Mini Spy

Loading...

Latest Threads

Loading...
 
  1. Before you start!
    All given instructions in this forum are customized for each help request, the tools used may cause damage if used on a computer with different infections. If you think you have similar issues, please post the appropriate logs in our Malware Removal Assistance forum and wait for help.

    Please be aware that removing Malware is a potentially hazardous undertaking. We will take care not to knowingly suggest courses of action that might damage your computer. However it is impossible for us to foresee all interactions that may happen between the software on your computer and those we'll use to clear you of infection, and we cannot guarantee the safety of your system. It is possible that we might encounter situations where the only recourse is to re-format and re-install your operating system, or to necessitate you taking your computer to a repair shop.
    We strongly advise you to backup any personal files and folders before you start.

Chrome often opens a popup ad window!

Discussion in 'Malware Removal Assistance' started by maaster, Oct 21, 2012.

Thread Status:
Not open for further replies.
  1. maaster

    maaster Regular Member

    Reputation:
    0
    Joined:
    Aug 5, 2012
    Messages:
    197
    Likes Received:
    0
    whn I tried to run OTL it asked many times that there is no disk in the hard drive !I gave cancel all the times!
     

    Attached Files:

  2. kuttus

    kuttus Active Member

    Reputation:
    0
    Joined:
    Oct 5, 2012
    Messages:
    2,767
    Likes Received:
    81
    Hi and welcome to the MalwareTips.com forums!

    I'm Kuttus and I am going to try to assist you with your problem. Please take note of the below:
    • I will start working on your malware issues, this may or may not, solve other issues you have with your machine.
    • The fixes are specific to your problem and should only be used for this issue on this machine!
    • The process is not instant. Please continue to review my answers until I tell you your machine is clear. Absence of symptoms does not mean that everything is clear.
    • If you don't know, stop and ask! Don't keep going on.
    • Please reply to this thread. Do not start a new topic.
    • Refrain from running self fixes as this will hinder the malware removal process.
    • It may prove beneficial if you print of the following instructions or save them to notepad as I post them.
    Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.


    Before we start:
    Please be aware that removing malware is a potentially hazardous undertaking. I will take care not to knowingly suggest courses of action that might damage your computer. However it is impossible for me to foresee all interactions that may happen between the software on your computer and those we'll use to clear you of infection, and I cannot guarantee the safety of your system. It is possible that we might encounter situations where the only recourse is to re-format and re-install your operating system, or to necessitate you taking your computer to a repair shop.

    Because of this, I advise you to backup any personal files and folders before you start.
    <hr />

    Before we start may I confirm that you are facing this particular issue in Google Chrome only?

    If so go to the following link in Google Chrome.

    Code:
    chrome://chrome/extensions/
    It will open one page which will show all the Extensions and Addons installed on our Google Chrome...

    Over there you can see a list of Addons like

    • Google Translate
      YouTube
      wxDfast
      Google Search
      AdBlock
      Window Close Protector
      Gmail Etc

    You need to remove the Addon for wxDfast
    In the Right side of that one you can see one Recycle Bin Icon. [​IMG]
    Click on that one to Remove the Addon.

    After that you need to go to the History Tab in Google Chrome. For that copy and Paste the following code in Google Chrome Address Bar. Or Click on the History Tab in Google Chrome

    Code:
    chrome://chrome/history/
    We need to remove all the browser data history from Google Chrome now. For that Click on the Button "Clear All Browsing Data" [​IMG]

    Now you will see a Window Like this.
    [​IMG]

    If there is no important data in your Google Chrome like Saved Passwords, Autofill Form Data etc remove all the browsing history from the Beginning time itself... For that click on "Clear Browsing Data."

    [​IMG]

    Now Close your Google Chrome Completely and open it again.

    Try to use the Google Chrome once again and check if everything is working fine....

    <hr />

    What's next?

    Let me know if you had any problems with the above instructions and also <>let me know how things are running now!</>
     
    Last edited by a moderator: Mar 13, 2014
  3. maaster

    maaster Regular Member

    Reputation:
    0
    Joined:
    Aug 5, 2012
    Messages:
    197
    Likes Received:
    0
    I have done what you have said....till now I am not getting that annoying pop up ad!but can you explain what is that wxDfast?Why am I asking this is while deleting it there were 2 of them with the name wxdfast...I remember one was named as wxdfast 1.0 but I don't remember the other thing..I deleted both of them..Then I tried to download from ziddu.com...IDM caught the download but it was not able to download it saying that it was sent as a webpage instead of a file but the same link was downloadable with firefox!the link was http://downloads.ziddu.com/downloadfile/10574023/7downloadtamilmovie-ChiyaaN-www.uyirvani.com.avi.006.html
    Thnx in advance for your reply...
     
