walbro Posted December 18, 2018 ID:1287808 Share Posted December 18, 2018 Hello, I've followed the steps of others you have helped and run Malwarebytes and then the FRST app. I have collected logs from regular mode and safe mode (attached). I am still seeing the popups from Malwarebytes indicating I am seeing the redirects from cdnimmereeakoinfo-trojan. Any help you can give would be appreciated. Thanks! Addition-safemode.txt FRST-safemode.txt Addition_18-12-2018 08.42.45.txt FRST_18-12-2018 08.42.45.txt Link to post Share on other sites More sharing options...
walbro Posted December 18, 2018 Author ID:1287809 Share Posted December 18, 2018 adding mbam scan report. mbamscan.txt Link to post Share on other sites More sharing options...
LDTate Posted December 18, 2018 ID:1287818 Share Posted December 18, 2018 Hello and Did you run a Malwarebytes (MBAM) scan in Safe Mode? Link to post Share on other sites More sharing options...
walbro Posted December 18, 2018 Author ID:1287820 Share Posted December 18, 2018 Hi, Thanks for the reply. I just ran mbam in safe mode (1 item found and quarantined) and then I reran FRST. See attached logs. thanks! Addition-safemode2.txt FRST-safemode2.txt mbamscan-safemode.txt Link to post Share on other sites More sharing options...
LDTate Posted December 18, 2018 ID:1287821 Share Posted December 18, 2018 I need you to run FRST in Normal Mode now. Then attach FRST and Addition Link to post Share on other sites More sharing options...
walbro Posted December 18, 2018 Author ID:1287823 Share Posted December 18, 2018 OK, I have run it in normal mode and attached the logs. Thanks! Addition.txt FRST.txt Link to post Share on other sites More sharing options...
LDTate Posted December 18, 2018 ID:1287825 Share Posted December 18, 2018 The issues appears to be happening with Chrome. We will need to create new profile. If you have Chrome Bookmarks that you want to save, you want to do that first. Export / Import Bookmarks. https://support.google.com/chrome/answer/96816?hl=en Open your Chrome on all devices using Chrome as we need to make sure Chrome sync doesn't allow it back in. • Go to Settings > People > Sync (or alternatively, enter the following in the address bar: chrome://settings/syncSetup) • On the page, you'll see what synced data is enabled. Move all sliders to the left in order to disable all the syncing. Please make sure Chrome is closed before running the fix Keep in mind the fix requires a restart of the computer =========================== I have attached A file I need you to download and save it to the same place that you saved the FRST program Download attached **fixlist.txt** and save it to same location where the FRST tool is located. NOTE: Both FRST.exe and the fixlist.txt must be in the same location or the fix will not work. Close all browsers before running. Double click FRST to run the tool. If the tool warns you the version is outdated, please download and run the updated version. •Click the **Fix Button**. •If you receive a message that a reboot is required, please make sure you allow it to restart normally. •The tool will complete its run after restart. When finished, the tool will make a log (Fixlog.txt) in the same location from where it was run. Please attach the Fixlog.txt in your reply. Restart the pc and let me know how it's running now. fixlist.txt Link to post Share on other sites More sharing options...
walbro Posted December 18, 2018 Author ID:1287830 Share Posted December 18, 2018 hi, OK, I disabled syncing in Chrome, I ran FRST with the fixlist file and rebooted. new log attached. So far no popup warnings :-) Do I need to create a new Chrome profile now? Thanks! Fixlog.txt Link to post Share on other sites More sharing options...
LDTate Posted December 18, 2018 ID:1287832 Share Posted December 18, 2018 Great yes create a new Chrome Profile. Link to post Share on other sites More sharing options...
walbro Posted December 18, 2018 Author ID:1287833 Share Posted December 18, 2018 OK, this may be a silly question....if I create a new profile and enable syncing to my same gmail account, do I stand the risk of reinfecting myself and having issues again? Thank you for the help! Link to post Share on other sites More sharing options...
LDTate Posted December 18, 2018 ID:1287834 Share Posted December 18, 2018 It can always happen again but we can always fix it again. Help Secure your browsers Please install uBlock Origin for your browsers. uBlock Origin For Fire Fox, Chrome and Safari https://www.ublock.org/ Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted January 3, 2019 Root Admin ID:1290389 Share Posted January 3, 2019 Glad we could help. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Thanks Link to post Share on other sites More sharing options...
Recommended Posts