Can't remove minisrcklink.cool

[patrokov]

Chrome occasionally gets hijacked, so I downloaded Malwarebytes and the scan showed no problems, but practically every web page I browse, a firewall warning pops up that minisrclink.cool has been blocked.  

I looked at the other threads that mention minisrcklink.cool and have tried:

1. adwcleaner: It removed a few things, but the problem persists.
2. disabled syncing in Chrome, closed Chrome, and repeated Step 1, but I sitll get the website blocked messages.
3. Tried scanning with Malwarebytes with Chrome open and closed.
4. Checked chrome settings regarding start page and manual removal search engines (none were installed)
5. Installed Kapersky, and it removed a few more things, but the problem still persists.
6. Scanned with FRST and attached the results here.

 

Addition.txt FRST.txt

[AdvancedSetup]

Hello @patrokov and

Please download the attached fixlist.txt file and save it to the Desktop.
NOTE. It's important that both files, FRST or FRST64 and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system.

Run FRST or FRST64 and press the Fix button just once and wait.
If the tool needs a restart please make sure you let the system restart normally and let the tool complete its run after restart.
The tool will make a log on the Desktop (Fixlog.txt). Please attach or post it to your next reply.

Note: If the tool warned you about an outdated version please download and run the updated version.

fixlist.txt

 

Once that's done, then follow the direction below to reset Chrome

https://forums.malwarebytes.com/topic/214325-chrome-secure-preferences-detection-always-comes-back/

Thanks

Ron

 

[patrokov]

Thank you. 

1. I ran FRST64 with the fixlist. It rebooted and I assume it finished (it says no complete message will be shown).  I've attached the fixlog.txt.

2. Sync was already disabled (and still is) as I had already tried the steps in this link before posting
https://forums.malwarebytes.com/topic/214325-chrome-secure-preferences-detection-always-comes-back/

3. I ran the Malwarebytes scan again and it didn't find anything.  Then started chrome and got the same minisrclink.cool message again.

 

Fixlog.txt

[AdvancedSetup]

Please download Firefox and install it and test with that browser and let me know if it gets the same block or not.

https://www.mozilla.org/en-US/firefox/new/

 

[patrokov]

As far as I can tell, it's ONLY happening on Chrome, NOT Firefox.

[AdvancedSetup]

Thank you, that's the point I was trying to make. Someway, somehow you're not cleaning Chrome well enough.

Try going into the advanced options again and removing, restoring the settings. If still not working then try this method of cleaning.

 

 

Chrome
Reset Chrome back to defaults to completely clear out issues with Chrome.

• Open Chrome and at the top right, click  More tools  Extensions
• Write down the list of Extensions installed.
• Next, go to >> Google Sync << and sign into your account. Make sure you know your password as this will clear it from the browser.
• Scroll down until you see the   "reset sync" button to clear your data from the server and remove your passphrase.
• Now, close all Chrome windows. Chrome cannot be running for the next step. If needed, print this information or use another browser to read the information.
• Press the Windows key + R at the same time, to bring up the run dialog box.
   
  • 
     
• Type in (or copy/paste) the following and press Enter:     %localappdata%\Google\Chrome\User Data\Default\

1. Press Ctrl + A to select all the files and folders.
2. Hold down Ctrl + A and click once on the files "Bookmarks" and "Bookmarks.bak". This will unselect them.
3. With all the files selected (except for your Bookmarks), press the Delete key and click Yes to delete the files and folders.
4. Example of all files and folders selected, except Bookmarks

 

Restart your computer now and make sure there are no longer any redirects or other browser issues and let me know the results

Thanks

Ron

 

 

[patrokov]

That did it.  But I also found the source of the problem.  It was an old laptop that I didn't realize my wife was using.

[AdvancedSetup]

Great, glad to hear. So is all okay now at this time?

 

[patrokov]

Yes.

[AdvancedSetup]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Thanks