Adware or Erroneous Websites Keep Popping Up

[Nathan79]

Please help. The problem first started approximately a month and a half ago the first signs were advertisements being displayed in the middle of the webpage that I was on and pop up advertisements also when clicking on web links they wouldn't always open. I've tried a few different adware/malware programs that I have run and I'm still having the same issues, there has been no change. I've attached copies of the FRST, Addition and AdwCleaner txt files.
Thanks.

 

[argus]

Please download Zoek tool by Smeenk (

) from here and save it to your Desktop.
Unpack the archive...

• Close any open browsers and temporarily disable your AntiVirus program. (if it is necessary)
  If you are unsure how to do this please read this or this Instruction.
  
• Double click on zoek.exe to run the tool. Please wait while the tool does not start...
• Copy the text present inside the code box below and paste it into the large window in the zoek tool:
  
  

  autoclean;
  filesrcm;
  startupall;
  skipfix-iedefaults;
  firefoxlook;
  chromelook;

  
  
• Click on
  
  button.
  Please wait until a logreport will open (this can be after reboot)
  
• Save notepad to your Desktop and attach here zoek-results.log
  Note: It will also create a log in the C:\ directory named "zoek-results.log"

 

[Nathan79]

Thanks Argus attached is the zoek results log.

 

[argus]

Re-run zoek and run this script:

jid1tDEBR70q2oOOTwjetpack;ff
ahnpejopbfnjicblkhclaaefhblgkfpd;chr
fbangkleohkafngihneedemihgfeikcl;chr
emptyalltemp;
emptyfolderscheck;delete
emptyrecycle.bin;
autoclean;
emptyclsid;
ipconfig /flushdns >> %temp%\log.txt;b
ipconfig /flushdns;b

==========================================







Please download Malwarebytes AntiRootkit (MBAR) and save it to your desktop.
For full instructions how MBAR works, read this article


> Doubleclick on the MBAR file (

) and allow it to run.
• Click OK on the next screen, to allow the package to extract the contents of the file to its own folder named mbar.
• mbar.exe will launch automatically. On some systems, this may take a few extra seconds. Please be patient and wait for the program to open.
• After reading the Introduction, click Next if you agree.

• On the Update Database screen, click on the Update button. Once you see 'Success: Database was successfully updated' click on Next
• Under Scan Targets ensure all boxes are ticked. Then click the Scan button.

Notice: with some infections, you may see two messages boxes:
- 'Could not load protection driver'. Click 'OK'.
- 'Could not load DDA driver'. Click 'Yes' to this message, to allow the driver to load after a restart. Allow the computer to restart. Continue with the rest of these instructions.

>> If malware is not detected, click the Exit button to close the program and post the mbar-log-year-month-day.txt and system-log.txt reports.

>> If an infection/s are found ensure Create Restore Point are ticked. Then select the "Cleanup! button to remove threats.
• The clean up procedure will be scheduled for process, pop-up will be shown.
Select the Yes button and the system should re-boot to complete the cleaning process.


>> Notice: only if an RootKit are detected, ensure to run fixdamage.exe tool located in mbar folder, \Plugins\fixdamage.exe
- Run fixdamage.exe, at the black window to continue type Y (alias for Yes). Wait few seconds for execution ...
- When you see "press any key to exit" fix is completed, press any key to close the window. Reboot the system.




> The following reports will be created in mbar folder:
1. mbar-log-year-month-day (hour-minute-second).txt
2. system-log.txt

Please post both logs in your next reply.

 

[Nathan79]

Second Zoek log.

 

[argus]

MBAR Log?

 

[Nathan79]

Attached is the MBAR log as well.

 

[Nathan79]

Here's the system log as well.

 

[argus]

Is everything ok now?

 

[Nathan79]

It seems to be. I've been using the computer this evening without any adware or pop ups. Thanks for all your help, what was the problem?

 

[argus]

Malicious extension.


• The following will implement some post-cleanup procedures:

=> Please download DelFix by Xplode to your Desktop.

Run the tool and check the following boxes below;

Remove disinfection tools

Create registry backup

Purge System Restore
Click Run button and wait a few seconds for the programme completes his work.
At this point all the tools we used here should be gone. Tool will create an report for you (C:\DelFix.txt)

The tool will also record healthy state of registry and make a backup using ERUNT program in %windir%\ERUNT\DelFix
Tool deletes old system restore points and create a fresh system restore point after cleaning.


Zoek remove.

Cheers!