Adware and slow internet infection

[jd320]

Hello, 

     My name is Justin and recently, maybe 2 or three weeks ago, my computer has started to have random adware in my chrome browser. I will upload screenshots to show what they look like, which are ads in my webpages, as well as new-tab ads where when I click something on my webpage it pops up a new tab and routes it to some ad page. Also, I have a few programs that I've never seen before such as Search Snacks and also Search protect by Conduit Ltd. I looked up them and learned they were adware programs. I went to my programs and features and saw SearchSnacks and SearchProtect on the list, and when I proceeded to uninstall the SearchSnacks the SearchProtect disappeared from the list. Although I keep deleting programs and files in my computer they always seem to come back, and my computer is becoming slower and slower to load webpages, play online games, etc. Knowing my uncle is a sort of techie kind of guy, I gave him a call and he insisted I install MalwareBytes, and I did so. After scanning, it quarantined some items but I do not remember, should I include my log? Also, I have other security programs such as Microsoft Security Essentials, McAfee Security Scan Plus, and CC cleaner, but they never detect anything wrong. Currently, malwarebytes keeps showing a pop-up that blocks a certain site every 10mins or so, and I will include a picture of that. I'm not sure how the adware came to be, but I know it isn't going away. Any help would be greatly appreciated and I will cooperate fully in order to get this off my computer. Thank you.

 *As an additional note, I believe one of my scanning programs detected and quarantined malicious files (one of them a trojan), so I will also add a picture of that.  

[TwinHeadedEagle]

Hello,
    
 
They call me TwinHeadedEagle around here, and I'll be working with you.
 
     
    
Before we start please read and note the following:

• Limit your internet access to posting here, some infections just wait to steal typed-in passwords.
• Please be patient. I know it is frustrating when your PC isn't working properly, but malware removal takes time.
• Don't run any scripts or tools on your own, unsupervised usage may cause more harm than good.
• Do not paste the logs in your posts, attachments make my work easier. There is a Upload Files option below which you can use to attach your reports. Always attach reports from all tools.
• Stay with me to the end, the absence of symptoms doesn't mean that your machine is fully operational.
• Note that we may live in totally different time zones, what may cause some delays between answers.
• Do not ask for help for your business PC. Companies are making revenue via computers, so it is good thing to pay someone to repair it.
• If I don't hear from you within 3 days from this initial or any subsequent post, then this thread will be closed.

I can't foresee everything, so if anything unexpected happens, please stop and inform me!
There are no silly questions. Never be afraid to ask if in doubt!
 
 
 
  Rules and policies
 
We won't support any piracy.
That being told, if any evidence of illegal OS, software, cracks/keygens or any other will be revealed, any further assistance will be suspended. If you are aware that there is this kind of stuff on your machine, remove it before proceeding!
The same applies to any use of P2P software: uTorrent, BitTorrent, Vuze, Kazaa, Ares... We don't provide any help for P2P, except for their removal. All P2P software has to be uninstalled or at least fully disabled before proceeding!
 
Failure to follow these guidelines will result with closing your topic and withdrawning any assistance.
 
 
 
 

Scan with Malwarebytes' Anti-Malware
 
Please re-run Malwarebytes' Anti-Malware.

• First of all, select update.
• Once updated, click the Settings tab, in the left panel choose Detctions & protection and tick Scan for rootkits.
• Click the Scan tab, choose Threat Scan is checked and click Scan Now.
• If threats are detected, click the Apply Actions button. You will now be prompted to reboot. Click Yes.
• Upon completion of the scan (or after the reboot), click the History tab.
• Click Application Logs and double-click the newest Scan Log.
• At the bottom click Export and choose Text file.

Save the file to your desktop and include its content in your next reply.
 
 
 
 

Fix with AdwCleaner
 
Please download AdwCleaner by Xplode and save the file to your desktop.

• Right-click on icon and select Run as Administrator to start the tool.
• Follow the prompts and click Scan.
• When finished, please click Clean.
• Upon completion, click Report. A log (AdwCleaner[s*].txt) will open.

Please include the contents of that file in your reply.
 
Note: Reports will be saved in your system partition, usually at C:\Adwcleaner
 
 
 
 

Please download Farbar Recovery Scan Tool and save it to your desktop.
 
Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them.
Only one of them will run on your system, that will be the right version.

