Solved steam and chrome adware malware ads fake flash player ad

[Paul_Collins]

i also get audio ads in the steam overlay, popups of fake flash player out of date popup and cloudscout ads

 

[argus]

Helllo,

My name is Argus and and I will be helping you with your computer problems.

Before we begin, please note the following:

• I will working be on your Malware issues, this may or may not, solve other issues you have with your machine.
• The logs can take some time to research, so please be patient with me.
• Stay with the topic until I tell you that your system is clean. Missing symptoms does not mean that everything is okay.
• Instructions that I give are for your system only!
• Please do not run any tools until requested ! The reason for this is so I know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.
• Please perform all steps in the order received. If you can't understand something don't hesitate to ask.
• Again I would like to remind you to make no further changes to your computer unless I direct you to do so. I will not help you if you do not follow my instructions.

 

[argus]

Scan with ZOEK

Please download ZOEK by Smeenk and save it to your desktop (preferred version is the *.exe one)
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
• Wait patiently until the main console will appear, it may take a minute or two.
• In the main box please paste in the following script:
  

  createsrpoint;
  QuickScan;
  autoclean;
  emptyalltemp;
  ipconfig /flushdns;b

• Make sure that Scan All Users option is checked.
• Push Run Script and wait patiently. The scan may take a couple of minutes.
• When the scan completes, a zoek-results logfile should open in notepad.
• If a reboot is needed, it will be opened after it. You may also find it at your main drive (usually C:\ drive)

Post its content into your next reply.

 

[Paul_Collins]

here is the results for the zoek program

 

[argus]

Tell me is everything okay.

 

[Paul_Collins]

im still getting popups and in steam im getting a deal finder ad

 

[argus]

Fix with AdwCleaner

Please download AdwCleaner by Xplode and save the file to your desktop.

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
• Follow the prompts and click Scan.
• When finished, please click Clean.
• Upon completion, click Report. A log (AdwCleaner[S*].txt) will open.

Please include the contents of that file in your reply.

 

[Paul_Collins]

here is the results from the scan the program did not fix the popup ads

 

[argus]

Re-run zoek and run this script:

C:\WINDOWS\efix.ini;f
C:\WINDOWS\SysWOW64\LavasoftTcpService.ini;f
C:\WINDOWS\SysWOW64\LavasoftTcpServiceOff.ini;f
C:\WINDOWS\SysWOW64\LavasoftTcpService.dll;f
C:\Users\Paul\AppData\Roaming\LavasoftStatistics;fs
C:\Users\Paul\AppData\Local\Lavasoft;fs
C:\Users\Paul\AppData\Roaming\Lavasoft;fs
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft;fs
C:\ProgramData\Lavasoft;fs
createsrpoint;
autoclean;
emptyalltemp;
ipconfig /flushdns;b

 

[Paul_Collins]

here is the scan results and im still getting the little sidebar ads from cloudscout

 

[argus]

I see nothing bad in your reports. Did you try to reset your router?

 

[Paul_Collins]

ill try that now

 

[Paul_Collins]

restarting the router did not affect the ads the website it keeps on sending me is nsl.mapticket.net thats what is poping up browser enabled online adverising

 

[argus]

Tcpip\..\Interfaces\{0557202E-5998-47F4-95F7-D9B08E5C9438}: [NameServer] 31.168.224.100,5.135.12.56
Tcpip\..\Interfaces\{4CAA8726-5D13-4C36-A92D-2AD53015455C}: [NameServer] 31.168.224.100,5.135.12.56

Name Server
Country: Israel

State/Region: Tel Aviv

 

[Paul_Collins]

i dont understand? sorry

 

[argus]

Are you from Tel Aviv?

 

[Paul_Collins]

no nanaimo bc canada

 

[argus]

i dont understand? sorry

These are lines in the log.

 

[argus]

Again Farbar fix

 

[Paul_Collins]

can you copy and paste he lines in the log because i have no clue