Jump to content

Adware keeps returning after Quarantine

Recommended Posts

Hello, i'm hoping someone can help me with this AdWare, I tried my best to solve it on my own with the help of previous threads but the AdWare seems to keep on returning.

My solutions are as follows.

  • I have installed MalawareBytes as a first solution and my first run from my downloaded got rid of a a good amount of AdWare for good mesure I also downloaded AdwCleaner & JRT.
  • Restart
  • At the time my Windows Defender (Win10) gave me some error that it must be managed by my organization which I fixed by with Regedit (Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender -> changing value of DisableAntiSpyware to 0)
  • I could see issue of popup tabs continued.
  • Restart
  • I uninstalled Google Chrome and deleted the AppData folders and went on Internet Explorer and reset the browser settings.
  • Since then I restarted got access to my Windows Defender and ran both a Full Scan and Offline Scan for good measure along with more MalawareBytes runs returns negative then positive
  • Restart
  • Now my Malwarebytes are not picking anything after each run but I can see clearly that the adware is present because MalawareBytes & IE are both blocking the popups (which I can go to if I click allow).

Hopefully I have not done anything wrong I am a noob in this field after all.

I attached a couple more documents than the first three (the required ones from the I'm Infected thread).



MalwareReport.txt (the latest Malwarebytes Report)

FirstRunSinceDownload.txt (My very first report that I mentioned above)

MostCommonPopup.txt (The report for the most common popup)

AfterScanRemoval.txt (A scan report that is repeated after a couple of clean reports or after restart)


Here is a screenshot of the main culprit being blocked here.


Screenshots of all my reports

  • The first one ever caught quiet a few.
  • The following were either clean or had one item Quarantined





Link to post
Share on other sites

Hello, Welcome to Malwarebytes.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.

ATTENTION: System Restore is disabled
Turn System Restore ON for Drives in Windows 10 - Immediately.

Your logs are clean of malware.

For not reset Internet Explorer:
Menu > Tools > Internet Options > Advanced Tab.
Click the Reset button on the bottom of the pane.
Click the Apply button.
Close IE.

Restart the computer normally.

Let me know if the problem persists and in which browser(s).

Link to post
Share on other sites

Turned on Restore Point and reset IE 

For the most part it was gone, I kept on running the scans until it never came back positive and reinstalled Chrome and it was still positive aswell I didn't see anything pop back up. I return back and the daily scan has done itself and it caught the PUP. I ran a scan with AdwCleaner & Malarebytes and they both removed a PUP. I restart and they come back and now after even scan they just continue to come back again and again. I saved each of the export files but it's this same one it keeps catching. 

This is the verylastscan.txt it's the same PUP that comes back every time regardless of restart.

These are the catch that I did with AdwCleaner after the MalwareBytes re-caught the PUP.


Now Adwcleaner doesn't catch anything but MalawareBytes catch the same PUP after each scan.

Link to post
Share on other sites


Reset Chrome...
Open Google Chrome, click on menu icon google-chrome-setting-icon.png or the 3 vertical dots located right side top of the google chrome.
Click "Settings" then "Show advanced settings" at the bottom of the screen.
Click "Reset and clean up" > "Restore settings to their original defaults"
Restart Chrome.

If the problem persists and you sync your computer with an other device remove it.

Chrome Secure Preferences detection always comes back


Has your problem been solved.


Link to post
Share on other sites

  • 2 weeks later...
  • Root Admin

Due to the lack of feedback, this topic is closed to prevent others from posting here.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread.



Link to post
Share on other sites

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.