I downloaded software from softonic, now removed, but have inadvertently downloaded malware which produces constant popups. Tried various spyware and malware programs to no avail. How do I get rid of them?
Probably see: https://www.virustotal.com/#/file/6e482a2234b2d1c64a8da9792026534c8d76d72f34d12bbe2fca73b032c0112f/detection
Did you work Adware Cleaner? Wait for q qualified remover here to look into your logs,
he may assist you through the eventual cleansing routine.
Is your avast solution working in PUP mode?
polonus
Thanks polonius,
Have found and run Avast PUP programme. Malaware bytes premium cleaner , Adaware anti virus, Crapcleaner, spybot none of which show any threats. Have now downloaded Adaware Ad blocker and taken softonic programs off the Whitelist.
Can you make screenshot of those popups?
Best copy I seem to have got but only the en.softonic pup. Normally both en and laptop appear together, AdBlocker not worked.
Only appear when in Google Chrome.
Thanks for help
- Open Notepad (click Start button → type notepad.exe → press Enter)
- Copy text from code block below and paste it into Notepad
CHR HKU\S-1-5-21-515435191-324793867-4256132104-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-515435191-324793867-4256132104-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03132019075932826\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [jkfpchpiljkaemlpmpebnglgkomamfeo] - hxxps://clients2.google.com/service/update2/crx
- Go to File → Save As
- Make sure that UTF-8 is selected as Encoding (left side of Save button)
- Save it as fixlist.txt on Desktop
- Open again FRST and click on button Fix
- Wait until FRST finishes
- fixlog.txt should be genereted and opened. Attach it your post and wait further instructions.
Am attaching frst file. Opened but could not find “Fix” to generate fixlog.text
Repeat steps from my previous message again.
I have followed the following steps :-
Rt click start
Open run
enter notepad.exe which opens notepad
Paste code as above
Save as fixlist.txt , coded UTF-8 in desktop.
Fixlist icon appears on desktop but no FRST
Where am I going wrong, please? I have repeated the steps a number of times
If you have fixlog.txt on your Desktop (or in folder where FRST64.exe is located) attach it to your message.
Tried to run FRST64.exe but Widows couldn’t find.
Fixlist.txt attached
FRST and fixlist must be saved at same location when run, if not FRST will not find fix
Windows cannot find FRST or FRST64.exe so I can’t save fixlist in same folder.
In your first post you have attached FRST diagnostic logs so you must have run it
When you downloaded FRST you saved it somwhere before you run it first time?
Managed to find FRST in Downloads and saved to desktop.
Noted that the FRST log says “Run by… on 13.03”
Both FRST and fix.list attached Is this the FRST file you need?
when you have FRST and the fixlist.txt located at same place (both are on desktop) then you can run FRST as @Sass Drake instructed
FRST should then find the fixlist and perform the instructions @Sass Drake has made
when done there should be a log named fixlog.txt at same location, this is the log @Sass Drake want to see
I have download FRST64.exe and run it .
The attached files are what have been generated. I have still been unable to get filelist.txt to run with FRST.
I have still been unable to get [b]filelist.txt[/b] to run with FRST.have you named it filelist ?
you must name it fixlist.txt ( see Reply #5 from @Sass Drake) then open FRST and click FIX button (not scan)
Eureka. At last.
Fixlog.text attached.
Typo error earlier, should have read fixlist.text
Thanks
is your problem now solved?
@Sass Drake will give new instructions if needed when back online