Solved Chrome.INJ infection compounded by user actions

Glennix

New Member
Thread author
Jan 1, 2015
7
First let me thank you, and people like you, who give their time to help people like me. I'm grateful, and maybe I can return the favor to someone else some time. Thank you so much! I don't understand why other people spread malicious software and cause such heart ache. It’s really a modern tragedy. So for my own computer issue, I've written as extensive a description as I could. Forgive me if I gave to much. Here are the particulars. I have a Dell Laptop, XPS L702X with MS Windows 7 Premium (x64). According to a scan with Malwarebytes Anti-Malware, my laptop is infected with Trojan.Chrome.INJ. Before I ran the scan, I believe I compounded the issue by trying to find hidden files under that name and delete them. All I ended up doing was hiding my Username folder, and everything under them. I can see them now, but their translucent. I brought my computer to a local computer repair shop and they ran a hardware scan which they said was good. But they said they couldn't read my hard drive, it was too badly corrupted. But, I speculate that this is because the files quarantined by Malwarebytes scan contained operating system files that have compromised the system. So if anyone could help, I'd be grateful. Thank you.
 

Glennix

New Member
Thread author
Jan 1, 2015
7
I have very limited access to the internet through my infected laptop and so far have not been able to download the farbar program as instructed. I accessing this site from my work computer......standby. I might be having some success with the infected lap top access to the internet.
 

Glennix

New Member
Thread author
Jan 1, 2015
7
Ok, here are my two Farbar txt files. I downloaded the farbar program to a thumb drive on a good computer and transferred it to the infected laptop. It worked. The instructions at this site indicated I should run both versions of farbar but I never saw that option. Also tried to attach some excel sheets that were malwarebyte's files but I see they were not recognizes, so was unable to upload them. I made a donation too. I really appreciate you guys being here.
 

Attachments

  • Addition.txt
    34.4 KB · Views: 38
  • FRST.txt
    57.7 KB · Views: 90

TwinHeadedEagle

Level 41
Verified
Mar 8, 2013
22,627
FRST.gif
Fix with Farbar Recovery Scan Tool

icon_exclaim.gif
This fix was created for this user for use on that particular machine.
icon_exclaim.gif

icon_exclaim.gif
Running it on another one may cause damage and render the system unstable.
icon_exclaim.gif

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

  • Right-click on
    FRST.gif
    icon and select
    RunAsAdmin.jpg
    Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • Press the Fix button just once and wait.
  • If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
  • When finished FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.
 

Attachments

  • fixlist.txt
    3.8 KB · Views: 203

Glennix

New Member
Thread author
Jan 1, 2015
7
Thank you. I wont be able to work this for a couple of days, so might not get back to you till Sunday Evening or even Monday. By the way, just wanted to point out one more time, I had run a Malwarebytes scan and quarantine before I found you guys. Just wanted to make sure this didn't impact any of the forthcomming fixes.
 

Glennix

New Member
Thread author
Jan 1, 2015
7
Thank you! Performed as directed. See attached Fixlog.txt file. Everything appears to run smoothly. Is that all? Do you know what the purpose of that Trojan was for?
 

Attachments

  • Fixlog.txt
    9.3 KB · Views: 87

TwinHeadedEagle

Level 41
Verified
Mar 8, 2013
22,627
Its purpose was to show ads on your PC :)


Glad I could help. We will delete all used tools and I'll give you some tips to harden your security and learn how to protect yourself :)


Recommended reading:
icon_exclaim.gif
MUST READ - security tips:

icon_exclaim.gif
MUST READ - general maintenance:


The Importance of Software Updating:

In order to stay protected it is
very important that you regularly update all of your software. Cybercriminals depend on the apathy of users around software updates to keep their malicious endeavor running.

Operating systems, such as Windows, and applications, such as Adobe Reader or JAVA, are used by tens of millions of computers and devices around the world, making them a huge target for cybercriminals. Downloading updates and installing them can sometimes be tedious, but the advantages you get from the updates are certainly worth it.




Recommended additional software:
icon_arrow.gif
TFC - to clean unneeded temporary files.
icon_arrow.gif
Malwarebytes' Anti-Malware - to scan your system from time to time in search for malware.
icon_arrow.gif
Malwarebytes' Anti-Exploit - to prevent plenty of mostly exploited vulnerabilities.
icon_arrow.gif
McShield - to prevent infections spread by removable media.
icon_arrow.gif
Unchecky - to prevent from installing additional foistware, implemented in legitimate installations.
icon_arrow.gif
Adblock - to surf the web without annoying ads!



Post-cleanup procedures:


Download DelFix by Xplode and save it to your desktop.
  • Run the tool by right click on the
    51a5ce45263de-delfix.png
    icon and Run as administrator option.
  • Make sure that these ones are checked:
    • Remove disinfection tools
    • Purge system restore
    • Reset system settings
  • Push Run and wait until the tool completes his work.
  • All tools we used should be gone. Tool will create an report for you (C:\DelFix.txt)
The tool will also record healthy state of registry and make a backup using ERUNT program in %windir%\ERUNT\DelFix
Tool deletes old system restore points and create a fresh system restore point after cleaning.



My help is free for everybody.
If you're happy with the help provided and/or wish to buy me a beer for the assistance you received, then you can consider a donation:
Thank you!​




Stay safe,
TwinHeadedEagle :)
 

Glennix

New Member
Thread author
Jan 1, 2015
7
Thank you again! You've saved me a lot of anguish, lost time and money. I made an additional donation. Very much appreciate the abundance of references to read and downloads to use. Thanks for being available to help. Can't thank you enough!
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top