Page 1 of 2 12 LastLast
  1.    17 Jan 2017 #1
    Join Date : Jun 2015
    Antelope, CA
    Posts : 152
    Windows 10 Pro x64

    Suspicious website popping up in new tab when Chrome starts


    Recently, I've been getting an odd page opening up when I start up Chrome after rebooting or being on standby.

    Code:
    http://go.oclasrv.com/afu.php?zoneid=663834
    I searched into it and all I could find was pages about UnHackMe, which I ran and it found nothing.

    What IS this thing, and how do I get rid of it?
      My ComputerSystem Spec
  2.    17 Jan 2017 #2
    Join Date : Aug 2014
    Forever West
    Posts : 3,926
    Win10 Home and Pro, Win10 Insider Preview, Win7 Home, Linux Mint

    Out of curiosity I opened the link on my osMac MacBook Pro in Firefox and got a screen plus a recording saying my Mac is infected. It closed easily. I'd check Chrome's setting for the Home page to assure only the one wanted is all that's shown.
      My ComputerSystem Spec
  3.    17 Jan 2017 #3
    Join Date : Jun 2015
    Antelope, CA
    Posts : 152
    Windows 10 Pro x64
    Thread Starter

    For me, it just shows a blank page. No audio. I'm guessing Adguard is keeping it from loading. Wonder why it's even allowing the tab to open in the first place?

    I would think ESET would keep it from loading at all, or at least show that red "blocked link" page.
      My ComputerSystem Spec
  4.    23 Jan 2017 #4
    Join Date : Aug 2016
    Posts : 553
    Windows 10 Home

    GuyInDogSuit,

    Please download Malwarebytes Anti-Malware:
    Malwarebytes | Malwarebytes 3.0 Premium 14-day Free Trial
    Right-click on the MBAM icon and select: Run as Administrator
    Click Yes to accept any security warnings that appear.


    At the MBAM console, on the right pane, under the Scan Status, click: Current (it updates the tool)
    On the left menu pane click the Settings tab, and then select the Protection tab on the top.
    Under Scan Options, turn on the button: Scan for rootkits

    Click the Scan tab on the right pane, select Threat Scan and click: Start Scan


    Note: The scan may take some time to finish, so please be patient.


    If potential threats are detected, ensure to check all the listed items, and click: Quarantine Selected

    While still on the Scan tab, click the View Report button
    In the window that opens click: Export
    Select: Text file (*.txt), and save the log to the Desktop.

    The log is also viewed by clicking on it, then clicking the View Report button.
    Please attach or post the log for review.
    Note: If asked to restart the computer, please do so.


    Also, please download AdwCleaner:
    Malwarebytes | AdwCleaner
    Download to your Desktop.

    Double click on AdwCleaner.exe to run the tool.


    Click the Scan button and wait for the process to complete.


    When the can finishes and presents its results, if you see any program that you wish to keep, remove the check from it. Otherwise, once the Clean button is pressed, all checked items listed on the report are removed.


    A log file is automatically opened after the scan finishes.
    It is found at C:\AdwCleanerCx.txt (x is a number).
    Please attach or post the content of the AdwCleaner report.
      My ComputerSystem Spec
  5.    23 Jan 2017 #5
    Join Date : Aug 2015
    Posts : 237
    win 10

    Try Adware Removal Tool, Go here, download and run the client

    It will find any suspect objects, hit the CLEAN button
      My ComputerSystem Spec
  6.    30 Jan 2017 #6
    Join Date : Jun 2015
    Antelope, CA
    Posts : 152
    Windows 10 Pro x64
    Thread Starter

    Damn it, I had the logs pasted here but Adware Removal Tool shut down Chrome and I lost them. They didn't find anything.
      My ComputerSystem Spec
  7.    30 Jan 2017 #7
    Join Date : Aug 2016
    Posts : 553
    Windows 10 Home

    GuyInDogSuit,

    Let's give this a whirl...

    Please use the Farbar Recovery Scan Tool Download
    Save FRST to your Desktop.

    [Note: You need to run the version compatible with your system: 32 bit or 64 bit]

    Double-click FRST to run it.
    When the tool opens click Yes to the disclaimer.
    Next, press the Scan button.

    When done, the tool makes a log (FRST.txt) on the Desktop.

    The first time the tool is run, it makes another log: (Addition.txt).

    Please attach both reports to your reply.
      My ComputerSystem Spec
  8.    31 Jan 2017 #8
    Join Date : Jun 2015
    Antelope, CA
    Posts : 152
    Windows 10 Pro x64
    Thread Starter

    Here's the results.
    I'm going to see about purchasing MBAM in the future, seeing as how the trial runs out after 2 weeks.
    Suspicious website popping up in new tab when Chrome starts Attached Files
      My ComputerSystem Spec
  9.    31 Jan 2017 #9
    Join Date : Aug 2016
    Posts : 553
    Windows 10 Home

    GuyInDogSuit,

    Before proceeding, any reason why System Restore is disabled?
      My ComputerSystem Spec
  10.    31 Jan 2017 #10
    Join Date : Jun 2015
    Antelope, CA
    Posts : 152
    Windows 10 Pro x64
    Thread Starter

    I don't know. It wasn't ever enabled in the first place.
      My ComputerSystem Spec

 
Page 1 of 2 12 LastLast


Similar Threads
Thread Forum
Browsers & Email Create Desktop Shortcut of Website in Google Chrome
How to Create a Desktop Shortcut of Website in Google Chrome Google Chrome lets you easily keep track of your favorite websites. You can add your favorite websites to your bookmarks, and you can also create desktop shortcuts of websites that will...
Tutorials
In Chrome, how to link to a particular page in a frames website?
In forums I occasionally want to post a link to a particular page in a website built with frames pages. Back when I used Firefox, I could right click on the page and choose something like "Open frame in new tab". Then I could copy the URL and post...
Browsers and Email
Solved Google chrome blocking file-downloads it deems as suspicious
Google chrome blocking file-downloads it deems as suspicious tried downloading irfanview from the irfanview website, but chrome blocks it. is there a way of getting round this, a registry hack perhaps thanks Google the ' internet Police...
Browsers and Email
When Excel 2007 starts Windows Installer also starts
Hi, after upgrading from Win7 Ultimate with Office 2007 to Won10 pro, every time I star Excel or Word or PowerPoint the Windows Installer screen appears and then asks for Microsoft Visual Studio Team System 2008 Development Edition.ENU disk. ...
Software and Apps
Solved Suspicious update
Anyone have any knowledge on this update? KB3016656? I see this in the "Installed Updates" but not in Windows update history. Googling comes up with several inaccessible links to a Chinese facebook page. I wonder if others have it, and...
Windows Updates and Activation
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 03:56.
Find Us
Twitter Facebook Google+ Ten Forums iOS App Ten Forums Android App



Windows 10 Forums