i have the addons extutil and managera in me chrome thats what avast says every time that i open up browser clean up but i am never able to remove it i think ive seen all the topics to it but they are either unanswered or have warnings in the top that says it may not work for my computer idk how to do this forum at all also so i hope that no one will get mad at me for posting this and hope that someone can help me finally remove these parasites
Try running the Chrome Software Removal Tool: https://www.google.com/chrome/srt/
It should find any browser malware and remove it.
polonus
i ran it and did remove a suspecious software but then i ran avast and said that extutil and managera are still there ???
hey please follow this guide and attach a frst log
https://forum.avast.com/index.php?topic=53253.0
a malware expert can have a look at it if you like
what does avast say about the addon? can you provide a picture of the avast scan result i will help the expert find the problem.
Well having a qualified remover take a look into that matter is the preferable way to go.
I also have a hunch your browser’s update mechanism has gone busted via the registry settings
in an attempt for these malcodes to stay on forever and also the reason why they resurrect after uninstall.
polonus
I just called Avast support and they said even though Avast says Machinea and extutil are reported by Avast, I would have to pay $179 for “Engineer Support”: to get rid of them. He told me Avast protects against viruses only. This is miles from the implied function and support Avast touts. Am I missing something? Thanks for a variety of useful answers in the threads.
My charge is not so exorbitant… Free
Please download Farbar Recovery Scan Tool and save it to your Desktop.
Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
[*]Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
[*]Select additions at the bottom
[*]Press Scan button.
https://dl.dropboxusercontent.com/u/73555776/frst.JPG
[*]It will produce a log called FRST.txt in the same directory the tool is run from.
[*]Please attach both logs generated.
ok i have followed all instructions from the link that i sent me mikaelrask here is all the info
this is the last log sorry i couldn’t attach anymore in the other
Let me know if this removes them
CAUTION : This fix is only valid for this specific machine, using it on another may break your computer
Open notepad and copy/paste the text in the quotebox below into it:
CreateRestorePoint: AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\VC64Loader.dll => C:\PROGRA~2\SearchProtect\SearchProtect\bin\VC64Loader.dll File Not Found SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2492} URL = http://www.default-search.net/search?sid=492&aid=349&itype=n&ver=14963&tm=580&src=ds&p={searchTerms} SearchScopes: HKU\S-1-5-21-620573954-433976578-112430653-1000 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2492} URL = http://www.default-search.net/search?sid=492&aid=349&itype=n&ver=14963&tm=580&src=ds&p={searchTerms} CHR HKLM-x32\...\Chrome\Extension: [fgbcffenncokfocljomejddmgcpppjom] - No Path 2015-01-17 11:12 - 2015-01-17 11:12 - 00011468 _____ () C:\Users\Dante\Downloads\[kickass.so]malwarebytes.anti.malware.premium.2.0.2.1012.final.incl.keys.scenedl.torrent 2015-01-08 23:46 - 2015-01-08 23:46 - 00000064 _____ () C:\Users\Dante\AppData\Local\b95d0be0ba802aa42478fc975e226dc7 2015-01-08 23:46 - 2015-01-08 23:46 - 0000064 _____ () C:\Users\Dante\AppData\Local\b95d0be0ba802aa42478fc975e226dc7 EmptyTemp: CMD: bitsadmin /reset /allusers
Save this as fixlist.txt, in the same location as FRST.exe
https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG
Run FRST and press Fix
On completion a log will be generated please post that
THEN
Please download AdwCleaner by Xplode onto your desktop.
[*]Close all open programs and internet browsers.
[*]Double click on AdwCleaner.exe to run the tool.
[*]Click on Scan.
[*]After the scan is complete click on “Clean”
[*]Confirm each time with Ok.
[*]Your computer will be rebooted automatically. A text file will open after the restart.
[*]Please post the content of that logfile with your next answer.
[*]You can find the logfile at C:\AdwCleaner[S1].txt as well.
thank u for helping me ;D but when i go to avast browser clean up it still shows the extutil and managera addons and i still get error when trying to remove them
here are the logs added another log just in case :3
OK that is a corruption within firefox
1.Click the menu button and then click help .
2.From the Help menu choose Troubleshooting Information. …
3.Click the Reset Firefox… button in the upper-right corner of the Troubleshooting Information page.
4.To continue, click Reset Firefox in the confirmation window that opens.
Avast should now cease alerting
im using chrome tho ???
Intriguing as this is normally Firefox related and you are showing entries for it
Chrome reset
1.Click the icon that looks like three stacked lines at the top right of the browser window. …
2.Select ‘Settings’ in the drop-down menu. …
3.Click on ‘Show advanced settings’ at the bottom of the Web page. …
4.Select ‘Reset browser settings’ at the bottom of the page.
k i did that but avast still shows the addons
OK I will now remove the Firefox entries
CAUTION : This fix is only valid for this specific machine, using it on another may break your computer
Open notepad and copy/paste the text in the quotebox below into it:
CreateRestorePoint: FF Plugin: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE -> disabled No File FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.5.29 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.) FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-12-20] EmptyTemp: CMD: bitsadmin /reset /allusers
Save this as fixlist.txt, in the same location as FRST.exe
https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG
Run FRST and press Fix
On completion a log will be generated please post that
not to sound rude at all bit there still there but here is the log
Did you perform this sequence?:
open Google Chrome>click on Settings>choose configuration page> search for Open a specific page or set of pages> click on Set Pages
find configuration page> search for Manage search engines and click it> get Default search engine settings> change your default search engine
search for these 2 options: Make Default&Close button “x” to delete the search engine.
make default your Google search engine and delete all one by one…
Just give it a try,
For Firefox: open troubleshooting information from browser Firefox
get Help menu and click Troubleshooting information
with page of Trouble shooting information, search for Reset Firefox and click on Reset
polonus
ok ive done all of that but there still there
Another way to try: Ctrl+alt+delete
Kill all chrome processess (fast as possible)
Directy after (while remove programs page is open) click uninstall Chrome. (if not able to uninstall - make sure you killed every process named chrome)
In windows file manager, select to display all hidden files. Delete chrome folder under program and under users\appdata… (if you have several users make sure to delete chrome folders under each user)
Restart computer (dont know if necessary but do it anyway)
And yes - avast scans ssl connections so need to disable this in avast so chrome can install properly.
Reinstall chrome, login google. Enable avast.
Should be ok. ) Info from Google Productforms - credits Sam Yrlund.
polonus