Jump to content

Malaware infection prevents Chrome browser tabs from loading content

henrymurray

By henrymurray
in Resolved Malware Removal Logs

 Share

Recommended Posts

henrymurray

henrymurray

Posted
Posted

Chrome becomes inoperable. The tabs open but when I type in the address bar / search bar it shows an address with no https://and says this site is insecure and should not be visited. I have two tabs that have stayed open and operating because I am logged in I think, to a gmail acount and to facebook. Otherwise tabs that did have content or usually auto load just show the loading circle without resolution. Downloads don't work. I haven't shut down my computer since this problem started.

All other functions seem to be OK - Firefox, Vivaldi, Zoom etc.

I have been running Malawarebytes Premium trial since a few days before the 25th (Plus Windows Defender) but this was just detected on a scan, not real time, and I quarantined. There was one threat on Sept 25, then problem started Sept 26 and then 5 more on Sept 27 which I also Quarantined. They are all related - in downloads/ FSS (5) and then downloads/ FSS with other numbers in brackets.  

Files attached.

You helped me brilliantly in July, Thank you. I'm hoping this will be as easy.

Best Wishes, Henry.

 

Addition.txt FRST.txt MBytes 1st threat 9-25.txt MBytes 2nd Threat report 9-27.txt

Link to post
Share on other sites
henrymurray

henrymurray

Posted
  • Author
Posted

Hi, Yes I have read about this conflict with Chrome and MBytes. Is it likely this is all it is and not a Virus threat. Is it likely to be OK to use my passwords to sign in to my gmail and/or workspace accounts in a different browser eg Firefox? I have several instances of Chrome running on my computer, do I have to deal with each separately? My MBytes premium trial ends soon - is it possible this will end the problem? 

Thank you for your quick response.

Best Wishes, Henry.

Link to post
Share on other sites
  • Root Admin
AdvancedSetup

AdvancedSetup

Posted
  • Root Admin
Posted

If you don't have Sync enabled then ignore it and just do the other cleaning process, please @henrymurray

When done with that, please run the following

 

Microsoft Safety Scanner

Please make sure you Exit out of any other program you might have open so that the sole task is to run the following scan.   
That goes especially for web browsers, make sure all are fully exited out of and messenger programs are exited and closed as well
 

STEP 1

Please set File Explorer to SHOW ALL folders, all files, including hidden ones.  Use OPTION ONE or TWO of this article

https://www.tenforums.com/tutorials/7078-turn-off-show-all-folders-windows-10-navigation-pane.html

STEP 2

I suggest a new scan for viruses & other malware. This may take several hours, depending on the number of files on the system and the speed of the computer.

The Microsoft Safety Scanner is a free Microsoft stand-alone virus scanner that can be used to scan for & remove malware or potentially unwanted software from a system. 

The download links & the how-to-run-the tool are at this link at Microsoft 

https://docs.microsoft.com/en-us/windows/security/threat-protection/intelligence/safety-scanner-download

 

Look on the Scan Options & select the FULL scan.

Then start the scan. Have lots of patience. It may take several hours.

  • Once you see it has started, take a long long break;  walk away.  Do not pay credence if you see some intermediate early flash messages on the screen display.  The only things that count are the End result at the end of the run.
  • The scan will take several hours.  Leave it alone. It will remove any other remaining threats as it goes along.  Take a very long break, do your normal personal errands .....just do not use the computer during this scan.

This is likely to run for many hours as previously mentioned  ( depending on the number of files on your machine & the speed of the hardware.)

The log is named MSERT.log  and the log will be at C:\Windows\debug\msert.log

Please attach that log with your next reply.

 

It is normal for the Microsoft Safety Scanner to show detections during the scan process.

It is scanning for basically all bread crumbs or traces of files and registry entries that "might" be or have been part of some infection or previous infection.

That DOES NOT mean the computer is infected. Once the scan has been completed it uploads the log to their Cloud service which then uses Artificial Intelligence to determine if in fact any of the traces are an infection or not.

Then it writes into the log on your computer what it found.

 

Thank you

 

Link to post
Share on other sites
  • Root Admin
AdvancedSetup

AdvancedSetup

Posted
  • Root Admin
Posted

Thank you. Nothing found.

