recurring threat detected pop up

Avast warning pop up appears every time i open or refresh my chrome browser window, i am currently downloading the farbar recovery scan tool and await instructions, thanks

I removed one of your double postings (hick-up in the forum software workings).
Attach the required logs as described here: https://forum.avast.com/index.php?topic=53253.0
Wait for a qualified removing expert to go over these logs and instruct you further!

cheers,

polonus

log files

just waiting on the aswMBR file now

mbr file

Log experts are in bed now, check back tomorrow

no probs pondus, thanks for your help, and for tidying my mess ! whoever that was

Let me know if this stops it

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = SearchScopes: HKCU - {AC1D60DA-8880-47C9-A4FF-0E8A16209987} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3072253 Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File CHR Plugin: (HBLite Firefox Plugin) - C:\Program Files\Mozilla Firefox\plugins\npclntax_HBLiteSA.dll No File CHR HKLM\...\Chrome\Extension: [fhghjaoehipoibcigbegmfnlfjaakoae] - C:\Program Files\VideoPlayerV3\VideoPlayerV3beta703\ch\VideoPlayerV3beta703.crx [2013-02-07] CHR HKLM\...\Chrome\Extension: [fnoachihphggdmiepccckdnfbhplkbmb] - C:\Program Files\WebexpEnhancedV1\WebexpEnhancedV1alpha7665\ch\WebexpEnhancedV1alpha7665.crx [2013-02-07] CHR StartMenuInternet: Google Chrome - C:\Users\Andrew\AppData\Local\Google\Chrome\Application\chrome.exe CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION CHR HKCU\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION C:\Users\Andrew\jagex_cl_runescape_LIVE.dat C:\Users\Andrew\random.dat Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-660089159-2138008493-3289048564-1000Core.job => C:\Users\Andrew\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-660089159-2138008493-3289048564-1000UA.job => C:\Users\Andrew\AppData\Local\Google\Update\GoogleUpdate.exe EmptyTemp: CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe
Run FRST and press Fix
On completion a log will be generated please post that

THEN

Download a fresh copy

Please download AdwCleaner by Xplode onto your desktop.

[*]Close all open programs and internet browsers.
[*]Double click on AdwCleaner.exe to run the tool.
[*]Click on Scan.
[*]After the scan is complete click on “Clean”
[*]Confirm each time with Ok.
[*]Your computer will be rebooted automatically. A text file will open after the restart.
[*]Please post the content of that logfile with your next answer.
[*]You can find the logfile at C:\AdwCleaner[S1].txt as well.

thank you essexboy

Save this as fixlist.txt, in the same location as FRST.exe

i’m sorry, but i am struggling to get this to work, how do i save it in the same location ? i am clueless with this stuff

when you downloaded the FRST tool, where did you save it … on your desktop?
if so, save the fixlist same place

if you saved and run FRST from the download folder, then the fix must be saved in the download folder

i’m not sure where i saved it, i had to search to find it. it’s not the desktop. how do i find it ?

Download a fresh copy and save it to your desktop, then place the fixlist.txt on the desktop as well

Please download Farbar Recovery Scan Tool and save it to your Desktop.

i have them both on my desktop now, frst cannot find it. what type of file should i save the notepad as ?

here is the fixlog. thanks

adware log attached

Are the alerts still happening ?

i’m afraid so essexboy

Ooops I missed one :-[

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

CHR Extension: (AS Magic Player) - C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfhnkgpdlogbknkhlgdjlejeljbhflim [2014-07-06] EmptyTemp: CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe
Run FRST and press Fix
On completion a log will be generated please post that

done, and thanks again.

I have refreshed the webpage i first noticed it on numerous times, and no warning. wow, thank you essexboy, it was doing my head in. I will monitor the situation over the next wee while and let you know of any developments, but it looks sorted.

Will it be ok to install all the programs i downloaded to complete this fix ? i don’t like having any unnecessary stuff on my pc.

Will it be ok to [b]install[/b] all the programs i downloaded to complete this fix ? i don't like having any unnecessary stuff on my pc.
you mean uninstall? ..... essexboy will remove the tools used when all is OK

yes, uninstal.

ok ta, even malwarebytes ?

edit- would it be possible to tell me what was causing it please ? in layman’s terms if you can, thanks.