New
#21
Thanks for your input, ICIT2LOL, but as I am not a techie I'd prefer to hold off on this as I'm not sure how to handle this procedure.
Thanks for your input, ICIT2LOL, but as I am not a techie I'd prefer to hold off on this as I'm not sure how to handle this procedure.
weybrew,
ADWCleaner is best used under the guidance of someone that knows how to research the things that it finds. In your case, it found two Chrome Extensions that are considered Potentially Unwanted Programs. The first extension listed in the scan results was probably responsible for your problems with Chrome and it might have brought in other Potentially Unwanted Programs.
The jury is still out on the second extension mentioned in the scan log from ADWCleaner. I found no reason for that extension to be flagged. But there are other (better?) extensions that can do what that one did for you. Forum rule #13 prevents us from talking about this.
One issue detected by ADWCleaner is Wavepad from NCH Software. You can read about that here: What's The Problem With NCH Software & How To Remove It? That article is just FYI. Don't take any action toward removal of that software just yet. For what it is worth, I installed the current version of Wavepad into a Virtual Machine and scanned it with ADWCleaner. Wavepad was not flagged as bad. I still would suggest that you stay away from NCH Software.
I would also avoid any downloads from Softonic and CNET.
Downloading television shows via torrent software is also a bad idea.
As you have found, Microsoft Security Essentials is not going to flag most Potentially Unwanted Programs. You will probably need to use other scanners (like Malwarebytes) to watch for PUPs.
WOW! Thank for all this info, UsernameIssues. I see WavePad mentioned but I don't see the other items you pointed out. I didn't consciously install this. And why didn't it affect Firefox or IE? If ADW has it quarantined, is it still harmful? I'll stand by until you give me further instructions.
Things that are quarantined should no longer be a problem.
WavePad might have come in via some other software installation. As far as getting rid of it, I would wait for advice from someone that normally helps with these type of things to pick up your thread. (That would not be me
The two extensions that I mentioned are specific to Chrome - they should only impact Chrome:
...Google\Chrome\User Data\Default\Extensions\lbfehkoinhhcknnbdgnnmjhiladcgbol\
Searching online for that red part, led me to this info. I cannot be positive that the extension that you had is that exact one, but judging from the way that Chrome was acting, it probably was. That long string of letters is supposed to uniquely identify an extension. As you can see from the info that I linked to, the bad guys (and gals) are using the same letters and names like Evernote to fool people.
...Google\Chrome\User Data\Default\Extensions\cbhfdchmklhpcngcgjmpdbjakdggkkjp\
Searching online for that red part, led me to this info. Again, I cannot be positive that the extension that you had is that exact one. I would have to examine some of the files that were quarantined to be sure... but it is not worth doing that now.
The extensions are not a problem after ADWCleaner quarantined them - but something on your computer could put them back without you doing a thing (even with Microsoft Security Essentials watching). There are ways for infections to hide from antivirus products. That is why offline scanners are used. "Offline" meaning that the Operating System (in this case Windows) is not running during the scan. There are lots of offline scanners out there. Here are some of them. I usually point people to this one because of its simplicity. The user interface to WDO (Windows Defender Offline) will look just like MSE (Microsoft Security Essentials). But don't do anything until someone that normally helps with these type of things picks up your thread.
SoftwareUpdater.Bootstrapper seems to be a PUP (Potentially Unwanted Program) that ADWCleaner removed.
grooveshark-dlm_Setup_softonic_en-US.exe probably offers adverts and other software while installing the Grooveshark download manager. Some of the installers from Softonic and CNET are just not worth using. There are safer places to get apps from. Places where the installers have not been modified to deliver PUPs.
While you are waiting for guidance/instructions - you might want to download/run Process Explorer from Sysinternals (A Microsoft company). You can use this tutorial to help you make use Virus Total scans via the Process Explorer tool. Think of it like a better version of Task Manager. It does not remove or change things. It just lets you see more info about what is running. Apps can still hide from it :-(
Last edited by UsernameIssues; 10 Jul 2015 at 21:30. Reason: typo
Thanks again for all the terrific and detailed info...I'm going to learn a lot. I've run another AdwCleaner scan FYI. Maybe it has more information that will be helpful.
weybrew,
Please go to Start >Control Panel and click the System icon.
Select: System Protection (on the left column)
When the prompt appears, click the bottom button labeled: Create
This action saves your system settings as they are now.
Now, please try Google's Software Removal Tool for Chrome:
https://support.google.com/chrome/an...oval_tool&rd=1
When done, use Chrome, and see how it goes.
If still the same issues, please use the Farbar Recovery Scan Tool.
Download: Farbar Recovery Scan Tool Download
Select the version that applies to your system.
Save it to your Desktop.
Double-click the downloaded file to run it.
When the tool opens, click Yes to the disclaimer.
Press the Scan button.
When done, the tool makes a log, FRST.txt, in the same directory from which the tool is run (Desktop).
Please provide the FRST.txt in your reply.
The first time the tool is run, it also creates another log: Addition.txt
Also post the Addition.txt in your reply.
Last edited by cottonball; 10 Jul 2015 at 22:35.
Hmm well it is all laid out in that link and it runs like I say without Windows being involved and will scan through everything not just the OS. But the choice is yours - I am just concerned that ADW came up with so much stuff and not to run this scan to check where ADW doesn't would be a shame.
If the making of the disk is causing you concern as in mashing up the OS or your data then it will not.
All you need to do is download the software from Kaspersky and then use the Windows burning feature to make the disk - or stick plus make it bootable too.
If there are any steps you are not sure of there are plenty of us to guide you through.![]()
To UsernameIssues Post #27...I did not edit any of the previous attachments and I have not added any search engines. Where is all this stuff coming from? I just ran Google's Software Removal Tool (per cottonball) and when Chrome reopened this page was opened and hung up...would not load...chrome://settings/resetProfileSettings.
Will proceed with cottonball.
To Cottonball post #26 Thanks for picking up on my Chrome woes.
I've run the Google Software Removal Tool and it found no programs, but the Chrome restart gave me a tab that would not load...chrome://settings/resetProfileSettings.
My run of the Farbar Recovery Scan Tool gave the results as attached.
Will await your review. Thanks.