Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Shockwave / Flash not responding in Chrome


  • Please log in to reply
27 replies to this topic

#1 malHelp

malHelp

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:05:05 PM

Posted 02 December 2014 - 01:38 PM

Hello, Thank you for spending your time assisting me with my problem.

 

When I open chrome and go to Yahoo, Gmail or Youtube, I get a yellow banner saying that Shockware Flash has stopped responding.

I have reinstalled Chrome, reinstalled flash, verified in chrome://plugins there is only one Flash entry, disabled all other plugins and tested, there are no conflicts in chrome://conflicts. I have done multiple Scans with Kaspersky, Spybot, Malwarebytes and Adwcleaner. All found items have been deleted, but it does not fix the problem.

The only way I can get Flash to work is be setting Chrome's settings to default, then Flash will work for a while, sometime it will stop responding within minutes, other times when I close Chrome and reopen it. This problem is not happening in Firefox.

This has started to happen after I allowed SearchLock to be installed, I was duped and thought it was part of Chrome. I have since then deleted it (I believe), by hitting the trash button in Chrome Extension. The only other extension I see running are from Kaspersky.

 

Any ideas on my next step, and whether this is an infection or not?

 

Thank you.

 



BC AdBot (Login to Remove)

 


#2 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:08:05 AM

Posted 02 December 2014 - 02:23 PM

Hello -

SearchLock seem to be the latest in with Chrome when you add Flash Extensions

This is a basic removal for SherLock and many similar evtensions

  • Click the Chrome menu button on the Google Chrome browser

    Select Tools > Extensions.

  • Look for any unfamiliar extensions like SearchLock and get rid of them by clicking on the Recycle Bin.
  • Always recheck your Start Pages are correct, and Reset them if not

If you have no luck, Uninstall Chrome browser and reinstall it, but read the Add-ons offered with extensions.

Many have extras included and you can always refuse them.

 

See how that goes -

EDIT - It is a "pushy extra" that is almost an infection, as it is generally unwanted.


Edited by noknojon, 02 December 2014 - 02:25 PM.


#3 malHelp

malHelp
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:05:05 PM

Posted 02 December 2014 - 02:49 PM

noknojon,

Thank you for your help. I have done all of the above but still having the same error..

I didn't understand this "It is a "pushy extra" that is almost an infection, as it is generally unwanted." , are you saying I more than likely have an infection?
 

Any other ideas?

Thanks.
 


Edited by malHelp, 02 December 2014 - 03:14 PM.


#4 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:08:05 AM

Posted 02 December 2014 - 03:12 PM

What I can now find .........

 

It is an Extra that you accepted when there would have been a Do not accept (or similar) when downloading Flash / Shockwave extension, or even Chrome (ergo "pushy extra")

 

If you wish to, I would remove Shockwave / Flash Player from your computer fully, Uninstall Chrome, Reset Internet Explorer (it controls all settings), and start again from there.

 

This is the first and most simple way, plus a couple of scans After Chrome and Shockwave / Flash are removed.

 

So I think it can be removed as you installed it as a program. It may be in all browsers, but showing in Chrome worst -

 

Thank You -

 

PS. Please only Bold a few words to highlight items, and not your full post (you can use preview post first).



#5 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:08:05 AM

Posted 02 December 2014 - 04:39 PM

This is the current uninstall method (and basically as I listed) as quoted from Google Chrome site -

It only leaves me to see where that http link leads and I will post back (or edit here)

 

This is where the link leads to ............

From the SearchLock Page that has an extremely low WOT rating.

 

Chrome

    Click the Chrome menu menu on the browser toolbar.
    Click "More tools."
    Select "Extensions."
    Click the trash can icon trash. A confirmation dialog will appear, click Remove.

You can also temporarily turn off an extension by disabling it on the Extensions page.

Firefox

    Click the Firefox menu firefox menu on the browser toolbar.
    Click Add-ons firefox addons.
    Click Disable or Remove firefox disable remove.
 

From the Chrome site ..............

----------------------
How to Uninstall
-----------------------

To uninstall or temporarily de-activate SearchLock:

1. Click on the Chrome settings menu/icon
2. Click Tools
3. Choose Extensions
3. Disable or Delete by clicking the trash can icon

For more specific instructions, go to:
https://www.searchlock.com/pages/uninstall



#6 malHelp

malHelp
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:05:05 PM

Posted 02 December 2014 - 04:48 PM

Noknojon,

Thank you for your help.. I was able to delete searchlock, doing everything you mentioned above, it was not installed in Firefox. I still have the problem. I have also deleted Flash from my laptop, but the problem still exists. Flash is only working within Chrome. I am still pending to delete Chrome and scan again and reset IE (which I hadn't thought of).

