitimate software.

The Net Conf fix worked. Thanks.

In trying to update a freshly installed 2.0.2.1012 on Windows 7 SP1 64-bit, the program stops \ This looks a bit similar to another recent post https://forums.malwarebytes.org/index.php?/topic/154645-stopped-working/ I've attached the logs. CheckResults.txt Addition.txt FRST.txt