Solved Alibaba Offer page which cannot be removed...

[Whereismarco?]

Howdy. Same problem here with offer.alibaba, action.metaffiliation, adsxn.com and so on.
I have Windows 7, not a corporate computer and i tried Malwarebyte, Adwcleaner, Ccleaner, Combofix and nothing happened.
Finally, i downloaded FRST and here's my scan result.
By the way, since the day my pc was infected, i also have a folder with a file named CercaVoli.exe without any
uninstalling option. It's clearly an evil file, but i'm not sure if deleting without uninstalling is enough.

 

[TwinHeadedEagle]

Hello,

Fix with Farbar Recovery Scan Tool

This fix was created for this user for use on that particular machine.

Running it on another one may cause damage and render the system unstable.

​

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• Press the Fix button just once and wait.
• If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
• When finishes FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.

 

[Whereismarco?]

Here it is.

 

[TwinHeadedEagle]

How is your PC behaving now?

Are you familiar with this folder:

C:\Wsis32\urlSH\Release

 

[Whereismarco?]

Tonight i had the same issues over and over again, like nothing has changed.

I've just found the Wsis32 folder.

 

[TwinHeadedEagle]

Please run this fix and let me know if it returns after this.

 

[Whereismarco?]

A couple of hours have passed and Google Chrome seems to be okay, now.
I'll post new updates if the problem comes back.
Thank you very much for your help.