Lucky Search Engine Chrome Virus

[AdequateMan]

Ok, so I woke up yesterday and found in my laptop's desktop that Firefox was installed and two suspicious shortcuts named BigFarm and BigBangEmpire where added. Checked files, went to reddit and followed /r/techsupport malware removal guide, asked on /r/techsupport live chat about it and users responded to being a standard trojan virus. Finished removal guide, threats removed/quarantined, etc. All good. Deleted all fishy files installed that day, etc. Opened chrome and noticed some extensions missing as well my log on info not being there. Checked chrome files noticed they where changed to another file named : 

C:\Program Files (x86)\Footjane\Application\chrome.exe (Google Inc.)

Uninstalled chrome using RevoUninstaller, deleted all remaining footjane files. Tried reinstalling chrome but I can't. Tried everything, tried every solution on the internet I could find, alternate installer, offline installer, safe mode, Ninite, etc. Nothing works

Laptop runs Windows 7 Professional (X64)

[gopanda]

I had same problem. Same applications. after scanning with Malwarebytes and and deleting quarantine I have Black Screen now also when using Safe Mode.

I had those files BigFarm and BigBangEmpire before and I was able to remove them ,but after few days files was again on my desktop

and also C:\Program Files (x86)\Footjane\Application\chrome.exe

Edited May 17, 2017 by gopanda

[AdequateMan]

Adding Farbar atachments

Addition.txt

FRST.txt

[AdequateMan]

7 minutes ago, gopanda said:

I had same problem. Same applications. after scanning with Malwarebytes and and deleting quarantine I have Black Screen now also when using Safe Mode.

I had those files BigFarm and BigBangEmpire before and I was able to remove them ,but after few days files was again on my desktop

 

Happened to me once, they reappeared but ran HitmanPro and they didn't appear again or at least they haven't. Will keep you posted if it happens again.

[AdvancedSetup]

We're sorry. It looks like your topic was somehow overlooked. Due to the length of time we'll go ahead and close this topic now but if you still actually need help please send a private message to one of the Moderators and we'll assist you.Thank you and sorry we missed your topic.