After system boot and internet avast shows these popups
http://alwaysisobar.com/4141/LiveReader_142667058837144.dll
C:\Windows\System32\svchost.exe
http://simplesitescan.net/4141/SystemVisual_142669159139276.dll
C:\Windows\System32\svchost.exe
also something to do with chrome.exe
I will attach logs that may help , thank you
One more thing
Hi walus76, welcome to the forum 
It is midnight here in Europe, so our experts are most likely sleeping now. Be patient, you will be helped as soon as possible
Greetz, Red.
Hello,
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/51a612a8b27e2-Zoek.png
Scan with ZOEK
Please download ZOEK by Smeenk and save it to your desktop (preferred version is the *.exe one)
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.
[*]Right-click on
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/51a612a8b27e2-Zoek.png
icon and select
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg
Run as Administrator to start the tool.
[]Wait patiently until the main console will appear, it may take a minute or two.
[]In the main box please paste in the following script:
createsrpoint;
autoclean;
emptyalltemp;
ipconfig /flushdns;b
[*]Make sure that Scan All Users option is checked.
[*]Push Run Script and wait patiently. The scan may take a couple of minutes.
[*]When the scan completes, a zoek-results logfile should open in notepad.
[*]If a reboot is needed, it will be opened after it. You may also find it at your main drive (usually C:\ drive)
Post its content into your next reply.
Zoek.exe v5.0.0.0 Updated 04-May-2015
Tool run by Walus on 09/06/2015 at 7:54:21.02.
Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Walus\Desktop\zoek.exe [Scan all users] [Script inserted]
==== System Restore Info ======================
09/06/2015 07:55:45 Zoek.exe System Restore Point Created Successfully.
==== Empty Folders Check ======================
C:\PROGRA~2\MSXML 4.0 deleted successfully
C:\Program Files\Google deleted successfully
C:\PROGRA~3\Malwarebytes’ Anti-Malware (portable) deleted successfully
C:\Users\Walus\AppData\Local\VDownloader deleted successfully
==== Deleting CLSID Registry Keys ======================
==== Deleting CLSID Registry Values ======================
==== Deleting Services ======================
==== Batch Command(s) Run By Tool======================
==== Deleting Files \ Folders ======================
C:\PROGRA~3\Malwarebytes’ Anti-Malware (portable) not found
C:\PROGRA~2\Windows Live SkyDrive deleted
C:\Windows\SysNative\config\systemprofile\Searches deleted
C:\Users\Public\Desktop\VDownloader.lnk deleted
==== Firefox Extensions Registry ======================
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
“wrc@avast.com”=“C:\Program Files\AVAST Software\Avast\WebRep\FF” [19/05/2015 21:33]
==== Chromium Look ======================
Google Chrome Version: 43.0.2357.81
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
eofcbnmajmjmplflapaojjnihcjkigck - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx[07/04/2015 13:57]
gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[07/04/2015 13:57]
Bookmark Manager - Walus\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik
==== Chromium Startpages ======================
C:\Users\Walus\AppData\Local\Google\Chrome\User Data\Default\Preferences
DAB03CAA7CD6D4A64D4BF8F32F568E33863D8A5166B2E7D0A",“prefs”:{“preference_reset_time”:“4DAADF152A48F00588FC517E58D8F363B77F51EDD5EC8D6BC2B1A72BA915C3A6”},“profile”:{“reset_prompt_memento”:“F9F6D5AEE84C7BF1BF00631BA5D6897C5C455BFD066E0C77B4D37BE85AC3846A”},“safebrowsing”:{“incidents_sent”:“65C8CD2B0C04CCD35C851FC1694F57BF6647DA57BD79B0571CC10E34C571DE55”},“search_provider_overrides”:“6BFE3DCF5591B6C7027F2A39C448F1D6700AD5E156BA320D369CC3DFDA8EFC49”,“session”:{“restore_on_startup”:“D3C4EB1A08691ED72A146B561C6814E45BCC497DB4139429FFE895A49B3FB70E”,“startup_urls”:“5AF79F6D7C7D1F2972BC28DC1ADAAB53C7A3965CEEFF029F02ACC0E3CB7529DE”},“software_reporter”:{“prompt_reason”:“88993B4015F5C96E51E72191524641052665D0ECE90842015C9018D3BF41A135”,“prompt_seed”:“DDC6D45486E1373E2B4D215902394AC4C18D4CABBA34B83698E1DA6ED8EBD510”,“prompt_version”:“6C9F8A3E5CAD68AF18DC78A5EDE859758CDDDBE34EC337349CC876739DD6666D”},“sync”:{“remaining_rollback_tries”:“4FAE765604EF65A3BA40FE3192D760C887AD5B1F5AC83D53D2091E40D5DB5CD2”}},“super_mac”:“132FA8F9A81B57E2AAABCE2B8EC7237A47B49BE684D8B05D044958B72941222F”},“session”:{“restore_on_startup”:4,“startup_urls”:[“http://www.onet.eu/”]}}
==== Chromium Fix ======================
C:\Users\Walus\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.olark.com_0.localstorage deleted successfully
C:\Users\Walus\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.olark.com_0.localstorage-journal deleted successfully
==== Set IE to Default ======================
Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
“Start Page”=“http://g.uk.msn.com/HPNOT/2”
New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
“Start Page”=“http://g.uk.msn.com/HPNOT/2”
==== All HKCU SearchScopes ======================
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
“DefaultScope”=“{0633EE93-D776-472f-A0FF-E1416B8B2E3A}”
{012E1000-F331-11DB-8314-0800200C9A66} Google Url=“http://www.google.com/search?q={searchTerms}”
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url=“http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC”
