Unable to remove unwanted adware Crazy Score

rosphite1 · 03 Jun 2015

I recently noticed Google Chrome populating its first page from Google Search with Crazy Score ads.
This soon evolved to populating other pages with Crazy Score ads in the margins
Now when I click on anywhere in a web page in Google Chrome it opens another web page of ads - usually with audio
If I need to click on a link in a webpage i need to do so 3 times before the correct link is activated. The other 2 times open ad pages.
Occasionally when i click in a web page it opens a web page with audio that says i'm infected with a virus and need to follow the links [which i don't]. This page completely locks Google Chrome and can only be reactivated by closing Chrome using the "End Process" from the task menu.

I only use IE for hotmail and do not have this problem with IE

Crazy Score is not in the Control Panel> Programs so it cannot be uninstalled.
Crasy Score is not in Chrome Extensions either.

I run Avast (paid) that does not detect it.
HitmanPro detects and cleans it but it comes back on reboot
Adwcleaner detects and cleans it but it comes back on reboot
Malwarebytes detects and cleans it but it comes back on reboot

I've restored the system to long before I ever noticed anything and ran malwarebytes straight afterwards
It detected it again and i've attached a snip of the report
I did the same with HitmanPro and file attached

Can anyone help get rid of this thing, please?

whs · 03 Jun 2015

Try AdwCleaner: AdwCleaner Download

Laith · 03 Jun 2015

@whs He already did that.

A similar thing happend to me. The soultion for me was just to change to Firefox.

JustCall · 03 Jun 2015

I had that nasty virus on my pc too, and I switched to Opera.

Layback Bear · 03 Jun 2015

Here is a very good program to use.
Eset Online free scan. It will take some time.

Free Virus Scan | Online Virus Scanner from ESET

I have always removed everything the scans finds without problems.

Jacee · 03 Jun 2015

You're going to have to 'disable ad-ons' in Google Chrome ... How to disable add-ons/extensions in your browser?

Then Run ESET ....

Hold down Control and click on the following link to open ESET OnlineScan in a new window.
ESET OnlineScan
Click the button.
For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
1. Click on to download the ESET Smart Installer. Save it to your desktop.
2. Double click on the icon on your desktop.
Check
Click the button.
Accept any security warnings from your browser.
Check
Push the Start button.
ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
When the scan completes, push
Push , and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
Push the button.
Push

Layback Bear · 03 Jun 2015

Jacee some how I lost your instruction. It might be on another computer so I copy/past them again on this computer.

@rosphite1

I would suggest you follow Jacee's instructions, she is a expert on such matters.

cottonball · 04 Jun 2015

rosphite1,

Crazy Score can be a tricky one...

If you want to try a faster approach, please use the tool: Zoek

However, temporarily disable your AV program so it does not interfere.
Info on how to disable your security applications > How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs - Security Mini-Guides

Zoek Download > http://download.bleepingcomputer.com/smeenk/zoek.exe

When the download appears, save to the Desktop.
On the Desktop, right-click the Zoek.exe file and select: Run as Administrator
(Give it a few seconds to appear.)

Next, copy/paste the entire script inside the code box below to the input field of Zoek:

Code:

createsrpoint;
autoclean;
emptyalltemp;
ipconfig /flushdns;b

Now...
Close any open Browsers.
Click the Run script button, and wait. It takes a few minutes to run all the script.

When the tool finishes, the zoek-results.log is opened in Notepad.
The log is also found on the systemdrive, normally C:\
If a reboot is needed, the log is opened after the reboot.

Please attach the zoek-results.log in your reply.

Also, please provide an update on how the computer is behaving after running the above script.

jannakirschner · 13 Oct 2015

It is as dangerous as it sounds, which is a big threat to both your computer and privacy. It can corrupt the target machine by all means once infected. The redirect virus can add its malicious add-ons and extension to your browsers like Google, IE, Firefox, etc.

Here are removal steps to help you remove it completely from your PC:

Step 1: Clear away all the cookies of this redirect virus.

Internet Explorer: Select Tools -> Safety -> Delete browsing history, click Delete button to clean up all the cookies.

Step 2: Remove all add-ons and extensions of with this redirect virus.

Internet Explorer: Click on Tools > Manage Add-ons.

Step 3: Erase all the files associated with this redirect virus.

%AppData%Local[random].exe
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\.exe

Step 4: Delete the registry entries injected by this redirect virus.

Go to the Start menu and select Run. Type regedit into the Run dialog box and press OK to start Registry Editor. Search for and delete the following registry entries injected by this redirect virus:

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun “[RANDOM]”
HKEY_CURRENT_USER\Software\Classes\exefile\shell\open\command “IsolatedCommand” = ‘”%1? %
HKEY_CURRENT_USER\Software\Classes\exefile\shell\runas\command “(Default)” = ‘”%1? %

Sources from:
How to Immediately Remove Crazy Score Adware? | Quick Malware Removal

Hope the information can help you!