Computer Support Forum

Google Chrome crashed -Fake App Attack: Misleading Application File Download 3

Question: Google Chrome crashed -Fake App Attack: Misleading Application File Download 3

Hey, I'm struggling to find anything to remove this fake app attack virus thing. I don't know what site I got it from and I have tried numerous full system scans and searching online for help. I came across this site and was wondering if anyone would be able to help me out.
 
Toshiba
Processor: Intel® Core™ i3-2350M CPU @ 2.30GHz 2.30GHz
RAM: 8.00GB (7.89 GB usable)
System type: 64-bit Operating System
 
couldn't tell you anymore than that I am afraid.
 
I saw this thread http://www.bleepingcomputer.com/forums/t/519643/firefox-crashes-norton-fake-app-attack-misleading-application-file-download-3/ and was wondering if I did the same thing would it work?
 

Relevance 100%
Preferred Solution: Google Chrome crashed -Fake App Attack: Misleading Application File Download 3

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

Answer: Google Chrome crashed -Fake App Attack: Misleading Application File Download 3

Hello -
Please note that link was from Virus, Trojan, Spyware, and Malware Removal Logs        
 
Each system is looked at one at a time, and yours may not be exactly the same.
Any small alteration to the O/S may mean another method should be used.
 
If you need more assistance, please Fully read and follow the instructions in the Preparation Guide For Requesting Help starting at Step #6.
 
NOTE :If you are unable to complete any step, still post the topic and leave a full description of your problems.
 
When you have done that, start a new topic and post the required logs to  Virus, Trojan, Spyware, and Malware Removal Logs forum, NOT Here, for assistance by the Malware Response Team Experts.
 
Please Use Copy and Paste for all your responses, and Do Not Attach them unless your helper requests this.
 
If HelpBot responds to your topic, please follw his Step #1 so the team will be notified.
 
After doing this, please reply back in this thread with a link to the new topic so we can close this one.

1 more replies
Relevance 114.84%

Hello there,
As it says in the title, I've been having this error thrown at me by Norton the past couple of days merely by having my browser open. There's a managed extension that may be involved with it but despite my best efforts I cannot remove it (multiple uninstall/reinstalls, Norton Power Eraser, a reasonably thorough (albeit amateur) purge of any files related to Chrome, and fiddling with Regedit).
 
Though the problems might not be related, I suspect they are as they both appeared around the same time. I currently have Chrome uninstalled (As it is quite useless) but much prefer using it over Internet Explorer, so any help getting it back would be greatly appreciated.
 
ASUS ROG
Windows 7 64bit
 
Thank you.

Answer:Chrome: Fake App Attack: Misleading Application Download 3

Hello Dashiva I would like to welcome you to the Malware Removal section of the forum.Around here they call me Gringo and I will be glad to help you with your malware problems.Very Important --> Please read this post completely, I have spent my time to put together somethings for you to keep in mind while I am helping you to make things go easier, faster and smoother for both of us!Please do not run any tools unless instructed to do so.We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same",... Read more

26 more replies
Relevance 110.2%

Mod Edit: Merged posts and cleaned ~~boopmeHi,first of all I apologise for my poor English. From yesterday, when I use Firefox or Chrome, Norton closes them after few minutes and appears this notification 
 Immagine.jpg   153.5KB
  0 downloads I've tried a complete scan and also Norton Power Eraser but the problem is not solved. Can you please help me? Thank you in advance Nycky    DDS (Ver_2012-11-20.01) - NTFS_AMD64Internet Explorer: 11.0.9600.16428Run by Home at 15:17:41 on 2014-02-04Microsoft Windows 7 Home Premium   6.1.7601.1.1252.39.1040.18.4008.1237 [GMT 1:00].AV: Norton 360 *Enabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}SP: Norton 360 *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}FW: Norton 360 *Enabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}.============== Running Processes ===============.C:\Windows\system32\lsm.exeC:\Windows\system32\svchost.exe -k DcomLaunchC:\Windows\system32\nvvsvc.exeC:\Windows\system32\svchost.exe -k RPCSSC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestrictedC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestrictedC:\Windows\system32\svchost.exe -k LocalServiceC:\Windows\system32\svchost.exe -k netsvcsC:\Windows\system32\svchost.exe -k GPSvcGroupC:\Windows\system32\svchost.exe -k NetworkServiceC:\Windows\system32\WLANExt.exeC:\Program File... Read more

Answer:Fake App Attack: Misleading Application File Download 3

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/523164 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

2 more replies
Relevance 110.2%

Hi all,
 
I am also experiencing the crashing of Chrome and IE every 3 mins with a warning from NIS about a Fake App attack.
 
Would be very grateful if someone could please help.
 
All the best,
David

Answer:Fake App Attack: Misleading Application File Download 3

Hi all,
 
The problem has just spontaneously disappeared within the last hour.
I've absolutely no idea why. My PC was unusable for two days.
 
Best wishes,
David

5 more replies
Relevance 110.2%

Hi there!. I see a lot of people having this very same problem (fake app attack: Misleading application file download 3) causing Firefox and Chrome to crash. Can anyone please help? I downloaded SecurityCheck and AdwCleaner but I'd be happier with someone expert guiding me through the deleting process.
 
Thanks a lot!

Answer:Fake App Attack: Misleading Application File Download 3 AGAIN

Problem solved =)

2 more replies
Relevance 110.2%

Hi there,
Thanks for reviewing my question. 
Every few minutes, Norton pops up saying that “Norton blocked an attack by Fake app attack misleading application file download 3.”  This causes my browser (both Chrome & Firefox) to crash.  I ran a full system scan and it found nothing.  I also did a system restore to a few weeks ago (the problem started today).  Any help would be appreciated!  Thanks.
 
Moderator Edit: Moved for the Virus, Trojan, Spyware, and Malware Removal Logs forum to a more appropriate forum due to no logs.
Roger

Answer:Fake app attack misleading application file download 3

Welcome aboard   Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2 SecurityCheck may produce some false warning(s), so leave the results reading to me. Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeClick Go and post the result. Download Malwarebytes' Anti-Malware (aka MBAM): http://www.malwarebytes.org/products/malwarebytes_free to your desktop.* Double-click mbam-setup.exe and follow the prompts to install the program.* At the end, be sure a checkmark is placed next to Up... Read more

3 more replies
Relevance 110.2%

I too have the same issue.  Norton catches it, and then it shuts down on Chrome.  Very confusing...  can't understand why, nor fix.  Anyone?
 
Moderator Edit: Split off of another topic to better allow help
Roger

Answer:Fake app attack misleading application file download 3 also

Welcome aboard   Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2 SecurityCheck may produce some false warning(s), so leave the results reading to me. Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeClick Go and post the result. Download Malwarebytes' Anti-Malware (aka MBAM): http://www.malwarebytes.org/products/malwarebytes_free to your desktop.* Double-click mbam-setup.exe and follow the prompts to install the program.* At the end, be sure a checkmark is placed next to Up... Read more

1 more replies
Relevance 109.04%

I've read this topic http://www.bleepingcomputer.com/forums/t/519643/firefox-crashes-norton-fake-app-attack-misleading-application-file-download-3/And followed nasdaq's guide. But my results were:
RogueKiller V8.6.3 _x64_ [Jul 17 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Feedback : http://www.adlice.com/forum/
Website : http://www.adlice.com/softwares/roguekiller/
Blog : http://tigzyrk.blogspot.com/
 
Operating System : Windows 7 (6.1.7600 ) 64 bits version
Started in : Normal mode
User : Bameoi [Admin rights]
Mode : Remove -- Date : 02/04/2014 12:14:40
| ARK || FAK || MBR |
 
¤¤¤ Bad processes : 1 ¤¤¤
[BLPATH] OptimizerPro.exe -- C:\ProgramData\BetterSoft\OptimizerPro\OptimizerPro.exe [-] -> KILLED [TermProc]
 
¤¤¤ Registry Entries : 6 ¤¤¤
[HJ POL] HKCU\[...]\System : DisableTaskMgr (0) -> DELETED
[HJ POL] HKCU\[...]\System : DisableRegistryTools (0) -> DELETED
[HJ POL] HKLM\[...]\System : DisableTaskMgr (0) -> DELETED
[HJ POL] HKLM\[...]\Wow6432Node\[...]\System : DisableTaskMgr (0) -> [0x2] The system cannot find the file specified. 
[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REPLACED (0)
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0)
 
¤¤¤ Scheduled tasks : 1 ¤¤¤
[V1][ROGUE ST] schedule!3036567561.job : C:\ProgramData\BetterSoft\... Read more

Answer:About Error "Fake App Attack Misleading Application File Download 3"

2 files contain the same text (The text above)

17 more replies
Relevance 106.72%

Hi everybody!
 
At first I'd like to inform you that I'm not an advanced computer-user and that I'm not a native english speaker. So it may be, that I'll be a bit slow in understanding, but I'll try my very best!!! I'd be glad if you could try to write to me in an easy and understandable language... THANKS!
 
I use a DELL-Notebook (Vostro 1510) with these system-informations:

 System-Informations.jpg   77.14KB
  2 downloads
 
All software on my computer is updated (as far as I can judge...) and I use Norton Internet Security, CCleaner and Auslogics Disk Defrag daily.
 
My computer-problem occured three days ago: When I use Mozilla Firefox 26.0 (x86 de) it only takes a few minutes and then Firefox crashes (doesn't matter which website I'm on...). It happens every time! I can restore Firefox, but then it keeps crashing.
 
Norton Internet Security appears with the following note (Fake App Attack Misleading Application File Download 3):

 Norton-Warning1.jpg   155.11KB
  1 downloads

 Norton-Warning2.jpg   178.36KB
  0 downloads
 
I read a few postings and discussions on the internet (though not understanding every detail...) and found out, that you may help me getting rid of this "something" on my computer, helping me step by step to clean it.
 
