Solved Chrome Go Save Ads/Extension keeps coming back

[tutaref]

Hi. Have followed this thread very closely to remove persistent GoSave. Zoek, then Malwarebytes, then AdwCleaner, then Zoek again (as it appears twice in the thread with different scripts to insert) then Farbar. Through all this, GoSave survived. Funny thing with Farbar is that it did not generate fixlist file of any sort - FRST and Additions but not fixlist. I tried it with all the whitelists checked and then unchecked - same thing. One of your correspondents mentioned unchecking GoSave from extensions so I looked there - I am sure it was not present previously - and there it was today. I've deleted it, rebooted Chrome and appear to be free of GoSave. Maybe all those other pieces of software opened up GoSave visibility or maybe I just missed it.

Anyway, a lengthy but useful process. Thanks

 

[TwinHeadedEagle]

Hello,


You're infected with new variant that alters your Google Chrome. You need to reinstall Google Chrome.

 

[tutaref]

Thanks. Makes sense. I can delete GiOSavE as it calls the extension and have deleted a file on ProgramData see below snipped from Extensions Tab - may be different from what others get but may be useful. Will close Chrome and reboot computer. If it returns will uninstall and reinstall and let you all know.

 

[TwinHeadedEagle]

Okay, sound good to me. But Chrome is now developer version, you won't get all future updates, that is why I recommend Chrome uninstall.

 

[tutaref]

Thanks. Now that I have Trovi - which makes GoSave look benign by comparison, I'm going down uninstall/reinstall route. Thanks to your page on Trovi I immediately identified the source and I am sure that I was not given the option to avoid it. It appears to me to have been closely bundled with "Free M4A to MP3 Converter" and not optioned.

 

[TwinHeadedEagle]

Yes, probably. Is everything all right now?

 

[tutaref]

Everything is fine now. I was also surprised by how quick and smooth it is to uninstall and reinstall. Thanks very much. Great support here!

 

[TwinHeadedEagle]

Glad I could help. We will delete all used tools and I'll give you some tips to harden your security and learn how to protect yourself

Recommended reading:
​

MUST READ - security tips:

• Computer Security - a short guide to staying safer online.
• Simple and easy ways to keep your computer safe and secure on the Internet

MUST READ - general maintenance:

• What to do if your Computer is running slowly?

The Importance of Software Updating:
​

In order to stay protected it is very important that you regularly update all of your software. Cybercriminals depend on the apathy of users around software updates to keep their malicious endeavor running.​

Operating systems, such as Windows, and applications, such as Adobe Reader or JAVA, are used by tens of millions of computers and devices around the world, making them a huge target for cybercriminals. Downloading updates and installing them can sometimes be tedious, but the advantages you get from the updates are certainly worth it.

• How to configure and use Automatic Updates in Windows
• How to update Java
• How to update Adobe Reader

Recommended additional software:
​

TFC - to clean unneeded temporary files.

Malwarebytes' Anti-Malware - to scan your system from time to time in search for malware.

Malwarebytes' Anti-Exploit - to prevent plenty of mostly exploited vulnerabilities.

McShield - to prevent infections spread by removable media.

Unchecky - to prevent from installing additional foistware, implemented in legitimate installations.

FiheHippo.com Update Checker - to keep your programs up-to-date.

Adblock - to surf the web without annoying ads!

Post-cleanup procedures:​

Download DelFix by Xplode and save it to your desktop.

• Run the tool by right click on the
  
  icon and Run as administrator option.
• Make sure that these ones are checked:
  • Remove disinfection tools
  • Purge system restore
  • Reset system settings
• Push Run and wait until the tool completes his work.
• All tools we used should be gone. Tool will create an report for you (C:\DelFix.txt)

The tool will also record healthy state of registry and make a backup using ERUNT program in %windir%\ERUNT\DelFix
Tool deletes old system restore points and create a fresh system restore point after cleaning.

My help is free for everybody.
If you're happy with the help provided and/or wish to buy me a beer for the assistance you received, then you can consider a donation:
Thank you!​

Stay safe,
TwinHeadedEagle