Avast WEBforum

Other => Viruses and worms => Topic started by: REDACTED on August 04, 2015, 03:52:37 AM

Title: Something strange, possible Adware?
Post by: REDACTED on August 04, 2015, 03:52:37 AM

I'm getting this symbols when trying to open the extensions for adblock plus and avast on google chrome. Someone told me it was adware, but I ran scans with both malwarebytes and avast, and didn't find anything. blocked ads also have all these weird symbols. see attached screen-capture.

OS: Windows 10 Pro 64bit
Browser: Google Chrome
Active extensions:
   AdBlock Plus
   Avast! Online Security

Edit: added more info on the browser

Title: Re: Something strange, possible Adware?
Post by: Pondus on August 04, 2015, 08:19:33 AM

run AdwCleaner   http://www.bleepingcomputer.com/download/adwcleaner/

any change?

if not, see here  https://forum.avast.com/index.php?topic=53253.0
scroll down to second picture. Farbar Recovery Scan Tool ... run as instructed and attach the two diagnostic logs

Title: Re: Something strange, possible Adware?
Post by: REDACTED on August 04, 2015, 01:29:23 PM

The Adware scanner found something, but no change after reboot.

Ran Farbar, here are the 2 logs.

Title: Re: Something strange, possible Adware?
Post by: Pondus on August 04, 2015, 03:15:55 PM

malware experts will be online in a couple of hours ...

Title: Re: Something strange, possible Adware?
Post by: essexboy on August 04, 2015, 04:28:26 PM

Is it just chrome showing this ?

CAUTION :  This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:
 

Quote

CreateRestorePoint:
GroupPolicyScripts: Group Policy detected <======= ATTENTION
RemoveProxy:
EmptyTemp:
CMD: bitsadmin /reset /allusers

 
Save this as fixlist.txt, in the same location as FRST.exe
(https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG)
Run FRST and press Fix
On completion a log will be generated please post that

Title: Re: Something strange, possible Adware?
Post by: REDACTED on August 04, 2015, 04:45:54 PM

installed firefox, issue Isn't present. Haven't touched edge. applied your fix, issue still persists.

Title: Re: Something strange, possible Adware?
Post by: REDACTED on August 04, 2015, 04:50:39 PM

I actually just fixed it. It appears that chrome was using utf_16le for character encoding. No idea why. Checking my system settings to make sure that isn't elsewhere.

sorry to have wasted time everyone.

Title: Re: Something strange, possible Adware?
Post by: essexboy on August 04, 2015, 05:22:58 PM

No problem at least you are clean :)