Keep getting URL: MAL notifications. Attaching the logs here. Thanks.
I’m also getting “Ads by Browser Shop” ads on websites, which I thought I got rid of, but has since come back. Any help with this would be really appreciated. Thanks.
Still looking for help. Would be much appreciated. Thanks a lot.
Could you let me know if this stops the alerts
CAUTION : This fix is only valid for this specific machine, using it on another may break your computer
Open notepad and copy/paste the text in the quotebox below into it:
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION SearchScopes: HKCU - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = BHO: No Name -> {b0b87c02-6e43-4ad1-befa-751c48f997dd} -> No File 2014-10-07 14:31 - 2014-11-01 15:01 - 00000000 ____D () C:\Program Files (x86)\YoutubeAAdBloockke 2014-10-07 14:31 - 2014-10-31 18:03 - 00000000 ____D () C:\ProgramData\YoutubeAAdBloockke 2014-10-07 14:30 - 2014-10-31 17:03 - 00000000 ____D () C:\ProgramData\645aaad5728642e7 2014-10-07 14:30 - 2014-10-07 14:30 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Google 2014-10-07 14:30 - 2014-10-07 14:30 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Comodo 2014-10-07 14:30 - 2014-10-07 14:30 - 00000000 ____D () C:\Users\Guest\AppData\Local\Google 2014-10-07 14:30 - 2014-10-07 14:30 - 00000000 ____D () C:\Users\Guest\AppData\Local\Comodo 2014-10-07 14:30 - 2014-10-07 14:30 - 00000000 ____D () C:\Users\Craig\AppData\Local\Comodo 2014-10-07 14:30 - 2014-10-07 14:30 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google EmptyTemp: CMD: bitsadmin /reset /allusers
Save this as fixlist.txt, in the same location as FRST.exe
Run FRST and press Fix
On completion a log will be generated please post that
THEN
Please download AdwCleaner by Xplode onto your desktop.
[*]Close all open programs and internet browsers.
[*]Double click on AdwCleaner.exe to run the tool.
[*]Click on Scan.
[*]After the scan is complete click on “Clean”
[*]Confirm each time with Ok.
[*]Your computer will be rebooted automatically. A text file will open after the restart.
[*]Please post the content of that logfile with your next answer.
[*]You can find the logfile at C:\AdwCleaner[S1].txt as well.
Thanks a lot for the help. Fix log is attached. Running AdwCleaner now.
And here is the file from AdwCleaner
Have the alerts ceased ?
Not yet.
The ads by Browser Shop seem to be gone (however, I thought I got rid of them the other day when I tried to fix it myself and they came back).
Could I have a screenshot of the Avast popup please
Here you go
OK does this only occur in chrome ? If so it is probably a hidden extension
So could you start chrome in incognito mode and let me know if the alerts still appear
I’ve been using IE the past 10 minutes and haven’t gotten anything. So it does seem to be only in Chrome and happens in both normal and incognito
Could I have a fresh FRST scan please, also do you have chrome synch enabled
Here it is. I also noticed that I’m missing the option/check box for “Known DLLs” in FRST like the screen shot in the sticky thread about logs shows. Not sure if that makes a difference or if it’s just a new update. I’ve also attached the screen shot of mine so you can see.
And yes Chrome is synced with my google account, across my iPad and iPhone.
The problem is when we clean chrome as soon as you log in the bad boy comes back
As the problem is in incognito mode as well as normal that would suggest that one of the chrome main files is corrupted. In this case I would recommend an uninstall then re-install
Uninstalled and reinstalled Chrome, alter still pops up.
As I stated the problem is in the synching of chrome
If you change the settings so that you only synch bookmarks, deleting the rest and then reinstall chrome it should go https://support.google.com/chromebook/answer/1281195?hl=en
Sorry I thought I had deleted them, my fault. Seems to be all good now. Thanks a lot for the help, I really appreciate it.
When you are happy let me know and I will tidy up
Forgot to respond earlier, but things seem to be all cleared up. No issues since the last post. Thanks so much for the help.