Solved Browser hijack- tried a lot already but can't get rid of it

[gselker]

On 6/20 in an attempt to fix an issue that developed with my Olympus DSS 4.8 software that had stopped to function post a windows update and post researching this issue, I downloaded the Olympus DSS V5 software. Upon installation, i needed a new serial # and then I mistakenly opened up a link to obtain a new Olympus DSS serial #. Immediately, a PC speed enhancer app started downloading, which I stopped and then uninstalled. However, this is when my PC became infected with adware/malware.

When opening up Chrome, sometimes but not all the time, a Bing toolbar is inserted. When opening up a new tab, more than 75% of the time the browser is highjacked and directed to beeping or flashing website (security issue with Chrome, Windows, MS), or "you're an automatic AT&T winner" requiring me to stop the app in task manager

uninstalled DSS V5
uninstalled PC Speed Enhancer
restored system to pre-DSS download
have run multiple times, AdwCleaner, Junkware Removal Tool (JRT).Malwarebytes Anti-Malware and HitmanPro.
Have also now run rdkill and tdsskiller
Have now run Farbar Recovery and aswMBR but did not apply the FixMBR yet.

Scan logs are uploaded from:
HitmanPro (6/22 1st & 2nd scans)
Adwcleaner (6/24),
JWT (6/24)
Farbar (FRST and Addition from 6/27)
aswMBR (6/27)

 

[TwinHeadedEagle]

Hello,


Is this work/business computer?

 

[gselker]

I am self employed. It is my pc that I use for everything in my life

 

[TwinHeadedEagle]

Please download Zemana AntiMalware and save it to your Desktop.

• Install the program and once the installation is complete it will start automatically.
• Without changing any options, press Scan to begin.
• After the short scan is finished, if threats are detected press Next to remove them.

Note: If restart is required to finish the cleaning process, you should click Reboot. If reboot isn't required, please restart your computer manually.​

• Open Zemana AntiMalware again.
• Click on
  
  icon and double click the latest report.
• Now click File > Save As and choose your Desktop before pressing Save.
• The only left thing is to attach saved report in your next message.

 

[gselker]

Yesterday after posting on this forum i actually did download Zemana and ran it. I have enclosed the report however, the only item it found was that Chrome was pointing to my website upon startup of the app. I designated it to ignore this.

 

[TwinHeadedEagle]

Okay, let's perform this fix now. Let me know if everything is okay after it.

Fix with Farbar Recovery Scan Tool

This fix was created for this user for use on that particular machine.

Running it on another one may cause damage and render the system unstable.

​

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• Press the Fix button just once and wait.
• If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
• When finishes FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.

 

[gselker]

wow. I think this worked! I ran the fix, restarted, opened up my browser and multiple tabs/windows, all seems to be working! Thank you so much! I've enclosed the fixlist as requested.

 

[gselker]

Maybe I spoke too soon. While the issue of my browser being hijacked disappeared, now I have completely frozen 2 times when scrolling in a browser window (on LinkedIn and the NYT) forcing me to do a hard reboot. Any ideas?

 

[TwinHeadedEagle]

Can you reinstall your browser?