Author Topic: Something strange, possible Adware?  (Read 2123 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
Something strange, possible Adware?
« on: August 04, 2015, 03:52:37 AM »
I'm getting this symbols when trying to open the extensions for adblock plus and avast on google chrome. Someone told me it was adware, but I ran scans with both malwarebytes and avast, and didn't find anything. blocked ads also have all these weird symbols. see attached screen-capture.

OS: Windows 10 Pro 64bit
Browser: Google Chrome
Active extensions:
   AdBlock Plus
   Avast! Online Security

Edit: added more info on the browser
« Last Edit: August 04, 2015, 04:38:37 AM by donham.chris@gmail.com »

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37504
  • Not a avast user
Re: Something strange, possible Adware?
« Reply #1 on: August 04, 2015, 08:19:33 AM »
run AdwCleaner   http://www.bleepingcomputer.com/download/adwcleaner/

any change?

if not, see here  https://forum.avast.com/index.php?topic=53253.0
scroll down to second picture. Farbar Recovery Scan Tool ... run as instructed and attach the two diagnostic logs



« Last Edit: August 04, 2015, 08:27:03 AM by Pondus »

REDACTED

  • Guest
Re: Something strange, possible Adware?
« Reply #2 on: August 04, 2015, 01:29:23 PM »
The Adware scanner found something, but no change after reboot.

Ran Farbar, here are the 2 logs.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37504
  • Not a avast user
Re: Something strange, possible Adware?
« Reply #3 on: August 04, 2015, 03:15:55 PM »
malware experts will be online in a couple of hours ...


Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Something strange, possible Adware?
« Reply #4 on: August 04, 2015, 04:28:26 PM »
Is it just chrome showing this ?

CAUTION :  This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:
 
Quote
CreateRestorePoint:
GroupPolicyScripts: Group Policy detected <======= ATTENTION
RemoveProxy:
EmptyTemp:
CMD: bitsadmin /reset /allusers

 
Save this as fixlist.txt, in the same location as FRST.exe

Run FRST and press Fix
On completion a log will be generated please post that

REDACTED

  • Guest
Re: Something strange, possible Adware?
« Reply #5 on: August 04, 2015, 04:45:54 PM »
installed firefox, issue Isn't present. Haven't touched edge. applied your fix, issue still persists.

REDACTED

  • Guest
Re: Something strange, possible Adware?
« Reply #6 on: August 04, 2015, 04:50:39 PM »
I actually just fixed it. It appears that chrome was using utf_16le for character encoding. No idea why. Checking my system settings to make sure that isn't elsewhere.

sorry to have wasted time everyone.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Something strange, possible Adware?
« Reply #7 on: August 04, 2015, 05:22:58 PM »
No problem at least you are clean :)