Malicious adware, spyware, etc. removal

Posted 8/13/2015 3:16 AM
#124285
User avatar

Deb1957 Advanced member

Date Joined Nov 2016
Total Posts: 78
I have a few problems going on. I am running Windows 7 Ultimate, 32 bit, which I just recently reinstalled. I have Malwarebytes installed and every morning when I turn on my PC it automatically runs, and every morning it comes up with the same 10 threats. They are: PUP.Optional.CrushArcade.A Folder & Files = 5x total, and: PUP.Optional.Gamezooks.A Folder & Files = 5x total. How do I get rid of these, I don't know where to find them on my PC? They are not installed programs. Also, I keep getting pop-ups that open a new tab automatically and my pop-ups are blocked.
Posted 8/13/2015 7:14 AM
#124287
User avatar

Robert Mateescu Advanced member

Date Joined Nov 2016
Total Posts: 422
Hi Deb1957,

Please re-run Malwarebytes and chose to delete all detected items once the scan completes. Reboot the PC, check if the issue persists and post the log.
Also, let me know what browser are you using.


Best wishes!
Robert Mateescu
Senior Support Technician EN
[url]support@bullguard.com[/url]
www.bullguard.com

Download the Free Trial version of BullGuard Internet Security

You have a BullGuard related problem? Contact our Support team directly via Live Chat for immediate assistance: https://www.bullguard.com/support.aspx!
Posted 8/13/2015 7:03 PM
#124288
User avatar

Deb1957 Advanced member

Date Joined Nov 2016
Total Posts: 78
Hi thank you for responding, fortunately I was able to find those files and folders thru my extension settings and I deleted them, so this morning when the Malwarebytes ran they did not appear. However, the other issue with the pop-ups is still happening and it's very aggravating. I am using Google Chrome as my browser and I have pop-ups blocked. I NEVER ever use Internet Explorer. I did go into Chrome yesterday and reset all my settings to default, but these dang pop-ups won't go away. Please help....thank you.
Posted 8/14/2015 9:28 AM
#124289
User avatar

Robert Mateescu Advanced member

Date Joined Nov 2016
Total Posts: 422
Hi Deb1957,

Download AdwCleaner and run a scan with it to remove any leftovers undetected by MalwareBytes.
Next, add the "AdBlock Plus" addon to your Chrome. This will block pop-ups and ads from various websites.
Let me know the result.
Robert Mateescu
Senior Support Technician EN
[url]support@bullguard.com[/url]
www.bullguard.com

Download the Free Trial version of BullGuard Internet Security

You have a BullGuard related problem? Contact our Support team directly via Live Chat for immediate assistance: https://www.bullguard.com/support.aspx!
Posted 8/14/2015 4:47 PM
#124291
User avatar

Deb1957 Advanced member

Date Joined Nov 2016
Total Posts: 78
Ok I will do that today and let you know the result. Thank you so much
Posted 8/14/2015 6:59 PM
#124292
User avatar

Deb1957 Advanced member

Date Joined Nov 2016
Total Posts: 78
I ran the AdwCleaner and this is the log that came up afterwards:


# Updated 09/07/2015 by Xplode
# Database : 2015-08-14.2 [Server]
# Operating system : Windows 7 Ultimate Service Pack 1 (x86)
# Username : Deb1 - DEB1-PC
# Running from : C:\Users\Deb1\Downloads\adwcleaner_4.208.exe
# Option : Cleaning

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Scheduled tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****


***** [ Web browsers ] *****

-\\ Internet Explorer v11.0.9600.17937


-\\ Google Chrome v44.0.2403.155

[C:\Users\Deb1\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Deleted [Homepage] :
[C:\Users\Deb1\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Deleted [Startup_URLs] : 1EC24EFFFCB912EC69889BB0856A59FE97E15F4D3001ADD7E42F07B074B27706"},"software_reporter":{"prompt_reason":"2DA4EC5749CAB111CCDF4D645820C9C89B92E2ECCCD73D91390101581B3FF91A","prompt_seed":"7259366906F0F6E61FD36743624A7611647141CFC0B7C19DCA2B24A6C6DFB205","prompt_version":"D7BDE06138A6CC5A2BE50FB427FC690BEA08129ADDC50233030177FB7A21211B"},"sync":{"remaining_rollback_tries":"EC04C233F45965E6CD788CAC556D85F153B333F2858905EB45071E246BE372E5"}},"super_mac":"050DE51BDB6A6235B3AF817DAF73768F6F742AE8FE635C42552AF4110D6C5D34"},"session":{"startup_urls":["hxxp://search.conduit.com/?ctid=CT3317458&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=4&UP=SPDC0B5DD9-CA94-430F-B747-E8AC71A4952F&SSPV=

*************************

AdwCleaner[R0].txt - [6223 bytes] - [14/08/2015 11:52:00]
AdwCleaner[S0].txt - [1577 bytes] - [14/08/2015 11:54:03]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1636 bytes] ##########
Posted 8/17/2015 2:55 PM
#124294
User avatar

Robert Mateescu Advanced member

Date Joined Nov 2016
Total Posts: 422
Hi Deb1957,

Do you still experience the pop-ups?
According to the AdwCleaner log several entries related to Conduit (a platform which is widely used by toolbar creators) has been removed.
Robert Mateescu
Senior Support Technician EN
[url]support@bullguard.com[/url]
www.bullguard.com

Download the Free Trial version of BullGuard Internet Security

You have a BullGuard related problem? Contact our Support team directly via Live Chat for immediate assistance: https://www.bullguard.com/support.aspx!
  • Unread posts or replies
  • No unread posts or replies
  • Unread Posts (Read Only Forum)
  • No Unread Posts (Read Only Forum)

Forum Information

Currently it is Monday, September 21, 2020, 2:38 PM (GMT +2)
There are a total of 61,828 posts in 13,648 threads.
In the last 3 days there were 1 new threads and 1 reply posts.

Who's online

This forum has 38,580 registered members. Please welcome our newest member, CJT1963.
There are currently no users on-line.
×

Just a minute

Privacy has never been so important.

Nearly 50% of online users are now using a VPN to protect their privacy.

Find out why

…and if it grabs you bag yourself a VPN bargain.

We use cookies to ensure that we give you the best experience on our website. By continuing to browse, we are assuming that you have no objection in accepting cookies. You can change your cookie settings at any time.