Solved Secure surf.net adware and other pop up search engines

[William Newton]

Hi i'm having trouble removing some really pesky adware from my computer. It seems to only effect google chrome when i'm browsing, I get pop ups constantly. I v'e followed the steps on the malware tips website to no avail, and I have also tried spybot search and destroy. Thanks for an reply Will

 

[William Newton]

Addition: Also another piece of adware that iv'e identified is 'lucky searches'

 

[TwinHeadedEagle]

Hello,

Can you update MalwareBytes to the latest version and perform another scan?

 

[William Newton]

Hi thanks for the reply, yes I'll put the scan running now

 

[William Newton]

Iv'e done the scan after updating to the latest version and found some malware finally! Iv'e attached the scan log. I didnt realise I had to update the program manually for Malwarebytes.

 

[TwinHeadedEagle]

Did you remove all found threats? Do you still get the detection?

 

[William Newton]

Hi I successfully quarantined the threats but their are still some popup search engines coming up. Securesearch.net seem's to be gone now though.

 

[TwinHeadedEagle]

Scan with Farbar Recovery Scan Tool

Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• Make sure that Addition.txt option is checked.
  
  
  
  
  
• Press Scan button and wait.
• The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.

Please attach report into your next reply.

 

[William Newton]

Hi iv'e attached the reports Iv'e been browsing and securesearch.net still remains unfortunately.

 

[TwinHeadedEagle]

Please download Zemana AntiMalware and save it to your Desktop.

• Install the program and once the installation is complete it will start automatically.
• Without changing any options, press Scan to begin.
• After the short scan is finished, if threats are detected press Next to remove them.

Note: If restart is required to finish the cleaning process, you should click Reboot. If reboot isn't required, please restart your computer manually.​

• Open Zemana AntiMalware again.
• Click on
  
  icon and double click the latest report.
• Now click File > Save As and choose your Desktop before pressing Save.
• The only left thing is to attach saved report in your next message.

 

[William Newton]

Hi thanks for the reply I scanned with Zemana and it detected two threats.

 

[TwinHeadedEagle]

How is the situation now?

 

[William Newton]

Still getting pop ups they seem to be different each time

 

[TwinHeadedEagle]

Scan with Farbar Recovery Scan Tool

Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• Make sure that Addition.txt option is checked.
  
  
  
  
  
• Press Scan button and wait.
• The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.

Please attach report into your next reply.

 

[William Newton]

Hi here are the reports

 

[TwinHeadedEagle]

Fix with Farbar Recovery Scan Tool

This fix was created for this user for use on that particular machine.

Running it on another one may cause damage and render the system unstable.

​

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• Press the Fix button just once and wait.
• If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
• When finishes FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.

 

[William Newton]

Hi iv'e done the fix thanks so much I opened chrome and got this popup straight away :/ (CryptoCode 2017)

 

[TwinHeadedEagle]

Can you check your extensions?

 

[William Newton]

 

[TwinHeadedEagle]

Can you reinstall Google Chrome? After that do not login into your Google Account and see if this behaviour is fixed.