(Aug 1, 2018 06:40 PM)ItsJigSaw Wrote:  Best solution is to just wipe the whole HDD tbh
Anyway, first of all download an ad blocker to disable pop up ads. Then turn off your PC and start it in Safe Mode with Networking. Then when it boots just go to your web browser and remove any search engine(except google) etc. Then go to run > msconfig > startup and check every program that turns on on startup, disable everything u see suspicious. Boot PC normally, go to Task Manager and check processes, anything u see suspicious right click and go to location. Check the folder if u think thats the adware first scan it with malwarebytes and then delete/dont delete. After all of that run a full PC scan with malwarebyes and hope they didnt crypt it and it gets flagged.

(Aug 1, 2018 06:43 PM)Vendorss Wrote:  you're a funny one :D.
Yeah no. Im waiting on Sigma to hmu with fixbar. hes solved it before.
I've tried all above steps but not wiping whole hdd.

(Aug 1, 2018 06:40 PM)ItsJigSaw Wrote:  Best solution is to just wipe the whole HDD tbh
Anyway, first of all download an ad blocker to disable pop up ads. Then turn off your PC and start it in Safe Mode with Networking. Then when it boots just go to your web browser and remove any search engine(except google) etc. Then go to run > msconfig > startup and check every program that turns on on startup, disable everything u see suspicious. Boot PC normally, go to Task Manager and check processes, anything u see suspicious right click and go to location. Check the folder if u think thats the adware first scan it with malwarebytes and then delete/dont delete. After all of that run a full PC scan with malwarebyes and hope they didnt crypt it and it gets flagged.

• Only use this thread for help. Please don't create multiple threads, accounts, PM me or post on other forums - if you do just let me know.
  


• Only follow my guidance.
  


• Don't run tools I haven't asked you to run. If you do just let me know so I can take that into consideration when viewing logs.
  


• DO NOT install any other software while we are attempting to clean your machine. It can get quite confusing especially if you are downloading questionable tools.
  


• Please be prompt in responding. I'll do my best to do so. If >48hrs has passed, please either PM me or ask "Are you there, I still need help" in this thread.
  


• Please stick with me until I give you the 'All Clean'. I'll help you cleanup quickly and offer some tips to make you more secure and get your system running faster.
  


• Your malware related tools will be removed. I don't support the tools often distributed on these forums. Scanners will generally remove these - I take no responsibility for any malicious software that is lost.
  


• I (nor does the forum) support pirated software.
  


• If you don't understand something, don't be afraid to ask - I'm here to help. 😉
  

• https://hastebin.com - here you can upload the .txt file directly. <- I prefer this.
  


• http://pasted.co/ - here you can set a password if you wish to protect your data. Just PM me the password.
  

• If you can't post this: https://hastebin.com/raw/epaduvuyic
  


• Post: I used hastebin, here is the ending /raw/epaduvuyic
  

• Download and install the free version of Malwarebytes
  Note: If you have Malwarebytes already installed, you don't need to install it again. Simply start from the next bullet point
  


• Once Malwarebytes is installed, launch it and let it update his database. You might have to click on the little arrow by Scan Status in the middle right pane for it to do so
  


• Once the database update is complete, click on the Scan tab, then select the Threat Scan button and click on Start Scan
  


• Let the scan run, the time required to complete the scan depends of your system and computer specs
  


• Once the scan is complete, make sure that the first checkbox at the top is checked (which will automatically check every detected item), then click on the Quarantine Selected button
  • If it asks you to restart your computer to complete the removal, do so
    
  
  
  
  


• Click on Export Summary after the deletion (in the bottom-left corner) and select Copy to Clipboard. Paste the content in your next reply
  

• 
  for your Windows version (32 or 64-bit)


• Once done, move the executable file to your Desktop, right-click on it and select Run as Administrator (for Windows Vista, 7, 8, 8.1 and 10 users)
  


• Click on the Start Scan button in the right panel, which will bring you to another tab, and click on it again (this time it'll be in the bottom right corner)
  


• Wait for the scan to complete
  


• On completion, the results will be displayed. Click on the Open Report button in the bottom left corner, followed by the Open TXT button (also in the bottom left corner)
  


• This will open the report in Notepad. Copy/paste its content in your next reply