chromesearch.club/search not removed

[Marie71]

Hi and bonjour,

Can't Adwcleaner remove https://chromesearch.club/search/? The report comes back with no threat found.

Many thanks, 

M.

 

 

[jboursier]

Hello,

Can you try again? The detection should show up.

[Marie71]

Bonsoir, 

Non, ça n'a pas marché : "système propre", aucun élément indésirable. J'ai fais une mise à jour et j'ai relancé le logiciel mais toujours rien.

Une idée ?

Marie

[corny4u]

Marie71 is correct. This must be brand new...

I also ran (Today Jan. 2, 2018) the latest malwarebytes pro. and it also come up clean. It showed up as a hijacked new button search engine. None of my virus or malware tools can find it. In the chrome settings and tools, I cannot not change or edit the new button search engine tool. The button is disabled.  

I am going to try and remove it manual, but could use some help.

Thanks

Corny

 

[corny4u]

Just to help, after using "chrome's" reset tool. and installing Malwarebytes, I now get this error message. But the options in chrome to switch search engines is still locked.

Looks like a domain called "newtab.review"

 

Thanks Corny

[corny4u]

FYI..  I was able to unlock the chrome settings using Zemana. It recognized the changes in chrome and removed them. But, I believe it is still lurking on my computer somewhere

[corny4u]

Here is my log from scanning.

scan log.txt

[Marie71]

Thanks for helping, Corny4you, this remains undetected by every antimalware I tried too, but I don't know Zemana.  Is it trustworthy?  

I have a zip file that may contain the adware. Can I send it somewhere where you can safely have a look at it?

Marie 

[jboursier]

Hello,

@Marie71 So you confirm that even if you've used the Chrome reset tool, you were still seeing this element?

@corny4u Thanks for the information. Do you still observe any symptoms?

 

[Marie71]

Yes, I confirm that it is still there. I also reported the issue to Google.  

Can you trust the tool Corny4you is talking about? 

Marie 

[AdvancedSetup]

Hello @Marie71

You can use the following method to reset Chrome. Make sure  you save a copy of your bookmarks outside of the Chrome folder structure.

 

Chrome

 

Reset Chrome back to defaults to completely clear out issues with Chrome.

• First, go to >> Google Sync << and sign into your account. Make sure you know your password as this will clear it from the browser.
• Scroll down until you see the   "reset sync" button to clear your data from the server and remove your passphrase.
• Now, close all Chrome windows. Chrome cannot be running for the next step. If needed, print this information or use another browser to read the information.
• Press the Windows key + R at the same time, to bring up the run dialog box.
  • 
• Type in (or copy/paste) the following and press Enter:     %localappdata%\Google\Chrome\User Data\Default\

1. Press Ctrl + A to select all the files and folders.
2. Hold down Ctrl + A and click once on the files "Bookmarks" and "Bookmarks.bak". This will unselect them.
3. With all the files selected (except for your Bookmarks), press the Delete key and click Yes to delete the files and folders.
4. Example of all files and folders selected, except Bookmarks

 

Restart your computer now and make sure there are no longer any redirects or other browser issues. 

Thanks

Ron

 

[Marie71]

Hello, 

I have found the file I shouldn't have opened. It was supposed to be an epub file. When you go over it with the cursor, the file description actually states "nonexterminator Setup". The extension appears to be epub but it is actually an exe file. 

What can I do? Can you have a look at it? 

Marie 

[AdvancedSetup]

Hi Marie @Marie71

I don't have any log files from you to even see what OS you're running. My guess is that you may not have an EPUB enabled application on the computer or if you do it's file association is not set to be the default app. You also probably have file extensions set to not show.

 

Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system.
You can check here if you're not sure if your computer is 32-bit or 64-bit

• Double-click to run it. When the tool opens click Yes to disclaimer.
• Press Scan button.
• It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
• The first time the tool is run, it also makes another log (Addition.txt). Please attach it to your reply as well.

 

Thank you

Ron