Malware on Computer

[HarleyQuinn]

While randomly using my computer on the internet or not, a browser opens that wants me to download something. I always just close the browser and continue on with what I was doing. Can someone help me figure out what is on my computer? Malwarebytes has not found anything, but there has to be some reason for it. Thanks.

Addition.txt

FRST.txt

Malwarebytes.txt

[Valinorum]

Hi ,

My name is Valinorum and I will be the acolyte today. Before we proceed, please, acknowledge yourself the following(s):

• Please do not create any new threads on this while we are working on your system as it wastes another volunteer's time. If you are being helped/have solved the issue/no longer wish to continue, notify me in your reply and I will quickly close this thread. Failing to comply will result in denial of future assistance.
• Please do not install any new software while we are working on this system as it may hinder our process.
• Malware removal is a complicated process and so don't stop following the steps even if the symptoms are not found. Keep up with me until I declare you clean.
• Please do not try to fix anything without being asked.
• Please do not attach your logs or put them inside code/quote tags. Do a Copy/Paste of the entire contents of the log file and submit it inside your post unless directed otherwise.
• Please print or save the instructions I give you for quick reference. We may be using Safe mode which will cut you off from the internet and you will not always be able to access this thread.
• Back up your data. I will not knowingly suggest you any course that might damage your system but sometimes Malware infections are so severe that only option we have is to re-format and re-install the operating system.
• If you are confused about any instruction, stop and ask. Do not keep on going.
• Do not repeat the steps if you face any problems.
• I am not an omniscient. There are things even I cannot foresee. But what I know took years to learn and perfect the skill. This site is run by volunteers who help people in need in their own free time. I would ask you to respect their time and be patient as sometimes real life demands our time and replies to you can be delayed.
• Private Message(PM) if and only if I have not responded to your thread within three days or your query is offtopic and personal. Do not PM me under any other circumstances. Your thread is the only medium of communication.
• The fixes are for your system only. Please refrain from using these fixes on another system as it may do serious damage.
  

---

• Step #1 Fix with AdwCleaner
  
  • Download AdwCleaner to your Desktop from the following link.
    
    • Download Link
  • Right-click on AdwCleaner.exe and choose Run as administrator;
  • Click on Tools>Option and put a tick mark as shown in the image below;
    
  • Click on Scan and let the program run unhindered;
  • When done, click on Clean and allow the system to reboot after it is done;
  • A log will be opened automatically after the restart. If not, it is located in C:\AdwCleaner\AdwCleaner[CX].txt, where X is replaced with a number;
  • Copy and Paste the contents of this log in your reply.

---

• Step #2 ESET Online Scanner
  Disable your security programs which includes but not limited to anti-virus, anti-malware, anti-spyware et cetera. Peruse this for additional information. 
  
  • Download esetsmartinstaller_enu.exe by clicking here.
  • Right-click on the program and choose Run as administrator.
  • Accept their terms and condition and proceed.
  • Install Add-On/Active X if prompted.
  • From the Computer Scan Setting check the following box --
    
    • Enable detection for potentially unwanted programs
  • Click on Advanced Setting --
    
    • Check the box beside Remove Found Threats;
    • Check the box beside Scan archives
    • Check the box beside Scan for potentially unsafe applications
    • Check the box beside Enable Anti-Stealth Technology
  • Click on Start and wait for the virus signature database to update.
  • The online scan will begin automatically and can take several hours.
    
    • Note: Do not touch either the Mouse or keyboard during the scan. Otherwise it may stall.
  • After the Scan finishes --
    
    • If no threats were found:
      
      • Put a checkmark in Uninstall application on close.
      • Close the program and report that nothing was found
    • If threats were found:
      
      • Open the file located in C:\Program Files\ESET\ESET Online Scanner\log.txt (32-bit) or C:\Program Files (x86)\ESET\ESET Online Scanner\log.txt (64-bit).
      • Copy and Paste contents of the log file in your next reply.
  
  Note: Enable your security programs afterwards.

