Solved Trouble using Emsisoft Emergency Kit to remove multiple Chrome.exe *32 virus

[Susannnnnn]

I included all three files. FYI - I when I opened my browser window, there was a URL for Cassiopesa which is the virus that started all of this. Plus when I just checked, there are 6 instances of chrome.exe *32 running so I'm still right where I started.

 

[TwinHeadedEagle]

Ar these fresh FRST reports?

 

[Susannnnnn]

yes - the time stamp on the files is from last night when I created them.

 

[Susannnnnn]

I had to run it twice since I for got to check the box the first time. What do I do next? I still have 5 instances of chrome.exe *32 so I know the virus is still there.

 

[TwinHeadedEagle]

Fix with Farbar Recovery Scan Tool

This fix was created for this user for use on that particular machine.

Running it on another one may cause damage and render the system unstable.

​

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• Press the Fix button just once and wait.
• If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
• When finished FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.

 

[Susannnnnn]

Here are the results of the "fix"

 

[TwinHeadedEagle]

How is the situation now?

 

[Susannnnnn]

When I boot up, the chromium window does not come up any more but there are still 6 iterations of chrome.exe *32 running which I understand is a symptom of the virus.

 

[TwinHeadedEagle]

Are they running only when you open Chrome?

 

[Susannnnnn]

Yes - I have chrome open and now there's 8 instances running. Plus I just got a popup for "voice five". It disappeared before I could get a screen shot.

 

[TwinHeadedEagle]

Yes, it is fine to be like this.

 

[Susannnnnn]

Ok - I will resume my web updates - thank you for all your help!