Hello,
I am having trouble removing the URL:MAL issues on a friend’s computer. Can somebody assist me?
I have attached the requested logs.
Thanks!
Hi there, the first thing you must so is uninstall Chrome, you may reinstall once we have finished
CAUTION : This fix is only valid for this specific machine, using it on another may break your computer
Open notepad and copy/paste the text in the quotebox below into it:
CreateRestorePoint: GroupPolicy: Group Policy on Chrome detected <======= ATTENTION CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION SearchScopes: HKLM -> {96D70496-B661-46A2-9B1D-1B6A73381C14} URL = http://speedial.com/results.php?f=4&q={searchTerms}&a=spd_ir_14_23_ch&cd=2XzuyEtN2Y1L1Qzu0F0AtB0F0Azz0CyByDtD0D0ByDtA0EtDtN0D0Tzu0SzzzzyBtN1L2XzutBtFtBtDtFtCzytFtDtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyD0BtCtD0A0BtAyDtG0D0Azy0EtGyCtA0C0BtGyD0Ezy0BtGyBzz0FtB0FyEyD0ByDtAyEyE2QtN1M1F1B2Z1V1N2Y1L1Qzu2StD0AyEzy0FyD0A0CtG0DyBtD0DtGzzzy0CtBtGtDtCyByEtGyC0F0CzzzzyB0A0AyDyEyC0D2Q&cr=1075470239&ir= BHO: No Name -> {0534ce6d-c2b3-4c4d-8c47-420782667559} -> No File BHO: No Name -> {fe5fc2c6-0441-45d6-8812-087d74204ec9} -> No File CHR HomePage: Default -> hxxp://speedial.com/?f=1&a=spd_ir_14_23_ch&cd=2XzuyEtN2Y1L1Qzu0F0AtB0F0Azz0CyByDtD0D0ByDtA0EtDtN0D0Tzu0SzzzzyBtN1L2XzutBtFtBtDtFtCzytFtDtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyD0BtCtD0A0BtAyDtG0D0Azy0EtGyCtA0C0BtGyD0Ezy0BtGyBzz0FtB0FyEyD0ByDtAyEyE2QtN1M1F1B2Z1V1N2Y1L1Qzu2StD0AyEzy0FyD0A0CtG0DyBtD0DtGzzzy0CtBtGtDtCyByEtGyC0F0CzzzzyB0A0AyDyEyC0D2Q&cr=1075470239&ir= CHR StartupUrls: Default -> "hxxp://www.google.com/" CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter} CHR Profile: C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Drive) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-12-18] CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-05-22] CHR Extension: (YouTube) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-12-18] CHR Extension: (Google Search) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-12-18] CHR Extension: (Google Wallet) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-18] CHR Extension: (Gmail) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-12-18] CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-02-19] 2015-02-18 20:13 - 2015-02-19 11:32 - 00000000 ____D () C:\Program Files (x86)\chueap4all 2015-02-18 16:02 - 2015-02-18 16:02 - 00000000 ____D () C:\ProgramData\cheap-o 2014-08-07 16:27 - 2014-08-07 16:27 - 0000000 _____ () C:\Users\Thomas\AppData\Local\{6210868D-2428-4655-9A4D-FB1402C163A5} 2014-08-01 14:49 - 2014-08-01 14:49 - 0000000 _____ () C:\Users\Thomas\AppData\Local\{B63E6BC1-6B9F-4A01-8CCA-6BFD9F177D28} 2014-08-04 11:50 - 2014-08-04 11:50 - 0000000 _____ () C:\Users\Thomas\AppData\Local\{BFB0701E-BCA9-4E84-827C-0E41BDDE30F2} Task: {6AF76062-AC83-493B-9FEA-D63ECDB861E5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-18] (Google Inc.) Task: {6D2E3CB9-3331-4B58-9FB9-FA3E66084CBC} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-18] (Google Inc.) Task: {9F1C8F2A-0679-411E-B7F7-0F45D7373F02} - \Advanced System Protector_startup No Task File <==== ATTENTION Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe C:\Users\Thomas\AppData\Local\Google\Chrome EmptyTemp: CMD: bitsadmin /reset /allusers
Save this as fixlist.txt, in the same location as FRST.exe
https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG
Run FRST and press Fix
On completion a log will be generated please post that
THEN
Please download AdwCleaner by Xplode onto your desktop.
[*]Close all open programs and internet browsers.
[*]Double click on AdwCleaner.exe to run the tool.
[*]Click on Scan.
[*]After the scan is complete click on “Clean”
[*]Confirm each time with Ok.
[*]Your computer will be rebooted automatically. A text file will open after the restart.
[*]Please post the content of that logfile with your next answer.
[*]You can find the logfile at C:\AdwCleaner[S1].txt as well.
I uninstalled Google Chrome and I believe that fixlist solved my problems! Thanks! I attached the logs in case I’m missing something.
You can now re-install Chrome, once done let me know of any remaining problems 