more fake google chrome processes

[downhomechunk]

i saw that other users had this issue solved but that the fix files were created for their particular machines. i'm hoping to get the same kind of assistance.

 

[argus]

Hi,



1. Open notepad and copy/paste the text present inside the code box below.
To do this highlight the contents of the box and right click on it. Paste this into the open notepad.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system

C:\Users\morgan\AppData\LocalLow\{E7AE305C-39A3-4FFB-8910-E33B62A071E7}\Jcacvhbrtnb\tctmnaabyyis
HKU\S-1-5-21-4241491024-506926899-3993154103-1000\...\Run: [Cmhysiwv] => regsvr32.exe /s "C:\Users\morgan\AppData\Local\{56AD1659-E116-40E9-B946-5D157B41769E}\Cmhysiwv.dll" <===== ATTENTION
C:\Users\morgan\AppData\Local\{56AD1659-E116-40E9-B946-5D157B41769E}
SearchScopes: HKCU - Comcast URL = http://search.xfinity.com/?cat=subweb&con=mmchrome&q={searchTerms}&cid=xfstart_tech_search
BHO-x32: No Name -> {bb46be07-13eb-4c49-b0f0-fc78b9ea4983} ->  No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  No File
CHR HomePage: Default -> hxxp://us.yhs4.search.yahoo.com/web/partner?&hspart=w3i&hsimp=yhs-syctransfer&type=W3i_SP,203,0_0,StartPage,20131147,20033,0,25,0
CHR StartupUrls: Default -> "hxxp://us.yhs4.search.yahoo.com/web/partner?&hspart=w3i&hsimp=yhs-syctransfer&
EmptyTemp:

2. Save notepad as fixlist.txt to your Desktop.
NOTE: => It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work.


3. Run FRST/FRST64 and press the Fix button just once and wait.
If the tool needed a restart please make sure you let the system to restart normally and let the tool completes its run after restart.

The tool will make a log on the Desktop (Fixlog.txt). Please attach it to your reply.
Note: If the tool warned you about the outdated version please download and run the updated version.

 

[downhomechunk]

yes, that did the trick. you guys perform a great service here. thank you so much!

 

[argus]

Is everything ok now?

 

[downhomechunk]

it sure is. thanks again!

 

[argus]

• The following will implement some post-cleanup procedures:

=> Please download DelFix by Xplode to your Desktop.

Run the tool and check the following boxes below;

Remove disinfection tools

Create registry backup

Purge System Restore
Click Run button and wait a few seconds for the programme completes his work.
At this point all the tools we used here should be gone. Tool will create an report for you (C:\DelFix.txt)

The tool will also record healthy state of registry and make a backup using ERUNT program in %windir%\ERUNT\DelFix
Tool deletes old system restore points and create a fresh system restore point after cleaning.