jdod Posted February 20, 2019 ID:1299650 Share Posted February 20, 2019 Hello, Yesterday morning upon reboot of my PC my virus software Avast detected that it blocked a connection to pushwhy.com. Upon researching that issue here and finding these steps: I have performed steps 1, 2 and 3 and attached all files. Then following these steps: I found that I was not logged in to Chrome, I had to log in to turn off sync, to which I did. Then when I try to perform this step: my chrome browser goes to this page and just sits there with no results: https://www.google.com/settings/chrome/sync/?hl=en-US Going further, Settings > Appearance has new tab selected. For manage search engines, I removed all but Google. ON start up shows continue where you left off. I will report back if more and await instruction. Thank you. Addition.txt FRST.txt malwarebyte_export-summary.txt Link to post Share on other sites More sharing options...
nasdaq Posted February 21, 2019 ID:1299883 Share Posted February 21, 2019 Hello, Welcome to Malwarebytes. I'm nasdaq and will be helping you. If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed. === Please download the attached Fixlist.txt file to the same folder where the Farbar tool is running from. The location is listed in the 3rd line of the FRST.txt log you have submitted. Run FRST and click Fix only once and wait. The tool will create a log (Fixlog.txt) please post it to your reply. === Reset Chrome... Open Google Chrome, click on menu icon or the 3 vertical dots located right side top of the google chrome. Click "Settings" then "Show advanced settings" at the bottom of the screen. Click "Reset and clean up" > "Restore settings to their original defaults" Restart Chrome. <<<>>> Please post the Fixlog.txt and let me know what problem persists. fixlist.txt Link to post Share on other sites More sharing options...
nasdaq Posted February 26, 2019 ID:1300809 Share Posted February 26, 2019 Are you still with me? Link to post Share on other sites More sharing options...
jdod Posted February 27, 2019 Author ID:1301010 Share Posted February 27, 2019 Yes, I traveled for a few days. I will complete your request today or tomorrow. Thank you. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted March 2, 2019 Root Admin ID:1301530 Share Posted March 2, 2019 Hello @jdod Just following up. Please run the requested information from Nasdaq and post back the results Thank you Ron Link to post Share on other sites More sharing options...
jdod Posted March 7, 2019 Author ID:1302452 Share Posted March 7, 2019 Sorry for the delay, requested file is attached. The process deleted all my browsing history, and the tabs open in my browser, the tabs were sort of reminders for me of the items I was working on. I didn't expect they would be deleted when I ran the fix. Did any of the logs I created save those Chrome tabs? Fixlog.txt Link to post Share on other sites More sharing options...
jdod Posted March 7, 2019 Author ID:1302455 Share Posted March 7, 2019 The annoying pushwhy notices stopped back around within a few days of when I started this thread, but I went ahead and did the fix. Everything is still fine. Really wish I had my tabs back, that will be a setback, hope you can point me to where I will find those. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted March 7, 2019 Root Admin ID:1302462 Share Posted March 7, 2019 Sorry to hear @jdod but unfortunately one has to close all open tasks like browsers in order to clean up malware. Depending settings you might be able to look in your history of Chrome to see what was opened. You can also check bookmarks. Not that it would currently help but going forward you could also Sync settings on your Google Account so that any device would keep a record for you. You may be able to find the visited sites in the History at the file level if needed too. Google Chrome Forensics wikihttps://www.forensicswiki.org/wiki/Google_Chrome 27 Incredibly Useful Things You Didn’t Know Chrome Could Dohttps://www.fastcompany.com/40557798/27-incredibly-useful-things-you-didnt-know-chrome-could-do How is the computer running now? Are there still any signs of an infection or issue? Thank you again Ron Link to post Share on other sites More sharing options...
jdod Posted March 7, 2019 Author ID:1302473 Share Posted March 7, 2019 Everything seems to be fine. If I do a system restore to a time yesterday before I did the fix, is it possible browsing history will be restored? Link to post Share on other sites More sharing options...
jdod Posted March 7, 2019 Author ID:1302474 Share Posted March 7, 2019 This is the affected programs after restore: Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted March 7, 2019 Root Admin ID:1302504 Share Posted March 7, 2019 You can certainly try. System Restore does not save all settings of a computer and all the various programs. Create a new system restore point as it is right now. Then do the restore and see how it goes. If it does not help then you can restore back to how it is now. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted March 16, 2019 Root Admin ID:1303957 Share Posted March 16, 2019 Due to the lack of feedback, this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread. Thanks Link to post Share on other sites More sharing options...
Recommended Posts