URL:Mal - Every few seconds while using chrome

system · 2015-05-07T06:22:47.000Z

As in description, logs attached.

I’ll be grateful if somebody helps

mikaelrask · 2015-05-07T10:29:37.000Z

hey can you provide a picthure of what avast say. It will contian some more information for the expert how will help you out.

essexboy · 2015-05-07T13:46:56.000Z

Could you let me know if this stops it

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

CreateRestorePoint: CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION S2 a8501310; "C:\Windows\system32\rundll32.exe" "c:\Program Files (x86)\BorderlineRunner\BorderlineRunner.dll",serv c:\Program Files (x86)\BorderlineRunner CMD: netsh advfirewall reset CMD: netsh advfirewall set allprofiles state ON CMD: ipconfig /flushdns CMD: netsh winsock reset catalog CMD: netsh int ip reset c:\resetlog.txt CMD: ipconfig /release CMD: ipconfig /renew CMD: netsh int ipv4 reset CMD: netsh int ipv6 reset Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f RemoveProxy: EmptyTemp: CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe

https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG

Run FRST and press Fix
On completion a log will be generated please post that

THEN

Please download AdwCleaner by Xplode onto your desktop.

[*]Close all open programs and internet browsers.
[*]Double click on AdwCleaner.exe to run the tool.
[*]Click on Scan.
[*]After the scan is complete click on “Clean”
[*]Confirm each time with Ok.
[*]Your computer will be rebooted automatically. A text file will open after the restart.
[*]Please post the content of that logfile with your next answer.
[*]You can find the logfile at C:\AdwCleaner[S0].txt as well.

system · 2015-05-08T05:50:39.000Z

I have attached print screen of previous avast alarms and log from AdwClenaer.

After using fixlist, alarms still occured, but then after scan and fix by AdwCleaner it seems that they have stopped.

Will see if they come back.

Thx for help!

Pondus · 2015-05-08T05:52:23.000Z

you should still run essexboys fix

system · 2015-05-08T06:47:51.000Z

I did

“After using fixlist…”

essexboy · 2015-05-08T12:30:59.000Z

How is the computer now ?

system · 2015-05-11T10:55:30.000Z

After the whole process, all every-day programs started to ask for internet access again. And thats fine, I suppose that is what was meant to happen.

So I allowed all I need, and today avast alerts have returned. And I can’t say which program caused it, and I am not even sure it’s connected.

I have just reinstalled chrome, and now it’s working fine, no alerts so far.

essexboy · 2015-05-11T14:23:42.000Z

That would suggest that chrome has been corrupted. Did you do the following when you reinstalled Chrome

Re-install Chrome

If you have bookmarks, let’s save them by exporting them - Export Bookmarks
Then I need you to go Google Sync and sign into your account
Scroll down until you see the “Stop and Clear” button and click on the button. At the prompt click on “Ok”
Now we need to uninstall chrome.
Note: When asked about user data or settings you must remove this also so please check the box.
Restart the computer and reinstall chrome, You can download The latest version from here - Google Chrome
Import your bookmarks back into Chrome
Sign back in to your Chrome browser so that your bookmarks sync with your online account.

system · 2015-05-13T05:23:57.000Z

I have reinstalled chrome again including your steps. It was working fine, but you can never be sure.

Meanwhile I have also noticed that something is occupying 99% GPU all the time. It was false mdm.exe hidden in appdata. None of antimalware programs has found it.

I deleted it manualy and also removed it from scheduled tasks.

For now everything is ok.

essexboy · 2015-05-13T09:30:28.000Z

Was it this one C:\Users\Mateusz\AppData\Roaming\Kalypso Media http://www.kalypsomedia.com/en/index.shtml

system · 2015-05-13T09:52:53.000Z

Yes it was. In cache folder.

essexboy · 2015-05-13T10:12:22.000Z

Hmm that is a legitimate programme so I will need to add to my list of folders to check

Announcements