Gosave issue

[Suikerism]

I attached both txt. Sorry if there are any grammar mistakes, English is not my first language.

 

[argus]

Re-run FRST.exe as you did before ...

• Download fixlist.txt that you find attached at the bottom of this post and save it same place you
• Press the Fix button once and wait.
• FRST will process fixlist.txt
• When finished, it will produce a log fixlog.txt and will keep that log in the same folder where FRST.exe is.

> Attach here fixlog.txt logreport.





=================================





Please download AdwCleaner by Xplode and save to your Desktop.

Double click on AdwCleaner.exe to run the tool.

• Click on the Scan button.
• After the scan has finished click on the Clean button.

Press OK when asked to close all programs and follow the onscreen prompts.
Press OK again to allow AdwCleaner to restart the computer and complete the removal process.

• After rebooting, a logfile report (AdwCleaner[S0].txt) will open automatically.
• Post logfile will also be saved in the C:\AdwCleaner folder.

Chrome installation is altered by malware. Reinstall is needed.

 

[Suikerism]

I rebooted twice and opened Chrome a lot of times, thankfully Gosave still hasnt appeared yet. Though i didnt reinstall Chrome, is it still necessary? Oh and i don't know if AdwCleaner was just for the Gosave extension or was also for the DeleteAd programme but sadly it's still there .

 

[argus]

Please download Zoek tool by Smeenk (

) from here and save it to your Desktop.
Unpack the archive...

• Close any open browsers and temporarily disable your AntiVirus program. (if it is necessary)
  [ If you are unsure how to do this please read this or this Instruction.
  
• Double click on zoek.exe to run the tool. Please wait while the tool does not start...
• Copy the text present inside the code box below and paste it into the large window in the zoek tool:
  
  

  QuickScan;
  autoclean;

  
  
• Click on
  
  button.
  Please wait until a logreport will open (this can be after reboot)
  
• Save notepad to your Desktop and attach here zoek-results.log
  Note: It will also create a log in the C:\ directory named "zoek-results.log"

 

[Suikerism]

Here it is! GoSave hasnt shown up yet, though "Deletead" is still there T_T

 

[argus]

Re-run zoek and run this script:

autoclean;
gnnoogknlgppjpplachccekbihhllgdc;chr
momgknfmndgjaaaobmheefjapnlpobbh;chr
emptyalltemp;
emptyfolderscheck;delete
emptyclsid;
ipconfig /flushdns >> %temp%\log.txt;b
ipconfig /flushdns;b

 

[Suikerism]

Here~ My chrome is clean This thing is still there

 

[argus]

Re-run zoek and run this script:

DeleteAd;z
installer-list;
uninstall-list;

 

[Suikerism]

Still there :c
Also this is the error it gives:

 

[argus]

Re-run zoek and run this script:

C:\ProgramData\DeleteAd;fs
C:\Users\All Users\DeleteAd;fs
{37476589-E48E-439E-A706-56189E2ED4C4};c
[-HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{37476589-E48E-439E-A706-56189E2ED4C4}_is1];r
emptyalltemp;
autoclean;
emptyclsid;

 

[Suikerism]

Yes! Thank you very much, both Gosave and DeleteAd are gone!

 

[argus]

• The following will implement some post-cleanup procedures:

=> Please download DelFix by Xplode to your Desktop.

Run the tool and check the following boxes below;

Remove disinfection tools

Create registry backup

Purge System Restore
Click Run button and wait a few seconds for the programme completes his work.
At this point all the tools we used here should be gone. Tool will create an report for you (C:\DelFix.txt)

The tool will also record healthy state of registry and make a backup using ERUNT program in %windir%\ERUNT\DelFix
Tool deletes old system restore points and create a fresh system restore point after cleaning.




Zoek Remove right click/delete


Cheers!