• Double-click to run it. When the tool opens click Yes to disclaimer.
• Press Scan button.
• It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
• The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

[jd320]

Hello,

I am excited to see a response! I am unaware and pretty sure there are no illegal files on my computer, as I do not participate in things like that. I prefer to be safe, and do not know what the things you mentioned like "cracks/keygens" and "P2P software" even is, so I believe that will not be a problem. Regarding the tools, I have ran the second tool, the adware cleaner, and both scanned and cleaned. After the restart, the notepad file came up, and I will be attaching the file to that with this response. Unfortunately, I realized that this adwcleaner tool seems to have deleted a screenshot tool that I downloaded from the Google chrome store. I have no way of taking screenshots (no known method) and do not want to re-download the tool since it was deleted for a reason in the first place (although I downloaded it way before any of the adware problems began showing up, and it had never really given me any problems). That being said, there is now a new type of adware that I have never before seen in my web browser. It is a type of ad that is in the lower right corner of my webpage that is a little pop-up and when I hit the "x" on it, it just minimizes but stays there and comes back if I ever roll my mouse over it again. 

 

So I will now post the notepad file results from the adwcleaner tool and continue on with the other two tools, and let you know with feedback how they go (along with their files). Please let me know if I am doing anything wrong and I very much appreciate the support, TwinHeadedEagle.

AdwCleanerS0.txt

[jd320]

And here is the farbar tool notepad file! Just so things are clear, I do not have to hit the "fix" button in the tool after the scan is complete and the logs are made? Becuase I didn't...

Addition.txt

FRST_30-09-2014_06-27-52.txt

[TwinHeadedEagle]

Did your run MalwareBytes?

[jd320]

Yes I just restarted my computer. And here is the log report. 

Log Malwarebytes.txt

[TwinHeadedEagle]

Okay, let's run one more fix. Tell me how is your PC after?
 
 
 
Fix with Farbar Recovery Scan Tool
 

This fix was created for this user for use on that particular machine.
Running it on another one may cause damage and render the system unstable.

 
Download attached fixlist.txt file and save it to the Desktop:
 
Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

• Right-click on icon and select Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• Press the Fix button just once and wait.
• If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
• When finished FRST will generate a log on the Desktop, called Fixlog.txt.

Please post it to your reply.

fixlist.txt

[jd320]

Hi!

[jd320]

Sorry for the late reply! I have been a little busy with school. And my internet is extremely slow to navigate right now. I don't understand what you mean by the FRST text and the fixlist.txt. I undersand that downloading the tool will give me the fixlist.txt but I don't understand where the FRST file is coming from in your talk about it. Sorry if it's something obvious but I am a little confused. I'm worried that I won't do it right and not put these two files in the right place. And where would I find these tool files when I download them, because I have been starting the downloaded tools from the browser where it shows the status of the download, I would click it in google chrome so that it starts when it's done downloading. So yeah! Thanks again, 

                                                                                                                 Justin

[TwinHeadedEagle]

FRST tool was run from this location:

 

C:\Users\Louie\Downloads

 

Please copy it to your Desktop. Then download Fixlist.txt and move it to your Desktop too. After you do this, follow my instructions.

[jd320]

This is the fixlog.txt

Fixlog.txt

[TwinHeadedEagle]

Good. How is your PC now?

[jd320]

It seems to be a little bit faster! I have yet to test out my cpu usage while playing online pc games, but the ads are still here. The "ad by notification" as well as the ad that makes  certain words on the webpage bold and links them to advertisement pages. Usually this doesn't happen but my computer would start making an audible sound as i assume my computer had to work faster, and so I still have yet to encounter that...

[TwinHeadedEagle]

Okay, let's scan your PC again. Does ads appear in all browsers?
 
 
Scan with Farbar Recovery Scan Tool
 
Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.

• Right-click on icon and select Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• Make sure that Addition option is checked.
• Press Scan button and wait.
• The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.

Please include their content into your next reply.

[TwinHeadedEagle]

Still with me?

[jd320]

Yes, sorry I have been busy recentky. I will try the scan again. I also have interesting news, the ads are only appearing in google chrome, the only browser i've ever used. I switched to Mozilla though to avoid the adware. I will do the scan and upload the files soon

[jd320]

Results:

FRST.txt

Addition.txt

[TwinHeadedEagle]

Okay. Please uninstall Google Chrome, remove all browsing data and then reinstall Chrome. Tell me how is the situation when you do this?

[jd320]

I'm assuming I'd go to "programs and features" to uninstall chrome? (dumb question) What about removing the browsing data? I'm not too sure about it (my apologies)... 

[TwinHeadedEagle]

Sorry. Yes, you need to open programs and features and select Chrome. You will get the box to check Remove all user data.

[jd320]

Greetings!

 Coming to you from the newly re-downloaded chrome browser! No adware that I am aware of! I feel blessed! Hopefully it stays this way...

[TwinHeadedEagle]

Okay, update me in day or two.

[jd320]

Hey, the ads are back. Don't know why. I haven't even been using Chrome that much. I just used mozilla and aparrently the ads are back.

[TwinHeadedEagle]

In which browser are ads appearing?

[jd320]

Chrome