Flea85 Posted December 18, 2018 ID:1287889 Share Posted December 18, 2018 Hi, been fighting this adware issue for several days now. Haven't had success removing it and it seems the Malwarebytes application is aware of the issue but can't remove it. Attaching my FRST files here for reference, as well as the mbam safe mode scan. Thanks in advance for the help. FRST.txt Addition.txt mbamscan.txt Link to post Share on other sites More sharing options...
LDTate Posted December 18, 2018 ID:1287892 Share Posted December 18, 2018 Hello and Please take your time. I have attached A file I need you to download and save it to the same place that you saved the FRST program Download attached **fixlist.txt** and save it to same location where the FRST tool is located. NOTE: Both FRST.exe and the fixlist.txt must be in the same location or the fix will not work. Close all browsers before running. Double click FRST to run the tool. If the tool warns you the version is outdated, please download and run the updated version. •Click the **Fix Button**. •If you receive a message that a reboot is required, please make sure you allow it to restart normally. •The tool will complete its run after restart. When finished, the tool will make a log (Fixlog.txt) in the same location from where it was run. Please attach the Fixlog.txt in your reply. Restart the pc and let me know how it's running now. fixlist.txt Link to post Share on other sites More sharing options...
Flea85 Posted December 18, 2018 Author ID:1287894 Share Posted December 18, 2018 Attaching the Fixlog.txt file here. Seems like the problem is still persisting. Fixlog.txt Link to post Share on other sites More sharing options...
Flea85 Posted December 18, 2018 Author ID:1287895 Share Posted December 18, 2018 Forgot to add that the Malwarebytes application notifies me of this adware whenever I open a new tab in chrome. Link to post Share on other sites More sharing options...
LDTate Posted December 18, 2018 ID:1287896 Share Posted December 18, 2018 (edited) Sorry. Can you run Malwarebytes (MBAM) in Safe mode? Restart your computer in Safe Mode. Step 1: When you hit the power button in Windows 8.1 / 10 (through Charms Bar), hold down the Shift key when clicking the Restart button. Step 2: The next screen will present you with three options. Click Troubleshoot. Step 3: Next, hit Advanced options followed by Windows Startup Settings from the next screen. Step 4: Your PC will now be rebooted to enable the advanced parameters, which include Safe Mode as well. Once it restarts, you’ll get nine options whereby the following commands apply: F4 for Safe Mode F5 for Safe Mode with Networking F6 for Safe Mode with Command Prompt Based on your selection, Windows 8.1 (or Windows 8 or 10 the method applies to both) will boot accordingly. F5 for Safe Mode with Networking Then press the enter key on your keyboard to boot into Windows Safe Mode. When Windows starts you will be at a typical logon screen. Logon to your computer and Windows will enter Safe mode. Open Malwarebytes (MBAM) and delete all in Quarantine **Power Off** (shutdown, the pc. Wait a few minutes. Restart in Normal Mode and make sure it's gone Edited December 18, 2018 by LDTate Link to post Share on other sites More sharing options...
Flea85 Posted December 18, 2018 Author ID:1287900 Share Posted December 18, 2018 Ran MBAM in safe mode and no threats were detected (nothing in quarantine list as well). Attaching the MBAM scan summary. mbamscan.txt The adware problem is still persisting unfortunately. Link to post Share on other sites More sharing options...
LDTate Posted December 18, 2018 ID:1287902 Share Posted December 18, 2018 The issues appear to be only happening with Chrome. We will need to create new profile. If you have Chrome Bookmarks that you want to save, you want to do that first. Export / Import Bookmarks. https://support.google.com/chrome/answer/96816?hl=en Open your Chrome on all devices using Chrome as we need to make sure Chrome sync doesn't allow it back in. • Go to Settings > People > Sync (or alternatively, enter the following in the address bar: chrome://settings/syncSetup) • On the page, you'll see what synced data is enabled. Move all sliders to the left in order to disable all the syncing. Please make sure Chrome is closed before running the fix Keep in mind the fix requires a restart of the computer =========================== I have attached A file I need you to download and save it to the same place that you saved the FRST program Download attached **fixlist.txt** and save it to same location where the FRST tool is located. NOTE: Both FRST.exe and the fixlist.txt must be in the same location or the fix will not work. Close all browsers before running. Double click FRST to run the tool. If the tool warns you the version is outdated, please download and run the updated version. •Click the **Fix Button**. •If you receive a message that a reboot is required, please make sure you allow it to restart normally. •The tool will complete its run after restart. When finished, the tool will make a log (Fixlog.txt) in the same location from where it was run. Please attach the Fixlog.txt in your reply. Restart the pc and let me know how it's running now. fixlist.txt Link to post Share on other sites More sharing options...
Flea85 Posted December 18, 2018 Author ID:1287903 Share Posted December 18, 2018 The problem seems to be gone. You're a wizard! Thanks for the help. Fixlog.txt attached as requested. Fixlog.txt Link to post Share on other sites More sharing options...
LDTate Posted December 18, 2018 ID:1287904 Share Posted December 18, 2018 Great Job You're quite welcome. I'm happy to have helped, and glad this is resolved. As there are no other issues which need addressing we can now close this ticket. Thanks for choosing Malwarebytes! Peace Be With You Help Secure your browsers Please install uBlock Origin for your browsers. uBlock Origin For Fire Fox, Chrome and Safari https://www.ublock.org/ Opera https://addons.opera.com/en-gb/extensions/details/ublock/?display=en Edge https://www.microsoft.com/en-us/store/p/ublock-origin/9nblggh444l4 AdBlock for IE https://adblockplus.org/releases/adblock-plus-10-for-internet-explorer-released Cryptolocker Ransomware: What You Need To Know http://blog.malwarebytes.org/intelligence/2013/10/cryptolocker-ransomware-what-you-need-to-know/ Tech Support Scams http://blog.malwarebytes.org/tech-support-scams/#help Seven tips to keep your PC safe http://blog.malwarebytes.org/intelligence/2013/06/seven-tips-to-keep-your-pc-safe-this-summer/ LD Tate Malware Removal Specialist Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted January 3, 2019 Root Admin ID:1290391 Share Posted January 3, 2019 Glad we could help. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Thanks Link to post Share on other sites More sharing options...
Recommended Posts