Solved Google Chrome extension I never downloaded and can not uninstall.

[Babyajb211]

Hello, I know absoulutly nothing about computers and such. But a extension called QuantumAsteroidus showed randomly, I am unsure when. I have been attempting to fix a problem fith Chrome where it just randomly crashes. I read somewhere that extensions might be the problem, whitch is where I found QuantumAsteroidus. There is no remove option like other extension, and a lot of the permisions are just greyed out and locked. Sorry If this is a lackluster explanation, I do not know what to add.

I do not know how to uninstall it.

 

[icotonev]

Hello..! Welcome to MalwareTips..!

By Staff - [MANDATORY] Preparation Guide Before Requesting Malware Removal Help

Hi and welcome to MalwareTips Malware Removal Forum. If you are reading this, then you are probably seeking help or feel infected. Over 5000 topics have been posted in this forum and most of them have reached a successful conclusion. All instructions are very simple and you need only basic...

malwaretips.com

 

[Babyajb211]

Norton does not like the Farbar Recovery Scan Tool. A serch through Google makes me think that Norton is just giving a false posative? I just wanted to double check that this was something typical before continuing onward

 

[icotonev]

Norton does not like the Farbar Recovery Scan Tool. A serch through Google makes me think that Norton is just giving a false posative? I just wanted to double check that this was something typical before continuing onward

This is false positive..! Please continue with the instruction..!

 

[Babyajb211]

Here are the reports from both

 

[icotonev]

Thank you..!

The scanner will produced two logs on your Desktop: FRST.txt and Addition.txt.

For the analysis of your system I also need the Addition.txt. file..Please attach it in your next post..!

 

[Babyajb211]

Sorry

 

[icotonev]

Unfortunately your system is infected..! Let's start cleaning:

Farbar Recovery Scan Tool - Fix

NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system that cannot be undone

Please download the attached file to the same folder where the Farbar tool is running from.
The location is listed in the 3rd line of the FRST.txt log you have submitted.

Run FRST and click Fix only once and wait.

The Computer will restart when the fix is completed.

It will create a log (Fixlog.txt) please post it to your reply.

 

[Babyajb211]

Sorry for the wait

 

[icotonev]

Thank you..!

Malwarebytes AdwCleaner

• Please download AdwCleaner and save it to your Desktop
• Close all open programs and browsers
• Right click on the icon and select Run as administrator
• Click Scan now
• Uncheck any detected items you would to keep then click Next
• If a Preinstalled software was found! screen appears review it if you'd like then click OK

The section at the bottom under Pre-Installed Software is software that was apparently installed when the device was new by your PC manufacturer.Personally, I don't keep anything from this software that I don't use/need. But it's your computer, so the decision is yours.

• Review the list of Preinstalled software and place a check mark in those you do not wish to keep
• Click Quarantine, then Continue
• When completed click View Log File
• Copy and paste the contents in your reply
• Close the AdwCleaner window

Farbar Recovery Scan Tool SearchAll

• Right click on FRST and select Run as administrator
• Copy/paste the following in the Search: box

SearchAll: QuantumAsteroidus , Web Genius Solutions , OneChecker , UniversalUpdater , gcfocgemonknlcgjjagflgijoghbhhmm

• Click Search Files
• When completed click OK and a Search.txt document will open on your desktop
• Copy and paste the contents of the report in your reply

In your next reply, please post:

• AdwCleaner report
• Search.txt

 

[Babyajb211]

Is this what I was supposed to attach?

 

[icotonev]

Everything looks good..!

Fresh FRST logs

Please run FRST tool once more, and attach for me fresh logs:

• Double-click on the FRST icon to run it, as you did before. When the tool opens click Yes to disclaimer.
• Press Scan button and wait for a while.
• The scanner will produce two logs on your Desktop: FRST.txt and Addition.txt.
• Please attach these two logs in your next reply.

In your next reply, please post:

1. Fresh FRST logs
2. Feedback: let me know about how is the computer running. Please, include any issue and concern right now.

 

[Babyajb211]

My only feedback is that this place is filled with briliant people, thank you so much. My PC is running perfectly with zero problems.

 

[icotonev]

My PC is running perfectly with zero problems.

That's great..!

However, there are two records that I do not like.. We will try to remove them in Safe Mode


Farbar Recovery Scan Tool - Run Fix in Safe Mode

• Click Start, type Notepad, then hit Enter
• Copy and paste the below into the open Notepad document

CloseProcesses:
CHR Extension: (QuantumAsteroidus) - C:\Users\Avery\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcfocgemonknlcgjjagflgijoghbhhmm [2024-09-25] [UpdateUrl:hxxps://disablenotificationupdate.com/crx/updates.php]
Edge Extension: (QuantumAsteroidus) - C:\Users\Avery\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\gcfocgemonknlcgjjagflgijoghbhhmm [2024-09-25] [UpdateUrl:hxxps://disablenotificationupdate.com/crx/updates.php]

• Save the document as Fixlist.txt and save it in the same location as FRST64 (Desktop, Downloads folder, etc.) <<< Important
• Boot into Safe Mode using the From the sign-in screen instructions
• Right click on FRST and select Run as administrator
• Click Fix and once completed your computer will reboot
• The tool will create a log in the same location as FRST64 called Fixlog.txt
• Copy and paste the contents of the report in your reply

In your next reply, please post:

1. Fixlog

 

[Babyajb211]

Done

 

[icotonev]

Search for the bad extension:

• Copy/paste the following in the Search: box

SearchAll: gcfocgemonknlcgjjagflgijoghbhhmm

• Click Search Files button
• When completed click OK and a Search.txt document will open on your desktop
• Аttach the report in your reply. If the file is too large zip and upload it here.

In your next reply, please include:

• Search report

 

[Babyajb211]

Here we go

 

[icotonev]

Farbar Recovery Scan Tool - Fix

NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system that cannot be undone

Please download the attached file to the same folder where the Farbar tool is running from.
The location is listed in the 3rd line of the FRST.txt log you have submitted.

Run FRST and click Fix only once and wait.

The Computer will restart when the fix is completed.

It will create a log (Fixlog.txt) please post it to your reply.

 

[icotonev]

Do you still need help..?

 

[Babyajb211]

Yes, sorry.