Malware/virus will not allow me to play videos

[Curson]

Hi cyke,

Please use the "Attach" feature, when a report is too long.
Uninstall the following softwares using Add/Remove programs (if present) :

BrowseFox
Best Buy pc app

Download attached fixlist.txt file and save it to the Desktop.
NOTE. It's important that both files, FRST64 and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system !

Run FRST64 and press the Fix button just once and wait.
If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
When finished FRST will generate a log on the Desktop (Fixlog.txt). Please attach it to your reply.

How is the computer running now ?

Regards.

[cyke]

Hello Curson,

Sorry about not using the attach feature. I followed your instructions and the same issue persists. I've attached a copy of the log. Also I think the problem might be related to my ad block plus add on in google chrome. I noticed I had two of the same add on. One of the ad block plus had grammatical errors, which I believe are a sign of fake/malicious software? I deleted the extension. One ad block plus still remains. Thanks again for all your help.

[Curson]

Hi cyke,

Don't worry about that.

Please download Malwarebytes Anti-Malware and save it to your desktop.

• Double-click on the setup file (mbam-setup.exe), then click on Run to install.
  Malwarebytes will automatically open to it's Dashboard. If you have never run this version, you should see a red note at the top indicating "A scan has never been run on your system".
  

• Click on Update Now to download the current database definitions, then click the Scan Now button.
  If you have run this version before, you should see a green note at the top indicating "Your system is fully protected".
  

Please launch a THREAT SCAN.
When the scan has completed, the results will be displayed. Click on Quarantine All, then click on Apply Actions.

To complete any actions taken you will be prompted to restart your computer...click on Yes.
Failure to reboot normally will prevent Malwarebytes from removing all the malware.

After rebooting the computer, attach the mbam.log in your next reply.

To retrieve the scan log information (Method 1) :

• Open Malwarebytes Anti-Malware.
• Click the History Tab at the top and select Application Logs.
  
• Select the box next to Scan Log. Choose the most current scan.
  
• Click the Export button and save the log as a .txt file on your Desktop or another location.
  
• Be sure to post the complete log to include the top portion which shows MBAM's database version and your operating system.

To retrieve the scan log information (Method 2) :

• Open Malwarebytes Anti-Malware.
• Click the Scan Tab at the top.
  
• Click the View detailed log link on the right.
  
• Click the Export button and save the log as a .txt file on your Desktop or another location.
  
• Be sure to post the complete log to include the top portion which shows MBAM's database version and your operating system.

Alternatively, logs are named by the date of scan in the following format: mbam-log-yyyy-mm-dd and automatically saved to the following locations:

• -- XP: C:\Documents and Settings\<Username>\Application Data\Malwarebytes\Malwarebytes Anti-Malware\Logs\mbam-log-yyyy-mm-dd
• -- Vista, Windows 7/8: C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\Logs\mbam-log-yyyy-mm-dd

Regards.

[cyke]

Hey Curson,

did it, still same issue

thanks

[Curson]

Hi cyke,

Could you please generate a new FRST log and attach it with your next reply ?

Regards.

[cyke]

Hey Curson,

Here it is

[Curson]

Hi cyke,

Let's try another fix.
Download attached fixlist.txt file and save it to the Desktop.
NOTE. It's important that both files, FRST64 and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system !

Run FRST64 and press the Fix button just once and wait.
If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
When finished FRST will generate a log on the Desktop (Fixlog.txt). Please attach it to your reply.

How is the computer running now ?

Regards.

[cyke]

Hey Curson,

Here it is, same issue still

[Curson]

Hi cyke,

Is the issue only occuring with Chrome ?
Please try the following process : Create a new browser user profile.

Regards.

[cyke]

Hey Curson,

I usually only use Chrome. Since this started I've tried firefox and IE, both have the same issue. I created a new browser profile, did not import anything, but still the same problem.

[Curson]

Hi cyke,

We are going to check for rootkits.

• Please download TDSSKiller and save it to your Desktop
  
• Doubleclick on TDSSKiller.exe to run the application, then click on Change parameters.
  
  
  
  
• Check Loaded Modules and Detect TDLFS file system. 
  
• If you are asked to reboot because an "Extended Monitoring Driver is required" please click Reboot now.
  
  
  
  
• Click Start Scan and allow the scan process to run.
  If threats are detected select Skip for all of them unless I instruct you otherwise.
  
• Click Continue
  
  
  
  
• Click Reboot computer
  

Please attach the contents of TDSSKiller.[Version]_[Date]_[Time]_log.txt found in your root directory (typically c:\)in your next reply.

Regards.

[cyke]

Hey Curson,

I followed your instructions. Downloaded TDSSKiller, changed the parameters, rebooted, ran the search. The search didn't find any threats. I can view the report but there doesn't seem to be a way to save the file?

[cyke]

Curson,

Thanks again for the help. have to step away be back in an hour.

cyke

[Curson]

Hi cyke,

This is really a troublesome one.
If TDSSKiller didn't detect anything, I don't need the report.
Are the two tabs still opening on Chrome ? Even with the new profile ?

Start FRST and check the "Shortcut.txt" option, than redo a scan.
It will produce a log called Shortcut.txt in the same directory the tool is run from. Please attach it with your next reply.

Regards.

EDIT : Typo

[cyke]

Hi Curson

Since creating the new browser profile, no those two tabs do not open when I open google chrome. I've attached the schortcut log.

cyke