Solved Ads still persist even after removal

[TofuFist]

How do I do that and what would that do exactly?

 

[TwinHeadedEagle]

Do you have a home router/modem?

 

[TofuFist]

Yes, I'm not so knowledgeable about the terminology, but that is the "internet box" right?

 

[TwinHeadedEagle]

Yes, it looks like this:

 

[TofuFist]

Mine doesn't look exactly like that, but I think I know what you're talking about. Do I just need to press the reset button on the back?

 

[TwinHeadedEagle]

Yes, keep that button for 10 seconds.

 

[TofuFist]

Okay, it has been reset.

 

[TwinHeadedEagle]

Good. Tell me how is your PC behaving now?

 

[TofuFist]

The same as before.

 

[TwinHeadedEagle]

Scan with ComboFix

This is a very powerful tool that should be used only if advised by Malware Analyst.
Do not run ComboFix on your own!

Referring to this instruction, please download ComboFix by sUBs and save it to your desktop.
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
• Accept the disclaimer and agree if prompted to install Recovery Console.
• Do not take any actions while ComboFix goes through your System - it may cause it to stall!
• This scan may take some time!
• When finished - it will display a logfile (located also on your main drive, usually C:\ComboFix.txt).

Include that log in your next reply.

If you'll encounter any issues with internet connection after running ComboFix, please visit this link.

If an error about operation on the key marked for deletion will appear after running the tool, please reboot your machine.

 

[TofuFist]

Done.

 

[TwinHeadedEagle]

How is your PC behaving now?

 

[TofuFist]

The same.

 

[TwinHeadedEagle]

Does it still happen in all browsers?

Can you make a picture of pop-ups?

 

[TofuFist]

this is one of the redirects I get on Chrome
shopping assistant on Chrome
shopping assistant on Firefox
when I got redirected to 3 different ads on Firefox

 

[TwinHeadedEagle]

Scan with ZOEK

Please download ZOEK by Smeenk and save it to your desktop (preferred version is the *.exe one)
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
• Wait patiently until the main console will appear, it may take a minute or two.
• In the main box please paste in the following script:
  

  createsrpoint;
  autoclean;
  jabuticaba;a
  jabuticaba;z
  shopping;a
  shopping;z
  emptyalltemp;
  ipconfig /flushdns >>"%temp%\log.txt";b

• Make sure that Scan All Users option is checked.
• Push Run Script and wait patiently. The scan may take a couple of minutes.
• When the scan completes, a zoek-results logfile should open in notepad.
• If a reboot is needed, it will be opened after it. You may also find it at your main drive (usually C:\ drive)

Post its content into your next reply.

 

[TofuFist]

Done.

 

[TwinHeadedEagle]

Fix with ZOEK

This fix was created for this user for use on that particular machine.

Running it on another one may cause damage and render the system unstable.

​

Temporary disable your AntiVirus and AntiSpyware protection - instructions here.

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
• Wait patiently until the main console will appear, it may take a minute or two.
• In the main box please paste in the following script:
  

  createsrpoint;
  [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{258C9770-1713-4021-8D7E-1F184A2BD754}];r
  [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{BDEA95CF-F0E6-41E0-BD3D-B00F39A4E939}];r
  [-HKEY_USERS\S-1-5-21-3994437169-3496689218-3522686221-1001\Software\JavaSoft\Prefs\rsrc\config\yohoho\client];r

• Make sure that Scan All Users option is checked.
• Push Run Script and wait patiently. The scan may take a couple of minutes.
• When the scan completes, a zoek-results logfile should open in notepad.
• If a reboot is needed, it will be opened after it. You may also find it at your main drive (usually C:\ drive)

Post its content into your next reply.

 

[TofuFist]

Done.

 

[TwinHeadedEagle]

Do you still have the problem?