 

Is it possible it is something else other than the installation of Seachlock which I agreed to install?

 

Thanks.



#7 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:08:05 AM

Posted 02 December 2014 - 06:59 PM

Is it possible it is something else other than the installation of Seachlock which I agreed to install?

The program (as I noted above) is Very lowly rated, and even the>> Chrome Forum offer a range of removal instructions (basically as given).

 

If you wish, (my version) I would uninstall Chrome (their directions are very simple) and reset your internet settings to make sure.

 

To reset browsers back to default >> There is a M/soft "FixIt" but this is the manual method.

 

This should be done with only Internet Explorer open, not Firefox, Chrome or other browsers.
Click Tools on the toolbar, or press Alt key and the Menu bar will appear, or click on the Gear icon at the top of the browser > Go down the list to click on Internet Options

Go across to the last tab that should be Advanced >  Click on Advanced and then click Reset (near the bottom) > You should get a Confirm box pop up > Tick Delete Personal Settings and now Reset.
This last part may be where the infection changed things -
Once the settings have all been reset, click OK or Apply and Close that box. Close (OK / Apply) any other open boxes. Now close I.E. and Reboot your computer.

 

 

Now to be sure we should run the normal quick Adware / Malware scans

Please download RKill by Grinler to desktop to run it

  • A black DOS box will appear for a short time and then disappear.
  • This is normal and indicates the tool ran successfully.
  • At most the tool will usually run for about 2 minutes
  • Please Copy / Paste the small log back here.

 

 

I would now open AdwCleaner program and run a scan.

Please open your version and hit Uninstall and download a fresh copy, as it has just been updated.

 

Now please download AdwCleaner by Xplode and save to your Desktop

  • Double click on AdwCleaner.exe to run the tool.
  • Vista/Windows 7/8 users right-click and select Run As Administrator
  • Click on the Scan button.
  • AdwCleaner will begin...be patient as the scan may take some time to complete. Watch the Green bar.
  • When it's done you'll see: Pending: Please uncheck elements you don't want removed.
  • Now click on the Report button...a logfile (AdwCleaner[R0].txt) will open in Notepad for review.
  • Look over the log especially under Files/Folders for any program you want to save.
  • If there's a program you may want to save, just uncheck it from AdwCleaner.
  • If you're not sure, post the log for review. (all items found are usually adware/spyware/foistware)
  • If you're ready to clean it all up.....click the Clean button.
  • After rebooting, a logfile report (AdwCleaner[S0].txt) will open automatically.
  • Copy and paste the contents of that logfile in your next reply.
  • A copy of that logfile will also be saved in the C:\AdwCleaner folder.

     

     

  • Note : Items that are deleted are moved to the Quarantine Folder: C:\AdwCleaner\Quarantine
  • To restore an item that has been deleted:
  • Go to Tools > Quarantine Manager > check what you want restored > now click on Restore.

 

If you have this already, please Update your version prior to running it.

Please download Malwarebytes Anti-Malware

  • Follow the simple directions to install the program to desktop
  • Right click and choose "Run as administrator" to open Malwarebytes Anti-Malware and from the Dashboard please Check for Updates by clicking the Update Now... link
  • Open up Malwarebytes > Settings > Detection and Protection > Enable Scan for rootkit and Under Non Malware Protection set both PUP and PUM to Treat detections as malware.
  • Click on the SCAN button and run a Threat Scan with Malwarebytes Anti-Malware by clicking the Scan Now>> button.
  • If you find malware and tick it to remove it, you may be asked th re-boot the computer to finish cleaning.
  • Once completed please click on the History > Application Logs and find your scan log and open it and then click on the "copy to clipboard" button and post back the results on your next reply.

 

Thank You -



#8 malHelp

malHelp
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:05:05 PM

Posted 02 December 2014 - 09:26 PM

Thanks for the detailed steps, but they did not fix my problem. I deleted Chrome, reset IE, ran MBAM which came out clean, rKill which came out clean, and the same for adwClean, reinstalled Chrome. Problem still persists. Any more ideas?