---

[HarleyQuinn]

# AdwCleaner 7.0.1.0 - Logfile created on Mon Aug 28 14:05:34 2017
# Updated on 2017/05/08 by Malwarebytes 
# Database: 08-25-2017.1
# Running on Windows 10 Home (X64)
# Mode: scan
# Support: https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

No malicious folders found.

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

No malicious registry entries found.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries.

*************************

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt ##########

 

 

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=e4559824b15da94091aade25c31c2b57
# end=init
# utc_time=2017-08-28 02:07:38
# local_time=2017-08-28 07:07:38 (-0700, US Mountain Standard Time)
# country="United States"
# osver=6.2.9200 NT 
Update Init
Update Download
Update Finalize
Updated modules version: 34550
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=e4559824b15da94091aade25c31c2b57
# end=updated
# utc_time=2017-08-28 02:10:01
# local_time=2017-08-28 07:10:01 (-0700, US Mountain Standard Time)
# country="United States"
# osver=6.2.9200 NT 
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=e4559824b15da94091aade25c31c2b57
# engine=34550
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2017-08-28 02:25:01
# local_time=2017-08-28 07:25:01 (-0700, US Mountain Standard Time)
# country="United States"
# lang=1033
# osver=6.2.9200 NT 
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 0 34339315 0 0
# scanned=74518
# found=0
# cleaned=0
# scan_time=900
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=e4559824b15da94091aade25c31c2b57
# end=init
# utc_time=2017-08-28 02:25:54
# local_time=2017-08-28 07:25:54 (-0700, US Mountain Standard Time)
# country="United States"
# osver=6.2.9200 NT 
Update Init
Update Download
esets_scanner_update returned -1 esets_gle=53251
Update Finalize
Updated modules version: 34550
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=e4559824b15da94091aade25c31c2b57
# end=updated
# utc_time=2017-08-28 02:26:17
# local_time=2017-08-28 07:26:17 (-0700, US Mountain Standard Time)
# country="United States"
# osver=6.2.9200 NT 
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=e4559824b15da94091aade25c31c2b57
# engine=34550
# end=finished
# remove_checked=true
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2017-08-28 03:11:42
# local_time=2017-08-28 08:11:42 (-0700, US Mountain Standard Time)
# country="United States"
# lang=1033
# osver=6.2.9200 NT 
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 0 34342116 0 0
# scanned=212139
# found=2
# cleaned=2
# scan_time=2724
sh=063A37FE07DBAD2BD5ADFABADA9002A544F5DC14 ft=0 fh=0000000000000000 vn="a variant of Android/AdDisplay.AirPush.I potentially unwanted application (deleted)" ac=C fn="C:\Users\WizKid\Desktop\Old Files\Desktop\Catan\Catan 4.2.0 Mod Unlocked apkfiles.com.apk"
sh=6467A2E4E93AD00F0D5B52142F79D5AE1BAB0545 ft=0 fh=0000000000000000 vn="a variant of Android/AdDisplay.AirPush.I potentially unwanted application (deleted)" ac=C fn="C:\Users\WizKid\Desktop\Old Files\Desktop\Catan\Catan V4.1.0 apkfiles.com.apk"
 

[Valinorum]

Download and run JRT, and attach the log. 

[HarleyQuinn]

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.4 (07.09.2017)
Operating System: Windows 10 Home x64 
Ran by WizKid (Administrator) on Fri 09/01/2017 at 21:36:20.14
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

File System: 0 

Registry: 0 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Fri 09/01/2017 at 21:37:29.16
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 

[Valinorum]

How is the PC running?

[HarleyQuinn]

Sorry, I was out of town on work and didn't bring my computer with me. It was never a very consistent thing so it took me a little while to have it pop back up again. This time I didn't immediately close it so I have a little more information. It appears to be a popup for lp.blpmovies.com trying to add an extension to chrome.

[Valinorum]

Please, provide me a fresh set of FRST scan logs. 

[HarleyQuinn]

FRST.txt

[Valinorum]

Can you also attach the Addition.txt lag it produced?

[HarleyQuinn]

I reran it to get an updated file.

Addition.txt

FRST.txt