{2B8501CD-2FFC-4C11-9685-054D15F7C51F} Bing Url=“http://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox”
==== Deleting CLSID Registry Keys ======================
HKEY_CLASSES_ROOT\Wow6432Node\CLSID{8dcb7100-df86-4384-8842-8fa844297b3f} deleted successfully
HKEY_CLASSES_ROOT\Wow6432Node\CLSID{d2ce3e00-f94a-4740-988e-03dc2f38c34f} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{d2ce3e00-f94a-4740-988e-03dc2f38c34f} deleted successfully
==== Deleting CLSID Registry Values ======================
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar{8dcb7100-df86-4384-8842-8fa844297b3f} deleted successfully
==== Deleting Registry Keys ======================
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched deleted successfully
==== Empty IE Cache ======================
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Walus\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Walus\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
==== Empty FireFox Cache ======================
No FireFox Profiles found
==== Empty Chrome Cache ======================
C:\Users\Walus\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
==== Empty All Flash Cache ======================
Flash Cache is not empty, a reboot is needed
==== Empty All Java Cache ======================
Java Cache cleared successfully
==== C:\zoek_backup content ======================
C:\zoek_backup (files=7 folders=2 295446 bytes)
==== Empty Temp Folders ======================
C:\Users\ADMINI~1\AppData\Local\Temp emptied successfully
C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Walus\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot
==== After Reboot ======================
==== Empty Temp Folders ======================
C:\Windows\Temp successfully emptied
C:\Users\Walus\AppData\Local\Temp successfully emptied
==== Empty Recycle Bin ======================
C:$RECYCLE.BIN successfully emptied
==== Deleting Files / Folders ======================
“C:\Users\Walus\AppData\Roaming\Macromedia\Flash Player#SharedObjects\JP99CSU4\skype.com” not found
==== EOF on 09/06/2015 at 8:12:20.92 ======================
We need to run one more Zoek fix:
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/51a612a8b27e2-Zoek.png
Fix with ZOEK
https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
[B] This fix was created for this user for use on that particular machine.
https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
Running it on another one may cause damage and render the system unstable.
https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
[/B]
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.
[*]Right-click on
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/51a612a8b27e2-Zoek.png
icon and select
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg
Run as Administrator to start the tool.
[]Wait patiently until the main console will appear, it may take a minute or two.
[]In the main box please paste in the following script:
createsrpoint;
C:\Users\Walus\AppData\Local\Google\Chrome\User Data\Default\Preferences;f
chrdefaults;
[*]Make sure that Scan All Users option is checked.
[*]Push Run Script and wait patiently. The scan may take a couple of minutes.
[*]When the scan completes, a zoek-results logfile should open in notepad.
[*]If a reboot is needed, it will be opened after it. You may also find it at your main drive (usually C:\ drive)
Post its content into your next reply.
Zoek.exe v5.0.0.0 Updated 04-May-2015
Tool run by Walus on 10/06/2015 at 20:40:54.15.
Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Walus\Desktop\zoek.exe [Scan all users] [Script inserted]
==== Older Logs ======================
C:\zoek-results2015-06-09-071220.log 7889 bytes
==== System Restore Info ======================
10/06/2015 20:42:12 Zoek.exe System Restore Point Created Successfully.
==== Deleting Files \ Folders ======================
“C:\Users\Walus\AppData\Local\Google\Chrome\User Data\Default\Preferences” deleted
==== Reset Google Chrome ======================
C:\Users\Walus\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences was reset successfully
C:\Users\Walus\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\Walus\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal was reset successfully
==== C:\zoek_backup content ======================
C:\zoek_backup (files=8 folders=2 487878 bytes)
==== EOF on 10/06/2015 at 20:42:48.23 ======================
How is your PC behaving now?
I seems fine for now no pop-ups but ill keep you updated if they show up, thank you for the help 
• The following will implement some post-cleanup procedures:
=> Please download DelFix by Xplode to your Desktop.
Run the tool and check the following boxes below;
[i]
http://www.mcshield.net/personal/magna86/Images/checkmark.png
Remove disinfection tools
http://www.mcshield.net/personal/magna86/Images/checkmark.png
Create registry backup
http://www.mcshield.net/personal/magna86/Images/checkmark.png
Purge System Restore [/i]
Click Run button and wait a few seconds for the programme completes his work.
At this point all the tools we used here should be gone. Tool will create an report for you (C:[b]DelFix.txt[/b])
The tool will also record healthy state of registry and make a backup using ERUNT program in %windir%\ERUNT\DelFix
Tool deletes old system restore points and create a fresh system restore point after cleaning.