-
Hi there and welcome to PC Help Forum (PCHF), a more effective way to get the Tech Support you need!
We have Experts in all areas of Tech, including Malware Removal, Crash Fixing and BSOD's , Microsoft Windows, Computer DIY and PC Hardware, Networking, Gaming, Tablets and iPads, General and Specific Software Support and so much more.
Why not Click Here To Sign Up and start enjoying great FREE Tech Support.
This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.
Strange programs from google in my control panel, why do I have something like this over here? Please help
- Thread starter zarely mario
- Start date
- Status
Please download the FRST 32 bit or FRST 64bit version to suit your operating system. It is important FRST is downloaded to your desktop.
If you are unsure if your operating system is 32 or 64 Bit please go HERE.
Once downloaded right click the FRST desktop icon and select "Run as administrator" from the menu"
If you receive any security warnings, or the User Account Control warning opens at any time whilst using FRST you can safely allow FRST to proceed.
FRST will open with two dialogue boxes, accept the disclaimer.
Then select Scan
Frst will take a few minutes to scan your computer, and when finished will produce two log files on your desktop, FRST.txt, and Addition.txt. They will display immediately on the desktop, but can be reopened later as a notepad file.
Please Attach the contents of these logs in your next post
If you are unsure if your operating system is 32 or 64 Bit please go HERE.
Once downloaded right click the FRST desktop icon and select "Run as administrator" from the menu"
If you receive any security warnings, or the User Account Control warning opens at any time whilst using FRST you can safely allow FRST to proceed.
FRST will open with two dialogue boxes, accept the disclaimer.
Then select Scan
Frst will take a few minutes to scan your computer, and when finished will produce two log files on your desktop, FRST.txt, and Addition.txt. They will display immediately on the desktop, but can be reopened later as a notepad file.
Please Attach the contents of these logs in your next post
I really appreciate it man, my fear is that i have google workspace account (but not downloaded) and they can see what I'm doing on my pc
Uninstall all unknown to you programs with Geek Uninstaller, then re run FRST and post new logs. I am still at work, but will check when I get home.
geekuninstaller.com
Geek Uninstaller - the best FREE uninstaller
Efficient and Fast, Small and Portable. 100% Free
I tried but they are not uninstalling and it crashes but i removed some traces from slides program and gmail
Ok, you can try and use Force removal with geek uninstaller, if not that’s ok. I’ll be home in a few hours to really take a look at everything
I tried to do both... but basically there is no MB to uninstall so this is something like null but still I don't know what it is, I really appreciate you
You need to completely reset chrome.
www.thewindowsclub.com
Uninstall with Geek Uninstaller, then grab a fresh copy from here.
Copy the content of the code box below.
Do not copy the word code!!!
Right Click FRST and run as Administrator.
Click Fix once (!) and wait. The program will create a log file (Fixlog.txt).
Attach it to your next message.
Download RogueKiller and install the program.
Once downloaded and installed, right click and run as admin.
Click the check for updates button.
Go to scan setting then slide the MalPE option right to activate.
Then go to scan, then start a full scan on your machine.
Then click report when the scan completes.
Under Share my report click on open then select text file.
Copy it and paste the results here.
Make sure you do not remove anything detected until I see the log please.
Adware Cleaner
Download Malwarebytes v.4 . Install and run.
How to backup Chrome Bookmarks, History, Passwords, Data, etc.
Here is a complete guide to backup your Chrome bookmarks, history, passwords, and other data on Windows 11/10.
www.thewindowsclub.com
Copy the content of the code box below.
Do not copy the word code!!!
Right Click FRST and run as Administrator.
Click Fix once (!) and wait. The program will create a log file (Fixlog.txt).
Attach it to your next message.
