+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: Malware, Rat, and Virus Removal (https://hackforums.net/forumdisplay.php?fid=110)
+---- Thread: [Infected] Ad-ware (/showthread.php?tid=5604198)
Ad-ware - xSuccess - Apr 20, 2017
On google chrome, i constantly have random ads popping up, taking control of chrome.
It'll come up on my home page with "secure search" change my homepage sometimes with dodgy websites, however in settings everything seems to be ok.
I cleared out all my extensions thinking that could be the problem, and it got worse. It started spamming me with new tabs telling me to add extensions etc.. (obviously i didn't)
I took to the internet to try and fix my problem, i was told to run programs like malwarebyte and adwcleaner, still no luck, its stuck there.
HF is possibly my last resort
* - 5chn4pp - Apr 20, 2017
Please download Farbar Recovery Scan Tool and save it to your Desktop.
Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
- Right click to run as administrator. When the tool opens click Yes to disclaimer.
- Press Scan button.
- It will produce logs called FRST.txt and Addition.txt in the same directory the tool is run from.
- Please copy and paste the logs back here using pastebin.
* - xSuccess - Apr 20, 2017
(Apr 20, 2017 04:53 AM)Satudarah Wrote: Please download Farbar Recovery Scan Tool and save it to your Desktop.https://pastebin.com/AbWFZJyQ
Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
- Right click to run as administrator. When the tool opens click Yes to disclaimer.
- Press Scan button.
- It will produce logs called FRST.txt and Addition.txt in the same directory the tool is run from.
- Please copy and paste the logs back here using pastebin.
* - Sparkfear - Apr 20, 2017
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.46.1.0328 - DT Soft Ltd)
Please get rid of Daemon Tools Lite.
I've also noticed you have a lot of programs installed, you might want to get https://www.revouninstaller.com/ and uninstall what you're not using or if something is outdated.
* - 5chn4pp - Apr 20, 2017
(Apr 20, 2017 06:24 AM)Sparkfear Wrote: DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.46.1.0328 - DT Soft Ltd)
Please get rid of Daemon Tools Lite.
I've also noticed you have a lot of programs installed, you might want to get https://www.revouninstaller.com/ and uninstall what you're not using or if something is outdated.
Whats wrong with Daemon tools?
OP ill get back to you in a sec when i have the fix for your computer.
* - Sparkfear - Apr 20, 2017
(Apr 20, 2017 06:26 AM)Satudarah Wrote: Whats wrong with Daemon tools?
OP ill get back to you in a sec when i have the fix for your computer.
Lots of people have reported finding malware/adware after installing Daemon Tools.
Therefor I personally just don't trust it.
* - 5chn4pp - Apr 20, 2017
Download fixlist.txt file and save it to the Desktop.
NOTE. It's important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system
Run FRST/FRST64 and press the Fix button just once and wait.
If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.
(Apr 20, 2017 06:32 AM)Sparkfear Wrote: Lots of people have reported finding malware/adware after installing Daemon Tools.
Therefor I personally just don't trust it.
I use it everyday and ive had no problem with it, i would be very surprised if actual malware came with daemon tools lmao
* - xSuccess - Apr 20, 2017
(Apr 20, 2017 06:46 AM)Satudarah Wrote: Download fixlist.txt file and save it to the Desktop.https://pastebin.com/haZgjhyW
NOTE. It's important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system
Run FRST/FRST64 and press the Fix button just once and wait.
If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.
I use it everyday and ive had no problem with it, i would be very surprised if actual malware came with daemon tools lmao
Since i done this i didn't get any pop ups on chrome when i first booted, ill update if i notice any
* - 5chn4pp - Apr 20, 2017
I'd advise you to also change passwords, ive just removed a rat/keylogger that caused this.
To make sure your computer is clean, repeat the steps again and provide new FRST files please.
* - xSuccess - Apr 20, 2017
https://pastebin.com/ZjbnzU97
* - 5chn4pp - Apr 20, 2017
Looks clean so far, if you have any issues let me know 🤝
* - JPVPk - Apr 20, 2017
Adware has been a pain in my ass for a long time now, I've done everything, yet some keep coming back, all I do is run malwarebytes, get rid of it for a while. Removed all scheduled tasks yet it wont go away xD