Solved Persistent reimage repair popups, even after following your guide

[Jorrem]

Hi, so I keep getting directed to windowsreimage repair every other click on the internet. I followed the steps in your guide, and all scans came up empty. Though now that I have Malware Bytes Anti Malware installed, it does block the site (but only after getting redirected). My computer also has Kaspersky internet 2015 paid version.
I don't seem to get redirected at my house but only at my work, so can it be that it has something to do with the wireless network here?
Any help would be greatly appreciated!

 

[Jorrem]

Edit: I need to double check the part where I said it does not happen at my house. (sorry for double post, couldn't find an edit button)

 

[argus]

Hello,

Please follow this topic and attach required reports

http://malwaretips.com/threads/preparation-guide-before-requesting-malware-removal-help.20334/

 

[Jorrem]

thanks for the quick reply

 

[argus]

What browser have a problem?

 

[Jorrem]

Chrome, it's the only one I use on this laptop

 

[Jorrem]

Chrome, it's the only one I use on this laptop

 

[argus]

Scan with ZOEK

Please download ZOEK by Smeenk and save it to your desktop (preferred version is the *.exe one)
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
• Wait patiently until the main console will appear, it may take a minute or two.
• In the main box please paste in the following script:
  

  createsrpoint;
  autoclean;
  emptyalltemp;
  ipconfig /flushdns;b

• Make sure that Scan All Users option is checked.
• Push Run Script and wait patiently. The scan may take a couple of minutes.
• When the scan completes, a zoek-results logfile should open in notepad.
• If a reboot is needed, it will be opened after it. You may also find it at your main drive (usually C:\ drive)

Post its content into your next reply.

 

[Jorrem]

Not sure if it found anything:

 

[argus]

Re-run zoek and run this script:

createsrpoint;
autoclean;
dbhjdbfgekjfcfkkfjjmlmojhbllhbho;chr

 

[Jorrem]

Done, but I got redirected by clicking here

 

[argus]

Uninstall Chrome

Close all Chrome windows and tabs.
Go to the Start menu > Control Panel.
Click Programs and Features.
Double-click Google Chrome.
Click Uninstall from the confirmation dialog. Delete your user profile information, like your browser preferences, bookmarks, and history, select the "Also delete your browsing data" checkbox.


Click Start, copy in search %LOCALAPPDATA%\Google click Local and remove folder chrome

Download Chrome
https://www.google.com/intl/en/chrome/browser/desktop/

 

[Jorrem]

Hello, sorry for my late reply but I have not been able to really test if the problem is away now. And unfortunately it is not, it went okay for a few clicks but now I get redirected quite often again. Any other steps I could take?

 

[argus]

Scan with ZOEK

Please download ZOEK by Smeenk and save it to your desktop (preferred version is the *.exe one)
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
• Wait patiently until the main console will appear, it may take a minute or two.
• In the main box please paste in the following script:
  

  createsrpoint;
  autoclean;
  skipfix-iedefaults;
  firefoxlook;
  chromelook;

• Make sure that Scan All Users option is checked.
• Push Run Script and wait patiently. The scan may take a couple of minutes.
• When the scan completes, a zoek-results logfile should open in notepad.
• If a reboot is needed, it will be opened after it. You may also find it at your main drive (usually C:\ drive)

Post its content into your next reply.

 

[Jorrem]

Also if this helps: I never seem to get redirected on sites such as facebook or my Gmail, but all the time on forums or news sites. For instance I got redirected 3 times getting to this thread.

 

[argus]

Download

Malwarebytes Anti-Rootkit to your desktop.

• Double-click the icon to start the tool.
• It will ask you where to extract it, then it will start.
• Warning! Malwarebytes Anti-Rootkit needs to be run from an account with administrator rights.
• Click in the introduction screen "next" to continue.
• Click in the following screen "Update" to obtain the latest malware definitions.
• Once the update is complete select "Next" and click "Scan".
• When the scan is finished and no malware has been found select "Exit".
• If malware was detected, make sure to check all the items and click "Cleanup". Reboot your computer.
• Open the MBAR folder and paste the content of the following files in your next reply:
  • "mbar-log-{date} (xx-xx-xx).txt"
  • "system-log.txt"

 

[Jorrem]

Nothing again, apparently it's quite well hidden.

 

[argus]

Do you have a problem only with Chrome?

 

[Jorrem]

Haven't tried other ones. I was thinking of switching to Firefox, but I wanted to wait and see if this could be resolved first. Should I just try if Firefox works?

 

[argus]

Close all Chrome windows and tabs.
Go to the Start menu > Control Panel.
Click Programs and Features.
Double-click Google Chrome.
Click Uninstall from the confirmation dialog. Delete your user profile information, like your browser preferences, bookmarks, and history, select the "Also delete your browsing data" checkbox.


Click Start, copy in search %LOCALAPPDATA%\ and remove folder Google.

Reboot PC

Download Chrome
https://www.google.com/intl/en/chrome/browser/desktop/