Please run the following

 

SecurityCheck by glax24              

I would like you to run a tool named SecurityCheck to inquire about the current security update status of some applications.

  • Download SecurityCheck by glax24: https://tools.safezone.cc/glax24/SecurityCheck/SecurityCheck.exe
  • If Microsoft SmartScreen blocks the download, click through to save the file
  • This tool is safe.   Smartscreen is overly sensitive.
  • If SmartScreen blocks the file from running click on More info and Run anyway
  • Right-click  with your mouse on the Securitycheck.exe  and select "Run as administrator"  and reply YES to allow to run & go forward
  • Wait for the scan to finish. It will open a text file named SecurityCheck.txt Close the file.  Attach it with your next reply.
  • You can find this file in a folder called SecurityCheck, C:\SecurityCheck\SecurityCheck.txt

 

image.png

image.png

image.png

 

Thank you

 

 

Link to post
Share on other sites
  • Root Admin
AdvancedSetup

AdvancedSetup

Posted
  • Root Admin
Posted

Please update the following

Google Drive v.1.0 Warning! Download Update
Zoom v.5.15.7 (20303) Warning! Download Update

 

Then restart the computer and check for Widows Updates and install any security ones found.

 

Then run the Farbar (FRST) program again with Admin rights and click on SCAN and attach back both new log files

FRST.TXT
ADDITION.TXT

 

I'll check back on you tomorrow to help with any other removal for CCLeaner, etc.

 

 

Thanks @henrymurray

Link to post
Share on other sites
  • Root Admin
AdvancedSetup

AdvancedSetup

Posted
  • Root Admin
Posted

Thank you for the logs @henrymurray

Please run the following fix

 

NOTE: Please read all of the information below before running this fix.

  • NOTICE: This script was written specifically for this user, for use on this particular machine.
  • Running this on another machine may cause damage to your operating system that cannot be undone.

Once the fix has been completed, please attach the file FIXLOG.TXT to your next reply

Farbar program:   FRSTEnglish.exe

Save the attached file:  FIXLIST.TXT to this folder C:\Users\13103\Downloads\

NOTE. It's important that both files, FRSTEnglish.exe, and fixlist.txt are in the same location or the fix will not work.

Please make sure you disable any real-time antivirus or security software before running this script. Once completed, make sure you re-enable it.

 

 

Run the Farbar program with Admin rights and press the Fix button just once and wait.

The fix may possibly take up to 60 minutes to complete

If the tool needs a restart please make sure you let the system restart normally and let the tool complete its run after restart.
The tool will make a log named Fixlog.txt in the same folder you ran the Farbar program from. Please attach that log on your next reply.

 

  1. NOTE:  This fix will run a scan to check that all Microsoft operating system files are valid and not corrupt and attempt to correct any invalid files. It will also run a disk check on the restart to ensure disk integrity.
  2. NOTE: As part of this fix all temporary files will be removed. If you have any open web pages that have not been bookmarked please make sure you bookmark them now as all open applications may be automatically closed.
                Also, make sure you know the passwords for all websites as cookies may possibly be removed in some cases, but not all cases.
  3. NOTE: As part of this fix, it will also reset the network to default settings including the firewall. If you have custom firewall rules you need to save please export or save them first before running this fix.

The following directories are emptied:

  • Windows Temp
  • Users Temp folders
  • Edge, IE, FF, Chrome, and Opera caches, HTML5 storages, Cookies and History
  • Recently opened files cache
  • Discord cache
  • Java cache
  • Steam HTML cache
  • Explorer thumbnail and icon cache
  • BITS transfer queue (qmgr*.dat files)
  • Recycle Bin

Important: items are permanently deleted. They are not moved to quarantine. If you have any questions or concerns please ask before running this fix.

The system will be rebooted after the fix has run.

fixlist.txt

Thanks

 

Link to post
Share on other sites
  • Root Admin
AdvancedSetup

AdvancedSetup

Posted
  • Root Admin
Posted

Thank you for the log. That was a good run. The fix also found and repaired some Windows file issues

Windows Resource Protection found corrupt files and successfully repaired them.

 

Please run the following @henrymurray

SecurityCheck by glax24              

I would like you to run a tool named SecurityCheck to inquire about the current security update status of some applications.

