Nova Ramblr, pwwysydh, tr563 & Yontoo

Viruses and worms
1

I’ve been struggling with Chrome being corrupted with Nova Ramblr and pwwysydh since 2nd March.

Whenever I open a new tab on Chrome, a tab opens with pwwysydh which eventually comes up with a bogus MS message that says my passwords, accounts etc are hacked. I open file manager and close Chrome.

If I search on the Chrome engine, it changes to Ramblr - if I click on the blue Ramblr logo - it changes to Russian text.

Malwarebytes on shows up Yontoo on its sweep. Avast doesn’t show up a thing.

What’s my next step please?

2

follow instructions >> https://forum.avast.com/index.php?topic=194892.0

3

many thanks Pondus. Will do tomorrow - got the day off.

4

Malwarebyte scan and FRST scan carried out. Logs attached too.

BTW, when I tried clicking on the reply button, a 2nd tab opened for “pwwysydh”. If I don’t close that tab fast enough it creates a drop down window stating that my passwords and accounts have been hacked and to contact a toll free number for MS support. I leave that alone and allow task manager to close Chrome.

Would love to solve this problem - with your help please.

5

All sorted now, TwinHeadedEagle from Malware Tips helped me - decided to uninstall completely Google Chrome and reinstall. All’s well now thank you.

Many thanks

6

You should only ask for help in one forum …