Smart Comp Safe Network keeps downloading from chrome extentions

Closed
Ezpz Posts 35 Registration date Wednesday November 25, 2015 Status Member Last seen August 15, 2016 - Jan 18, 2016 at 02:31 PM
Ambucias Posts 47310 Registration date Monday February 1, 2010 Status Moderator Last seen February 15, 2023 - Jan 29, 2016 at 04:45 AM
Hello,

I've already made a post about this adware/virus and have come to the conclusion that it re-downloads from my chrome extensions. However, that topic/question was closed and I never got an answer to which extensions I should be looking for to completely get rid of it; as it had come back a few times recently. I've used adwcleaner to temporarily get rid of it when it had come back. Here's a current ZHP log that I ran: http://speedy.sh/FRMF2/ZHPDiag.txt
Related:

2 responses

Ambucias Posts 47310 Registration date Monday February 1, 2010 Status Moderator Last seen February 15, 2023 11,164
Jan 18, 2016 at 05:00 PM
Hello

Here are the extensions you should remove:

cmeakgjggjdlcpncigglobpjbkabhmjl]
ghahcnmfjfckcedfajbhekgknjdplfcl]
[laealigljflmglcgncipdbmbjgjdpiim
[lmghlkojlhlonaoajjkcaghofehipfnp

Also, very important:

Script ZHPFix
FirewallRaz
EmptyPrefetch
EmptyTemp
EmptyFlash
[MD5.E088B3298B9CD1B02882E44EEA5D4626] [APT] [Audio Defender Viewer] (.Backup Updater.) -- C:\Program Files (x86)\Audio Defender\AudioDefender.exe [422400]
O39 - APT: Audio Defender Viewer - (.Backup Updater.) -- C:\WINDOWS\System32\Tasks\Audio Defender Viewer [3746]
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 127.0.0.1:8118
O45 - LFCP:[MD5.07A72B706EB372AF01D7A141FBFC6560] 18/01/2016 A -- C:\WINDOWS\Prefetch\PRIVOXY.EXE-34E51078.pf
C:\Program Files (x86)\Audio Defender\AudioDefender.exe
C:\WINDOWS\System32\Tasks\Audio Defender Viewer
C:\WINDOWS\Prefetch\PRIVOXY.EXE-34E51078.pf


Click on the the Import button and the lines will automatically paste themselves.

Click on the Go button to clean

Confirm by clicking OK

ZHP Fix will ask if you wish to empty the bin, click on your choice...it may take time

A report will appear on your desktop and on C:\ZHP\ZHPFix[R1].txt which you can copy and paste in your reply.

Good luck
1
Ambucias Posts 47310 Registration date Monday February 1, 2010 Status Moderator Last seen February 15, 2023 11,164
Jan 27, 2016 at 06:23 PM
Looks great ! Thank you!
0
Ezpz Posts 35 Registration date Wednesday November 25, 2015 Status Member Last seen August 15, 2016
Jan 28, 2016 at 10:41 PM
So do you think it will come back again?
0
Ambucias Posts 47310 Registration date Monday February 1, 2010 Status Moderator Last seen February 15, 2023 11,164 > Ezpz Posts 35 Registration date Wednesday November 25, 2015 Status Member Last seen August 15, 2016
Jan 29, 2016 at 04:45 AM
If you don't download it again, no.
0