Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Web page pops up at random in Chrome on Windows 10


  • This topic is locked This topic is locked
4 replies to this topic

#1 freedie

freedie

  • Members
  • 43 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:30 PM

Posted 03 April 2017 - 09:09 AM

Using Chrome on Windows 10 (on what I thought was a "tight" PC (with virus protection, firewall, backups etc.) I have started to get web pages which appear as new Chrome tabs. They are mostly surveys with prizes which can be claimed with credit card information. I have ignored them so far and they are not really a serious problem to me. BUT they do seem to grab control of my computer, so affect any real time applications/games I might be running.

 

I have already tried to clean my PC of problems; but I appear to have failed. I am no techie!

 

I have attached the FRST.txt and Addition.txt files.

 

Help please. I find this very frustrating.

 

Thank you in advance.

Attached Files



BC AdBot (Login to Remove)

 


#2 nasdaq

nasdaq

  • Malware Response Team
  • 39,877 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:10:30 AM

Posted 04 April 2017 - 08:52 AM

Hello, Welcome to BleepingComputer.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

Please download Malwarebytes Anti-Malware from here
  • Right-click on the MBAM icon and select Run as administrator to run the tool.
  • Click Yes to accept any security warnings that may appear.
  • Once the MBAM dashboard opens, on the right detail pane click on the word "Current" under the Scan Status to update the tool database.
  • On the left menu pane click the Settings tab, and then select the Protection tab on the top.
  • Under the Scan Options, turn on the button Scan for rootkits.
  • Click the Scan tab on the right detail pane, select Threat Scan and click the Start Scan button
  • Note: The scan may take some time to finish, so please be patient.
  • If potential threats are detected, ensure to checkmark all the listed items, and click the Quarantine Selected button.
  • While still on the Scan tab, click the View Report button, and in the window that opens click the Export button, select Text file (*.txt), and save the log to your Desktop.
  • The log can also be viewed by clicking the log to select it, then clicking the View Report button.
Please post the log for my review.

Note: If asked to restart the computer, please do so immediately.
===

Please download AdwCleaner by Xplode onto your Desktop.
  • Close all open programs and internet browsers.
  • Double click on AdwCleaner.exe to run the tool.
  • Click the Scan button and wait for the process to complete.
  • Click the LogFile button and the report will open in Notepad.
IMPORTANT
  • If you click the Clean button all items listed in the report will be removed.
If you find some false positive items or programs that you wish to keep, Close the AdwCleaner windows.
  • Close all open programs and internet browsers.
  • Double click on AdwCleaner.exe to run the tool.
  • Click the Scan button and wait for the process to complete.
  • Check off the element(s) you wish to keep.
  • Click on the Clean button follow the prompts.
  • A log file will automatically open after the scan has finished.
  • Please post the content of that log file with your next answer.
  • You can find the log file at C:\AdwCleanerCx.txt (x is a number).
===

Reset Chrome...
Open Google Chrome, click on menu icon google-chrome-setting-icon.png which is located right side top of the google chrome.
 
Click "Settings" then "Show advanced settings" at the bottom of the screen.
 
Click "Reset browser settings" button.
 
Restart Chrome.

Please let me know if the problem persists?

#3 freedie

freedie
  • Topic Starter

  • Members
  • 43 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:30 PM

Posted 05 April 2017 - 05:09 AM

Thank you nasdaq! (great financial name, btw!)

 

Here are the text files:

 

Malwarebytes
www.malwarebytes.com
 
-Log Details-
Scan Date: 4/5/17
Scan Time: 9:57 AM
Logfile: MBAM.txt
Administrator: Yes
 
-Software Information-
Version: 3.0.6.1469
Components Version: 1.0.96
Update Package Version: 1.0.1665
License: Trial
 
-System Information-
OS: Windows 10
CPU: x64
File System: NTFS
User: ME2\Eddie
 
-Scan Summary-
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 367623
Time Elapsed: 3 min, 37 sec
 
-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled
 
-Scan Details-
Process: 0
(No malicious items detected)
 
Module: 0
(No malicious items detected)
 
Registry Key: 0
(No malicious items detected)
 
Registry Value: 0
(No malicious items detected)
 
Registry Data: 0
(No malicious items detected)
 
Data Stream: 0
(No malicious items detected)
 
Folder: 0
(No malicious items detected)
 
File: 0
(No malicious items detected)
 
Physical Sector: 0
(No malicious items detected)
 
 
(end)
 
# AdwCleaner v6.045 - Logfile created 05/04/2017 at 10:30:17
# Updated on 28/03/2017 by Malwarebytes
# Database : 2017-04-04.2 [Server]
# Operating System : Windows 10 Home  (X64)
# Username : Eddie - ME2
# Running from : C:\Users\Eddie\Desktop\adwcleaner_6.045.exe
# Mode: Clean
 
 
 
***** [ Services ] *****
 
 
 
***** [ Folders ] *****
 
 
 
***** [ Files ] *****
 
 
 
***** [ DLL ] *****
 
 
 
***** [ WMI ] *****
 
 
 
***** [ Shortcuts ] *****
 
 
 
***** [ Scheduled Tasks ] *****
 
 
 
***** [ Registry ] *****
 
 
 
***** [ Web browsers ] *****
 
[-] [C:\Users\Eddie\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Deleted: uk.ask.com
 
 
*************************
 
:: "Tracing" keys deleted
:: Winsock settings cleared
 
*************************
 
C:\AdwCleaner\AdwCleaner[C0].txt - [3077 Bytes] - [29/03/2017 12:39:04]
C:\AdwCleaner\AdwCleaner[C2].txt - [933 Bytes] - [05/04/2017 10:30:17]
C:\AdwCleaner\AdwCleaner[S0].txt - [2968 Bytes] - [29/03/2017 12:37:33]
C:\AdwCleaner\AdwCleaner[S1].txt - [1277 Bytes] - [30/03/2017 15:38:41]
C:\AdwCleaner\AdwCleaner[S2].txt - [1350 Bytes] - [02/04/2017 18:54:38]
C:\AdwCleaner\AdwCleaner[S3].txt - [1423 Bytes] - [03/04/2017 14:31:38]
C:\AdwCleaner\AdwCleaner[S4].txt - [1558 Bytes] - [05/04/2017 10:27:36]
 
########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt - [1370 Bytes] ##########
 
 
I cannot tell yet whether this has worked; but so far I have not had another problem. I will contact again if I do.

 

Thank you again nasdaq!



#4 nasdaq

nasdaq

  • Malware Response Team
  • 39,877 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:10:30 AM

Posted 05 April 2017 - 07:33 AM

If all is well.

To learn more about how to protect yourself while on the internet read this little guide best security practices keep safe.
http://www.bleepingcomputer.com/forums/t/407147/answers-to-common-security-questions-best-practices/


https://www.bleepingcomputer.com/tutorials/keep-your-computer-safe-online/
Simple and easy ways to keep your computer safe and secure on the Internet.
===

p.s.
If you have any issues please run the Farbar tool and post fresh FRST and Addition.txt log for my review.

#5 freedie

freedie
  • Topic Starter

  • Members
  • 43 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:30 PM

Posted 06 April 2017 - 11:43 AM

Certainly had no more problems so far. Annoying in a way, as I had done everything you suggested before I had to write in and admit defeat. The precise order and method d'emploi is obviously the key. Thank you again for your valuable help nasdaq!






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users