Need help with fixlist.txt for FRST

[olla_bolla]

Hello,

I need some help with a fixlist.txt

edit: I cant upload the FRST.txt for some reason

 

[nasdaq]

Hello, Welcome to MalwareTips.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

I cant upload the FRST.txt for some reason

I realy need to see the file.

You can try to copy the complete FIRST.TXT in Notepad and paste the contents in your next reply.
If the file is too big you will receive a message indicating so.
Then break the file in two reply.
First copy the content from this line - in Notepad.

from
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 26-01-2023

to and including this entry.

==================== NetSvcs (Whitelisted) ===================

In the second reply copy and paste the rest of the FRST.TXT lines

p.s.
If this second section is also too big forget about it for now.

 

[olla_bolla]

I checked if I can just upload the file and now it works.

edit: I also found a wierd browser extension with AdwCleaner that I cant remove (if I put it in quarantine or delete it, it will still be there after a restart)
seams to be "TradeAdExchange (libedajeiljdoodmokbppgapcfbignci)". I already used Malwarebytes and nothing was found from multiple scans.

 

[nasdaq]

Hi,

Please download the attached Fixlist.txt file to the same folder where the Farbar tool is running from.
The location is listed in the 3rd line of the FRST.txt log you have submitted.

Run FRST and click Fix only once and wait.

The Computer will restart when the fix is completed.

It will create a log (Fixlog.txt) please post it to your reply.
===

Please post the Fixlog.txt and let me know what problem persists.

 

[olla_bolla]

Thank you very much for your help.

The problem is still there, after every restart Adwcleaner detects the Chrome browser extention (libedajeiljdoodmokbppgapcfbignci) that isnt listed anywhere in Chrome.
Deleting it still doesnt work.

 

[nasdaq]

Hi,


Let's see what we can find in the <<< Registry. >>>

Run the Farbar program .exe as an Administrator.

In the Search text area, copy and paste the following:
ExtensionInstallForcelist
Once done, click on the Search Registry button and wait for FRST to finish the search
On completion, a log will open in Notepad. Copy and paste its content in your next reply
====

p.s.

Is this a MAC computer?

 

[nasdaq]

Are you still with me?