Help !!

Help me, my computer has a virus and i don’t know how to get rid of them? the avast protection on my browser have transform into some chines sympol such as this and it make my computer running slow is there anyway to fix it???

Let’s have a look…

Attach your basic diagnostic logs. (MBAM, FRST and aswMBR)
Instructions: https://forum.avast.com/index.php?topic=53253.0

Here are the 3 logs

Some decent security precautions there. Will get an expert for you.

yes i have some protection and still get some … :cry:

did you also scan with Malwarebytes? … if so, attach scan log

yes i did but there’s no malware cause i just reinstall my windows

It may be an old AOS. Delete the current one from Chrome then get a fresh copy, does that cure the problem

what is an AOS?? If that is the program being infected i show in the picture then i have removed it several but it still not work

Oh and some time when i click on some website it pop out a page with those chines symbols too

AOS = Avast Online Security https://chrome.google.com/webstore/detail/avast-online-security/gomekmidlodglbbmalcneegieacbdmki

Still not work. i removed it then reinstall it several time but it still like that

Does it disappear if you uninstall AOS ? I.e. is it definitely related to that

yes it disappear but i don’t know if it is really gone? cause before i install it there were some sympols like that appear on some site especially when i click on some link for download but if the link can’t be access at that time then it pop out a page with those sympols.

Do you have a link for one of those sites for me to test out ?

as i remember one of the link is for the farbar recovery scan tool download. When Asyn tell me to read the instruction for all the log i clicked on the link for the farbar but it can’t be load then it pop out page with chines sympol. After my first click the second attempt take a little bit then i can go in the site and download it.

Hmm I can see nothing apparent in any of the logs that would affect AOS only

Lets empty all caches

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

CreateRestorePoint: RemoveProxy: EmptyTemp: CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe

https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG

Run FRST and press Fix
On completion a log will be generated please post that

Here it is. It still the same :cry:

Is this only in Chrome or is it in all browsers ?

i use chrome only so i don’t know if any other browser is infective by that. Ah and here some pic i got last night about the problem when i open incognito window it appear on the left-top of the site but everything is normal. Then i closed it and opened again it was gone. I will install firefox to see if anything happen to it