  4. kuttus

    kuttus Active Member

    Reputation:
    0
    Joined:
    Oct 5, 2012
    Messages:
    2,767
    Likes Received:
    81
    Hi,

    wxDfast Seems to be a AdWare and it will send lots of Advertisement pop ups in our browser.... This one will get installed in our web browsers through any other software's or applications that we downloading from the Internet. As in your case this one will be get installed as Addons in our browser..

    Code:
    CHR - Extension: wxDfast = C:\Users\kishore\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmebbaagkcgafihjgfiogjgaopnichme\1.0_0\
    CHR - Extension: wxDfast = C:\Users\kishore\AppData\Local\Google\Chrome\User Data\Default\Extensions\enbkmjkbdgihifpdhichdpdpacjkpoag\1.0_0\
    
    The above code are the locations of the infected file related with this Addons. We can delete them in 2 way..

    1. We can remove them manually
    2. We can remove them using OTL.

    We can simply delete this infected files, fir that Open C Drive and got to the location
    Code:
    C:\Users\kishore\AppData\Local\Google\Chrome\User Data\Default\Extensions
    
    Over there you can see some folders. Delete the following folders, if it is there.

    Code:
    cmebbaagkcgafihjgfiogjgaopnichme
    enbkmjkbdgihifpdhichdpdpacjkpoag
    
    If you are not able to see it leave them...

    There is one another good software with the same name. wxDownload Fast (also known as wxDFast)...

    <hr />

    In the link that you have provided we can't download the Document using IDM.
    http://www.ziddu.com/download/10574023/7downloadtamilmovie-ChiyaaN-www.uyirvani.com.avi.006.html
    Because in this page there is no direct download link for the document you are looking for is available.

    If we click on the Download butting then only the download will begin.

    [​IMG]

    IDM will not do that automatically. That is why you are not able to download the file using IDM....

    <hr />

    What's next?

    Let me know if you had any problems and also <>let me know how things are running now!</>
     
    Last edited by a moderator: Mar 13, 2014
  5. maaster

    maaster Regular Member

    Reputation:
    0
    Joined:
    Aug 5, 2012
    Messages:
    197
    Likes Received:
    0
    I don't have any ad pop ups now...thank you for your help...Is it necessary to install that new WxDfast?I have IDM.....
     
  6. kuttus

    kuttus Active Member

    Reputation:
    0
    Joined:
    Oct 5, 2012
    Messages:
    2,767
    Likes Received:
    81
    Great to hear that your issues is Resolved.

    There is no need to use another Download Manager on the computer. In Google Chrome and Mozilla Firefox there is a in build Download Manager as well....


    IDM that you are using on the computer is fine now... :)

    <hr />

    Is there anything else that we can assist you with today?

    <hr />
     
  7. maaster

    maaster Regular Member

    Reputation:
    0
    Joined:
    Aug 5, 2012
    Messages:
    197
    Likes Received:
    0
    Thank you for your assistance..That was very helpful..
     
  8. kuttus

    kuttus Active Member

    Reputation:
    0
    Joined:
    Oct 5, 2012
    Messages:
    2,767
    Likes Received:
    81
    This thread is now closed.​

    Reason:&nbsp;<span style="color: #ff0000;">Resolved</span>

    <span style="color: #ff0000;"><>The procedures contained in this thread are for this user and this user only.&nbsp;&nbsp;Attempting to use the instructions in this thread on your system could result in damaging the Operating System beyond repair.&nbsp;&nbsp;</></span>

    <span style="color: #ff0000;"><>DO NOT use any of the tools mentioned in this thread without the supervision of a Malware Removal Specialist.</></span>

    All members requesting Malware Removal Assistance are required to follow all procedures in the thread
     
    Last edited by a moderator: Mar 13, 2014

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.
Similar Threads: Chrome often
Forum Title Date
Malware Removal Assistance uyitudbeg.exe*32 Fake Google Chrome Process EmieUserList EmieSiteList 35 minutes ago
Malware Removal Assistance Fake chrome + dllhost.exe *32 multiple unknown infections 43 minutes ago
Malware Removal Assistance Fake Google Chrome Process koojvzqjimm.exe Today at 12:12 PM
Malware Removal Assistance Fake Google Chrome processess Today at 11:42 AM
Malware Removal Assistance Multiple chrome processes running disguised in Apple folder Today at 11:13 AM

Thread Status:
Not open for further replies.
MalwareTips.com is an independent website.All trademarks mentioned on this page are the property of their respective owners.