Multiple Chrome.exe processes

weybrew,

It is possible that malware/adware is causing Google Chrome to crash.

Please use the Farbar Recovery Scan Tool as requested, and post its results. The tool is easy to use, has a very good detection rate, and could pinpoint some specifics causing your issues.

Also, please let us know what version of Chrome you are using. To do that, in Chrome, click the 3 small horizontal bars on the far upper right, and select About Google Chrome. You will see the version number, and it will also tell you if Chrome is up to date.

weybrew,

My apology for the delay!

Please open Notepad (Start > All Programs > Accessories > Notepad)
Copy the entire contents of the code box below (Do not copy the word 'code') to Notepad.
Save it to the Desktop, and name it: fixlist.txt

Code:

start
CreateRestorePoint:
CloseProcesses:
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
R2 Everything; C:\Program Files (x86)\Everything\Everything.exe [1048576 2014-08-05] () [File not signed] <==== ATTENTION
C:\Program Files (x86)\Everything
C:\Users\Ted2\AppData\Local\Temp\8.3.30.1-EasyShrx.Dll
C:\Users\Ted2\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpgieedf.dll
C:\Users\Ted2\AppData\Local\Temp\HRBlock_2014_North_Carolina_Upd.exe
C:\Users\Ted2\AppData\Local\Temp\optprosetup.exe
C:\Users\Ted2\AppData\Local\Temp\SandboxieInstall.exe
C:\Users\Ted2\AppData\Local\Temp\setup.exe
C:\Users\Ted2\AppData\Local\Temp\tbsetup.exe
C:\Users\Ted2\AppData\Local\Temp\tmp5hje3btmp.exe
C:\Users\Ted2\AppData\Local\Temp\tmp5lxyxn.exe
C:\Users\Ted2\AppData\Local\Temp\tmp5lxyxn.exetmp.exe
C:\Users\Ted2\AppData\Local\Temp\tmp7hxh59.exe
C:\Users\Ted2\AppData\Local\Temp\tmp7hxh59.exetmp.exe
C:\Users\Ted2\AppData\Local\Temp\tmpauh3wxtmp.exe
C:\Users\Ted2\AppData\Local\Temp\tmpbh9ff4tmp.exe
C:\Users\Ted2\AppData\Local\Temp\tmpbof3ep.exe
C:\Users\Ted2\AppData\Local\Temp\tmpbof3ep.exetmp.exe
C:\Users\Ted2\AppData\Local\Temp\tmpcvkfwx.exe
C:\Users\Ted2\AppData\Local\Temp\tmpcvkfwx.exetmp.exe
C:\Users\Ted2\AppData\Local\Temp\tmpfjvjdl.exe
C:\Users\Ted2\AppData\Local\Temp\tmpfjvjdl.exetmp.exe
C:\Users\Ted2\AppData\Local\Temp\tmphprxn6tmp.exe
C:\Users\Ted2\AppData\Local\Temp\tmpht_oimtmp.exe
C:\Users\Ted2\AppData\Local\Temp\tmpifmmzo.exe
C:\Users\Ted2\AppData\Local\Temp\tmpifmmzo.exetmp.exe
C:\Users\Ted2\AppData\Local\Temp\tmpijtu2q.exe
C:\Users\Ted2\AppData\Local\Temp\tmpijtu2q.exetmp.exe
C:\Users\Ted2\AppData\Local\Temp\tmpilicjn.exe
C:\Users\Ted2\AppData\Local\Temp\tmpilicjn.exetmp.exe
C:\Users\Ted2\AppData\Local\Temp\tmpinitja.exe
C:\Users\Ted2\AppData\Local\Temp\tmpinitja.exetmp.exe
C:\Users\Ted2\AppData\Local\Temp\tmprgihme.exe
C:\Users\Ted2\AppData\Local\Temp\tmprgihme.exetmp.exe
C:\Users\Ted2\AppData\Local\Temp\tmpwrlyll.exe
C:\Users\Ted2\AppData\Local\Temp\tmpwrlyll.exetmp.exe
C:\Users\Ted2\AppData\Local\Temp\tmpzezagstmp.exe
C:\Users\Ted2\AppData\Local\Temp\tmp_lm_6e.exe
C:\Users\Ted2\AppData\Local\Temp\tmp_lm_6e.exetmp.exe
C:\Users\Ted2\AppData\Local\Temp\tmp_qg0xp.exe
C:\Users\Ted2\AppData\Local\Temp\tmp_qg0xp.exetmp.exe
C:\Users\Ted2\AppData\Local\Temp\uninst.exe
C:\Users\Ted2\AppData\Local\Temp\vcredist_x64.exe
C:\Users\Ted2\AppData\Local\Temp\VistaLib64_1.dll
C:\Users\Ted2\AppData\Local\Temp\wpsetup.exe
C:\Users\Ted2\AppData\Local\Temp\_is3BA.exe
C:\Users\Ted2\AppData\Local\Temp\_is5FE6.exe
C:\Users\Ted2\AppData\Local\Temp\_isBB65.exe
C:\Users\Ted2\AppData\Local\Temp\_isD62A.exe
C:\Users\Ted2\AppData\Local\Temp\_isF10A.exe
C:\Users\Ted2\AppData\Local\Temp\{756BE3C9-C366-41EE-86F9-521DD102CAFF}.exe
EmptyTemp:
end

NOTICE: This script is written specifically for this computer!!!
Running this on another computer may cause damage to the Operating System.

Now, please run FRST or FRST64, and press the Fix button, just once, and wait.
If for some reason the tool needs a restart, please let the system restart normally. After that let the tool complete its run.
When done, the tool creates a report on the Desktop called: Fixlog.txt

Please post the Fixlog.txt in your reply.

Also, please try Chrome, and let us know if there is any improvement.

If not better, please run a new scan with FRST and attach the new FRST.txt in your reply.

weybrew said:

Sorry for the delay, ICIT2LOL, but the instructions for Kaspersky tell me to set the USB keyboard to Enable, but to do that I've got to have a non-USB keyboard to access BIOS. Working on it...

Hmm odd one for me I cannot see why Kaspersky is even asking for a keyboard. Once the disk has been made and the BIOS set to boot from whatever source it should just be a matter of putting it in the optical drive when powering up..


Don't suppose you have one or can ask a friend to borrow a wireless one or better still one of the old PS2 types - see pic for the plug end of that. I have often got myself out of a fix using my old Dell XP machine keyboard and mouse when the usual USB fitting ones will not work.

weybrew,

Good job!! Thanks for hanging in there.

The Chrome browser showed as a Developer version. In Developer version, Chrome's internal checks are disabled and adware/malware is able to operate.

Please try Google's Software Removal Tool once again:
https://support.google.com/chrome/an...oval_tool&rd=1
See if, when Chrome reopens, the following page hangs up again:
chrome://settings/resetProfileSettings
Let us know.


As far as all the items that ADWCleaner showed, they are in Quarantine. They are going nowhere, and we can get rid of them any time.

If you wish to create a new User for Chrome, that is fine. However, first try the Software Removal Tool and see how it goes with it.

Also, as requested previously, please let us know what version of Chrome you are using.
To do that, in Chrome, click the 3 small horizontal bars on the far upper right, and select:
About Google Chrome

You will see the version number, and it will also tell you if Chrome is up to date. If not up to date, let it run and update Chrome. Then let us know what version of Chrome is installed.

Two things to cottonball mate would it be an idea to take a quick look in the HKEY's LOCALL and CURRENT > Software to make sure the Goolge stuff has gone??

Plus just how does one get the ADW stuff out of quarantine? - sorry weybrew for going OT a bit