Solved chrome adware extension keeps repopulating

jacky8399

New Member
Thread author
May 26, 2015
3
I don't know when did this started to happen, probably last month or so?
There WAS some unknown programs in the control panel and YES, I DID TRY TO UNINSTALL IT.
It seems to get rid of the adware extension for a short period, but after 14 days or so the adware started to repopulate.
And you may ask me, "did you try to uninstall it again?" The answer is NO I CAN'T. It was because it didn't show up neither on the control panel, nor other program-uninstall applications.
And you may also ask me, "did you try to remove the extension in chrome?" Yes. I've been always trying to uninstall the extension every time it repopulates, but after some time, it will repopulate as "DiscountBomb" again.
But it is not the case this time. This time, the extension doesn't show up on "chrome://extensions" anymore but it still pops up ads. Luckily I had set a flag on chrome which will show all the extensions on the navigation bar and it shows up there this time. I think this is getting weird as it doesn't show up on the extensions page and also it changed its name this time to compareItApplication. And from the extension "Avira Browser Safety" there are now at least 1 tracker which is "AdNexus". I even tried to reset chrome and it didn't work
By the way imgur album showing all the things from the extension :"http://imgur.com/a/5pJ6r"
And after reading the log file from adwcleaner you should probably ask "y u no remove 'tencent' folder" I tried removing it last time and it removed a software that I often use, I reinstalled the software and it showed up the "tencent" folder again. I don't think it is the software that causes the adware because look, it is a software written by an Chinese company and a lot of people is using that software. Also, do you think that a Chinese company will show ads written in English? Of course not, because the Chinese wouldn't understand!
AdwCleaner log will probably be included as an attachment( if I didn't forget)
Sorry for the long post because I want to describe my situation as detailed as possible and sorry for random grammar mistakes because I am not a native English speaker.
Thanks for help!
 

Attachments

  • AdwCleaner[S2].txt
    1.3 KB · Views: 22

argus

Former MalwareTips Staff
Verified
Apr 24, 2014
3,395
Helllo,

My name is Argus and and I will be helping you with your computer problems.

Before we begin, please note the following:
  • I will be working on your Malware issues, this may or may not, solve other issues you have with your machine.
  • The logs can take some time to research, so please be patient with me.
  • Stay with the topic until I tell you that your system is clean. Missing symptoms does not mean that everything is okay.
  • Instructions that I give are for your system only!
  • Please do not run any tools until requested ! The reason for this is so I know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.
  • Please perform all steps in the order received. If you can't understand something don't hesitate to ask.
  • Again I would like to remind you to make no further changes to your computer unless I direct you to do so. I will not be able to help you if you do not follow my instructions.




warning.gif
Rules and policies

We won't support any piracy.
That being told, if any evidence of illegal OS, software, cracks/keygens or any other will be revealed, any further assistance will be suspended. If you are aware that there is this kind of stuff on your machine, remove it before proceeding!
The same applies to any use of P2P software: uTorrent, BitTorrent, Vuze, Kazaa, Ares... We don't provide any help for P2P, except for their removal. All P2P software has to be uninstalled or at least fully disabled before proceeding!

Failure to follow these guidelines will result with closing your topic and withdrawning any assistance.






FRST.gif
Scan with Farbar Recovery Scan Tool

Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them.
Only one of them will run on your system, that will be the right version.


  • Double-click to run it. When the tool opens click Yes to disclaimer.
  • Press Scan button.
  • It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
  • The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.
 

jacky8399

New Member
Thread author
May 26, 2015
3
That's all the files I got from FRST.
 

Attachments

  • Addition.txt
    74.5 KB · Views: 30
  • FRST.txt
    98.4 KB · Views: 36

argus

Former MalwareTips Staff
Verified
Apr 24, 2014
3,395
Chrome:
=======
CHR dev: Chrome dev build detected! <======= ATTENTION



Chrome installation is altered by malware. Reinstall is needed.


Export your bookmarks
https://support.google.com/chrome/answer/96816?hl=en


Close all Chrome windows and tabs.
Go to the Start menu > Control Panel.
Click Programs and Features.
Double-click Google Chrome.
Click Uninstall from the confirmation dialog. Delete your user profile information, like your browser preferences, bookmarks, and history, select the "Also delete your browsing data" checkbox.


Click Start, copy in search %LOCALAPPDATA%\ and remove folder Google

Download and install Chrome
https://www.google.com/intl/en/chrome/browser/desktop/
 

jacky8399

New Member
Thread author
May 26, 2015
3
Yes, now I reinstalled Google Chrome, but actually I downloaded the dev version by myself, anyways thank you! :)
 

argus

Former MalwareTips Staff
Verified
Apr 24, 2014
3,395
The following will implement some post-cleanup procedures:


Download DelFix by Xplode and save it to your desktop.
  • Run the tool by right click on the
    51a5ce45263de-delfix.png
    icon and Run as administrator option.
  • Make sure that these ones are checked:
    • Remove disinfection tools
    • Purge system restore
    • Reset system settings
  • Push Run and wait until the tool completes his work.
  • All tools we used should be gone. Tool will create an report for you (C:\DelFix.txt)
The tool will also record healthy state of registry and make a backup using ERUNT program in %windir%\ERUNT\DelFix
Tool deletes old system restore points and create a fresh system restore point after cleaning.
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top