Solved TakeItCheap virus removal

[BritaniaRJ]

Please help, every site gives the same steps and I've done them a few times already! I will do the 3 you ask for and upload them. Thank you so much!

 

[BritaniaRJ]

Here are the logs for FRST

 

[BritaniaRJ]

Here are a few pictures of my screen (sorry for the bad quality, sometimes I had to take the picture quickly before it dissapeared. These pics are from today and yesterday!
The one from Malwarebyte was what I got for the third scan.

 

[BritaniaRJ]

Last AdwCleaner Log:

# AdwCleaner v4.206 - Rapport créé le 14/06/2015 à 20:22:23
# Mis à jour le 01/06/2015 par Xplode
# Base de données : 2015-06-14.1 [Serveur]
# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (x64)
# Nom d'utilisateur : Julie - JULIE-HP
# Exécuté depuis : F:\Mes Documents\Telechargements\adwcleaner_4.206.exe
# Option : Scanner

***** [ Services ] *****


***** [ Fichiers / Dossiers ] *****


***** [ Tâches planifiées ] *****


***** [ Raccourcis ] *****


***** [ Registre ] *****

Clé Trouvée : HKLM\SOFTWARE\DeviceVM

***** [ Navigateurs ] *****

-\\ Internet Explorer v11.0.9600.17840


-\\ Mozilla Firefox v38.0.5 (x86 fr)


-\\ Google Chrome v43.0.2357.124


*************************

AdwCleaner[R0].txt - [7714 octets] - [11/01/2015 17:19:26]
AdwCleaner[R1].txt - [2263 octets] - [12/06/2015 19:44:11]
AdwCleaner[R2].txt - [1611 octets] - [13/06/2015 18:40:31]
AdwCleaner[R3].txt - [1237 octets] - [14/06/2015 17:05:34]
AdwCleaner[R4].txt - [986 octets] - [14/06/2015 20:22:23]
AdwCleaner[S0].txt - [7882 octets] - [11/01/2015 17:22:26]
AdwCleaner[S1].txt - [2306 octets] - [12/06/2015 19:48:14]
AdwCleaner[S2].txt - [1679 octets] - [13/06/2015 18:43:21]
AdwCleaner[S3].txt - [1302 octets] - [14/06/2015 17:11:33]

########## EOF - C:\AdwCleaner\AdwCleaner[R4].txt - [1285 octets] ##########

 

[BritaniaRJ]

Hello! I found them. They were indeed in C

 

[TwinHeadedEagle]

I will continue working with you. How is your PC behaving now?

 

[BritaniaRJ]

Hello! I live in Brasil so I just got up and have not used my computer today. Last night though all the symptoms I described were still present (white square on mozilla, takeitcheap ad on chrome, especially when i use netflix).

 

[TwinHeadedEagle]

Scan with Farbar Recovery Scan Tool

Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• Make sure that Addition option is checked.
• Press Scan button and wait.
• The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.

Please include their content into your next reply.

 

[BritaniaRJ]

Here you go!

 

[BritaniaRJ]

I forgot to write down that I also have ads that pop up sometimes when I click somewhere on a page. Usually happens when the white box is present, but not always. And I use Adblock which use to work really well but not anymore...

 

[TwinHeadedEagle]

You're missing Addition.txt report.

 

[BritaniaRJ]

Both from this morning.

 

[TwinHeadedEagle]

Can you reinstall Mozilla and Chrome?

 

[BritaniaRJ]

I just reinstalled both. I will let you know if anything comes up.

 

[BritaniaRJ]

And I've already had an ad pop up...

 

[TwinHeadedEagle]

In which browser?

 

[BritaniaRJ]

In firefox. And I still had the ad in spotify. I pretty much never use chrome but last night nothing popped up.

 

[TwinHeadedEagle]

Can you reset your router to factory settings?

 

[BritaniaRJ]

What is the router? My internet box? How would that change anything?

 

[TwinHeadedEagle]

Sometimes infected router can spread malicious links and popups.