  • Download SecurityCheck by glax24: https://tools.safezone.cc/glax24/SecurityCheck/SecurityCheck.exe
  • If Microsoft SmartScreen blocks the download, click through to save the file
  • This tool is safe.   Smartscreen is overly sensitive.
  • If SmartScreen blocks the file from running click on More info and Run anyway
  • Right-click  with your mouse on the Securitycheck.exe  and select "Run as administrator"  and reply YES to allow to run & go forward
  • Wait for the scan to finish. It will open a text file named SecurityCheck.txt Close the file.  Attach it with your next reply.
  • You can find this file in a folder called SecurityCheck, C:\SecurityCheck\SecurityCheck.txt

 

image.png

image.png

image.png

 

Thank you

 

 

Link to post
Share on other sites
henrymurray

henrymurray

Posted
  • Author
Posted (edited)

Here is the new SecurityCheck.txt

I am adding this now on an edit: This check was very quick almost instant and it came up with a notice - "Could not overwrite file C:/Users/.../SecurityCheck.exe - and then the txt file appeared (I had deleted the old one). I don't remember how long SecureCheck took before but I thought I should mention this. 

The MalwareBytes premium trial just ended and I haven't upgraded as of now. Pesumably you would advise it but am I likely to have the syncing problem with Google if I install it - up to now I haven't used any syncing with google/gmail accounts?

And thank you so much for the FixLog run before and the things it fixed.

Henry.

 

SecurityCheck.txt

Edited by henrymurray
Link to post
Share on other sites
  • Root Admin
AdvancedSetup

AdvancedSetup

Posted
  • Root Admin
Posted

Please update the following software

 

Signal 6.31.0 v.6.31.0 Warning! Download Update
Zoom v.5.16.1 (22523) Warning! Download Update

 

Then open Malwarebytes, click on the small gear icon to get to the Settings. Then on the General tab please click the Check for Updates button.

 

How is the computer running now?

Are there still any signs of infection at this time?

 

Link to post
Share on other sites
henrymurray

henrymurray

Posted
  • Author
Posted

Everything seems good now - thank you so much for helping again.

I want to ask again about Malwarebytes Premium - I was on a 14 day trial when the original problem of this post turned up. I'm back to the free, not live protection version now. I understand that there was some mismatch with a Google syncing going on which may have related to my problem. I haven't been synced with Google accounts. If I pick up Premium edition full time am I likely to have to make some more adjustments if I start syncing my Google accounts?  

Link to post
Share on other sites
  • Root Admin
AdvancedSetup

AdvancedSetup

Posted
  • Root Admin
Posted

No, as long as the Google accounts were cleaned and the computer was cleaned all should be good.

You should be able to sync your Google account now if wanted.

 

  1. Recommend using a Password Manager for all websites, etc. that require a password. Never use the same password on more than one site.
    https://www.howtogeek.com/240255/password-managers-compared-lastpass-vs-keepass-vs-dashlane-vs-1password/
  2. Make sure you're backing up your files https://forums.malwarebytes.com/topic/136226-backup-software/
  3. Keep all software up to date - PatchMyPC - https://patchmypc.com/home-updater#download
  4. Keep your Operating System up to date and current at all times - https://support.microsoft.com/en-us/windows/windows-update-faq-8a903416-6f45-0718-f5c7-375e92dddeb2
  5. Further tips to help protect your computer data and improve your privacy: https://forums.malwarebytes.com/topic/258363-tips-to-help-protect-from-infection/ 
  6. Please consider installing the following Content Blockers for your Web browsers if you haven't done so already. This will help improve overall security

Malwarebytes Browser Guard

uBlock Origin

 

Further reading if you like to keep up on the malware threat scene: Malwarebytes Blog  https://blog.malwarebytes.com/

Hopefully, we've been able to assist you with correcting your system issues.

Thank you for using Malwarebytes

 

Link to post
Share on other sites
  • 4 weeks later...
  • Root Admin
AdvancedSetup

AdvancedSetup

Posted
  • Root Admin
Posted

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Please review the following to help you better protect your computer and privacy Tips to help protect from infection

Thank you

 

 

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.