AntaresSQ01

New Member
Hey, so i've gotten this malware and i know what program caused it but i deleted it and have no clue now, sorry :/ But the main issue is, as i said i cleaned it with Adwcleaner and it finds it and removes it (I'm certain that's it but when i restart chrome it "re-installs" itself. Also I've used FRST but i don't know how useful it will be as i'm puzzled whether it worked or not Now enough from the cryptic talk.

it's under
C:\Users\my user\Appdata\local\google\chrome\user data\default\secure preferences
inside the file (opened with notepad++)
this is the culprit:
plnkhmnoajbfccclonaeepohggeolcih (more details in uploaded logs)
Also, over time due to the popups it also installs some random tinytask thing + uk.ask.com or whatever search provider (also in logs)
Now, as i mentioned above i've checked installed programs and services and found nothing out of the place. I have no clue how the hell should i go about fixing this as its a nasty malware that doesnt wanna get removed. The only sites i found relating to this issue are spanish and the forums even with translate didnt help much so i'm here to ask for some help! Thanks for anything in advance
 

Attachments

  • Like
Reactions: davhag49

AntaresSQ01

New Member
When i run it it jsut goes like a quarter of the way then shuts down? I thought its normal since it did produce some files
 

TwinHeadedEagle

Removal Expert
Staff member
Verified
Can you reboot your PC and try again? Don't check any option when you start FRST. Just click Scan.
 

AntaresSQ01

New Member
Well i restarted and it still doesn't finish running, can i get the download link again because i can't find it anymore, maybe it will work now?
 

AntaresSQ01

New Member
Finally got it working, i edited my original post and added the new logs (also quick note, my Windows install is fairly new, i reinstalled windows about a month or 2 ago on a new SSD
 

TwinHeadedEagle

Removal Expert
Staff member
Verified
Please download Zemana AntiMalware and save it to your Desktop.
  • Install the program and once the installation is complete it will start automatically.
  • Without changing any options, press Scan to begin.
  • After the short scan is finished, if threats are detected press Next to remove them.
Note: If restart is required to finish the cleaning process, you should click Reboot. If reboot isn't required, please restart your computer manually.
  • Open Zemana AntiMalware again.
  • Click on
    icon and double click the latest report.
  • Now click File > Save As and choose your Desktop before pressing Save.
  • The only left thing is to attach saved report in your next message.
 

TwinHeadedEagle

Removal Expert
Staff member
Verified
Scan with Farbar Recovery Scan Tool

Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.
  • Right-click on
    icon and select
    Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • Make sure that Addition.txt option is checked.


  • Press Scan button and wait.
  • The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.
Please attach report into your next reply.
 

AntaresSQ01

New Member
Also. just done a quick adwcleaner scan, and its still that file, i think this piece of s*** just keeps putting ads and stuff in my "secure preferences"...