Jump to content

Chrome infected not detected

MirkoGrifo2

By MirkoGrifo2
in Resolved Malware Removal Logs

 Share

Recommended Posts

MirkoGrifo2

MirkoGrifo2

Posted
Posted

I have a great problem, i have fomatted my PC then i have read this post 

but it doesn't resolve nothing.

My browser try to open website like this:

Domain: pussl19.com
Address IP: 198.134.112.242
Port: [49931]
Type: In uscita
File: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Antimalwarebytes is updated at the last version, i scan entire PC but it doesn't found nothing, i've tried Spyhunter and it found an adware on 

C:\Users\Mirko\AppData\Local\Google\Chrome\User Data\Default\Web Data but when i try to remove my PC go out!!!

I think the problem start only when i sign in my Google account and synchronize is on !!

Could you help me please?

Link to post
Share on other sites
kevinf80

kevinf80

Posted
Posted

Hello MirkoGrifo2 and welcome to Malwarebytes,

Lets make fresh install of Chrome, this time clear all synced data to stop re-infection problems....

If your Chrome Bookmarks are important do this first:

Go to this link: http://www.wikihow.com/Export-Bookmarks-from-Chrome follow the instructions and Export your Bookmarks from Chrome, save to your Desktop or similar. Note the instructions can also be used to Import the bookmarks.....

Continue for a clean install:

Download Chrome installer and save to install later: https://www.google.com/intl/en_uk/chrome/browser/desktop/index.html https://www.google.com/intl/en_usa/chrome/browser/desktop/index.html

Next,

Open Chrome and sign into your account, open a new tab and type or copy paste chrome://settings/syncSetup hit enter...

In the new window that opens "Sync everthing" will probably be selected, scroll down to and select "Managed sync data on Google Dashboard"

A new window will open, scroll down to and select "Reset Sync" that will clear synced data from Google Server...

Continue to next step to completely Uninstall Chrome....

Next.

Uninstall Chrome: https://support.google.com/chrome/answer/95319?hl=en-GB follow those instructions, ensure the option to "Also delete your browsing data" is selected. <<--- Very important!!

Navigate to C:\Users\Your user name\Appdata\Local from that folder delete the folder named Google (you will need to show hidden files/folders to see the folder Appdata)

For XP that will be My Computer > C:\ Documents and Settings\Your User Name\Application Data\Roaming

How to show hidden files and folders for windows: http://www.howtogeek.com/howto/windows-vista/show-hidden-files-and-folders-in-windows-vista/

Next,

Install Google Chrome :

Next,

Import your Bookmarks... (instructions in the first step)

Next,

Install Adblock Plus to Chrome: https://chrome.google.com/webstore/detail/adblock-plus/cfhdojbkjhnklbpkdaibdccddilifddb

Install DrWeb Link Ant-virus Link Checker: https://chrome.google.com/webstore/detail/drweb-anti-virus-link-che/aleggpabliehgbeagmfhnodcijcmbonb?hl=en

Does that help..
 
Thank you,
 
Kevin
 
Link to post
Share on other sites
MirkoGrifo2

MirkoGrifo2

Posted
  • Author
Posted (edited)

Thank you but my pc doesn't function, it start 1 times on 2, when it start it try to connect in windows with a unknown user.... when it start i see antimalware disable, chrome open always a second window, many programs doesn't function.

I must reformat it and doesn't install chrome i've no solution :angry:sync is the problem, google has the virus online i can't sync

Edited by MirkoGrifo2
Link to post
Share on other sites
kevinf80

kevinf80

Posted
Posted

Thanks for the update MirkoGrifo2, are you intending to format your hard drive and reinstall windows ..? if not run the following and post the produced logs.

Download Farbar Recovery Scan Tool and save it to your desktop.

Alternative download option: http://www.techspot.com/downloads/6731-farbar-recovery-scan-tool.html

Note: You need to run the version compatible with your system (32 bit or 64 bit). If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

If your security alerts to FRST either, accept the alert or turn your security off to allow FRST to run. It is not malicious or infected in any way...

Be aware FRST must be run from an account with Administrator status...
 
  • Double-click to run it. When the tool opens click Yes to disclaimer.(Windows 8/10 users will be prompted about Windows SmartScreen protection - click More information and Run.)
  • Make sure Addition.txt is checkmarked under "Optional scans"
  • Press Scan button to run the tool....
  • It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
  • The tool will also make a log named (Addition.txt) Please attach that log to your reply.

Thank you,

Kevin

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.