down.baidu2016.com using network through other apps

[Billaanon]

My computer has been lagging a lot recently internet wise and I've been dealing with it for a while and finally decided to do something about it I opened procmon and saw that my Battle.net app was being used by down.baidu2016.com to send and receive bandwidth. I've tried to block the website with the hosts file and it hasn't done anything I've scanned my computer several times with malwarebytes, adwcleaner and ccleaner and they have not found any threats. I am aware that down.baidu2016.com is an adware as it messed with my browsers by changing my homepages and frequently spamming pop-up ads but this hasn't happened in a while and I'm unsure what to do at this point.

 

Processor: Intel i5-2320

Windows 10

If you might need anymore specs let me know

[Billaanon]

3 minutes ago, Billaanon said:

My computer has been lagging a lot recently internet wise and I've been dealing with it for a while and finally decided to do something about it I opened procmon and saw that my Battle.net app was being used by down.baidu2016.com to send and receive bandwidth and as far as I know it has has nothing to do with battle.net. I've tried to block the website with the hosts file and it hasn't done anything I've scanned my computer several times with malwarebytes, adwcleaner and ccleaner and they have not found any threats. I am aware that down.baidu2016.com is an adware as it messed with my browsers by changing my homepages and frequently spamming pop-up ads but this hasn't happened since I removed before and I'm unsure what to do at this point.

 

Processor: Intel i5-2320

Windows 10

If you might need anymore specs let me know

 

[Billaanon]

It will  send an receive multiple times every second and I have uninstalled the app and reinstall but it persists

[nasdaq]

Hello, Welcome to Malwarebytes.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

Download the version of this tool for your operating system.
Farbar Recovery Scan Tool (64 bit)
Farbar Recovery Scan Tool (32 bit)
and save it to a folder on your computer's Desktop.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

How to attach a file to your reply:
In the Reply section in the bottom of the topic Click the "more reply Options" button.

Attach the file.
Select the "Choose a File" navigate to the location of the File.
Click the file you wish to Attach.
Click Attach this file.
Click the Add reply button.
===

Please post the logs  for my review.

Wait for further instructions

p.s.
Let me know if you are syncing any  browsers with you other devices?

 

[Billaanon]

Yes my Chrome is synced with my phone as well as my laptop.

FRST.txt

Addition.txt

[nasdaq]

Hi,

Please download the attached Fixlist.txt file to  the same folder where the Farbar tool is running from.
The location is listed in the 3rd line of the FRST.txt log you have submitted.

Run FRST and click Fix only once and wait.

The tool will create a log (Fixlog.txt) please post it to your reply.
===

Reset Chrome...
Open Google Chrome, click on menu icon or the 3 vertical dots located right side top of the google chrome.
 
Click "Settings" then "Show advanced settings" at the bottom of the screen.
 
Click "Reset and clean up" > "Restore settings to their original defaults"
 
Restart Chrome.
<<<>>>

If the problem persists it could be a Syncing issue if you are Syncing Chrome with other devices?
To remove it you will have to reset the Sync in Chrome.

Read this article and proceed.

Chrome Secure Preferences detection always comes back
https://forums.malwarebytes.com/topic/214325-chrome-secure-preferences-detection-always-comes-back/
<<<>>>

Please post the Fixlog.txt and let me know if the problem persists.

fixlist.txt

[Billaanon]

Fixlog.txt

[Billaanon]

Well I've checked procmon and it no longer shows down.baidu2016.com Im assuming that means its been fixed But thank you so much for your help I really appreciate it I was hesitant to post anything on the forum cause i was unsure if anyone would be able to help but you did so thank you very much nasdaq :)

[nasdaq]

Glad we could help.

[AdvancedSetup]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Thanks