Author Topic: Advast keeps blocking Chrome with Program File Extension 86 or Syste32 Svchost  (Read 2677 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
Hi,

Today when I turned on my computer just about every webpage in Google Chrome is getting blocked. I ran a scan with zero viruses detected.
I have looked over similar forum posts and had to download mozilla firefox to download and scan using Farbar tool.

I was unsure of what to do after the scan on the forums. I have attached the two farbar logs? Could someone please help me?

REDACTED

  • Guest
Please have patience while I analyze your logs.

REDACTED

  • Guest
Sure no worries thank you :)

REDACTED

  • Guest
Did you add the following Hosts entry?
Hosts: 128.184.225.250      secureaccess.deakin.edu.au

  • Step #1 Fix with FRST
    Make sure that you still have FRST.exe on your Desktop. If you do not have it, download the suitable version from here to your Desktop.
    • Open Notepad.exe. Do not use any other text editor software;
    • Copy and Paste the contents inside the code-box to your Notepad --
Code: [Select]
Start
CreateRestorePoint:
CloseProcesses:
EmptyTemp:
CHR HKU\S-1-5-21-2008571136-615640544-7057609-1002\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-2008571136-615640544-7057609-1002\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com/?ctid=CT3321897&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=4&UP=SP2DC58E30-E0A0-4739-A866-2278419B4983&SSPV=
HKU\S-1-5-21-2008571136-615640544-7057609-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus13.msn.com
SearchScopes: HKU\S-1-5-21-2008571136-615640544-7057609-1002 -> URL http://search.conduit.com/Results.aspx?ctid=CT3321897&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=4&UP=SP2DC58E30-E0A0-4739-A866-2278419B4983&q={searchTerms}&SSPV=
SearchScopes: HKU\S-1-5-21-2008571136-615640544-7057609-1002 -> SuggestionsURL_JSON http://suggest.search.conduit.com/CSuggestJson.ashx?prefix={searchTerms}
SearchScopes: HKU\S-1-5-21-2008571136-615640544-7057609-1002 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
C:\Program Files (x86)\Pando Networks
End
    • Click on File > Save as...
      • Inside the File Name box type fixlist.txt
      • From the Save as type drop down list, choose All Files
    • Save the file to your Desktop;
    • Re-run FRST.exe and click Fix;
      • Note: If FRST advises there is a new updated version to be downloaded, do so/allow this.
    • After the completion, a log will be produced;
    • Attach the log in your next reply.



  • Required Log(s):
    • FRST Fix Log
Regards,
Valinorum

REDACTED

  • Guest
Just doing this now, it is spending a lot of time (Farbar) deleting  Temporary files. the green bar that runs along the bottom isn't moving, (typing on another device).

REDACTED

  • Guest
Did you add the following Hosts entry?
Hosts: 128.184.225.250      secureaccess.deakin.edu.au

Umm Hey I did not see this part, how do I add Host?
This might be why Farbar is frozen...  :-X

REDACTED

  • Guest
Did you add the following Hosts entry?
Hosts: 128.184.225.250      secureaccess.deakin.edu.au

Umm Hey I did not see this part, how do I add Host?
This might be why Farbar is frozen...  :-X
No but continue with the fix. Give FRST.exe at least thirty minutes.

REDACTED

  • Guest
Hey its finished only took 2hrs. Everything seems to be working fine. Avast is not popping up every two seconds blocking all webpages. Do I need to still do the host thing?
ALso thanks so much for your kind help  :D

REDACTED

  • Guest
Give me a fresh FRST scan log just to be sure.