I'd be very thankful for any professional help from you!!!
 
Cheers!
cisumdog

Answer:Firefox crashes. Norton "Fake App Attack Misleading Application File Download 3"

Hello, Welcome to BleepingComputer.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

--RogueKiller--
Download & SAVE to your Desktop RogueKiller for 32bit or Roguekiller for 64bit Quit all programs that you may have started.Please disconnect any USB or external drives from the computer before you run this scan!For Vista or Windows 7, right-click and select "Run as Administrator to start"For Windows XP, double-click to start.Wait until Prescan has finished ...Then Click on "Scan" buttonWait until the Status box shows "Scan Finished"click on "delete"Wait until the Status box shows "Deleting Finished"Click on "Report" and copy/paste the content of the Notepad into your next reply.The log should be found in RKreport[1].txt on your DesktopExit/Close RogueKiller+==============

Please download AdwCleaner by Xplode onto your Desktop.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click the Scan button and wait for the process to complete.Click the Report button and the report will open in Notepad.
IMPORTANT

If you click the Clean button all items listed in the report will be removed.
If you find some false positive items or programs that you wish to keep, Close the AdwCleaner windows.

Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click the ... Read more

7 more replies
Relevance 83.52%

Over the past 3 days, norton has caused google chrome to crash every few minutes... my computer is almost unusable in terms of the internet... I have no Idea what to do, and I really need the internet for my work! Please help!

Answer:Norton - Fake App Attack: Misleading Download 3

Hello Munkzzy I would like to welcome you to the Malware Removal section of the forum.Around here they call me Gringo and I will be glad to help you with your malware problems.Very Important --> Please read this post completely, I have spent my time to put together somethings for you to keep in mind while I am helping you to make things go easier, faster and smoother for both of us!Please do not run any tools unless instructed to do so.We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same",... Read more

3 more replies
Relevance 97.58%

Hello,
 
Recently, whenever I visit a new web page, I receive a notification from Norton that it has blocked an intrusion from "t.cttsrv.com".
 
I have tried uninstalling any programs that I've recently added, as well as running a full scan with norton to no avail.
 
I've also done a scan with AdwCleaner, and have included the log below:
 
___________________________________________________________________________________________
 
# AdwCleaner v4.111 - Logfile created 01/03/2015 at 12:29:59
# Updated 18/02/2015 by Xplode
# Database : 2015-02-18.3 [Server]
# Operating system : Windows 7 Home Premium Service Pack 1 (x64)
# Username : User - USER-THINK
# Running from : C:\Users\User\Desktop\AdwCleaner.exe
# Option : Cleaning
 
***** [ Services ] *****
 
 
***** [ Files / Folders ] *****
 
 
***** [ Scheduled tasks ] *****
 
 
***** [ Shortcuts ] *****
 
 
***** [ Registry ] *****
 
Key Deleted : HKLM\SOFTWARE\Classes\S
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D2CE3E00-F94A-4740-988E-03DC2F38C34F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8DCB7100-DF86-4384-8842-8FA844297B3F}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D2CE3E00-F94A-4740-988E-03DC2F38C34F}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D2CE3E00-F94A-4740-988E-03DC2F38C34F}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8DCB7100-DF86-4384... Read more

Answer:Web Attack: PUP/Adware/Fake Application Download 4 Malware

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Download Malwarebytes' Anti-Malware from HereDouble-click mbam-setup-2.X.X.XXXX.exe to install the application (X's are the current version number).Make sure a checkmark is placed next to Launch Malwarebytes' Anti-Malware, then click Finish.Once MBAM opens, when it says Your databases are out of date, click the Fix Now button.Click the Settings tab at the top, and then in the left column, select Detections and Protections, and if not already checked place a checkmark in the selection box for Scan for rootkits.Click the Scan tab at the top of the program window, select Threat Scan and click the Scan Now button.If you receive a message that updates are available, click the Update Now button (the update will be downloaded, installed, and the scan will start).The scan may take some time to finish,so please be patient.If potential threats are detected, ensure that Quarantine is selected as the Action for all the listed items, and click the Apply Actions button.While still on the Scan tab, click the link for View detailed log, and in the window that opens click the Export button, select Text file (*.txt), and save the log to your Desktop.The log is automatically saved by MBAM and can also be viewed by clicking the History tab and then selecting Application Log... Read more

9 more replies
Relevance 96.35%

My system web browsers were coming to a complete halt before or sending me to a web search called omiga, I unwittingly added the virus to my system by installing a free program called ''fast video player''. I ran the Norton anti virus full system scan first and later on a quick scan. It picked up and removed some Malware which now allows me to use my browsers without grinding to a halt or being redirected. However I am still getting a pop up that my Norton firewall is detecting as "Web Attack:PUP/Adaware/Fake Application download 4". I have attached the Norton scan results as well as the quarantine list. Below I have the DDS log and I have attached the attach.txt. Thanks in advance.
 
|DDS (Ver_2012-11-20.01) - NTFS_AMD64 
Internet Explorer: 11.0.9600.17344
Run by Clarence at 14:58:38 on 2014-10-21
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.61.1033.18.8177.5735 [GMT 11:00]
.
AV: Norton Internet Security *Enabled/Updated* {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB}
SP: Norton Internet Security *Enabled/Updated* {631E4324-D31C-783F-EC5C-35AD42B18466}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Spybot - Search and Destroy *Enabled/Updated* {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
FW: Norton Internet Security *Enabled* {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\... Read more

Answer:Web Attack:PUP/Adaware/Fake Application download 4 intrusion attempt

Hello Godel112358, welcome to Bleeping Computer's Malware Removal forum!
 
My username is LiquidTension, but you can call me Adam. I will be assisting you with your malware-related problems.
If you would allow me to call you by your first name I would prefer that.  
 
======================================================
 Please read through the points below to ensure this process moves as quickly and efficiently as possible.
Please read through my instructions thoroughly, and ensure you carry out each step in the order specified.
Please do not post logs using the CODE, QUOTE or ATTACHMENT format. Logs should be posted directly in plain text. If you receive an error whilst posting, please break the log in half and use multiple posts.
Please do not run any tools or take any steps other than those I provide for you. Independent efforts may make matters worse, and will affect my ability in ascertaining the current situation and providing the best set of instructions for you.
Please backup important files before proceeding with my instructions. Malware removal can be unpredictable.  
If you come across any issues whilst following my instructions, please stop and inform me of the issue in as much detail as possible. Please do not hesitate to ask before proceeding.
Topics are locked if no response is made after 4&... Read more

14 more replies
Relevance 92.66%

Like others on this site, I have been infected with a program that says it's Google Chrome but actually isn't.  Briefly, there is an executable file named “XSIAKQJE.EXE” (in Task Manager, the image name is the same with *32 afterwards) and has a description name of “Google Chrome” in Task Manager.  Google Chrome is not installed on the computer, nor any other Google application, but there are a minimum of 4 processes of this application running at the same time at any given time which easily goes up to 15 or so processes within a short period (<15 minutes) of computing.  As long as the internet connection is disabled, each running process is below 70mb of memory usage; after connection is made, 2-4 of the processes jump up to 100-400+MB of memory usage.  The application is running on an HP DV6T laptop computer, i7 Q720 Intel processor, 8gb ram, Windows 7 professional w/service pack 1 and all current updates performed.  The internet browser used is IE version 11.
 
Shown below is the DDS.txt file contents.  I have also attached the "attach.txt" file and 3 other files in a Zip file which details more specific information that I found while researching the behavior of this rogue application that I have not found others to have reported.  These 3 other files are in a Microsoft WinWord document - please let me know if that format is not able to be read.
 
I really do appreciate any help you can provide me... Read more

Answer:Fake Google Chrome application

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/554736 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

23 more replies
Relevance 91.02%

I wanted to check and see if my computer is clean or not. The previous time I had an issue I was getting a constant computer attack blocked message. This time I have only received two (one yesterday and one today). Also yesterday I received a message from Norton about an iexplore.exe. It said I was one of the first users to use the program and suggested I not use it. I chose the option to wait on using it (or something to that effect), instead of deleting it encase it was a legit file. Previously I had two backdoor trojans on my computer. I know that one was quarantined and I am not sure about the other one. Here is the info on those two items. A0342005.sys (located in a RP265 folder-c:/system volume information/_restore{0ef90d3e-5690-4367-bdef-72890fc4db64}/RP265/A0342005.sys) shows up as unresolved risk, but not in a computer scan and the other imapi.sys.vir (located in the Drivers folder-c:/Qoobox/quarantine/C/WINDOWS/system32/Drivers/imapi.sys.vir) shows up in the scan and since it is quarantined I assume there is no concern. As for the resent ones:Yesterday: HTTP Misleading Application Page Request and the iexplore.exe messageToday: HTTP Fake Scan Webpage 5Below are the logs:DDS (Ver_10-03-17.01) - NTFSx86 Run by Administrator at 12:04:24.01 on Thu 06/24/2010Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_20============== Running Processes ===============C:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\eh... Read more

Answer:HTTP Fake Scan and Misleading Application Page Request

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.In the upper right hand corner of the topic you will see a button called Options. If you click on this in the drop-down menu you can choose Track this topic. By doing this and then choosing Immediate E-Mail notification and then clicking on Proceed you will be advised when we respond to your topic and facilitate the cleaning of your machine.Note** If you are having problems posting the complete log into this thread upload them here http://www.rapidshare.com/ and post the links in this thread We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.I order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is ... Read more

16 more replies
Relevance 88.15%

Google Chrome OS is a project by Google Inc. to develop a lightweight computer operating system devoted to using the World Wide Web and today Google has made available first preview build to everyone. It is based on Google?s Chrome web browser and the Linux kernel. It runs on systems with either x86 or ARM processors. Here are few features of Google Chrome OS as Google promises: Featured software in Chrome OS: GNOME 2.24 desktop environmentGoogle Chrome 4.0.207 web browserOpenOffice.org 3.0 office suiteFlash Player 10.0 pluginand much more! System requirements of Chrome OS: Processor: Intel Pentium, Xeon or newer; AMD Duron, Athlon, Sempron, Opteron or newerRAM: min. 256 MBHard disk: min. 1 GBGraphics card: supports most modern graphics cards Download Chrome OS virtual appliance and give it a try! Thanks for Verification.... The title has been changed... I have just came to know its fake Google OS Chrome OS.

