• Hi there and welcome to PC Help Forum (PCHF), a more effective way to get the Tech Support you need!
    We have Experts in all areas of Tech, including Malware Removal, Crash Fixing and BSOD's , Microsoft Windows, Computer DIY and PC Hardware, Networking, Gaming, Tablets and iPads, General and Specific Software Support and so much more.

    Why not Click Here To Sign Up and start enjoying great FREE Tech Support.

    This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Closed/Inactive Weird undetectable malware

Status
Not open for further replies.

Okama

PCHF Member
Jan 15, 2019
1
0
25
Okay so I'm quite a noob on this whole computer thing, so I don't know where to find the logs or even what specs my computer has. It's an RoG, so it's supposed to be quite resistant, with McAfee SafeSearch to protect my browser and Avast if needed. I have this weird thing happening since a week or so, where multiple events happen:
- Each time I do a search on Google, other results will spawn at the top of the page, looking just like regular links, but will then redirect me to ads - and they also spawn randomly in the actual results. This also includes video searching and image searching. (1 is the page 0.5 seconds before the actual ads appear, and 1bis is after)
- When clicking on a regular link, a new page will automatically open and redirect me to the same search I just did, but with Yahoo. (2)
- There are local ads that show up on every single type of video I try to watch. By local ads, I mean those stupid things that ask me if i wanna have sex with girls from my region. On YouTube videos, they appear at the bottom of the screen looking like regular YouTube ads, but if closed spawn again 20 seconds later. (3)
- These local ads also appear on my home page in YouTube, replacing the miniatures and titles of videos but not the name of the channel, making it look like an actual video. (4)
- They also appear in front of other kind of video players, but in those cases totally prevent me from opening it or reading the video. (5)
I tried running Avast (a smart scan, a full scan, a localised scan...). It found 2 malwares and removed them but nothing helps.

Whatever that is, it is extremely well thought out and goddamn infuriating, I'm loosing my mind. If you can help me then I beg you to do so hahaha
Also if you need anything from me, just explain to me the steps I need to take and I will send it.
Thanks again!!
PS: results in french are normal, i'm actually french hahah
 

Attachments

  • 1.JPG
    1.JPG
    140 KB · Views: 16
  • 1bis.JPG
    1bis.JPG
    138.7 KB · Views: 37
  • 2.JPG
    2.JPG
    170 KB · Views: 16
  • 3.JPG
    3.JPG
    137.9 KB · Views: 18
  • 4.JPG
    4.JPG
    243.2 KB · Views: 10
  • 5.JPG
    5.JPG
    115.8 KB · Views: 10
Hello Okama,

Please go HERE and download AdwCleaner to your Desktop. Once downloaded right click the new icon and select Run as Administrator from the context menu to open the program. It will open at the Dashboard tab and no further changes to the program are necessary at this stage.

Click the Scan Now button.

ILRtByH.jpg


Allow AdwCleaner to start scanning and depending on the amount of data on your PC it may take some time. At the conclusion of the scan any content considered unnecessary will be displayed in the Scan Results box. Ensure all items are selected for removal and click "Clean & Repair"

rodxNou.jpg


After selecting "Clean & Repair" another dialogue box may appear asking to restart now or later. If so choose "Clean & Restart Now"

sAbeW6Z.jpg


Once the PC has restarted if AdwCleaner does not restart then open it again and click "Log Files" tab on the left. All log files will be listed. If you have used the program previously you may have several logs to select from so double click the most recent "Clean" log and it will open a notepad file on your Desktop.

Please COPY and PASTE the contents of that file in your next post:)



We need a log from Farbar Recovery Scan Tool (FRST) to examine your system.

Please download the FRST 32 bit or FRST 64bit version to suit your operating system. It is important FRST is downloaded to your desktop.

If you are unsure if your operating system is 32 or 64 Bit please go HERE.

Once downloaded right click the FRST desktop icon and select "Run as administrator" from the menu"

icon2-jpg.112


If you receive any security warnings, or the User Account Control warning opens at any time whilst using FRST you can safely allow FRST to proceed.
Frst will open with two dialogue boxes, accept the disclaimer.

frst-disclaimer-jpg.113


Accept the default whitelist options,
  1. If the additions.txt options box is not checked please select it.
  2. Then select "Scan"
frst-jpg.114


Frst will take a few minutes to scan your computer, and when finished will produce two log files on your desktop, FRST.txt, and Addition.txt. They will display immediately on the desktop, but can be reopened later as a notepad file.

2016-08-12_152002-jpg.115



Please COPY and PASTE the contents of these two files in your next post.:)

So your next post should contain

A posted (not attached) Adwcleaner file
A posted (not attached) FRST .txt file
A posted (not attached) FRST Addition.txt file.:)
 
Status
Not open for further replies.