Run a fresh FRST scan and I will remove it manually
Logs:
Let me know how the computer is after this
CAUTION : This fix is only valid for this specific machine, using it on another may break your computer
Open notepad and copy/paste the text in the quotebox below into it:
CreateRestorePoint: 2015-04-15 23:19 - 2015-03-11 23:25 - 00000000 ____D () C:\Program Files (x86)\Google 2015-04-15 23:14 - 2015-03-12 01:29 - 00000000 ____D () C:\Users\Bartek\AppData\Roaming\foobar2000 2015-04-15 23:08 - 2015-03-11 23:25 - 00000000 ____D () C:\Users\Bartek\AppData\Local\Google Task: {890C1538-6422-4D39-A1CF-60424DBBFC6B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-03-11] (Google Inc.) Task: {8C97D46C-5626-444B-A059-516AF8DCB9F8} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-03-11] (Google Inc.) Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe C:\Users\Bartek\AppData\Local剜捯獫慴慇敭屳呇⁁屖湥楴汴浥湥湩潦 Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f RemoveProxy: EmptyTemp: CMD: bitsadmin /reset /allusers
Save this as fixlist.txt, in the same location as FRST.exe
https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG
Run FRST and press Fix
On completion a log will be generated please post that
I can still launch Chrome, but now Avast diplays a different path to it (URL:Mal popups still appear, and all google related websites are marked as non-trusted) - I’m assuming you quarantined it in FRST folder.
No changes on Firefox - google related sites are marked as non-trusted (except for google.com, I’ve added an exception so I can use the search engine)
Log attached
Run delfix to empty the quarantines, then let me know how you are able to launch chrome
Remove tools
Download and run Delfix
Select the options as shown
Chrome and Google Update shortcuts doesnt work (removed them after trying). Firefox stopped flagging google websites as non-trusted after I set correct date& time (was 17.04.2015).
There is still a lot of google related folders on C:, shall I remove them manually?
Log attached:
Yes if you wish, once done let me know of any remaining problems
Reinstalled Chrome - so far so good. Thank you ![]()
I’ll let you know if anything else happens
When you are happy let me know