Ads by SpeeditUp won't stop appearing

[pandaforce]

I need help stopping these ads from appearing. I tried everythng this guide (< http://malwaretips.com/blogs/ads-by-speeditup-removal/ >) said but the ads keep popping up. I even tried to manually delete files that I don't remember downloading and the ones that looked suspicious.

 

[argus]

Chrome installation is altered by malware. Reinstall is needed.



1. Open notepad and copy/paste the text present inside the code box below.
To do this highlight the contents of the box and right click on it. Paste this into the open notepad.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system

HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKU\S-1-5-21-88150340-4135015970-2731492124-1000\...\Policies\system: [DisableLockWorkstation] 0
HKU\S-1-5-21-88150340-4135015970-2731492124-1000\...\Policies\system: [DisableChangePassword] 0
HKU\S-1-5-21-88150340-4135015970-2731492124-1000\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-88150340-4135015970-2731492124-1000\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
GroupPolicyUsers\S-1-5-21-88150340-4135015970-2731492124-1000\User: Group Policy restriction detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
S2 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [X]
S3 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [X]
EmptyTemp:

2. Save notepad as fixlist.txt to your Desktop.
NOTE: => It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work.
3. Run FRST/FRST64 and press the Fix button just once and wait.
If the tool needed a restart please make sure you let the system to restart normally and let the tool completes its run after restart.
The tool will make a log on the Desktop (Fixlog.txt). Please attach it to your reply.
Note: If the tool warned you about the outdated version please download and run the updated version.




==============================






Please download Zoek tool by Smeenk (

) from here and save it to your Desktop.
Unpack the archive...

• Close any open browsers and temporarily disable your AntiVirus program. (if it is necessary)
  If you are unsure how to do this please read this or this Instruction.
  
• Double click on zoek.exe to run the tool. Please wait while the tool does not start...
• Copy the text present inside the code box below and paste it into the large window in the zoek tool:
  
  

  QuickScan;
  emptyfolderscheck;delete
  autoclean;
  emptyclsid;

  
  
• Click on
  
  button.
  Please wait until a logreport will open (this can be after reboot)
  
• Save notepad to your Desktop and attach here zoek-results.log
  Note: It will also create a log in the C:\ directory named "zoek-results.log"

 

[pandaforce]

Here's the Fixlog.txt and the zoek-results.log

 

[argus]

How is the situation now?

 

[pandaforce]

ads are still appearing

 

[argus]

Which browser do you use?
Did you reinstall Crome?

 

[pandaforce]

i did not reinstall Chrome so should i rerun FRST and Zoek after?

 

[argus]

Chrome installation is altered by malware. Reinstall is needed.

Reinstall completely and let me know.

 

[pandaforce]

I just reinstalled and ads are still popping up

 

[argus]

Re-run zoek and run this script:

QuickScan;
autoclean;
installer-list;
uninstall-list;

 

[pandaforce]

Here's the results of the rerun

 

[argus]

Re-run zoek and run this script:

C:\Program Files (x86)\ver6SpeeditUp;fs
{B1138805-9A6F-5D98-DC7E-E225438C6A62};c
[HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions];r
"{B1138805-9A6F-5D98-DC7E-E225438C6A62}"=-;r
adjpjlnifhodbcbcpelokdgbgfkmlihm;chr
kepmeldgmomhcpinbdcfkemkfeicliic;chr
C:\Windows\Sysnative\.crusader;f
emptyalltemp;
autoclean;
emptyclsid;
ipconfig /flushdns >> %temp%\log.txt;b
ipconfig /flushdns;b

 

[pandaforce]

new scipt results

 

[argus]

Is everything ok now?

 

[pandaforce]

Yeah. I think it's fixed. So far no ads have popped up.
Thank you so much!

 

[argus]

• The following will implement some post-cleanup procedures:

=> Please download DelFix by Xplode to your Desktop.

Run the tool and check the following boxes below;

Remove disinfection tools

Create registry backup

Purge System Restore
Click Run button and wait a few seconds for the programme completes his work.
At this point all the tools we used here should be gone. Tool will create an report for you (C:\DelFix.txt)

The tool will also record healthy state of registry and make a backup using ERUNT program in %windir%\ERUNT\DelFix
Tool deletes old system restore points and create a fresh system restore point after cleaning.

 

[pandaforce]

all done with that

 

[argus]

Ok, greeting.

 

[pandaforce]

thank you for all your help!