Adware plague unable to shift

I have a new windows 10 machine and using Chrome as a browser. I have Avira free anti virus. Recently started being plagued by adware. Symptoms are

1. Cetain pages taken over by russiawomendating or similar as shown in attachment
2. Particularly on eBay getting these frequent embedded pop ups that mean i have to use task manager to crash chrome
3. Again on ebay frequent audio adds

So far what i have tried is:

1. Adwarecleaner
2. CCleaner
3. Malware anti-malware
4. Hitman Pro
5. JRT
6. Google own cleaner

All find absolutely nothing. I have also tried

1. Uninstall/ reinstall chrome
2. Uninstall chrome, run all the tools reinstall
3. System restore from 2 weeks ago, but not sure when the infection started and that is my earliest restore point.

Just tried firefox and immediately get the pop ups attached. I have also had some of these issues on another machine I have and on my wife;s machine. Is it possible ot have an infection in the router not on the actual machine?

Thanks for any advice as not sure if even resetting the pc is going to solve this!!!!

Mike

masplin said:

Uninstall/ reinstall chrome

When you did it, have you also removed Chrome's profile? I believe located here:

%USERPROFILE%\AppData\Local\Google
%USERPROFILE%\AppData\Roaming\Google

Also try changing DNS, flushing DNS Cache, disabling scripted malware. Run CMD as admin and copy/paste:

wmic nicconfig where DHCPEnabled=TRUE call SetDNSServerSearchOrder ("208.67.222.222","208.67.220.220")
reg add "HKLM\Software\Microsoft\Windows Script Host\Settings" /v "Enabled" /t REG_DWORD /d "0" /f
ipconfig /flushdns

Yes, granted, you have DHCP enabled, but most likely you do.

masplin said:

For my education what did I do wrong to get this? i'm pretty careful about not clicking on things i shouldn't . just be good to know how to avoid in future

These days, malware is lurking everywhere. The new thing is malvertising, when legitimate sites display malicious ADs.
Something might have hijacked your search engine, DNS or some malicious extension might have been displaying that.
Chrome did a good job, it did not spread into your PC and it was kept in browser's cache. I wish you better luck next time.