Hi there! when i open Chrome the system keeps telling me about an Infection URL and blocking different unknown url. I´ve tried to follow the instructions as shown in https://forum.avast.com/index.php?topic=53253.0, but I couldn´t download the FRST because avast detects that is a potential malware. I attach the results of Malware bites Anti Malware and the log of aswMBR. Can you help me on this?
Thanks in advance!
We need Farbar Recovery Scan Tool diagnostic logs
Right click avast tray icon … pause avast shields
Hi, here are the logs after the scanning. Thanks
Hi there, the first thing you must do is uninstall Chrome as it has been changed to the developer version and has no security controls. You can re-install Chrome once we have finished
CAUTION : This fix is only valid for this specific machine, using it on another may break your computer
Open notepad and copy/paste the text in the quotebox below into it:
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION CHR HKU\S-1-5-21-2435909705-1426444053-4172823486-1001\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION URLSearchHook: HKLM-x32 - (No Name) - {46008e0d-47ac-4daa-a02a-5eb69044431a} - No File URLSearchHook: HKU\S-1-5-21-2435909705-1426444053-4172823486-1001 - (No Name) - {46008e0d-47ac-4daa-a02a-5eb69044431a} - No File SearchScopes: HKU\S-1-5-21-2435909705-1426444053-4172823486-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-2435909705-1426444053-4172823486-1001 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = SearchScopes: HKU\S-1-5-21-2435909705-1426444053-4172823486-1001 -> {A98903CA-9013-48B6-9D17-A31D17838F2E} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3242336 BHO-x32: No Name -> {46008e0d-47ac-4daa-a02a-5eb69044431a} -> No File Toolbar: HKLM-x32 - No Name - {46008e0d-47ac-4daa-a02a-5eb69044431a} - No File Toolbar: HKU\S-1-5-21-2435909705-1426444053-4172823486-1001 -> No Name - {46008E0D-47AC-4DAA-A02A-5EB69044431A} - No File FF HKU\S-1-5-21-2435909705-1426444053-4172823486-1001\...\Firefox\Extensions: [{0F827075-B026-42F3-885D-98981EE7B1AE}] - C:\ProgramData\BrowserProtect\2.6.1125.80\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\FirefoxExtension FF HKU\S-1-5-21-2435909705-1426444053-4172823486-1001\...\Firefox\Extensions: [LyricsNotes@LonLyrics.co] - C:\Program Files (x86)\LyricsNotes\116.xpi FF HKU\S-1-5-21-2435909705-1426444053-4172823486-1001\...\Firefox\Extensions: [Lyrics@Lon.co] - C:\Program Files (x86)\LyricsNotes\122.xpi C:\Program Files (x86)\LyricsNotes C:\ProgramData\BrowserProtect C:\Users\Esther\AppData\Local\Google 2014-11-29 16:41 - 2014-10-14 18:36 - 00000000 ____D () C:\ProgramData\ClIcukForSSAAle 2014-11-29 16:41 - 2014-03-17 19:34 - 00000000 ____D () C:\ProgramData\BeuttErPRaiceChec 2014-11-29 16:41 - 2014-02-13 22:55 - 00000000 ____D () C:\ProgramData\ProSSHoppeR 2014-11-29 16:41 - 2014-01-05 18:15 - 00000000 ____D () C:\ProgramData\coupponnpeaK 2014-11-29 16:41 - 2014-01-05 18:13 - 00000000 ____D () C:\ProgramData\ProShhoppper 2014-11-29 16:41 - 2013-11-30 00:11 - 00000000 ____D () C:\Program Files (x86)\Optimizer Pro Task: {504866E5-CF31-4775-B80C-DA6F13B44B66} - \DealPly No Task File <==== ATTENTION Task: {60F398C6-F009-4FEB-B4EF-955537F134F2} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-04-13] (Google Inc.) Task: {84A77F86-B445-48DE-B57F-B89B693CD5C2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-04-13] (Google Inc.) Task: {BA45A14F-A7A8-4C84-9CC3-21C098EFF9F5} - System32\Tasks\BrowserProtect => Sc.exe start BrowserProtect <==== ATTENTION Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe EmptyTemp: CMD: bitsadmin /reset /allusers
Save this as fixlist.txt, in the same location as FRST.exe
https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG
Run FRST and press Fix
On completion a log will be generated please post that
THEN
Please download AdwCleaner by Xplode onto your desktop.
[*]Close all open programs and internet browsers.
[*]Double click on AdwCleaner.exe to run the tool.
[*]Click on Scan.
[*]After the scan is complete click on “Clean”
[*]Confirm each time with Ok.
[*]Your computer will be rebooted automatically. A text file will open after the restart.
[*]Please post the content of that logfile with your next answer.
[*]You can find the logfile at C:\AdwCleaner[S1].txt as well.
Hi again!
Here is the log after run the process in fix option
Once AdwCleaner has run could you let me know how the computer is behaving
Hi Essexboy!
It looks ok now. Many thanks 
Have you re-installed Chrome yet ? Do you intend to
Hi again!
I´m emailing you because after following your instructions the problem related with the annoing messages in chrome was resolve. But now the performances of the computer are very bad. And specially internet. There are many times (most of the time) that the pages are not displayed because can´t not be loaded. Do you have any idea what can happen and if it can be related with the previous issue?
thanks
Sonia
Could you run a fresh FRST scan please