Answer:FAKE: Google Chrome OS released, download available!

It's a fake from what I've read

6 more replies
Relevance 86.92%

Hello. I have Norton 360. I ran across a disturbing message earlier today. A notice popped up saying something about malicious activity on the computer. I had ended up on a web page I did not intend and the message looked kind of fake. At the same time, Norton notified me that it had blocked an attack called "Fake App Attack: Misleading Application Suspicious Notification". I tried to navigate away from the notice, but it appeared as though it wanted me to take action right away. I wasn't going for it, so I got away from it. Am I infected? Is there anything I can do about it? Thanks.Edit: Moved topic from Virus, Trojan, Spyware, and Malware Removal Logs to the more appropriate forum.~ Animal

Answer:Fake App Attack: Misleading Applicatio​n Suspicious Notificati​on

Welcome aboard   Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2 SecurityCheck may produce some false warning(s), so leave the results reading to me. Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeClick Go and post the result. Download Malwarebytes' Anti-Malware (aka MBAM): http://www.malwarebytes.org/products/malwarebytes_free to your desktop.* Double-click mbam-setup.exe and follow the prompts to install the program.* At the end, be sure a checkmark is placed next to Up... Read more

9 more replies
Relevance 82.41%

Please help as I've tried all I can and malwarebytes and avast can not locate this issue.
Thanks again!
 

Answer:isaqtkok.exe and dllhost.exe*32 infected Fake google chrome file

Hello,

They call me TwinHeadedEagle around here, and I'll be working with you.

Before we start please read and note the following:

At the top of your post, please click on the "Watch thread" button and make sure to check Watch this thread...and receive email notifications. This will send an email to you as soon as I reply to your topic, allowing me to solve your problem faster.
Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process. Please do not perform System Restore or any other restore.
Instructions I give to you are very simple and made for complete beginner to follow. That's why you need to read through my instructions carefully and completely before executing them.
Please do not run any tools other than the ones I ask you to, when I ask you to. Some of these tools can be very dangerous if used improperly. Also, if you use a tool that I have not requested you use, it can cause false positives, thereby delaying the complete cleaning of your machine.

All tools we use here are completely clean and do not contain any malware. If your antivirus detects them as malicious, please disable your antivirus and then continue.
If during the process you run across anything that is not in my instructions, please stop and ask. If any tool is running too much time (few hours), please stop and inform me.
I visit forum several times at day, making sure to respond to everyon... Read more

9 more replies
Relevance 81.59%

Strider said:


A fake Google chrome file and dllhost.exe 32 file keeps spamming my task manager. I downloaded the real "Google chrome" from Google so I could use the "Google chrome task manager" to get rid of it but it didn't work. I turned my thumbnail preview off and I haven't seen dllhost.exe 32* since but I'm not sure if its completely takin care of that problem. My temporary fix for the fake Google Chrome file right now is when it starts spamming my task manager I right-click on it> open file location> start logging off and when the force shutdown menu appears I click cancel. For some reason it completely vanishes from my task manager for a couple seconds when I start logging off. Then I go back to my "open file location" and quickly delete the file before it starts back up. This stops it from spamming me but I have to do it every time I get on my computer. Still looking for a permanent solution for it.Click to expand...

I had the same issue. Hopefully you can help. File attached. The google chrome process was called "Eskuyiyifxt.exe*32"
 

Answer:Fake Google Chrome file spamming my processes in task manager

Hello,

They call me TwinHeadedEagle around here, and I'll be working with you.

Before we start please read and note the following:

At the top of your post, please click on the "Watch thread" button and make sure to check Watch this thread...and receive email notifications. This will send an email to you as soon as I reply to your topic, allowing me to solve your problem faster.
Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process. Please do not perform System Restore or any other restore.
Instructions I give to you are very simple and made for complete beginner to follow. That's why you need to read through my instructions carefully and completely before executing them.
Please do not run any tools other than the ones I ask you to, when I ask you to. Some of these tools can be very dangerous if used improperly. Also, if you use a tool that I have not requested you use, it can cause false positives, thereby delaying the complete cleaning of your machine.

All tools we use here are completely clean and do not contain any malware. If your antivirus detects them as malicious, please disable your antivirus and then continue.
If during the process you run across anything that is not in my instructions, please stop and ask. If any tool is running too much time (few hours), please stop and inform me.
I visit forum several times at day, making sure to respond to everyon... Read more

3 more replies
Relevance 81.59%

A fake Google chrome file and dllhost.exe 32 file keeps spamming my task manager. I downloaded the real "Google chrome" from Google so I could use the "Google chrome task manager" to get rid of it but it didn't work. I turned my thumbnail preview off and I haven't seen dllhost.exe 32* since but I'm not sure if its completely takin care of that problem. My temporary fix for the fake Google Chrome file right now is when it starts spamming my task manager I right-click on it> open file location> start logging off and when the force shutdown menu appears I click cancel. For some reason it completely vanishes from my task manager for a couple seconds when I start logging off. Then I go back to my "open file location" and quickly delete the file before it starts back up. This stops it from spamming me but I have to do it every time I get on my computer. Still looking for a permanent solution for it.
 

Answer:Fake Google Chrome file spamming my processes in task manager

Hello,

They call me TwinHeadedEagle around here, and I'll be working with you.

Before we start please read and note the following:

At the top of your post, please click on the "Watch thread" button and make sure to check Watch this thread...and receive email notifications. This will send an email to you as soon as I reply to your topic, allowing me to solve your problem faster.
Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process. Please do not perform System Restore or any other restore.
Instructions I give to you are very simple and made for complete beginner to follow. That's why you need to read through my instructions carefully and completely before executing them.
Please do not run any tools other than the ones I ask you to, when I ask you to. Some of these tools can be very dangerous if used improperly. Also, if you use a tool that I have not requested you use, it can cause false positives, thereby delaying the complete cleaning of your machine.

All tools we use here are completely clean and do not contain any malware. If your antivirus detects them as malicious, please disable your antivirus and then continue.
If during the process you run across anything that is not in my instructions, please stop and ask. If any tool is running too much time (few hours), please stop and inform me.
I visit forum several times at day, making sure to respond to everyon... Read more

5 more replies
Relevance 79.13%

Hi TwinHeadedEagle,
I have almost exactly the same problem running on my computer. I have run zoek, malwarebytes, and AdwCleaner and I still have the problem. Rather than create a new post in the forum I have just replied to this post since it seems so similar. I have now run Farbar and have attached the two logs. I also included a pic of my task manager showing the processes that keep loading. Can you help me? Thank you!
 

Answer:Fake Google Chrome Process in Task Manager & Don't Even Have Google Chrome Installed!

Hello,

They call me TwinHeadedEagle around here, and I'll be working with you.

Before we start please read and note the following:

At the top of your post, please click on the "Watch thread" button and make sure to check Watch this thread...and receive email notifications. This will send an email to you as soon as I reply to your topic, allowing me to solve your problem faster.
Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process. Please do not perform System Restore or any other restore.
Instructions I give to you are very simple and made for complete beginner to follow. That's why you need to read through my instructions carefully and completely before executing them.
Please do not run any tools other than the ones I ask you to, when I ask you to. Some of these tools can be very dangerous if used improperly. Also, if you use a tool that I have not requested you use, it can cause false positives, thereby delaying the complete cleaning of your machine.

All tools we use here are completely clean and do not contain any malware. If your antivirus detects them as malicious, please disable your antivirus and then continue.
If during the process you run across anything that is not in my instructions, please stop and ask. If any tool is running too much time (few hours), please stop and inform me.
I visit forum several times at day, making sure to respond to everyon... Read more

3 more replies
Relevance 79.13%

My computer was running slow so I went to my task manager and seen a whole bunch of Google Chrome processes running. I was confused at first because I don't even have Google Chrome installed. As I tried to stop the processes one at a time, more only popped up. Then I looked it up on the net, found others yall have helped on this site, and know there's something wrong. If possible, would like to know how and when the malware was installed as I have multiple students that use the pc and this is the first time ever had this happen, would like to know if it was a user doing something wrong by accident or on purpose (is even possible to know, but mainly would like to just get pc fixed!)

I right clicked and Disabled Antivirus AutoDetect (Norton); Downloaded zoek and have result log attached. Required a pc reboot and did that too. Problem is still happening. It also changed my home page to google.com (I changed it back). I also uploaded a picture of my task manager if that helps any.

Thanks!!!
 

Answer:Fake Google Chrome Process in Task Manager & Don't Even Have Google Chrome Installed!

Hello,

They call me TwinHeadedEagle around here, and I'll be working with you.

Before we start please read and note the following:

At the top of your post, please click on the "Watch thread" button and make sure to check Watch this thread...and receive email notifications. This will send an email to you as soon as I reply to your topic, allowing me to solve your problem faster.
Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process. Please do not perform System Restore or any other restore.
Instructions I give to you are very simple and made for complete beginner to follow. That's why you need to read through my instructions carefully and completely before executing them.
Please do not run any tools other than the ones I ask you to, when I ask you to. Some of these tools can be very dangerous if used improperly. Also, if you use a tool that I have not requested you use, it can cause false positives, thereby delaying the complete cleaning of your machine.