 

Here is the log for adwClean:

# AdwCleaner v4.103 - Report created 02/12/2014 at 21:16:33
# Updated 01/12/2014 by Xplode
# Database : 2014-12-02.2 [Live]
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : sean - SEAN-PC
# Running from : C:\Users\sean\Downloads\AdwCleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****


***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17420


-\\ Mozilla Firefox v33.1.1 (x86 en-US)


-\\ Google Chrome v39.0.2171.71


*************************

AdwCleaner[R0].txt - [1076 octets] - [02/12/2014 11:28:06]
AdwCleaner[R1].txt - [871 octets] - [02/12/2014 19:09:30]
AdwCleaner[R2].txt - [967 octets] - [02/12/2014 21:14:00]
AdwCleaner[S0].txt - [1143 octets] - [02/12/2014 11:30:36]
AdwCleaner[S1].txt - [889 octets] - [02/12/2014 21:16:33]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [948 octets] ##########
 


Here is the log from rKill:

Rkill 2.6.8 by Lawrence Abrams (Grinler)
http://www.bleepingcomputer.com/
Copyright 2008-2014 BleepingComputer.com
More Information about Rkill can be found at this link:
 http://www.bleepingcomputer.com/forums/topic308364.html

Program started at: 12/02/2014 09:08:32 PM in x64 mode.
Windows Version: Windows 7 Home Premium Service Pack 1

Checking for Windows services to stop:

 * No malware services found to stop.

Checking for processes to terminate:

 * No malware processes found to kill.

Checking Registry for malware related settings:

 * No issues found in the Registry.

Resetting .EXE, .COM, & .BAT associations in the Windows Registry.

Performing miscellaneous checks:

 * No issues found.

Checking Windows Service Integrity:

 * No issues found.

Searching for Missing Digital Signatures:

 * No issues found.

Checking HOSTS File:

 * HOSTS file entries found:

  127.0.0.1       localhost
  127.0.0.1       localhost

Program finished at: 12/02/2014 09:10:05 PM
Execution time: 0 hours(s), 1 minute(s), and 33 seconds(s)

 

 

 

Here is the output from  CHROME://CONFLICTS

Modules loaded into Google Chrome
This page lists all modules loaded into the main process and modules registered to load at a later point.
Modules (136) - No conflicts detected

Edited by malHelp, 02 December 2014 - 09:39 PM.


#9 malHelp

malHelp
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:05:05 PM

Posted 02 December 2014 - 09:42 PM

I also tried running the sites in the Incognito mode and it also failed.



#10 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:08:05 AM

Posted 02 December 2014 - 11:08 PM

I also tried running the sites in the Incognito mode and it also failed.

Not actually helping in that mode if any Flash / Shockwave is still installed...........It is inside the computer ..

 

Safe Mode with Networking may produce a result .....

 

Open Internet Explorer and recheck that your Home Page has not been altered, and if you installed Chrome also check the Home Page(s) is correct

 

 

Always try to post the first AwCleaner Clean scan.

AdwCleaner[S0].txt - [1143 octets] - [02/12/2014 11:30:36] << First Clean scan has already removed any problems. 11.30 AM Note the size is much larger (just a bit)
AdwCleaner[S1].txt - [889 octets] - [02/12/2014 21:16:33]  << Second Clean scan, so there was nothing left to show us. 9.16 PM

 

MBAM Log ??

 

Also -

Run ESET Online Scanner.

  • For Internet Explorer users only, hold down Control  (Ctrl) and click on This Link to open ESET OnlineScan in a new window.
  • Click the ESET Online button.
  • For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
  • Click on esetsmartinstaller_enu. to download the ESET Smart Installer. Save it to your desktop.
  • Double click on the esetsmartinstaller_enu icon on your desktop.
  • Check "YES, I accept the Terms of Use."
  • Click the Start button.
  • Accept any security warnings from your browser.
  • Under scan settings, check "Scan Archives but not Remove Threats"
  • Click Advanced settings and select the following:
    Scan potentially unwanted applications
     Scan for potentially unsafe applications
     Enable Anti-Stealth technology
  • ESET will then download updates for itself, install itself, and begin scanning your computer.
  • Please be patient as this will take some time (2 hours is not unusual for a first scan).
  • When the scan completes, click List Threats
  • Click Export, and save the file to your desktop using a unique name, such as "ESETScan". Include the contents of this report in your next reply.
  • Click the Back button.
  • Click the Finish button.

NOTE:Sometimes if ESET finds no infections it will not create a log.

 

 

 

Then it seems like we need a bit more information.

