statmanbill Posted December 13, 2018 ID:1287005 Share Posted December 13, 2018 Neither MalwareBytes Free nor Premium will remove watchtvnow.co from Chrome. Neither will Bitdender 2019. I have no idea what to do. Link to post Share on other sites More sharing options...
LDTate Posted December 13, 2018 ID:1287020 Share Posted December 13, 2018 Hello and Please take your time. NOTE: The tools and the information obtained is safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system. Download Malwarebytes Support Toolhttps://downloads.malwarebytes.com/file/mbst?src=Experts Once the file is downloaded, open your Downloads folder/location of the downloaded file Double-click mb-support-X.X.X.XXXX.exe to run the program You may be prompted by User Account Control (UAC) to allow changes to be made to your computer. Click Yes to consent. Place a checkmark next to Accept License Agreement and click Next You will be presented with a page stating, "Get Started!" Click the Advanced tab Click the Gather Logs button A progress bar will appear and the program will proceed with getting logs from your computer Upon completion, a file named mbst-grab-results.zip will be saved to your Desktop. Click OK Please attach the file in your next reply. Link to post Share on other sites More sharing options...
statmanbill Posted December 13, 2018 Author ID:1287038 Share Posted December 13, 2018 Got some different things when I downloaded the tool. Required me to do a Repair first. Double clicked on support tool exe. It did a fix and rebooted automatically. Then I got nothing, but by clocking on the Advanced Tab, I did get the logs, which I am attachin. Thanks! Appreciate the help. This is the Free Version. I own the Premium as well but couldn't figure out how to upgrade to a known later version, so I uninstalled. Driving me nuts trying to get ride of the Watchtvnow.co popups! mbst-grab-results.zip Link to post Share on other sites More sharing options...
LDTate Posted December 13, 2018 ID:1287042 Share Posted December 13, 2018 I have attached A file I need you to download and save it to the same place that you saved the FRST program Download attached **fixlist.txt** and save it to same location where the FRST tool is located. NOTE: Both FRST.exe and the fixlist.txt must be in the same location or the fix will not work. Close all browsers before running. Double click FRST to run the tool. If the tool warns you the version is outdated, please download and run the updated version. •Click the **Fix Button**. •If you receive a message that a reboot is required, please make sure you allow it to restart normally. •The tool will complete its run after restart. When finished, the tool will make a log (Fixlog.txt) in the same location from where it was run. Please attach the Fixlog.txt in your reply. Restart the pc and let me know how it's running now. fixlist.txt Link to post Share on other sites More sharing options...
statmanbill Posted December 14, 2018 Author ID:1287054 Share Posted December 14, 2018 I can find a folder named FRST, but it does not have an FRST.exe file. Can't find it anywhere on my computer. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted December 14, 2018 Root Admin ID:1287060 Share Posted December 14, 2018 Hello @statmanbill The FRST program is currently located in the path below and the name was changed. If it's easier for you, you can copy FRSTEnglish.exe to your desktop and use as is or rename it to FRST64.EXE or you can run it from where it's at. C:\Users\links\AppData\Local\Temp\mwb38B1.tmp\FRSTEnglish.exe Link to post Share on other sites More sharing options...
LDTate Posted December 14, 2018 ID:1287107 Share Posted December 14, 2018 MBST tool will put it here: C:\FRST Link to post Share on other sites More sharing options...
LDTate Posted December 14, 2018 ID:1287118 Share Posted December 14, 2018 C:\FRST C:\Users\links\Downloads\FRSTEnglish.exe If you can't find it, just download a fresh copy. You want the 64 bit version https://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/ Link to post Share on other sites More sharing options...
LDTate Posted December 14, 2018 ID:1287138 Share Posted December 14, 2018 That's great. Give it a day or two and let me know. Link to post Share on other sites More sharing options...
statmanbill Posted December 14, 2018 Author ID:1287159 Share Posted December 14, 2018 I am enclosing fixlog.txtFixlog.txt Fixlog.txt Link to post Share on other sites More sharing options...
LDTate Posted December 14, 2018 ID:1287161 Share Posted December 14, 2018 That looks good. Still running good? Link to post Share on other sites More sharing options...
MikeinMn Posted December 14, 2018 ID:1287182 Share Posted December 14, 2018 Yes, everything still looks good. No popups, and I don't think I've gone this long without them since getting infected. Link to post Share on other sites More sharing options...
LDTate Posted December 14, 2018 ID:1287183 Share Posted December 14, 2018 That's great. Give it a day or two and let me know. Link to post Share on other sites More sharing options...
MikeinMn Posted December 14, 2018 ID:1287184 Share Posted December 14, 2018 Damn.....spoke too soon. Just got a popup from watchtvnow.co while reading a story in the NYTimes 😞 Link to post Share on other sites More sharing options...
