Pop ups and malicious threats

Every time I use google chrome another page opens up by itself with this address rvzr-a.akamaihd.net telling me to install lightspark player pro. Also many announcements and pop ups in my regular pages. I downloaded the AdwCleaner and the OTL. I’ll post the logs. Please let me know if my computer is OK or if I need to do something else. Thank you

Here are the other logs…

We dont need extra.txt, The important log is OTL.txt …
Also attach Malwarebytes log http://forum.avast.com/index.php?topic=53253.0

malware log

Its not letting me post the otl log

Hi,

Can you attach the OTL log, not to post (paste)?

If not, go to http://pastebin.com, paste the contents of log, press Subnit and paste here the URL of that log.

Sorry that is what I meant. I try to attach it and it doesnt let me. It says that the page is not working and is not letting me use other pages. Plus the mbam keeps showing me a warning about malicious threats one after the other.

try again…if no good it is possible to send it by mail

see my messages button at top of this page when logged in (you need 20 posts before you can reply to PMs)

your OTL is to big for uploading here, i will send it to magna86 :wink:

Thank you

Thanks Pondus for forwarding. :wink:

@ soskie
Run Google Chrome. In URL type/paste this and hit enter.

chrome://extensions/

…or click meny button in right > up button …

http://www.csus.edu/sacct/student/images/Chrome%20button.PNG

… then click Settings > Extensions

Remove/delete this extension:

  • weDownload Manager Pro

Then reset the Chrome settings back yo defaults:
https://support.google.com/chrome/answer/3296214?hl=en

I think this should fix the problem. Then, as additional scanner for malware, run MBAMv2 with PUP and ARK settings:

Please download Malwarebytes Anti-Malware ver. 2.0 and install the application.

Double-click on mbam-setup.exe and follow the prompts to install the program. Upon installation, click Finish
Note: A 14 day trial of the Premium features is pre-selected. You may deselect this if you wish…
On the first launch, you’ll get an “Update” notification. Click the ‘Update Now >>’ link or button to complete update.

• Configure the scanner. On the Settings tab, Detection and Protection adjust the following options:

  • subtab Detection Options, tick the box ‘Scan for rootkits’.
  • subtab Non-Malware Protection, for PUP detections, from ‘Warn user abaut detecion’ select ‘Threat detections as malware’.

• Preform the Scan. Click on the Scan tab, then click on Scan Now >> for Threat Scan.
If an update is available, click the ‘Update Now’ button, then continue to Scan.
Note: only with some infections, you may see this message box ‘Could not load DDA driver’
In this case, click ‘Yes’ to this message, to allow the driver to load after a restart.
Allow the computer to restart. Continue with the rest of these instructions.

When the scan is complete, click Apply Actions. Wait for the prompt to restart the computer to appear, then click on Yes.

• Post the logs. Click on the History tab > Application Logs. Double click on the Scan Log which shows the date and time of just performed scan.

  • Click Export button at the bottom, and then select the ‘Text file (*.txt)
  • In the Save File dialog box which appears, click on Desktop.
  • In the File name: box type “mbam” (without quotes) for your scan log name and click Save.
  • A message box “Your file has been successfully exported” should appear, click Ok and close the windows.

Please attach the exported/saved log named as mbam.txt to your next reply.

Here is the mbam

Hi soskie,

Has alerts been fall silent?

There are no more alerts. :slight_smile: In the mbam its says that the threat is quarentine. Should I delete it???

Hi soskie,

In the mbam its says that the threat is quarentine. Should I delete it???
Delete what? Do you mean empty mbam's quarantine? If you will ... mbam has just detect and delete one registry key.

Run OTL and hit CleanUp! button to remove the OT’s tool.

Yes, that’s what I meant delete the threat that is quarantine. Should I delete it???

Ok…OT’s tool is removed. Thank you soooo much for all your help!!! ;D