Forums
New posts
Search forums
News
Security News
Technology News
Giveaways
Giveaways, Promotions and Contests
Discounts & Deals
Reviews
Users Reviews
Video Reviews
Support
Windows Malware Removal Help & Support
Mac Malware Removal Help & Support
Mobile Malware Removal Help & Support
Blog
Log in
Register
What's new
Search
Search titles only
By:
Search titles only
By:
Reply to thread
Menu
Install the app
Install
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Forums
Support
Windows Malware Removal Help & Support
Fake Chrome Virus Removal Help Needed
Message
<blockquote data-quote="Passenger" data-source="post: 288464" data-attributes="member: 29875"><p>Hello TwinHeadedEagle - thanks for your help!</p><p></p><p>I was in a bit of a panic after discovering the virus and so engaged in a bit of self-help before your reply was received. What I did was run FRST to remove the fake chrome process. I saved off the fixlist and the resultant fixlog prior to running the fixlist you sent me by appending a "1" to the old file names. I also edited the fixlist you sent me to remove the items I previously covered in the fixlist I made.</p><p></p><p>So attached below are:</p><p>Fixlog1.txt - the fixlog from my initial FRST run</p><p>Fixlog.txt - the fixlog from the edited fixlist you sent</p><p></p><p>Since the fixlogs contain the fixlists which they were run against I have not included the two fixlists.</p><p></p><p>I ran AdwCleaner as instructed and have attached the resultant AdwCleaner[S2].txt.</p><p></p><p>Finally I installed MalwareBytes - I had to purchase a license to get it to run. Once I got the license for it I ran it as instructed and have attached the resultant log as "MWBytesScanLog.txt"</p><p>==============</p><p></p><p>One question - I assume from the ProxyServer entry in the fixlist that my IP settings were changed at some point to redirect to the server referenced in the fixlist. What sort of threat does this entail? Assuming that passwords and sensitive data were always sent over SSL, what sort of risk does that proxyserver pose. Frankly I'm pretty concerned about this.</p></blockquote><p></p>
[QUOTE="Passenger, post: 288464, member: 29875"] Hello TwinHeadedEagle - thanks for your help! I was in a bit of a panic after discovering the virus and so engaged in a bit of self-help before your reply was received. What I did was run FRST to remove the fake chrome process. I saved off the fixlist and the resultant fixlog prior to running the fixlist you sent me by appending a "1" to the old file names. I also edited the fixlist you sent me to remove the items I previously covered in the fixlist I made. So attached below are: Fixlog1.txt - the fixlog from my initial FRST run Fixlog.txt - the fixlog from the edited fixlist you sent Since the fixlogs contain the fixlists which they were run against I have not included the two fixlists. I ran AdwCleaner as instructed and have attached the resultant AdwCleaner[S2].txt. Finally I installed MalwareBytes - I had to purchase a license to get it to run. Once I got the license for it I ran it as instructed and have attached the resultant log as "MWBytesScanLog.txt" ============== One question - I assume from the ProxyServer entry in the fixlist that my IP settings were changed at some point to redirect to the server referenced in the fixlist. What sort of threat does this entail? Assuming that passwords and sensitive data were always sent over SSL, what sort of risk does that proxyserver pose. Frankly I'm pretty concerned about this. [/QUOTE]
Insert quotes…
Verification
Post reply
Top