Solved "CloudScout" ads and popups in Chrome and Steam.

[Rithal]

It seems that Steam is infected as well as Chrome. I have attempted an uninstall of both several times. I have also reset Chrome, I have removed all extensions, I have restarted my computer, made numerous scans, followed about a half dozen suspicious looking "removal guides" and have gotten nowhere. I would really appreciate some help with this so I can get back to surfing the web without running into another "Do you like Asian women?" ad. Thankyou!

 

[argus]

Helllo,

My name is Argus and and I will be helping you with your computer problems.

Before we begin, please note the following:

• I will working be on your Malware issues, this may or may not, solve other issues you have with your machine.
• The logs can take some time to research, so please be patient with me.
• Stay with the topic until I tell you that your system is clean. Missing symptoms does not mean that everything is okay.
• Instructions that I give are for your system only!
• Please do not run any tools until requested ! The reason for this is so I know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.
• Please perform all steps in the order received. If you can't understand something don't hesitate to ask.
• Again I would like to remind you to make no further changes to your computer unless I direct you to do so. I will not help you if you do not follow my instructions.

Rules and policies

We won't support any piracy.
That being told, if any evidence of illegal OS, software, cracks/keygens or any other will be revealed, any further assistance will be suspended. If you are aware that there is this kind of stuff on your machine, remove it before proceeding!
The same applies to any use of P2P software: uTorrent, BitTorrent, Vuze, Kazaa, Ares... We don't provide any help for P2P, except for their removal. All P2P software has to be uninstalled or at least fully disabled before proceeding!

Failure to follow these guidelines will result with closing your topic and withdrawning any assistance.

Scan with ZOEK

Please download ZOEK by Smeenk and save it to your desktop (preferred version is the *.exe one)
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
• Wait patiently until the main console will appear, it may take a minute or two.
• In the main box please paste in the following script:
  

  createsrpoint;
  autoclean;
  emptyalltemp;
  ipconfig /flushdns;b

• Make sure that Scan All Users option is checked.
• Push Run Script and wait patiently. The scan may take a couple of minutes.
• When the scan completes, a zoek-results logfile should open in notepad.
• If a reboot is needed, it will be opened after it. You may also find it at your main drive (usually C:\ drive)

Post its content into your next reply.

 

[Rithal]

I ran the scan. I actually found something in reference to CloudScout in there. Here are the results. Thanks so much for your help so far!

 

[argus]

How is the situation now?

 

[Rithal]

The ads in Chrome have stopped! Thankyou for that! However, I am still experiencing ads in Steam. It has actually gotten worse and there are now popups telling me that "My computer browser I'm using is infected with a malware virus and I should call the number on screen to get support." So yeah, steam is still an issue. Thankyou for helping me out now and in the future.

 

[Rithal]

It actually seems that not all of the cloud scout ads have stopped in Chrome. The super annoying sidebar ads are gone, however there are still ads in random texts if i hover over it.

 

[argus]

Uninstall Chrome

Close all Chrome windows and tabs.
Go to the Start menu > Control Panel.
Click Programs and Features.
Double-click Google Chrome.
Click Uninstall from the confirmation dialog. Delete your user profile information, like your browser preferences, bookmarks, and history, select the "Also delete your browsing data" checkbox.


Go to the Start menu > search, copy %LOCALAPPDATA%\Google
Delete the Chrome folder in the directory that opens.


Install new chrome
https://www.google.com/intl/en/chrome/browser/desktop/

 

[Rithal]

The re-install has fixed chrome for now completely. Thankyou. I'm still experiencing sidebar ads and such in the Steam games program. I just re-installed Steam, yet it didn't help.

 

[argus]

Re-run zoek and run this script:

createsrpoint;
filesrcm;
startupall;
skipfix-iedefaults;
firefoxlook;
chromelook;

 

[Rithal]

Done. Chrome still working fine. Steam still has ads.

 

[argus]

Scan with Farbar Recovery Scan Tool

Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• Make sure that Addition option is checked.
• Press Scan button and wait.
• The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.

Please include their content into your next reply.

 

[Rithal]

Done and done!

 

[argus]

Fix with Farbar Recovery Scan Tool

This fix was created for this user for use on that particular machine.

Running it on another one may cause damage and render the system unstable.

​

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• Press the Fix button just once and wait.
• If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
• When finished FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.

Scan with Malwarebytes' Anti-Malware
Please download Malwarebytes Anti-Malware and save it to your desktop.

• Install the progam and select update.
• Once updated, click the Settings tab, in the left panel choose Detection & Protection and tick Scan for rootkits.
• Click the Scan tab, choose Threat Scan is checked and click Scan Now.
• If threats are detected, click the Apply Actions button. You will now be prompted to reboot. Click Yes.
• Upon completion of the scan (or after the reboot), click the History tab.
• Click Application Logs and double-click the Scan Log.
• At the bottom click Export and choose Text file.

Save the file to your desktop and include its content in your next reply.

 

[Rithal]

Alright.

 

[argus]

Is everything ok now?

 

[Rithal]

I just checked and everything is running perfectly. Thankyou very much. P.S I would donate but I literally have no money. I will see if I can get some and get back to you. Thankyou for helping me!

 

[Rithal]

Strange. The cloudscout ads just returned to Steam.... Hmmm

 

[argus]

Download Revo Uninstaller and uninstall steam in completely.

http://www.revouninstaller.com/start_freeware_download.html

 

[Rithal]

The steam ads have persisted

 

[argus]

Run FRST again and post fresh Scan report.