istartwebsearches and a few -- please check my machine :)

Hi Naat,

No, it’s not… not too techie to know those stuff… Hey, it doesn’t give me some pop ups anyway so can we have a rest and I’ll monitor the PC tomorrow? it’s 7:39PM here in our country and I got work at 2AM, I think we need to take some rest for now and I’ll come back tomorrow? This PC might be used by my wife though, but she knows how to avoid some dangerous sites and does not do any downloads so I guess it will be ok?

Oh sorry, you said chrome, I thought you said the PC… well, I’m logged in in chrome. When I reinstalled chrome after a system reformat a few weeks ealrier, it re-created all my bookmarks… does this answer your question?

Sorry, a bit tired now, and I know you are too :slight_smile:

I completely understand you. It’s 2 P.M. here, so go rest. We may discuss it further tomorrow :slight_smile:

Hi Naat,

I got a few minutes for now… anything you can suggest to my computer?

Thanks :slight_smile:

I’m sorry - I hadn’t. My family took my laptop outta my hands ;D

To sum up: did you reset google chrome to defaults as instructed?

https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
Scan with Farbar Recovery Scan Tool

Please re-run Farbar Recovery Scan Tool.
[*]Right-click on
https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
icon and select
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg
Run as Administrator to start the tool.

XP users click run after receipt of Windows Security Warning - Open File.
8 users will be prompted about Windows SmartScreen protection - click More information and Run.
[*]Make sure that Addition option is checked.
[*]Press Scan button and wait.
[*]The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.

Please include their content in your next reply.

Hi Naat,

Sorry for the late reply, as I and my wife went out to see a doctor.

Yes I did a reset in chrome as instructed.

Also, I just learned about this sync thing with chrome so I decided to disconnect my account, then reconnected it and found out that there were some changes to the number of apps, etc that I got prior to disconnecting and after reconnecting to the Google dashboard.

Avast also showed a pop up asking me to remove Coupon Maker from my browser, which I know I added before but I thought I already removed that long time ago. I also did not see that lately so I was thinking that may have been from the sync thing with my Chrome.

Attached are the logs for FRST…

And Naat, I can let go of this istartwebsearches now I think, and hope it will not show up again next time. Any way, I can’t seem to see any errors or malfunctions on my PC at this moment, and since last week so I would say that thing should never had caused any trouble the past week. I will try to go over all my applications and stuff later, since some of the apps, and files were very old, salvaged from my old HDD and unsorted, unchecked yet. So maybe that istartwebsearches that I got as PUP last time was from any of the files I’ve never checked yet, and maybe it’s time for me to go over those files and delete my old stuff first.

Let me know if we can wrap thing thing up soon… So much trouble for you now :slight_smile:

You are not any trouble. I like helping people and I really enjoy it, since I know that not everybody can handle some things on their own :slight_smile:

I see two things here: this naughty startpage in Chrome ans a policy that is set for Chrome.

The call is up to you whether you want to remove it. I suggest doing so :wink:

Hi Naat, let’s do it! What do I do to remove them? Sorry, I went to sleep :stuck_out_tongue:

No worries, I also need to get some sleep from time to time :slight_smile:

https://sites.google.com/site/cannedfixes/home/hosted-images-tools/51a612a8b27e2-Zoek.png
Scan with ZOEK

Please download ZOEK by Smeenk and save it to your desktop (preferred version is the *.exe one)
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.

[*]Right-click on
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/51a612a8b27e2-Zoek.png
icon and select
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg
Run as Administrator to start the tool.
[]Wait patiently until the main console will appear, it may take a minute or two.
[
]In the main box please paste in the following script:

createsrpoint;
chrdefaults;
process;
services-list;
systemspecs;
startupall;
skipfix-iedefaults;
firefoxlook;
chromelook;
filesrcm;
installedprogs;

[*]Make sure that Scan All Users option is checked.
[*]Push Run Script and wait patiently. The scan may take a couple of minutes.
[*]When the scan completes, a zoek-results logfile should open in notepad.
[*]If a reboot is needed, it will be opened after it. You may also find it at your main drive (usually C:\ drive)

Please include its content in your next reply.
Don’t forget to re-enable your switched-off protection software!