[6stringer]

I use Duck 95% of the time as my browser. Lately it's been freezing up frequently. Then a few days ago I started getting these annoying popups saying I had viruses, trojans, and other nasties. I ran Windows defender both the full scan and offline scan and it found nothing. Same with Malwarebytes, Adwcleaner, and Spyware super cleaner. Interestingly, the popups do not appear when using Edge, only when using Google and Duck. Any help would be greatly appreciated.

 

 

Attached Thumbnails

• 

Edited by 6stringer, Yesterday, 01:24 PM.

[Advertisements]

Hello.

Download Farbar Recovery Scan Tool and save it to your desktop. --> IMPORTANT

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

If your antivirus software detects the tool as malicious, it’s safe to allow FRST to run. It is a false-positive detection.

If English is not your primary language, right click on FRST.exe/FRST64.exe and rename to FRSTEnglish.exe/FRST64English.exe

• Double-click the FRST icon to run the tool. When the tool opens click Yes to disclaimer.
• Press Scan button and wait for a while.
• The scanner will produced two logs on your Desktop: FRST.txt and Addition.txt.
• Please attach the content of these two logs in your next reply.

(To attach the files, click on the More Reply Options at the bottom right of the reply area, and then choose Attach File)

[DR M]

Hello.

Download Farbar Recovery Scan Tool and save it to your desktop. --> IMPORTANT

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

If your antivirus software detects the tool as malicious, it’s safe to allow FRST to run. It is a false-positive detection.

If English is not your primary language, right click on FRST.exe/FRST64.exe and rename to FRSTEnglish.exe/FRST64English.exe

• Double-click the FRST icon to run the tool. When the tool opens click Yes to disclaimer.
• Press Scan button and wait for a while.
• The scanner will produced two logs on your Desktop: FRST.txt and Addition.txt.
• Please attach the content of these two logs in your next reply.

(To attach the files, click on the More Reply Options at the bottom right of the reply area, and then choose Attach File)

[6stringer]

Files attached-thank you!

Attached Files

•  FRST.txt   43.01KB   2 downloads
•  Addition.txt   45.91KB   1 downloads

[DR M]

Hi, 6stringer.
 
Thanks for the logs.

Please, adhere to the guidelines below, and then carefully follow, with the same order, all the instructions after:

1. Always ask before acting. Do not continue if you are not sure, or if something unexpected happens!

2. Do not run any tools unless instructed to do so. Also, do not uninstall or install any software during the procedure, unless I ask you to do so.

3. Cracked or pirated programs are not only illegal, but also can make your computer a malware target. Having such programs installed, is the easiest way to get infected. Thus, no need to clean the computer, since, soon or later, it will get infected again. If you have such programs, please uninstall them now, before we start the cleaning procedure.

4. If your computer seems to start working normally, don't abandon the topic. Even if your system is behaving normally, there may still be some malware remnants left over. Additionally, malware can re-infect the computer if some remnants are left. Therefore, please complete all requested steps to make sure any malware is successfully eradicated from your PC.

5. You have to reply to my posts within 3 days. If you need some additional time, just let me know. Otherwise, I will leave the topic due to lack of feedback. If you are able, I would request you to check this thread at least once per day so that we can resolve your issues effectively and efficiently.

6. Logs from malware diagnostic or removal programs can take some time to get analyzed. Also, have in mind that all the experts here are volunteers and may not be available to assist when you post. Please, be patient, while I analyze your logs.

 

 

====================

 

A couple of questions:

 

1. Did you intentionally set these notifications in Chrome?

hxxps://cold448hubcc73bg38eg.junctionspeedforum.co.in; 
hxxps://gm1zoca6.natilboast.com; 
hxxps://qz64kz59j6ck2e.junctionspeedforum.co.in

2. Did you intentionally set the following modifications?

HKU\S-1-5-21-1462896035-2068427216-4135266462-1001\Software\Classes\regfile:  <==== ATTENTION
HKU\S-1-5-21-1462896035-2068427216-4135266462-1001\Software\Classes\.reg:  =>  <==== ATTENTION
HKU\S-1-5-21-1462896035-2068427216-4135266462-1001\Software\Classes\.bat:  =>  <==== ATTENTION
HKU\S-1-5-21-1462896035-2068427216-4135266462-1001\Software\Classes\.cmd:  =>  <==== ATTENTION

[6stringer]

No, I did not set those notifications in Chrome. I wouldn't know how to do so. Thank you