All tools we use here are completely clean and do not contain any malware. If your antivirus detects them as malicious, please disable your antivirus and then continue.
If during the process you run across anything that is not in my instructions, please stop and ask. If any tool is running too much time (few hours), please stop and inform me.
I visit forum several times at day, making sure to respond to everyon... Read more

6 more replies
Relevance 76.67%

Randomly started yesterday after browsing Facebook.
Ran Norton full system scan.
Ran Norton Power Tool.
No luck.
Shutting down browser.
Ran DDS.
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 11.0.9600.16428  BrowserJavaVersion: 10.45.2
Run by elaina at 9:03:17 on 2014-02-04
Microsoft Windows 7 Ultimate   6.1.7601.1.1252.1.1033.18.4095.2569 [GMT -6:00]
.
AV: Norton Internet Security *Disabled/Outdated* {88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Norton Internet Security *Disabled/Updated* {33A8BBD2-AA01-20A2-213B-0B8EB45B02E8}
FW: Norton Internet Security *Disabled* {B0F2DB13-C654-2E74-30D4-99C9310F0F2E}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\atieclxx.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\taskhost.exe
C:\Program Files (x86)\Common Files\Adobe\... Read more

Answer:Fake App Attack Download 3

Also tried unistalling and reinstalling Google Chrome and Firefox with no luck.
Thank you for your time.

4 more replies
Relevance 75.85%

I very often don't see the total file size of downloading files in my Google Chrome.

Is there any option in the browser to see the total file sizes of files being downloaded?

Answer:determine file size of files in download in google chrome

The filesize is shown in a box at the bottom left of the Chrome screen while the file is downloading.

After the download is complete, only the filename is shown, so right-click the bottom-left box and select 'Show in folder' to see the file's details including size.

If you're downloading files from websites, they usually give the filesize on the page before you click the link.

2 more replies
Relevance 74.21%

A bunch of these jpkncmkh.exe *32 processes are always open in my task manager and my cpu is running at 90 to 100% and I don't have google chrome and the description is google chrome.  These must be viruses I need to get rid of im going to attach a frst files and logs because I saw other posts that did that. Please Help!!??
 
I want to copy and paste a fix list like I saw other people do to get rid of them but I don't know  how?
 
 

Answer:Fake Chrome Processes Please Help jpkncmkh.exe *32 description google chrome

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/554784 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

20 more replies
Relevance 74.21%

https://productforums.google.com/forum/#!topic/chrome/c0uVmMuInk8[1-25-false]

I have the same problem as these other people from the above link.

The problem started a few weeks ago, when I try to download an attachment, from yahoo mail and google mail, it says "Failed, Virus scan fail..."

and clearly the virus scan from the mail service providers (not my own virus scan), in this case, google themselves and yahoo

On top of that, Google chrome was jerky. Say for e.g., when I move the windows of chrome from 1 side of my screen to another, there is a serious delay. And many operation, there is a serious delay (I'm running 2 x Xeon CPU at 4 core each)

Both of the above problems happens at the same time

So, I uninstall and re-install chrome, and update all my windows 7 hot fixes, security fixes etc.

Then the jerky part went away for the most part, but still can't download any attachment.

To fix that, I open up IE 11 and download the attachment w/ no problem

Any idea, as the tricks from that google product forums is useless
 

Answer:Google Chrome can't download any file from online email: says failed virus scan

When you uninstalled it did you make sure all remnants were gone? Like the the google folders in the app data folders?
 

3 more replies
Relevance 71.75%

I wonder if anyone here has an answer or solution to this issue.It has been discussed for years on Google's Help Forum but they failed to have a solution until now.It  crashes when you navigate down through few levels of the directory to save a file, or choose a file to upload.My current practice: If I wanna download a file, I always save it to my desktop (requires 1 click on the Desktop button on the left panel). If I wanna upload a file, I'll put the file on desktop, and select from there (same 1 click action) I've been doing so for months and it never crash. But whenever I try to navigate further than 2-3 level down, it crashes expectedly.

Answer:Chrome crashed when download and upload

Get Firefox. It is superior. I am always surprised at Google's inability to patch things despite their invasive always-running-behind-the-scenes updater.Same with their stupid toolbar. Did they ever get around to creating a version for Firefox 5?

1 more replies
Relevance 71.34%

Hi all,
For the past 2/3 weeks now I have been getting the following message (after I have done a scan with Advance System care 7 pro) and it is always on the malware part, and it reads:
Misleading.Fake AV HKEYCURRENTUSER\Software\Micro\Internet Explorer \Main\Feature Control
FEATUREBROWSEREMULATION
I am running windows 7
It is set to Repair but it keeps coming up after every scan, I have also ran MalwareBytes (pro) and nothing came up, I have used eset (online) and even did a clean with Trend Micro Anti Theft Toolkit, all were ok.
This problem seemed to have started after I updated Explorer, I did a roll back but still get it. Any help/advice would be appreciated.
kind regards Ian

Answer:What is this ? misleading fake AV (feature_browser_emulation)

Looks like your Av ha only partially removed an infection
There are a couple of fake AV programs that case this Antivirus Security Pro is one of them.
Try running your protection programs in "safe mode with networking" or possibly try Malwarebytes.

1 more replies
Relevance 70.93%

Our Google Chrome Browser closed very frequently with the message CHROME Crashed, I removed & installed, however the same message and problem coming.
Can any one help me
 

Answer:Google Chrome crashed

Chrome may be experiencing a conflict with software on your computer. Check out the information and suggestions from Chrome Support for the Crash message.
 

2 more replies
Relevance 70.93%

For about a week my little cousin has been using my laptop and now when I use google chrome, it takes a bit longer to load up and when it does my CPU meter goes up to 75% and more. however my ram usage stays the same. The home page, google . com, loads up quite slowly but I cannot use any other website.And once in a while a dialog box will pop up saying that google chrome crashed and needs to reboot. but when it does the same thing happens again. The weird thing is that the incognito feature allows me to use google chrome perfectly as if nothing is wrong.

So im guessing its a setting that incognito blocks or something but I have no idea what to look for.

Answer:Google Chrome crashed. CPU at 75%+

Hi skinder056,

Do other browsers such has Internet Explorer(IE) work fine? Try scanning your computer for any viruses/spyware in safe mode. Also, clear the temp folders using a good program called "CCleaner". Hope everything works out well for you.

1 more replies
Relevance 70.93%

hello everyone. i have 3 pcs in my home. one is mine, one is my elder brother's and one is my younger brother's. we all use google chroom and happy with that. but suddenly it crashes on my pc, and then my pc always get halted whenever i start google chroom. and at the end, my pc dont give response, whetehr i start chroom or not. then i reinstall my windows, i am using win7 now. and again when i instal new copy of google chroom, my pc again halted. i have tried many times to reinstall chroom. but evey time my pc halted on launching chroom. where as it runs very fine on other two pcs. i dont know why it is having problem on my pc. i am using IE9, Firefox, Opera, Safari. they all are working fine on my pc. but chroom make my pc halted when ever i launch it.

can any one help me why is it so?

Answer:Google Chrome crashed

I used google Chrome all the time as well but i do not experience like that. With Mozilla firefox, sometimes yes.. but with Chrome, it did not happen to met yet. I am wondering what could be the reason for that

1 more replies
Relevance 70.93%

google chrome update was running - machine shut down - now get google chromehas crashed no matter what - uninstalled software - deleted google from local machine registryuninstalled and reinstalled chrome - cant get rid of message

Answer:cant get rid of google chrome has crashed

in the end the problem was because the new release of google had a conflict with my cam software. Uninstalling my cam software and installing a new release of cam software - solve the problew - thanks for your help - didnt think it was a virus problem

12 more replies
Relevance 70.52%

I see that other users have had problems with the fake Google Chrome. I may have more than one problem since I've been having issues with heavy CPU usage involving a COM Surrogate process - which may or may not be malware. The Google Chrome usage just started a few days ago. I tried to follow the instructions for preparing for assistance but have been unable to download the FRST file. Any assistance greatly appreciated!
 

Answer:Need help with fake Chrome but can't download FRST

Just looked at other posts. When I started having the COM Surrogate issue, I also used Task Manager to open that file. It's located in a sysWOW64 file as another used reported. Looks like I need lots of help. Thanks.
 

14 more replies
Relevance 70.11%

Hi there ,
one week ago i picked out my windows 8.1 core edition and it has been going pretty well but today i had that system hang with no BSOD that happened during watching a video on Youtube using Google chrome and after restarting the system forcibly no error message came up unlike windows 7.

MY QUESTION :
how can i fix the problem and how can i report it to Microsoft

i gotta say i'm little disappointed with the "being genuine" thing

any help guys will be appreciated

Answer:crashed Windows 8.1 during google chrome

Reporting it to Microsoft to help? ehhh not so much.

Following what Brink shows to do: The golden ticket.

1 more replies
Relevance 70.11%

Greetings,

I have a dell N5110 which i updated from Win7 to Win10. This crash was the first time ever on Win 10 but i have had BSOD in Win7 due to HotSpot shield drivers. Please figure this one out!!

Thanks

Answer:I was using google chrome when this crashed occurred.

Hi obaidrasheed18,

Welcome to the 10forums.

The cause of the crash is your wifi driver.
Please check Dell if there are driver updates compatible with windows 10


Code:
2: kd> lmvm athrxstart end module name
fffff801`2cae0000 fffff801`2cd73000 athrx T (no symbols)
Loaded symbol image file: athrx.sys
Image path: \SystemRoot\System32\drivers\athrx.sys
Image name: athrx.sys
Timestamp: Wed Nov 24 20:33:22 2010 (4CED6882)
CheckSum: 00294F87
ImageSize: 00293000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

4 more replies
Relevance 70.11%

I Try to Solve Follow This Stop the Shockwave Flash Chrome crash | PCWorld But Not Working

Help Me ...

