Forum Home
Press F1
 
Thread ID: 139097 2015-03-10 19:07:00 Adware Infection andrew_k (16411) Press F1
Post ID Timestamp Content User
1396129 2015-03-10 19:07:00 My PC has become infected with Adware. Everytime I browse something in Google Chrome ads popup everywhere. Same thing happens when I click on a link. When I go to More Tools -> Extensions there is something like WorldWideCoupon or SharkManCoupon. I delete the extension, run Malwarebytes and Spybot Search and Destroy and hope everything is ok. But in a day or 2 it's back. I've looked in Control Panel -> Programs and Features, but there is nothing new there (as you would expect). I can't see any immediately odd looking processes in Task Manager either. I am at a loss to know what to do, this is driving me nuts. Currently I am thinking of simply re-formatting and re-installing Windows 8 to get rid of this thing. Any guidance hugely appreciated. andrew_k (16411)
1396130 2015-03-10 19:49:00 You probably need to turn off system restore then run those and turn it back on afterwards. gary67 (56)
1396131 2015-03-10 20:15:00 Its not system restore doing this, unless you have been restoring the system using it :-)

a few things to do: (this is from memory, so you'll have to hunt around a bit to find where these are)
- Chrome settings -advanced - reset/default : puts chrome back to default settings . Also check under settings - extentions
- control panel, internet - the last tab has a reset button ** this is quite important **
- go to a command prompt (dos box) : run , cmd . type in ipconfig /all . Look for DNS . Do a google seach on that DNS number & see who it belongs to.
- your router could have been hacked. There are quite literally millions of easily hacked routers out there . Check the DNS setting in your router.
While youre there, make sure the modem/routers password is something descent (not admin/admin or 1234) . Also turn off any remote management of the
router (ie management via WAN or LAN)

- Sometimes the IE/Chrome shortcut itself gets changed by malware. Right click the shortcut,
it should be something like "C:\Program Files\Mozilla Firefox\firefox.exe" , NOT something like "C:\Program Files\Mozilla Firefox\firefox.exe hyackme "
ie nothing after the .exe

Also could be you are going to a website that is re-infecting the PC , or opening a email link to infected websites.
1101 (13337)
1396132 2015-03-10 20:45:00 Plenty of info here malwaretips.com

Just crap bundled with software that is becoming usual in today's world

unchecky can help weeding out piggyback software http://unchecky.com/
Lawrence (2987)
1396133 2015-03-11 18:31:00 Thanks so much for your replies. I did all the things you recommended. I also checked my Chrome installation and noticed there was a Chrome.old in there - ie there were 2 installations in the same folder(?). So uninstalled Chrome and deleted all the folders under the User directory related to it. Then ran a registry cleaner, re-booted and reinstalled. All good so far, fingers crossed. Huge thanks once again, I really appreciate your taking the time to help me out. andrew_k (16411)
1396134 2015-03-11 19:21:00 Andrew. You described your problem as adware, in which case I would
suggest to you and any other users that you download, save and run
AdwareCleaner . This has proved to be a valuable asset to have in your
scanning armoury and is frequently updated. Get it here:
www.bleepingcomputer.com
blanco (11336)
1