I need help with repeated adware infection

[ianmckenzie]

For some time now I have been struggling with adware infection that keeps coming back,  I have followed the  advice on this and other forums including using Zoek and adwcleaner,  Within a few minutes of going back on line I am getting pop ups and highlighted text (in this message the word adware above is highlighted  The worst event is that shown on the screen grab attached, In that event, the web browser (Chrome) freezes and I then have to  use Task Manager to close all the pages that are open. I run a n ezine for which I very often need to search for stuff on line.  At the top of EVERY search there is stuff headed Ads By VPN Apps. Most of which is drivel Any advice gratefully received as I am at my wits end. I am a registered Mallwarebytes user.  That does not seem to help either. It found seven intruders on the last scan  but when I went online again FREEZE. 

 

Best

 

IanM

[TwinHeadedEagle]

Hello,

Please follow this topic and attach required reports

https://forums.malwarebytes.org/index.php?/topic/9573-im-infected-what-do-i-do-now/

[ianmckenzie]

Re my earlier post,  Here are files requested: I have added then as attachments,

 

IanM

FRST.txt

Addition.txt

[ianmckenzie]

Sorry!   Here are the reports

FRST.txt

Addition.txt

[ianmckenzie]

Here is a scan from Malwarebytes. I have removed the offending files.  The freezing popup is still there

Mallware Scan Oct 19.txt

[TwinHeadedEagle]

Does it happen only in Google Chrome?

 

Are you familiar with PC Matic Super Shield running on your machine?

[JeremyThomas]

I've got almost exactly the same problem! Hoping that there is a fix out there. I've browsed through all these forums, downloaded and run all the programs, and still haven't been able to find a solution yet.

[ianmckenzie]

Hi TwinHeadedEagle

 

I am aware of PC Matic Super Shield running. It has been on this machine and my previous laptop for a long time.

 

Ian

[TwinHeadedEagle]

Please answer my second question. Thanks.

[ianmckenzie]

Sorry again.  Didn't see it. More haste less speed!

 

Chrome is the only browse I use. A week ago I removed it from the machine, including registry entries. It was OK for about three days when I re installed it bu them------back again.  As I am writing this a pop up has appeared at the bottom of the screen with 'brought by VNP Apps' on it.

[ianmckenzie]

I have just tried IE.  The popups are here but no freeze page - so far.  The 'infection' seem not to be so bad there.

[ianmckenzie]

I've got a new, Freeze page (attached)  The symptoms seem to be getting worse.

[TwinHeadedEagle]

Can you reinstall Google Chrome?

[ianmckenzie]

Done; I did the following

 

Went to the control panel, click programs and features, locate Google Chrome and uninstall.

Deleted installation directories C:\Program files\Google or, on 64-bit Windows, C:\Program Files (x86)\Google

Open File Explorer

Enabled View Hidden Files and Folders.

Located folder named "Google" under C:\Users\(account name)\AppData\Local

Opened the Registry Editor by pressing the Windows Key + R type regedit and click OK.

Locate;

HKEY_CURRENT_USER\Software\Google and deleted it by right clicking it and selecting delete.

HKEY_LOCAL_MACHINE\SOFTWARE\Google and delete it by right clicking it and selecting delete. (NB: NOTHING FOUND AT THAT LOCATION)

Click File, Exit

Restarted Lapto

 

 

 

So far (about 20 minutes) no problems.

 

I will monitor.  FYI: I am on line about 8 or 9 hours a day, doing my ezine and radio shows. 

[TwinHeadedEagle]

Okay, keep me updated.

[AdvancedSetup]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!