Answer:My Google Chrome Keep Shoackwave Crashed

Try disabling Pepper Flash only.

3 more replies
Relevance 70.11%

Shockwave Flash.

I keep getting this now every time I open a page with animated/video content.

In the past I have been able to get round it by using the IE plug-in tool, but since updating to the latest version of Chrome - that crashes once Shockwave Flash crashes.

If I open up IE8 and it starts (once I have shaved, walked the dog, and split several atoms) I don't have this issue. But who wants to use IE if Chrome works properly?

Anyone else experiencing this found a cure? Google tech sites are full of complaints, but no-one has posted a fix

Cheers

Windows XP SP3
AMD Athlon 1.8 Gig
1024 MB RAM

(I know - it's slow and old. But are you going to buy me a new computer??)
 

More replies
Relevance 69.7%

Greetings Bleeping Comp!

First time here and must admit I'm generally a novice on techie stuff. So, please have patience! ;-) Thx. Below you will find the posted DDS.txt info and the 2 attached file requests (ark.txt and attach.txt files).

But first... Here's a sequential description of what happened in the past 24 hours (BOTH PC status and my actions). I've apparently had some success, but I'm not sure it's fully clean. Given the strangeness over the past 24, I'm still wary. ... thus, the request for help.

(1) Last night (Jan. 10), my Norton Internet Security 2012 protection repeatedly showed an infection pop-up in the lower right corner that noted "Tidserve Activity 2" and "manual removal" as necessary.

(2) After about 10 minutes of these repeated pop-ups, my PC was attacked by the fake antivirus virus called "XP Antivirus 2012" (or similar). It was the well-documented malware that displayed MANY fake intrusion notices and warnings and asked me to buy product. I, of course, did not buy. Just closed the boxes when I could. Google searches were also redirected when seeking fixes. I ran a Norton system scan and it was fruitless. No viruses found...even though the Norton pop-up identified one.

(3) While troubleshooting over the next hour or two, these symptoms continued (both the "XP Antivirus 2012" alerts and the Norton "Tidserv Activity 2" pop-ups.

(4) I first tried to fix wi... Read more

Answer:"Tidserv Activity 2" Norton pop-up...a fake "XP Antivirus 2012" attack... and strange Google behavior

Hello again Bleeping Comp...

Perhaps I spoke too soon. I can't be sure but some of the recent strange behavior that followed/coincided with the virus attack (in original post) may have corrupted something in my wireless internet device or driver. Been having intermittent and slow connectivity from it when I reboot. Sometimes it doesn't connect at all.. in which case I've had to either change drive or reset address (disable/enable) a few times, etc. Not sure if this is fixed/temporary or will continue. Ugh.

Can these malware tank a wireless adapter device/driver??

OK, I'll shut up now.

Thanks!

13 more replies
Relevance 69.7%

Hello,
 
In my Windows task manager, I have  multiples file labeled " Dcvdpgzxc". It is listed as Google Chrome in the description and it is location is AppData/localLow/ Adobe. Please help me get rid of it
 
 
 
EDIT: I forget to mention this is the second time, this has happen on the same computer. I had it once, I rebooted the computer, then deleted the location it was in " AppData/LocalLow/* (it was located somewhere else before).

Answer:Fake Google Chrome.....

Greetings and to BleepingComputer,
My name is xXToffeeXx, but feel free to call me Toffee if it is easier for you. I will be helping you with your malware problems.
 
A few points to cover before we start:
Do not run any tools without being instructed to as this makes my job much harder in trying to figure out what you have done.
Make sure to read my instructions fully before attempting a step.
If you have problems or questions with any of the steps, feel free to ask me. I will be happy to answer any questions you have.
Please follow the topic by clicking on the "Follow this topic" button, and make sure a tick is in the "receive notifications" and is set to "Instantly". Any replies should be made in this topic by clicking the "Reply to this topic" button.
Important information in my posts will often be in bold, make sure to take note of these.
I will attempt to reply as soon as possible, and normally within 24 hours of your reply. If this is not possible or I have a delay then I will let you know.
I will bump a topic after 3 days of no activity, and then will give you another 2 days to reply before a topic is closed. If you need more time than this please let me know.
Lets get going now
==========================
 
Hi smoth1,
 
Please download Farbar Recovery Scan Tool and save it to your Desktop.
 Note: You need to run the version compatible with your system. If you are not sure which version applies to your system, download both of them and try to run ... Read more

14 more replies
Relevance 69.7%

I see that many people here are having the same problem, and have had success in resolving it in these forums, so this seems to be the place to go to get help. I've followed the instructions listed in the preparation guide, and have enclosed the FRST files. Thanks in advance for your help.
 

Answer:Yet Another Fake Google Chrome

Hello,

They call me TwinHeadedEagle around here, and I'll be working with you.

Before we start please read and note the following:

At the top of your post, please click on the "Watch thread" button and make sure to check Watch this thread...and receive email notifications. This will send an email to you as soon as I reply to your topic, allowing me to solve your problem faster.
Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process. Please do not perform System Restore or any other restore.
Instructions I give to you are very simple and made for complete beginner to follow. That's why you need to read through my instructions carefully and completely before executing them.
Please do not run any tools other than the ones I ask you to, when I ask you to. Some of these tools can be very dangerous if used improperly. Also, if you use a tool that I have not requested you use, it can cause false positives, thereby delaying the complete cleaning of your machine.

All tools we use here are completely clean and do not contain any malware. If your antivirus detects them as malicious, please disable your antivirus and then continue.
If during the process you run across anything that is not in my instructions, please stop and ask. If any tool is running too much time (few hours), please stop and inform me.
I visit forum several times at day, making sure to respond to everyon... Read more

3 more replies
Relevance 69.7%

Hi,
  I may have a similar problem to the person who posted http://www.bleepingcomputer.com/forums/t/545472/fake-google-chrome-browserexe-processes/
  This seems to be a very new thing, because a Google search for it brings up mostly posts from this month, the only practical information about it is on this site, and standard anti-virus software seems to miss it entirely.
   This all started when I was browsing some sites about health food or exercise.  Suddenly, I was getting messages from Windows asking my permission to run regsrvr to register some dll, and I kept saying no, but it would come back up.  In the details, it said it was coming from some executable named by a really long random-looking string beginning with an X.
  There were a bunch of copies of that process in my task manager, taking up a lot of memory and CPU, and every time I tried to force-quit them, more appeared.  They show up in the task manager as Chrome, but the name of the process was this long string beginning with an X. It was an exe file under a strange folder within appdata/locallow/Adobe.
   I ran a quick scan with Windows Security Essentials, and also ran a custom scan of locallow, but it didn't find anything it thought was suspicious.
   I wanted to get back up and able to do stuff, so I rebooted in safe mode, reset my machine back a few days with system recovery, and deleted that entire folder inside appdata/locallo... Read more

Answer:Fake Google Chrome too

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/552959 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

5 more replies
Relevance 69.7%

So I was on my computer trying to find some cheap clothing websites and I happened to stumbled upon a video that I then watched but shortly after was asked to update my google chrome.. from reading other forms I am thinking there is a few people with a similar problem.. I didn't even realise it could have been a virus until my computer start to run a little slower so I googled it and came to this page. I downloaded FRST and done as the forum suggested although when I visited virustotal it said the file which I copied was not recognised so I'm just wondering what I should now do?
 
This was the forum I used, http://www.bleepingcomputer.com/forums/t/548427/fake-google-chromeexe-virus/

Answer:Fake Google Chrome.exe app

My name's Naathim and I'm a GeekU Minion! Now that we are mates and will be working together to clean your machine out of any junkware, feel free to call me Naat Before we start please note the following: Analysis and research take some time, also sometimes real life gets in the way, please be patient. Limit your internet access to posting here, some infections just wait to steal typed-in passwords. Don't run any scripts or tools on your own, unsupervised usage may cause more harm than good. Paste the logs in your posts, attachments make my work harder and more complicated. Stay with me to the end, the absence of symtoms doesn't mean that your machine is fully operational. Note that we may live in totally different time zones, what may cause some delays between answers. I can't foresee everything, so if anything unexpected happens, please stop and inform me! There are no silly questions. Never be afraid to ask if in doubt!
Let's start and enjoy the fight! Scan with ZOEK
Please download ZOEK by Smeenk and save it to your desktop (preferred version is the *.exe one)
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.
Right-click on icon and select Run as Administrator to start the tool.
Wait patiently until the main console will appear, it may take a minute or two.
In the main box please paste in the following script:
createsrpoint;
process;
services-list;
systemspecs;
startupall;
skipfix-iedefaults;
firefoxlook;
chromelook;
filesrcm;
installedpr... Read more

2 more replies
Relevance 69.7%

Please help me! I have read up a lot on the other people with this problem. A file called "rchnxsshh.exe" appears, and it's description is "Google Chrome" although I've uninstalled Chrome. When I open file location, it is in my appdata/locallow/ various folders. I've read this is a backdoor Trojan that has entered my system through a flash/java exploit present in past versions.

I'm generally capable and good with computers but I am not sure what to do, as all the other solutions have been machine/user specific. Please help! Thank you.
 

Answer:Fake google chrome .exe

Will upload Zoek scan soon. Also, I'm noticing this weird thing where it will scroll to the bottom of a web page or document after like, 5 seconds. Very weird and annoying.
 

2 more replies
Relevance 69.7%

Hi, I am new to this site. I am drawn to this site because I am having the same "fake Google Chrome Malware" problem that several members have posted on this site recently. After googling for an hour, it seems this is the only place that offers viable solution!
 