Code:
start::
CreateRestorePoint:
CloseProcesses:
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\118.0.5993.89\Installer\chrmstp.exe [2023-10-19] (Google LLC -> Google LLC)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> No File
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Εφαρμογές Chrome\Gmail.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=fmgjjmmmlfnkbppncabfkddbjimcfncm
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Εφαρμογές Chrome\Google Drive.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=aghbiahbpaijignceidepookljebhfak
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Εφαρμογές Chrome\YouTube.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=agimnkijcaahngcdmfeangaknmldooml
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Εφαρμογές Chrome\Έγγραφα.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=mpnpojknpmmopombnjdcgaaiekajbnjb
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Εφαρμογές Chrome\Παρουσιάσεις.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=kefjledonklijopmnomlcbpllchaibag
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Εφαρμογές Chrome\Υπολογιστικά φύλλα.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=fhihpiojkbmbpdjeoajapmgkhlnakfjf
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs (10).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 79" --app-id=mpnpojknpmmopombnjdcgaaiekajbnjb
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs (12).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 81" --app-id=mpnpojknpmmopombnjdcgaaiekajbnjb
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs (13).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 67" --app-id=mpnpojknpmmopombnjdcgaaiekajbnjb
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs (15).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 64" --app-id=mpnpojknpmmopombnjdcgaaiekajbnjb
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs (16).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 91" --app-id=mpnpojknpmmopombnjdcgaaiekajbnjb
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs (18).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 71" --app-id=mpnpojknpmmopombnjdcgaaiekajbnjb
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs (19).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 60" --app-id=mpnpojknpmmopombnjdcgaaiekajbnjb
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs (2).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 5" --app-id=mpnpojknpmmopombnjdcgaaiekajbnjb
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs (6).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 76" --app-id=mpnpojknpmmopombnjdcgaaiekajbnjb
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs (7).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 66" --app-id=mpnpojknpmmopombnjdcgaaiekajbnjb
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs (9).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 70" --app-id=mpnpojknpmmopombnjdcgaaiekajbnjb
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 1" --app-id=mpnpojknpmmopombnjdcgaaiekajbnjb
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail (10).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 79" --app-id=fmgjjmmmlfnkbppncabfkddbjimcfncm
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail (12).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 81" --app-id=fmgjjmmmlfnkbppncabfkddbjimcfncm
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail (13).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 67" --app-id=fmgjjmmmlfnkbppncabfkddbjimcfncm
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail (15).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 64" --app-id=fmgjjmmmlfnkbppncabfkddbjimcfncm
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail (16).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 91" --app-id=fmgjjmmmlfnkbppncabfkddbjimcfncm
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail (18).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 71" --app-id=fmgjjmmmlfnkbppncabfkddbjimcfncm
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail (19).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 60" --app-id=fmgjjmmmlfnkbppncabfkddbjimcfncm
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail (2).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 5" --app-id=fmgjjmmmlfnkbppncabfkddbjimcfncm
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail (6).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 76" --app-id=fmgjjmmmlfnkbppncabfkddbjimcfncm
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail (7).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 66" --app-id=fmgjjmmmlfnkbppncabfkddbjimcfncm
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail (9).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 70" --app-id=fmgjjmmmlfnkbppncabfkddbjimcfncm
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 1" --app-id=fmgjjmmmlfnkbppncabfkddbjimcfncm
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive (10).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 79" --app-id=aghbiahbpaijignceidepookljebhfak
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive (12).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 81" --app-id=aghbiahbpaijignceidepookljebhfak
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive (13).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 67" --app-id=aghbiahbpaijignceidepookljebhfak
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive (15).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 64" --app-id=aghbiahbpaijignceidepookljebhfak
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive (16).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 91" --app-id=aghbiahbpaijignceidepookljebhfak
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive (18).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 71" --app-id=aghbiahbpaijignceidepookljebhfak
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive (19).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 60" --app-id=aghbiahbpaijignceidepookljebhfak
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive (2).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 5" --app-id=aghbiahbpaijignceidepookljebhfak
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive (6).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 76" --app-id=aghbiahbpaijignceidepookljebhfak
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive (7).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 66" --app-id=aghbiahbpaijignceidepookljebhfak
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive (9).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 70" --app-id=aghbiahbpaijignceidepookljebhfak
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 1" --app-id=aghbiahbpaijignceidepookljebhfak
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets (10).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 79" --app-id=fhihpiojkbmbpdjeoajapmgkhlnakfjf
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets (12).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 81" --app-id=fhihpiojkbmbpdjeoajapmgkhlnakfjf
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets (13).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 67" --app-id=fhihpiojkbmbpdjeoajapmgkhlnakfjf
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets (15).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 64" --app-id=fhihpiojkbmbpdjeoajapmgkhlnakfjf
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets (16).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 91" --app-id=fhihpiojkbmbpdjeoajapmgkhlnakfjf
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets (18).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 71" --app-id=fhihpiojkbmbpdjeoajapmgkhlnakfjf
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets (19).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 60" --app-id=fhihpiojkbmbpdjeoajapmgkhlnakfjf
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets (2).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 5" --app-id=fhihpiojkbmbpdjeoajapmgkhlnakfjf
