Advert pop-ups in lower left corner and auto redirects

[Davoethnik]

Hi there,

I have tried following steps from people on your forum and one about removing Chitka virus (http://malwaretips.com/blogs/remove-chitka-virus/)%C2'>but it hasnt cured the problem.

The main issue is the adverts appearing in the bottom left corner but I have also noticed that when I click on links I am being auto redirected to random unrelated sites.

I could really do with someones help on this.

 

I'm running Windows 7 (64) and this issue is only on Google chrome, it is not affecting IE.

Following other internet tutorials I have already..

1. Run Malwarebytes anti-malware and that removed a number of threats. (interestingly google chrome seemed momentarily cured but then popups started again on the pages I had noticed them before)
2. Run Hitman pro x to remove rootkits. Some things were removed though they did not seem to be high level threats.
3. Run Rogue Killer (Nothing major flagged up and I have a report I can send you) one thing that did stand out was 
[bROK VAL] HKCR\[...]\command : () -> MISSING
4. Removed any extensions that I didnt recognise but there was only one.
5. Ran AdwCleaner which also removed some items though nothing was highlighted red and therefore didnt seem major.
6. Run Combofix, nothing malicious found and have a report I can send you.
7. Run Ccleaner and removed many items freeing up 400 mb of space
8. Run TDSSkiller but nothing malicious found.
9. Uninstalled then reinstalled Google chrome (includgin all preferences and crash dump files) but same problem persists.

P.S. I have successfully masked the lower left ads using the AdBlock extension for google chrome but this seems to be more a method of masking symptoms than a remover of the virus itself and so I would like to get rid of the source.

If you can help please let me know.
Many Thanks
David

[MrCharlie]

Welcome to the forum.

Please run a Quick Scan with Malwarebytes like this:

Open up Malwarebytes > Settings Tab > Scanner Settings > Under action for PUP > Select: Show in Results List and Check for removal.

Please Update and run a Quick Scan with Malwarebytes Anti-Malware, post the report.

Make sure that everything is checked, and click Remove Selected.

If you're using Malwarebytes 2.0, please run a Threat Scan

Then....please start HERE <-------- (may not run on W8)

Post back the 2 logs here.....DDS.txt and Attach.txt

(please don't put logs in code or quotes and use the default font)

Don't forget to RogueKiller below

General P2P/Piracy Warning:

 

1. If you're using Peer 2 Peer software such uTorrent, BitTorrent or similar you must either fully uninstall it or completely disable it from running while being assisted here.

Failure to remove or disable such software will result in your topic being closed and no further assistance being provided.

2. If you have illegal/cracked software, cracks, keygens, custom (Adobe) host file, etc. on the system, please remove or uninstall them now and read the policy on Piracy.

Failure to remove such software will result in your topic being closed and no further assistance being provided.

<====><====><====><====><====><====><====><====>

Next................

Please download and run RogueKiller 32 bit to your desktop.

RogueKiller<---use this one for 64 bit systems

Which system am I using?

Quit all running programs.

For Windows XP, double-click to start.

For Vista or Windows 7-8, do a right-click on the program, select Run as Administrator to start, & when prompted Allow to run.

Click Scan to scan the system.

When the scan completes > Close out the program > Don't Fix anything!

Don't run any other options, they're not all bad!!!!!!!

Post back the report which should be located on your desktop.

(please don't put logs in code or quotes and use the default font)

MrC

Note:

Please read all of my instructions completely including these.

Make sure system restore is turned on and running. Create a new restore point

Make sure you're subscribed to this topic: Click on the Follow This Topic Button (at the top right of this page), make sure that the Receive notification box is checked and that it is set to Instantly

Removing malware can be unpredictable...unlikely but things can go very wrong! Backup any files that cannot be replaced. You can copy them to a CD/DVD, external drive or a pen drive

<+>Please don't run any other scans, download, install or uninstall any programs while I'm working with you.

<+>The removal of malware isn't instantaneous, please be patient.

<+>When we are done, I'll give to instructions on how to cleanup all the tools and logs

<+>Please stick with me until I give you the "all clear" and Please don't waste my time by leaving before that.

------->Your topic will be closed if you haven't replied within 3 days!<--------

(If I don't respond within 24 hours, please send me a PM)

[Davoethnik]

Appreciate the response.

 

I ran Roguekiller again before I saw this and removed or fixed some PUM elements in Registry and DNS.

 

I have since deleted my old Windows User account and started an Admin account due to USB 3 hardware issues which my local repair shop suggested could be down to an error just on that user.

 

Since doing that I have had no banners and redirects in Google Chrome and no issues with my USB external harddrive.

 

I think I'm in the clear but if you believe otherwise I will run a scan for you, but as I posted before, I have already undertaken all of these scans already and they did not fix the issue..

 

Thanks

David

[MrCharlie]

OK......

Take a look at My Preventive Maintenance to avoid being infected again. (My Preventive Maintenance also found HERE)

Good Luck and Thanks for using the forum, MrC

[AdvancedSetup]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!