I started to notice this a couple of days ago when the laptop was making loud noises even though I was not doing anything. From the task manger, there are over 15 fake chrome processes clogging up. I have Malwarebytes and Symantec installed, but they both failed to screen out the malware. I ran the Farbar Recovery Scan Tool as some the previous threads suggested and included the two txt files in this message.  Please help.
Thanks!
xun

Answer:Fake Google Chrome exe

Hi & to Bleeping Computer Forums!
My name is Jürgen and I will be assisting you with your Malware related problems.
Before we move on, please read the following points carefully:
My native language isn't English. So please do not use slang or idioms. It could be hard for me to read. Thanks for your understanding.
Please read my instructions completely. If there is anything that you do not understand kindly ask before proceeding.
Perform everything in the correct order. Sometimes one step requires the previous one.
If you have any problems while you are follow my instructions, Stop there and tell me the exact nature of your problem.
Do not run any other scans without instruction or Add/ Remove Software unless I tell you to do so. This would change the output of our tools and could be confusing for me.
Post all Logfiles as a reply rather than as an attachment unless I specifically ask you. If you can not post all logfiles in one reply, feel free to use more posts.
If I don't hear from you within 5 days from this initial or any subsequent post, then this thread will be closed.
If I don't reply within 24 hours please PM me!
Stay with me. I will give you some advice about prevention after the cleanup process. Absence of symptoms does not always mean the computer is clean.
Malware WarningAll passwords should be changed immediately to include those used for banking, email, eBay, paypal and online forums from a CLEAN COMPUTER.
 Step 1
Please uninstall some programs:
... Read more

34 more replies
Relevance 69.7%

Many instances of a fake Google Chrome are running in the background and I traced them using task manager to "Users/(My Name)/AppData/LocalLow/vprixmf". This is leading to a slow PC. A google search took me to this site and I found a thread with someone that had the same problem (http://malwaretips.com/threads/fake-google-chrome-virus-malware-cant-get-rid-of-this-thing.35419/). I did the scan with ZOEK but the fake Chrome is still present.
 

Answer:FAKE GOOGLE CHROME (10-20-14)

Hello,

In the top right corner of Chrome, click 3 lines, and then About Chrome. Picture of that windows would be good. If not, just tell me exactly what is written under Version.
 

10 more replies
Relevance 69.7%

Hi,
 
New to the site and having issues with that google chrome .exe fake program.  It generates a bunch of the program and run it in process.  Could anyone help me?  I ran malwarebyte have norton installed and even ran AdwCleaner but its still there and causes my pc to lag and flashes sometimes.  Oh here is the 2 FRST files.
 
Edit:  After trying out some malware removal programs I seem to have been able to remove it and here is the updated FRST logs in case you catch anything else or if I didn't really solve the root of the problem.  Thank You.

Answer:Fake Google Chrome .exe

Can someone help and look to see if my pc is clean now?  Thanks

15 more replies
Relevance 69.7%

Google Chrome under attack: Have you used one of these hijacked extensions?






Recent versions of several Chrome extensions have been compromised to spread malicious ads.








Attackers have been phishing developers as a way of compromising Chrome extensions into spreading affiliate program ads that scare victims into paying for PC repairs.

Proofpoint researcher Kafeine has identified six compromised Chrome extensions that have been recently modified by an attacker after phishing a developer's Google Account credentials

Web Developer 0.4.9, Chrometana 1.1.3, Infinity New Tab 3.12.3, CopyFish 2.8.5, Web Paint 1.2.1, and Social Fixer 20.1.1 were compromised in late July and early August. Kafeine believes TouchVPN and Betternet VPN were also comprised in late June with the same technique.



Google Chrome under attack: Have you used one of these hijacked extensions? | ZDNet

Answer:Google Chrome under attack: Have you used 1 of these hijacked extensio

As a user, what action should be taken if you have used one of the extensions (Touch VPN) ? Remove/Reinstall Chrome ?

0 more replies
Relevance 69.7%

hi , my laptop has been infected by virus/malware . when ever i open websites on google chrome, multiple windows pop up vtracking.commission.com, adnetworkperformance.com etc , could anyone help sort this out and clean my system
 

More replies
Relevance 69.29%

I continue to receive this error after uninstalling and reinstalling Chrome, running SCANNOW and creating a new profile (as Google suggested).
 
Can't see where to go from here.      Most forums suggest a conflict with new software loaded but nothing new has beed added.
 
I use Google Apps for business, big headache.  Screenshot of error attached.
 
I'm out of avenues to pursue, any new ideas are appreciated!
 
Thanks,
 
-Fritzey

Answer:Whoa! Google Chrome has crashed. Relaunch Now?

Take a look at browser add-ons installed...remove all, then reset or reinstall browser.
 
Of course...there are other browsers and the lack of problems with other browsers would reinsfoce the concept that it's a Chrome problem, IMO.
 
From what I see...Google Apps supports the use of other browsers, including IE 11.
 
Louis

2 more replies
Relevance 69.29%

I have this:

ERROR SIGNATURE:

Event Type: BEX
P1: chrome.exe
P2: 45.0.2454.85
P3: 55df88lb
P4: guard.dll
P5: 8.2.0.4674
P6: 55c148a3
P7: 000269c9
P8: c0000409
P9: 00000000

I have no other functional browser, am STILL using XP and read
somewhere, which I cannot find now, this may be COMODO related.
But I was lost in the technical lingo and I lost the reference, in
frustration trying to make sense of technical jargon.

Please help, if possible and if there is a doable fix of which someone
is aware, PLEASE lay it out very simply and straight forward.

Thank you,

KJW

Lost with no browser and an otherwise working internet connection
 

Answer:Google Chrome crashed, will not restore or reopen

For a whole stack of reasons you really need to get off XP just as soon as possible. In the meantime you can try using a different browser, or an older version of a different browser. Have a read HERE.
 

11 more replies
Relevance 68.88%

Same as the others. Up to 15 processess running under the guise of Google Chrome
 

Answer:Fake Google Chrome processess

Hello,

They call me TwinHeadedEagle around here, and I'll be working with you.

Before we start please read and note the following:

At the top of your post, please click on the "Watch thread" button and make sure to check Watch this thread...and receive email notifications. This will send an email to you as soon as I reply to your topic, allowing me to solve your problem faster.
Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process. Please do not perform System Restore or any other restore.
Instructions I give to you are very simple and made for complete beginner to follow. That's why you need to read through my instructions carefully and completely before executing them.
Please do not run any tools other than the ones I ask you to, when I ask you to. Some of these tools can be very dangerous if used improperly. Also, if you use a tool that I have not requested you use, it can cause false positives, thereby delaying the complete cleaning of your machine.

All tools we use here are completely clean and do not contain any malware. If your antivirus detects them as malicious, please disable your antivirus and then continue.
If during the process you run across anything that is not in my instructions, please stop and ask. If any tool is running too much time (few hours), please stop and inform me.
I visit forum several times at day, making sure to respond to everyon... Read more

1 more replies
Relevance 68.88%

Hello, I found this forum today when trying to determine if what I keep seeing on my laptop is actually a virus. Found a bunch of similar posts/responses here from people that seem to have been having the same problem as me. I keep noticing dozens of Google Chrome processes that are constantly running, slowing my laptop down. I don't see how it could possibly from Chrome, since I have uninstalled it from my laptop. Anyway, I need some assistance at this point. I have tried everything I know how to do. Any assistance or advice would be greatly appreciated. Thank you!
 

Answer:Trying to get rid of that fake Google Chrome .exe virus

Hello,

They call me TwinHeadedEagle around here, and I'll be working with you.

Before we start please read and note the following:

At the top of your post, please click on the "Watch thread" button and make sure to check Watch this thread...and receive email notifications. This will send an email to you as soon as I reply to your topic, allowing me to solve your problem faster.
Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process. Please do not perform System Restore or any other restore.
Instructions I give to you are very simple and made for complete beginner to follow. That's why you need to read through my instructions carefully and completely before executing them.
Please do not run any tools other than the ones I ask you to, when I ask you to. Some of these tools can be very dangerous if used improperly. Also, if you use a tool that I have not requested you use, it can cause false positives, thereby delaying the complete cleaning of your machine.

All tools we use here are completely clean and do not contain any malware. If your antivirus detects them as malicious, please disable your antivirus and then continue.
If during the process you run across anything that is not in my instructions, please stop and ask. If any tool is running too much time (few hours), please stop and inform me.
I visit forum several times at day, making sure to respond to everyon... Read more

6 more replies
Relevance 68.88%

Hello all, I recently have contracted a virus on my pc that is calling itself google chrome. I haven't ever downloaded google chrome and yet, it somehow is on my pc. It only shows up in my processes tab and I am unable to remove it as it recreates itself when I try to. It is hidden in my loval C: drive and has really messed with my computer as it now freezes quite often and is much slower than before. Can somebody help me out here. Thanks

Answer:Fake Google Chrome Virus

Please run Malwarebytes AntiMalware Please download Malwarebytes Anti-Malware.  After clicking on the link the download will start automatically. 1)  Double-click on mbam-setup.exe, then click on Run to install the application, follow the prompts through the installation. 2)  Malwarebytes will automatically open.  If this is the first time you have run this version of Malwarbytes you will see an image like the one below.  Click on Update Now, after Malwarebytes is updated click on Scan. If this isn't the first time you have run this version, then you will see an image like the one below.  Click on Scan  You will be prompted to update Malwarebytes, to do so click on Update Now.   3)  The scan will automatically run now.   4)  When the scan is complete the results will be displayed.  Click on Quarantine All, then click on Apply Actions   5)  To complete any actions taken you will be asked if you want to restart your computer, click on Yes   6)  Please post the Malwarebytes log. To find your Malwarebytes log,download mbam-check.exe from here and save it to your desktop.  To open the log double click on mbam-check.exe on your desktop.  When the log opens, scroll down toward the bottom of the log to Quarantined Items.  Copy and paste this in your next post.   Please run AdwCleaner Please d... Read more

9 more replies
Relevance 68.88%

Hello,

Early this year I started having problems with my browses. I got home page changes in both Firefox and Chrome. I tried using my Avast scan, always finding adware and such, but never actually solving the problem. After a few months, last week I tried running Netflix on my Chrome browser and I found out I had a fake Chrome version installed. I uninstalled it, erased all Chrome data left over in my machine and the program was gone. Only problem is the new Chrome installer didn't seem to work, both offline ad online versions. So I've been trying to fix this without luck. Today to my surprise, the fake Chrome is back on my desktop, only this time it doesn't appear in my Programs list or anywhere. When I looked at the root file it's a file called Setleaf. Please I need help getting rid of this fake program. It's already messing with my Firefox again and new adware is showing up everyday in my Programs list!