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets (6).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 76" --app-id=fhihpiojkbmbpdjeoajapmgkhlnakfjf
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets (7).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 66" --app-id=fhihpiojkbmbpdjeoajapmgkhlnakfjf
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets (9).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 70" --app-id=fhihpiojkbmbpdjeoajapmgkhlnakfjf
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 1" --app-id=fhihpiojkbmbpdjeoajapmgkhlnakfjf
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides (10).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 79" --app-id=kefjledonklijopmnomlcbpllchaibag
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides (12).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 81" --app-id=kefjledonklijopmnomlcbpllchaibag
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides (13).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 67" --app-id=kefjledonklijopmnomlcbpllchaibag
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides (15).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 64" --app-id=kefjledonklijopmnomlcbpllchaibag
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides (16).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 91" --app-id=kefjledonklijopmnomlcbpllchaibag
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides (18).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 71" --app-id=kefjledonklijopmnomlcbpllchaibag
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides (19).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 60" --app-id=kefjledonklijopmnomlcbpllchaibag
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides (2).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 5" --app-id=kefjledonklijopmnomlcbpllchaibag
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides (6).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 76" --app-id=kefjledonklijopmnomlcbpllchaibag
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides (7).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 66" --app-id=kefjledonklijopmnomlcbpllchaibag
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides (9).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 70" --app-id=kefjledonklijopmnomlcbpllchaibag
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 1" --app-id=kefjledonklijopmnomlcbpllchaibag
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube (10).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 79" --app-id=agimnkijcaahngcdmfeangaknmldooml
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube (12).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 81" --app-id=agimnkijcaahngcdmfeangaknmldooml
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube (13).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 67" --app-id=agimnkijcaahngcdmfeangaknmldooml
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube (15).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 64" --app-id=agimnkijcaahngcdmfeangaknmldooml
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube (16).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 91" --app-id=agimnkijcaahngcdmfeangaknmldooml
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube (18).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 71" --app-id=agimnkijcaahngcdmfeangaknmldooml
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube (19).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 60" --app-id=agimnkijcaahngcdmfeangaknmldooml
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube (2).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 5" --app-id=agimnkijcaahngcdmfeangaknmldooml
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube (6).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 76" --app-id=agimnkijcaahngcdmfeangaknmldooml
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube (7).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 66" --app-id=agimnkijcaahngcdmfeangaknmldooml
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube (9).lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 70" --app-id=agimnkijcaahngcdmfeangaknmldooml
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 1" --app-id=agimnkijcaahngcdmfeangaknmldooml
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\f154286ea80bc8a1\Goury - Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 66"
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\b86a3b88a56f052c\Wanda - Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 106"
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\99403bcc1c54c5ed\Theodore - Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 103"
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\69639df789022856\Mario (Mario ( work )) - Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 1"
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\472894b1dc08fd81\kolbrall4728 - Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 163"
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\440847f250479454\Derruck - Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 105"
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\2e1a6c5cd28d6402\Jaucob - Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 102"
C:\WINDOWS\system32\drivers\etc\hosts
Hosts:
CMD: del /f /s /q %windir%\prefetch\*.*
CMD: del /s /q C:\Windows\SoftwareDistribution\download\*.*
CMD: del /s /q "%userprofile%\AppData\Local\Google\Chrome\User Data\Default\Cache\*.*"
CMD: del /s /q "%userprofile%\AppData\Local\temp\*.*"
C:\Windows\Temp\*.*
C:\WINDOWS\system32\*.tmp
C:\WINDOWS\syswow64\*.tmp
cmd: netsh advfirewall reset
cmd: netsh advfirewall set allprofiles state On
emptytemp:
Reboot:
End::Download RogueKiller and install the program.
Once downloaded and installed, right click and run as admin.
Click the check for updates button.
Go to scan setting then slide the MalPE option right to activate.
Then go to scan, then start a full scan on your machine.
Then click report when the scan completes.
Under Share my report click on open then select text file.
Copy it and paste the results here.
Make sure you do not remove anything detected until I see the log please.
Adware Cleaner
- Download AdwCleaner and save it to your Desktop
- Right-click on AdwCleaner.exeand select, Run as Administrator
- Accept the EULA (I accept), then click on Scan Now
- Let the scan complete
- Once the scan completes, make sure that every item listed in the different tabs is checked and click on the Clean & Repair button
- Subsequently you may be asked to Run Basic Repair. This is optional. I would suggest holding off on this for now.
- Once the cleaning process is complete, AdwCleaner will ask you to restart your computer
- Close all other open windows and allow it to restart
- After the restart, Notepad will open with the AdwCleaner cleaning log
- Please Attach the contents of that log into your next reply to me
Download Malwarebytes v.4 . Install and run.
- Once the MBAM dashboard opens, click on Settings (gear icon).
- Click on Security tab and make sure that all four Scan options are enabled.
- Close Settings and click on the Scan button on the dashboard.
- Once the scan is completed make sure you have it quarantine any detections it finds.
- If no detections were found click on the Save results drop-down, then the Export to TXT button and save the file as a Text file to your desktop.
- If there were detections then once the quarantine has completed click on the View report button, then click the Export drop-down, then the Export to TXT button, and save the file as a Text file to your desktop or other location you can find and attach that log on your next reply.
- If the computer restarted to quarantine you can access the logs from the Detection History, then the History tab. Highlight the most recent scan and double-click to open it. Then click the Export drop-down, then the Export to TXT button, and save the file as a Text file to your desktop or other location you can find and include that log on your next reply.
- Status