LDTate Posted December 14, 2018 ID:1287187 Share Posted December 14, 2018 Help Secure your browsers Please install uBlock Origin for your browsers. uBlock Origin For Fire Fox, Chrome and Safari https://www.ublock.org/ Link to post Share on other sites More sharing options...
statmanbill Posted December 16, 2018 Author ID:1287450 Share Posted December 16, 2018 installed ublock, but still got a couple of watchtvnow.co.t I will try rebooting and see if that.helps. Didn't still getting watchtvnow.co. Link to post Share on other sites More sharing options...
LDTate Posted December 17, 2018 ID:1287596 Share Posted December 17, 2018 Lets get some new logs Please take your time. NOTE: The tools and the information obtained is safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system. Download Malwarebytes Support Toolhttps://downloads.malwarebytes.com/file/mbst?src=Experts Once the file is downloaded, open your Downloads folder/location of the downloaded file Double-click mb-support-X.X.X.XXXX.exe to run the program You may be prompted by User Account Control (UAC) to allow changes to be made to your computer. Click Yes to consent. Place a checkmark next to Accept License Agreement and click Next You will be presented with a page stating, "Get Started!" Click the Advanced tab Click the Gather Logs button A progress bar will appear and the program will proceed with getting logs from your computer Upon completion, a file named mbst-grab-results.zip will be saved to your Desktop. Click OK Please attach the file in your next reply. Link to post Share on other sites More sharing options...
statmanbill Posted December 18, 2018 Author ID:1287849 Share Posted December 18, 2018 Gone yestereday. Thanks for reply. File uploaded mbst-grab-results.zip Link to post Share on other sites More sharing options...
statmanbill Posted December 18, 2018 Author ID:1287850 Share Posted December 18, 2018 mbst-grab-results.zip Link to post Share on other sites More sharing options...
LDTate Posted December 18, 2018 ID:1287853 Share Posted December 18, 2018 The issues appear to be only happening with Chrome. We will need to create new profile. If you have Chrome Bookmarks that you want to save, you want to do that first. Export / Import Bookmarks. https://support.google.com/chrome/answer/96816?hl=en Open your Chrome on all devices using Chrome as we need to make sure Chrome sync doesn't allow it back in. • Go to Settings > People > Sync (or alternatively, enter the following in the address bar: chrome://settings/syncSetup) • On the page, you'll see what synced data is enabled. Move all sliders to the left in order to disable all the syncing. Please make sure Chrome is closed before running the fix Keep in mind the fix requires a restart of the computer =========================== I have attached A file I need you to download and save it to the same place that you saved the FRST program Download attached **fixlist.txt** and save it to same location where the FRST tool is located. NOTE: Both FRST.exe and the fixlist.txt must be in the same location or the fix will not work. Close all browsers before running. Double click FRST to run the tool. If the tool warns you the version is outdated, please download and run the updated version. •Click the **Fix Button**. •If you receive a message that a reboot is required, please make sure you allow it to restart normally. •The tool will complete its run after restart. When finished, the tool will make a log (Fixlog.txt) in the same location from where it was run. Please attach the Fixlog.txt in your reply. Restart the pc and let me know how it's running now. fixlist.txt Link to post Share on other sites More sharing options...
statmanbill Posted December 21, 2018 Author ID:1288514 Share Posted December 21, 2018 Appears to be working now. Much thanks! mbst-grab-results.zip Link to post Share on other sites More sharing options...
LDTate Posted December 21, 2018 ID:1288542 Share Posted December 21, 2018 Great Job You're quite welcome. I'm happy to have helped, and glad this is resolved. As there are no other issues which need addressing we can now close this ticket. Thanks for choosing Malwarebytes! Peace Be With You Help Secure your browsers Please install uBlock Origin for your browsers. uBlock Origin For Fire Fox, Chrome and Safari https://www.ublock.org/ Opera https://addons.opera.com/en-gb/extensions/details/ublock/?display=en Edge https://www.microsoft.com/en-us/store/p/ublock-origin/9nblggh444l4 AdBlock for IE https://adblockplus.org/releases/adblock-plus-10-for-internet-explorer-released Cryptolocker Ransomware: What You Need To Know http://blog.malwarebytes.org/intelligence/2013/10/cryptolocker-ransomware-what-you-need-to-know/ Tech Support Scams http://blog.malwarebytes.org/tech-support-scams/#help Seven tips to keep your PC safe http://blog.malwarebytes.org/intelligence/2013/06/seven-tips-to-keep-your-pc-safe-this-summer/ LD Tate Malware Removal Specialist Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted January 3, 2019 Root Admin ID:1290396 Share Posted January 3, 2019 Glad we could help. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Thanks Link to post Share on other sites More sharing options...
Recommended Posts