SelectionLinks -- Why Not Cleared By Avast!?

Avast Free Antivirus / Premium Security
1

Every time I open my Chrome browser it reports the following:

“Google has flagged ‘SelectionLinks’ as malicious and installation has been prevented”

Why hasn’t Avast! cleared this? I’m running (and paying for) “Avast! Internet Security” (with every know ‘shield’ running!), but in light of this recurring warning from Google Chrome, I’m feeling less secure.

Sorry, I can’t give you anymore info about my Avast! installation, because, due to your non-standard GUI (i.e. sans-CUI), I can’t find that info (which would normally be in an “About” dialog–which appears to be missing).

2

Open Avast and select security > tools > browser cleanup
Then run that on the Chrome browser

3

Awesome, Thank You!!

BTW: I see, now, why Avast! doesn’t do this automatically. Because it’s hard to tell the difference between a plugin that might have a poor rating (or no rating), but that one actually wants, and one that is judged a nuisance (or even a menace). It’s somewhat subjective.

But, in the case of commonly scorned plugins/extensions, such as SelectionLinks, would it not be a cool feature if Avast kept a log of these plugins/extensions and displayed one of it’s popup messages with a suggestion to use Browser Cleanup, whenever any of these plugins/extensions is detected (with a “don’t bother me anymore”, checkbox)?

4

Those type of toolbars etc… Come under the heading of potentially unwanted programmes, PUP’s. I.e. the type of programme that can be used for good or bad or may just be a nuisance. This setting is turned off by default in Avast but it can be turned on

5

OK, I used the Browser CleanUp tool to supposedly remove the SectionLinks extension (which WAS listed).

But, I’m still getting the following message whenever I open Chrome:

“Google has flagged ‘SelectionLinks’ as malicious and installation has been prevented”

So, apparently Avast! has failed to find and remove all of it.

Any ideas?

6

Chrome is a bit of a pain to remove things from, you will need to manually remove the extension. If that does not work I will try a manual removal with OTL

7

I took a look in Tools/Extensions and SelectionLinks is not listed, so I hope that means that “…installation has been prevented” means what it says, BUT, that leaves the repeated “attack” whenever I open Chrome. Any idea where that is coming from?

BTW: I also don’t see the telltale links in the text of websites (as viewed in Chrome).

8

Run this and attach the logs and I will remove it manually

Download OTL to your Desktop
Secondary link

[*]Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.

https://dl.dropbox.com/u/73555776/OTL_Main_Tutorial.gif

[*]Select All Users
[*]Under the Custom Scan box paste this in

netsvcs
BASESERVICES
%SYSTEMDRIVE%*.exe
/md5start
services.*
explorer.exe
winlogon.exe
Userinit.exe
svchost.exe
/md5stop
dir “%systemdrive%*” /S /A:L /C
CREATERESTOREPOINT

[*]Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
[*]When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
[*]Post both logs

9

Ok, they’re attached

10

OK it looks like it is in a chrome temporary file, as it does not show anywhere else… So lets clear all temps

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL

[*]Under the Custom Scans/Fixes box at the bottom, paste in the following

https://dl.dropbox.com/u/73555776/OTL_Fix.GIF


:Commands
[resethosts]
[emptytemp]
[CREATERESTOREPOINT]
[Reboot]

[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done

11

It might also help to install Ccleaner and use it on a regular basis to get rid of the temp files.