Browser virus, likely Chromestera

[Farquaad]

About a week ago on the 24th I noticed my browser redirected me to Bing, and later it redirected me to Yahoo as well, the problem has persisted since then. I have deleted any and all browser extensions that I wasn't using, reset all browser settings and un-synced and re-synced my Google account, but the problem persisted. After digging around the problem seems identical to the Chromestera infection. It could be the McAfee securesearch issue although I doubt it because my browser redirects me to Bing as well and not just yahoo. I conducted a Malwarebytes scan which detected nothing. I ran the Farbar tool and the two FRST.txt and Addition.txt files should be attached below. Thanks

 

[Farquaad]

FRST.txt doesn't seem to be saving as an attachment, i can provide the raw text if needed

 

[icotonev]

Hello..! Welcome to MalwareTips..!

FRST.txt doesn't seem to be saving as an attachment, i can provide the raw text if needed

It is probably very big...! Upload the file to GoFile or the file hosting site of your choice and post the download link in your reply.

 

[Farquaad]

Ok, here it is

Gofile - Cloud Storage Made Simple

Secure, fast and free cloud storage solution. Upload and share files instantly.

gofile.io

 

[icotonev]

Hello , Farquaad..!

• Download the Revo Uninstaller (Free Download) and save it on your Desktop.
• Double click on the exe file created on your Desktop to run the installer, and follow the instructions to install the program.
• Double click the program's icon to open it.
• Write in the search area, on the top left, the following program:

---

App Explorer
WebAdvisor by McAfee

• Choose the Uninstall tab from the menu and let the program to create a Restore point.
• Choose Scan, and then the Advanced mode scan.
• Select all the Online Services items found, Delete and Next.
• Let the procedure be completed and click on Finish.
• Restart the computer.

Next ...;

Uninstall WebAdvisor by McAfee using Method 2 on the following web page ...

https://service.mcafee.com/?articleId=TS101331&page=shell&shell=article-view

... do not activate your subscription before removing it, unless you want to be nagged forever more by McAfee to re-subscribe.

Do not try to uninstall it using the inbuilt uninstaller in Windows, because it doesn't do a very good job and will often leave orphans.

When finished uninstalling McAfee .... reboot your computer


Next ...;


Farbar Recovery Scan Tool - Fix

NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system that cannot be undone

Please download the attached file to the same folder where the Farbar tool is running from.
The location is listed in the 3rd line of the FRST.txt log you have submitted.

Run FRST and click Fix only once and wait.

The Computer will restart when the fix is completed.

It will create a log (Fixlog.txt) please post it to your reply.


In your next reply, please include:

• Fixlog.txt