Can't get rid of Go Save advertisements on Google Chrome

[alfredo986]

I can't seem to remove the Go Save advertisements from Google Chrome. It shows advertisements and pop out "surveys" everytime I try to click on something.

I would appreciate any help to get rid of Go Save.

I have attached the FRST log, Addition log and also the JRT log I ran from a few days ago.

Thanks!

 

[alfredo986]

I have a 64-bit Operating system. And i found the log in the ADW folder, hope its the right one.

I've attached the logs but when I try to run the SecurityCheck, it says Operating system not supported. I've attached it anyway.

Thanks!

 

[alfredo986]

I think the adware has changed or a new one has replaced Go Save. It now says "Ad by Browser Shop". I thought you should know the updates.

Thanks again for your help!

 

[argus]

Hello,

Chrome installation is altered by malware. Reinstall is needed.

Fix with Farbar Recovery Scan Tool

This fix was created for this user for use on that particular machine.

Running it on another one may cause damage and render the system unstable.

​

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• Press the Fix button just once and wait.
• If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
• When finished FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.

 

[alfredo986]

Fixlog is attached.

Do i reinstall Chrome now or wait til after everything is clean?

Thanks!

 

[argus]

Reinstall now.

Scan with ZOEK

Please download ZOEK by Smeenk and save it to your desktop (preferred version is the *.exe one)
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
• Wait patiently until the main console will appear, it may take a minute or two.
• In the main box please paste in the following script:
  

  createsrpoint;
  Quickscan;
  autoclean;
  emptyalltemp;

• Make sure that Scan All Users option is checked.
• Push Run Script and wait patiently. The scan may take a couple of minutes.
• When the scan completes, a zoek-results logfile should open in notepad.
• If a reboot is needed, it will be opened after it. You may also find it at your main drive (usually C:\ drive)

Post its content into your next reply.

 

[alfredo986]

Attached zoek results

 

[argus]

Re-run zoek and run this script:

lmjegmlicamnimmfhcmpkclmigmmcbeh;chr
cfhdojbkjhnklbpkdaibdccddilifddb;chr
autoclean;
emptyalltemp;
ipconfig /flushdns;b

Please download Junkware Removal Tool to your desktop.

• Shut down your protection software now to avoid potential conflicts.
• Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
• The tool will open and start scanning your system.
• Please be patient as this can take a while to complete depending on your system's specifications.
• On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
• Post the contents of JRT.txt into your next message.

 

[alfredo986]

logs attached

 

[argus]

Chrome installation is altered by malware. Reinstall is needed.


How is the situation now?

 

[alfredo986]

everything seems to be working great now actually.

 

[argus]

Very good,


Download DelFix by Xplode and save it to your desktop.

• Run the tool by right click on the
  
  icon and Run as administrator option.
• Make sure that these ones are checked:
  • Remove disinfection tools
  • Purge system restore
  • Reset system settings
• Push Run and wait until the tool completes his work.
• All tools we used should be gone. Tool will create an report for you (C:\DelFix.txt)

The tool will also record healthy state of registry and make a backup using ERUNT program in %windir%\ERUNT\DelFix
Tool deletes old system restore points and create a fresh system restore point after cleaning.

 

[alfredo986]

I reinstalled Chrome when you told me to 2 days ago but I just reread your previous message, do I need to do that again?

 

[alfredo986]

Here is the final log