Hope you can give me a hand. Thx!
 

Answer:Fake Google Chrome nightmare!

Hello,
Scan with Malwarebytes' Anti-Malware

Please download Malwarebytes Anti-Malware and save it to your desktop.

Install the progam and select update.
Once updated, click the Settings tab, in the left panel choose Protection and tick Scan for rootkits.
Click the Scan tab, choose Threat Scan is checked and click Start Scan.
If threats are detected, click the Apply Actions button. You will now be prompted to reboot. Click Yes.
Upon completion of the scan (or after the reboot), click the Reports tab.
Double-click the Scan Log.
At the bottom click Export and choose Text file.
Save the file to your desktop and include its content in your next reply.
 

1 more replies
Relevance 68.88%

Apparently there's malware in my CPU. Getting errors stating Google Chrome has crashed and I do not use Google Chrome nor is it installed in my computer. Do I follow the Windows 7 malware removal procedure? Any help would be appreciated.
 

Answer:Fake Google Chrome errors

Yes.
 

7 more replies
Relevance 68.88%

It looks like a bunch of other people here might be having similar problems with a Fake Google Chrome application running malware.... I'm having this problem too. I appreciate any help you can give me!
 

Answer:EmieSiteList Fake Google Chrome

Fix with Farbar Recovery Scan Tool

This fix was created for this user for use on that particular machine.
Running it on another one may cause damage and render the system unstable. ​Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!
Right-click on icon and select Run as Administrator to start the tool.
(XP users click run after receipt of Windows Security Warning - Open File).
Press the Fix button just once and wait.
If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
When finished FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.
 

5 more replies
Relevance 68.88%

Windows 7 PC just started running very slowly.  Noticed numerous (sometimes up to 25) processes named "mmxctdbwkm.exe" running, spawning, re-spawning constantly.  Norton 360 popups indicating "Google Chrome using excessive memory resources" - task manager shows processes having descriptions "Google Chrome" which obviously they are not as Google Chrome is not installed on this PC!  Files are under C:\users\John\appdata\LocalLow\.... I would like to follow the procedure in the link below as it describes my problem fairly accurately.  However, the process appears to require 2-way collaboration and information sharing so wanted to check first before diving in.  Thank you in advance for your help.
 
http://www.bleepingcomputer.com/forums/t/551186/fake-google-chrome-running-multiple-processes-in-task-manager/
 

Answer:Fake Google Chrome processes

Start with the scanning for Poweliks. If it is found and removed there will be more cleanup of other malware to do.
 
Please download Powelikscleaner (by ESET) and save it to your Desktop. (let me know if poweliks was found and removed as shown in the last image)
1.  Double-click on ESETPoweliksCleaner.exe to start the tool.
2.  Read the terms of the End-user license agreement and click Agree.
3.  The tool will run automatically. If the cleaner finds a Poweliks infection, press the Y key on your keyboard to remove it.
 

 
4.  If Poweliks was detected "Win32/Poweliks was successfully removed from your system" will be displayed. Press any key to exit the tool and reboot your PC.
 

16 more replies
Relevance 68.88%

I just ran my FRST scan while in safe mode. I don't know if that will affect the outcome of the log or going forward. I've had had this problem for a few days and haven't been able to stop and just post about it. Thank you very much in advance for assistance.
 

Answer:Fake Google chrome processes

Here is my addition file as well.
 

6 more replies
Relevance 68.88%

Hello this morning I noticed my computer was slow. The file was coming from a folder called Locallow in my Appdata folder. I renamed the file and deleted that folder because I thought it would do the trick but it recreates 5 minutes later. I suspect I have a virus. It's a work laptop.

Answer:Fake google chrome.exe virus

Hi there,please run a FRST scan:Please download Farbar Recovery Scan Tool and save it to your Desktop.(If you are not sure which version (32-/64-bit) applies to your system, download and try to start both of them as just the right one will run.)Start FRST with administator privileges.Make sure the option Addition.txt is checked and press the Scan button.When finished, FRST will produce two logs (FRST.txt and Addition.txt) in the same directory the tool was run from.Please copy and paste these logs in your next reply.

9 more replies
Relevance 68.88%

The process for me is named "uledyhxq.exe" and like i mentioned above, if you End Process/End Process Tree it causes it to duplicate like 'bunny rabbits' or 'gremlins'. The Folder of Origin is "C:\Users\ANUSTRT\AppData\LocalLow\Microsoft\Xjnxlhqx" yet I've noticed reappearing folders either in "C:\Users\ANUSTRT\AppData\LocalLow\Microsoft\" but also in the "C:\Users\ANUSTRT\AppData\LocalLow\Temp", "C:\Users\ANUSTRT\AppData\LocalLow\Sun", and "C:\Users\ANUSTRT\AppData\LocalLow\Adobe".

I also noticed that "AppData\LocalLow\Temp\ltotwuh", "AppData\LocalLow\Microsoft\Qzonkmt", "AppData\LocalLow\Adobe\Ivjczifql" folders have subfolders with closely resemble what you see in the "C:\Users\*USERNAME_HERE*\" directory.

I've attached my ADWCleaner & FRST scan logs
 

Answer:I too have a fake google-chrome infection

Hello,

They call me TwinHeadedEagle around here, and I'll be working with you.

Before we start please read and note the following:

At the top of your post, please click on the "Watch thread" button and make sure to check Watch this thread...and receive email notifications. This will send an email to you as soon as I reply to your topic, allowing me to solve your problem faster.
Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process. Please do not perform System Restore or any other restore.
Instructions I give to you are very simple and made for complete beginner to follow. That's why you need to read through my instructions carefully and completely before executing them.
Please do not run any tools other than the ones I ask you to, when I ask you to. Some of these tools can be very dangerous if used improperly. Also, if you use a tool that I have not requested you use, it can cause false positives, thereby delaying the complete cleaning of your machine.

All tools we use here are completely clean and do not contain any malware. If your antivirus detects them as malicious, please disable your antivirus and then continue.
If during the process you run across anything that is not in my instructions, please stop and ask. If any tool is running too much time (few hours), please stop and inform me.
I visit forum several times at day, making sure to respond to everyon... Read more

7 more replies
Relevance 68.88%

My computer started running really slow when I logged on today and websites were taking forever to load.  I noticed that there is a process called Neweozpowt.ext*32 running 10 or more times in the task manager and I can't kill them as they respawn.  Please help

Answer:Fake Google Chrome processes

Please disregard found the issue with help from Farbar recovery tool.

2 more replies
Relevance 68.88%

Hello, my name is Michael and I have a virus on my computer. It disguises itself as Google Chrome. There are at least 30-40 of these suckers on my computer. I clearly know it's not ACTUALLY google chrome because of one simple reason.... I don't have Google Chrome on my computer. I am running 8.1 and ComboFix doesn't run on 8.1. The file is called ccbzyuln.exe with the chrome symbol. I see in my task manager. I'm also typing this on my phone. Last night I was playing on my PC perfectly fine. I play games such as DayZ and Counterstrike : Global Offensive. I was updating DayZ to the newest patch and I noticed it would spend a large amount of time being "BUSY WRITING TO DISK" I opened task manager and I see that 100% is on my disk tab and I'm stumped. Please help.
 

Answer:Google Chrome Fake program On my PC Plz Help!

Hello,

They call me TwinHeadedEagle around here, and I'll be working with you.

Before we start please read and note the following:

At the top of your post, please click on the "Watch thread" button and make sure to check Watch this thread...and receive email notifications. This will send an email to you as soon as I reply to your topic, allowing me to solve your problem faster.
Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process. Please do not perform System Restore or any other restore.
Instructions I give to you are very simple and made for complete beginner to follow. That's why you need to read through my instructions carefully and completely before executing them.
Please do not run any tools other than the ones I ask you to, when I ask you to. Some of these tools can be very dangerous if used improperly. Also, if you use a tool that I have not requested you use, it can cause false positives, thereby delaying the complete cleaning of your machine.

All tools we use here are completely clean and do not contain any malware. If your antivirus detects them as malicious, please disable your antivirus and then continue.
If during the process you run across anything that is not in my instructions, please stop and ask. If any tool is running too much time (few hours), please stop and inform me.
I visit forum several times at day, making sure to respond to everyon... Read more

1 more replies
Relevance 68.88%

My computer is running super, super slow. When I open my task manager I find several (usually about eight) Google Chrome processes (with the image name of mnmtbcm.exe) going on all at once, all sucking up loads of memory and completely bogging down my computer... Annnnd I don't even have Google Chrome installed. So, something must be up.
 

Answer:Fake Google Chrome Virus

Hello,

They call me TwinHeadedEagle around here, and I'll be working with you.

