Surf and Keep/AllCheapPrice/Tuvaro/WatchitNoAds

[TwinHeadedEagle]

PC is clean? Only thing you need to do manually is to set search provider and home page for Chrome.

Manage search engine - set Google as default and delete others --> https://support.google.com/chrome/answer/95653?hl=en

 

[Polyphase Avatron]

But the WatcheItNoeAds extension still appears in Chrome

 

[TwinHeadedEagle]

I see only Adblock, no such extension? Can you make a screenshot...

 

[Polyphase Avatron]

Here it is:

 

[TwinHeadedEagle]

Let's try this fix. Run Zoek again with this script

WatcheItNoeAds;chr
colipmdgfkigfocaelmlmnjidngknlhk;chr

 

[Polyphase Avatron]

It's still there, here is the log.

 

[TwinHeadedEagle]

This is or bug or really stubborn extension

Run this script with Zoek

CHRdefaults;

 

[Polyphase Avatron]

Thanks, that seemed to have fixed it, although I had to reinstall adblock plus.

 

[TwinHeadedEagle]

That's great news

Any other problem to solve?

 

[Polyphase Avatron]

Not at the moment

 

[Polyphase Avatron]

Okay, I've got a new problem. I keep seeing random words underlined in website text and turned into links. I think I might have had this before but it hasn't gone away.

 

[TwinHeadedEagle]

Please download AdwCleaner by Xplode and save to your Desktop.

Double click on AdwCleaner.exe to run the tool.

• Click on the Scan button.
• After the scan has finished click on the Clean button.

Press OK when asked to close all programs and follow the onscreen prompts.
Press OK again to allow AdwCleaner to restart the computer and complete the removal process.

• After rebooting, a logfile report (AdwCleaner[S0].txt) will open automatically.
• Post logfile will also be saved in the C:\AdwCleaner folder.

Then...



Run Zoek with this scrpit

createsrpoint;
StandardSearch;
emptyfolderscheck;
installer-list;
installedprogs;
uninstall-list;

 

[Polyphase Avatron]

Still have the problem after using adwcleaner. Here is the log.

Will do the zoek thing now.

 

[Polyphase Avatron]

Here is the zoek log. BTW, I think the problem has to do with a program called "PEVZ.EXE" which I found running in my task manager (zoek didn't seem to start properly before I terminated it). I looked it up online and it says it's a trojan/malware program.

 

[TwinHeadedEagle]

Run Zoek with this script

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce];r
"Target"=-;r
"Target"=-;r
"Target"=-;r
C:\PROGRA~1\YONTOO;fs
autoclean;

Then, re-run FRST and attach fresh report.

 

[Polyphase Avatron]

Here are the logs, keep in mind to start zoek I had to terminate PEVZ.exe again

 

[TwinHeadedEagle]

Download attached fixlist.txt on the same location as FRST (otherwise the fix won't work)

Open FRST, and click Fix. Attach me that report after it is finished.

 

[Polyphase Avatron]

I did it, but the problem persists. BTW, if it helps, the links that appear often go to bizrate.com or viglink.pgpartner.com

 

[TwinHeadedEagle]

In which browser you have problems?

 

[Polyphase Avatron]

Chrome