Please download MiniToolBox  to desktop to run it.
 Checkmark the following boxes:
 * List content of Hosts
 * Flush DNS
 * Report IE Proxy Settings
 * Reset IE Proxy Settings
 * Report FF Proxy Settings
 * Reset FF Proxy Settings
 * List last 10 Event Viewer log
 * List Installed Programs
 * List Users, Partitions and Memory size
 Note: When using "Reset FF Proxy Settings" option Firefox should be closed.
 Click Go and Copy / Paste the result. (result.txt)

 

Download Autoruns to your desktop
Double click on Autoruns exe.
Allow the program to fully populate (this will take a few minutes)
Go > File > Save > Save as Autoruns.txt > File Type > All Files
Save to Desktop
Copy and Paste the Autoruns.txt back here



#11 malHelp

malHelp
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:05:05 PM

Posted 02 December 2014 - 11:33 PM

Here is the first log from AdwCleaner. I'll work on the next ESET and the MiniToolBox.. Thanks

 

# AdwCleaner v4.103 - Report created 02/12/2014 at 11:30:36
# Updated 01/12/2014 by Xplode
# Database : 2014-12-01.2 [Live]
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : sean - SEAN-PC
# Running from : C:\Users\sean\Downloads\AdwCleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****


***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17420


-\\ Mozilla Firefox v33.1.1 (x86 en-US)


-\\ Google Chrome v39.0.2171.71

[C:\Users\sean\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://search.aol.com/aol/search?q={searchTerms}
[C:\Users\sean\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.ask.com/web?q={searchTerms}

*************************

AdwCleaner[R0].txt - [1076 octets] - [02/12/2014 11:28:06]
AdwCleaner[S0].txt - [1003 octets] - [02/12/2014 11:30:36]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1063 octets] ##########
 



#12 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:08:05 AM

Posted 03 December 2014 - 12:13 AM

Also

MBAM Log ??

Ask if you need help with it ...............



#13 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:08:05 AM

Posted 03 December 2014 - 06:25 AM

OK -

Tell me if this works for you. Removal of SearchLock is a good idea also, but not the Flash problem.

 

I think that we have found a Flash problem that is not always a Chrome problem. The problem is Chrome browser.

I have found that Chrome actually has Flash "built - in" when you download it each time.

 

Open your version of Chrome, and type " about:plugins " in your address bar (without the "quote marks") < Enter >

Now you should have a list of Extensions, and there may be 2 Flash one for the internal Chrome installation and one for the regular O/S installation.

 

You need to "Disable" the built in Chrome version.

 

Look for a + sign in the upper RHSide > Click that and the Plugins should expand > Look for the Flash player items and Disable the one located in sean\Chrome\ ApplicationData\

You should now only have 1 example listed. Click Enable on the one left. Close the browser and you may need to Reboot the computer .........

 

Remember to check for updates at Adobe’s Flash download page to be sure it is updated.

Untick the McAfee free offer listed there with a download.

 

All of the other items we have done are good to clean your system, but the above item should solve the Flash problem ..........

 

Regards -



#14 malHelp

malHelp
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:05:05 PM

Posted 03 December 2014 - 02:25 PM

Hello Noknojon, Thank You!

Yes, you are correct about your last post about Chrome having its own built Flash, this is the reason why I had deleted Flash, so there would be no conflicts with Chrome trying to work with the wrong one or both at the same time. That did not fix the problem. If you go to Chrome://conflicts  I believe it would have shown that this conflict was happening, but in my case it was something else. 

 

I ran ESET as requested, and it found two babylon toolbar malwares on my laptop. I deleted them and so far Chrome has kept working, lets see over the next day or two whether it continues to work.

 

C:\$Recycle.Bin\S-1-5-21-1331482926-1675941678-2613038425-1001\$RCBMF0E\Setup.exe a variant of Win32/Toolbar.Babylon.E potentially unwanted application deleted - quarantined
C:\$Recycle.Bin\S-1-5-21-1331482926-1675941678-2613038425-1001\$RCBMF0E\Latest\Setup.exe a variant of Win32/Toolbar.Babylon.E potentially unwanted application deleted - quarantined
C:\Users\sean\Downloads\Firefox_Setup_17.0.exe a variant of Win32/InstallCore.AY potentially unwanted application deleted - quarantined
 

I am amazed that Kaspersky, Malware, Spybot, Adwclean, and Rkill did not find them,

 

Noknojon, thank you for your help and I hope this posting helps other people in the future. 

 

 



#15 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:08:05 AM

Posted 03 December 2014 - 03:05 PM

Good Morning - 7.00 AM here. (Daylight Savings Time)

As long as you disabled the one located in sean\Chrome\ ApplicationData\ then you will be back to running normal Adobe Flash.

This is one of those silly little reasons that I remained with Internet Explorer for so long.

 

You can now delete Spybot S&D as it is like running a second Antivirus, and not needed .
Win32/InstallCore.AY + Win32/InstallCore.AY are just small bits (glad we cleaned you up).

 

Post here if the problem continues, but I think that you are now clean and fit to run ......

 

Catch you later -  :hello:






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users