Solved Unable to eradicate Open Software Updater

spunkyaz

Level 1
Thread author
Jan 26, 2019
6
I have a Windows 10 PC that I have been unable to completely eradicate "Open Software Updater" adware banners. The PC has MalwareBytes Premium installed. The adware banners manifest themselves when playing Words with Friends in Facebook. It happens in both Internet Explorer and Edge on no particular schedule.
Here is what I have tried so far.
Uninstalled "Open Software Updater" using Control Panel
Malwarebytes Support Tool
FRST scan
ADWCleaner
Hitman Pro
CCCleaner
Deleted history, checked installed extensions / add-ons in both browsers and reset both browser programs
Turned off Notifications in Windows and both browsers
 

Attachments

  • Addition.txt
    31.6 KB · Views: 2
  • FRST.txt
    78 KB · Views: 1

TwinHeadedEagle

Level 41
Verified
Mar 8, 2013
22,627
Hello,

Let me know if this helped:


FRST.gif
Fix with Farbar Recovery Scan Tool

icon_exclaim.gif
This fix was created for this user for use on that particular machine.
icon_exclaim.gif

icon_exclaim.gif
Running it on another one may cause damage and render the system unstable.
icon_exclaim.gif

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

  • Right-click on
    FRST.gif
    icon and select
    RunAsAdmin.jpg
    Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • Press the Fix button just once and wait.
  • If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
  • When finishes FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.
 

Attachments

  • fixlist.txt
    4.1 KB · Views: 7
  • Like
Reactions: oldschool

spunkyaz

Level 1
Thread author
Jan 26, 2019
6
Hello,

Let me know if this helped:


FRST.gif
Fix with Farbar Recovery Scan Tool

icon_exclaim.gif
This fix was created for this user for use on that particular machine.
icon_exclaim.gif

icon_exclaim.gif
Running it on another one may cause damage and render the system unstable.
icon_exclaim.gif

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

  • Right-click on
    FRST.gif
    icon and select
    RunAsAdmin.jpg
    Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • Press the Fix button just once and wait.
  • If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
  • When finishes FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.
I ran the FRST with fixlist.
Still getting pop-ups today. I attached the fixlog and 2 pictures,
What else can I try?
 

Attachments

  • Fixlog.txt
    14.5 KB · Views: 4
  • image1.jpg
    image1.jpg
    175.7 KB · Views: 8
  • image2.jpg
    image2.jpg
    171.5 KB · Views: 7
  • Like
Reactions: oldschool

spunkyaz

Level 1
Thread author
Jan 26, 2019
6
The adware banners manifest themselves when playing Words with Friends in Facebook. It happens in both Internet Explorer and Edge on no particular schedule.
 
  • Like
Reactions: oldschool

spunkyaz

Level 1
Thread author
Jan 26, 2019
6
First, let me clarify that it is a friend's PC not mine that is getting the pop ups. She spends most of her PC time playing the Words game in Facebook. The game is played with other people across the Internet. The pop ups happen when an unsolicited browser request is sent to an IP address outside of her local PC. The pop up banners are coming from the Internet. None of the programs run so far have been able to locate the origin of the browser requests. My wife plays the game as well with the person having the problem and does not have the pop up issue. I don't think it is the game, but is most likely a stored script related to browser activity.
 
  • Like
Reactions: oldschool

spunkyaz

Level 1
Thread author
Jan 26, 2019
6
OK, I did not install Chrome. The symptoms went away the day after I posted the results of the FRST fixlist run. It has been over a week with only an occasional notice from Malwarebytes that it is blocking a threat. No more "Open Software Updater" banners. Thanks to TwinHeadedEagle for the FRST fixlist. Consider this issue closed.
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top