Before we start please read and note the following:

At the top of your post, please click on the "Watch thread" button and make sure to check Watch this thread...and receive email notifications. This will send an email to you as soon as I reply to your topic, allowing me to solve your problem faster.
Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process. Please do not perform System Restore or any other restore.
Instructions I give to you are very simple and made for complete beginner to follow. That's why you need to read through my instructions carefully and completely before executing them.
Please do not run any tools other than the ones I ask you to, when I ask you to. Some of these tools can be very dangerous if used improperly. Also, if you use a tool that I have not requested you use, it can cause false positives, thereby delaying the complete cleaning of your machine.

All tools we use here are completely clean and do not contain any malware. If your antivirus detects them as malicious, please disable your antivirus and then continue.
If during the process you run across anything that is not in my instructions, please stop and ask. If any tool is running too much time (few hours), please stop and inform me.
I visit forum several times at day, making sure to respond to everyon... Read more

1 more replies
Relevance 68.88%

I have seen this same problem on the forums but I need a specific fix that works for me. There is a process that appears on startup that claims to be Google Chrome but obviously is not. You can't end the process and even when you boot into safe mode and delete the file, it just loads up from another location. It roams around in: C:/Users/gordon2/AppData/LocalLow. I found the same problem on another page on the forum but the fix that was used does not work for me due to file and folder names being different. Please create a fix like the one used in the other forum that I can use to remove this malicious process. http://www.bleepingcomputer.com/forums/t/551943/fake-google-chrome-processes/
 
I have attatched logs from FRST that will give you the information you need.
 
Also attatched is the fixlog.txt file that was used in the last forum, but does not work for me since the file and folder names are different.
 
Thanks for your help.
 
-Benjamin

Answer:Fake Google Chrome Process

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/555149 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

2 more replies
Relevance 68.88%

Hello and help! My infection began November 8. Task manager shows 10 to 15 processes with identical names jpokptfz.exe*32 Google Chrome, using up to 40% of CPU. The processes reappear immediately after ending manually. Chrome is not currently installed on my machine. Computer is running very slow; fake Google Chrome is causing high CPU usage. Also, today I uninstalled Java, but I can't delete folder appdata/locallow/Sun; looks like subfolders contain the fake Google Chrome .exe files. I ran SuperAntiSpyware, Malwarebytes Anti-Malware 2.0, and Norton 360 AV with no success.
 

Answer:Another Fake Google Chrome infection

Hello,

They call me TwinHeadedEagle around here, and I'll be working with you.

Before we start please read and note the following:

At the top of your post, please click on the "Watch thread" button and make sure to check Watch this thread...and receive email notifications. This will send an email to you as soon as I reply to your topic, allowing me to solve your problem faster.
Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process. Please do not perform System Restore or any other restore.
Instructions I give to you are very simple and made for complete beginner to follow. That's why you need to read through my instructions carefully and completely before executing them.
Please do not run any tools other than the ones I ask you to, when I ask you to. Some of these tools can be very dangerous if used improperly. Also, if you use a tool that I have not requested you use, it can cause false positives, thereby delaying the complete cleaning of your machine.

All tools we use here are completely clean and do not contain any malware. If your antivirus detects them as malicious, please disable your antivirus and then continue.
If during the process you run across anything that is not in my instructions, please stop and ask. If any tool is running too much time (few hours), please stop and inform me.
I visit forum several times at day, making sure to respond to everyon... Read more

6 more replies
Relevance 68.88%

i saw that other users had this issue solved but that the fix files were created for their particular machines. i'm hoping to get the same kind of assistance.
 

Answer:more fake google chrome processes

Hi,

1. Open notepad and copy/paste the text present inside the code box below.
To do this highlight the contents of the box and right click on it. Paste this into the open notepad.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system
Code:

C:\Users\morgan\AppData\LocalLow\{E7AE305C-39A3-4FFB-8910-E33B62A071E7}\Jcacvhbrtnb\tctmnaabyyis
HKU\S-1-5-21-4241491024-506926899-3993154103-1000\...\Run: [Cmhysiwv] => regsvr32.exe /s "C:\Users\morgan\AppData\Local\{56AD1659-E116-40E9-B946-5D157B41769E}\Cmhysiwv.dll" <===== ATTENTION
C:\Users\morgan\AppData\Local\{56AD1659-E116-40E9-B946-5D157B41769E}
SearchScopes: HKCU - Comcast URL = http://search.xfinity.com/?cat=subweb&con=mmchrome&q={searchTerms}&cid=xfstart_tech_search
BHO-x32: No Name -> {bb46be07-13eb-4c49-b0f0-fc78b9ea4983} -> No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
CHR HomePage: Default -> hxxp://us.yhs4.search.yahoo.com/web/partner?&hspart=w3i&hsimp=yhs-syctransfer&type=W3i_SP,203,0_0,StartPage,20131147,20033,0,25,0
CHR StartupUrls: Default -> "hxxp://us.yhs4.search.yahoo.com/web/partner?&hspart=w3i&hsimp=yhs-syctransfer&
EmptyTemp:

2. Save notepad as fixlist.txt to your Desktop.
NOTE: => It's important that both files, FRST and fixlist.txt are in the same location or the fix will not w... Read more

5 more replies
Relevance 68.88%

As described, multiple fake Chrome processes. As opposed to just the fix, I'd also like any details you can give me about this issue and what causes it.
 

Answer:Fake Google Chrome Processes

Helllo,

My name is Argus and and I will be helping you with your computer problems.

Before we begin, please note the following:

I will working be on your Malware issues, this may or may not, solve other issues you have with your machine.
The logs can take some time to research, so please be patient with me.
Stay with the topic until I tell you that your system is clean. Missing symptoms does not mean that everything is okay.
Instructions that I give are for your system only!
Please do not run any tools until requested ! The reason for this is so I know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.
Please perform all steps in the order received. If you can't understand something don't hesitate to ask.
Again I would like to remind you to make no further changes to your computer unless I direct you to do so. I will not help you if you do not follow my instructions.

Fix with Farbar Recovery Scan Tool

This fix was created for this user for use on that particular machine.
Running it on another one may cause damage and render the system unstable. ​Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!
Right-click on icon and select Run as Administrator to start the tool.
(XP users click run after receipt of Windows Security Warning - Open File).
Press the Fix button just once and w... Read more

9 more replies
Relevance 68.88%

I have a virus that creates a ton of processes that slows down my computer, and says its google chrome. It is in the appdata folder. What should I do?
John
 
Edit: I have a Windows 7, this is the folder for the program:
 
AppData\LocalLow\EmieBrowserModeList
 
The file name is srcgwulu.exe
 
To fix the problem, I tried to delete the file and contents in safe mode, but the file reappeared.

Answer:Fake google chrome virus

Here is the Farber Recovery Scan Tool
===========================================
 
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-12-2014
Ran by John Rieth (administrator) on JOHNRIETH-THINK on 30-12-2014 00:52:28
Running from C:\Users\John Rieth\Downloads
Loaded Profile: John Rieth (Available profiles: John Rieth)
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(Webroot) C:\Program Files\Webroot\WRSA.exe
(Lenovo.) C:\Windows\System32\ibmpmsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Webroot) C:\Program Files\Webroot\WRSA.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\AcPrfMgrSvc.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlk.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlkd.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Lenovo.) C:\Program Files (x86)\Th... Read more

3 more replies
Relevance 68.88%

Hello,
 I see a couple other people have posted this same problem in the last few days so hopefully someone can help.
 I have got 5-20 processes running under image name Bcexfymkqard.exe*32. Description Google Chrome. I have never installed Chrome. It is sucking maximum bandwidth from my modem. Malwarebytes did not clean it.  Please help. Here are my FRST and Addition logs:
 
FRST:
 
 
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 20-10-2014 01
Ran by John (administrator) on JOHN-PC on 21-10-2014 08:33:05
Running from C:\Users\John\Downloads
Loaded Profile: John (Available profiles: John)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) C:\Windows\System32\atiesrxx.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(AMD) C:\Windows\System32\atieclxx.exe
(DeviceVM, Inc.) C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCUService.exe
(Alcatel-Lucent) C:\Program Files (x86)\Common Files\Motive\McciCMService.exe
(Alcatel-Lucent) C:\Program Files\Common Files\Motive\McciCMService.exe
(Locktime So... Read more

Answer:Need Help... Fake Google Chrome processes

Bumpety Bump.  Can anyone help me with this?

22 more replies
Relevance 68.88%

I have a laptop that is running slow and after checking task manager I see several processes named Oigisuhyfs.exe and the description says that it is Google Chrome, I uninstalled Chrome, booted into safe mode and deleted the files in the Oigisuhyfs location but the virus just came back, after doing some research online I noticed that this was a recurring problem and read several posts on this website, all with a similar theme of instructions so I downloaded FRST and ran the scan, here are the results of the scan.......
 
Thanks in advance.

Answer:Fake Google Chrome virus

Hi & to Bleeping Computer Forums!My name is Jürgen and I will be assisting you with your Malware related problems. Before we move on, please read the following points carefully: My native language isn't English. So please do not use slang or idioms. It could be hard for me to read. Thanks for your understanding.Please read my instructions completely. If there is anything that you do not understand kindly ask before proceeding.Perform everything in the correct order. Sometimes one step requires the previous one.If you have any problems while you are follow my instructions, Stop there and tell me the exact nature of your problem.If you have illegal/cracked software, cracks, keygens, etc. on the system, please remove or uninstall them now!Do not run any other scans without instruction or Add/ Remove Software unless I tell you to do so. This would change the output of our tools and could be confusing for me.Post all Logfiles as a reply rather than as an attachment unless I specifically ask you. If you can not post all logfiles in one reply, feel free to use more posts.If I don't hear from you within 5 days from this initial or any subsequent post, then this thread will be closed.If I don't reply within 24 hours please PM me!Stay with me. I will give you some advice about prevention after the cleanup process. Absence of symptoms does not always mean the computer is clean.Step 1Press the + R on your keyboard at the same time. Type notepad and click OK.Copy the entire cont... Read more

14 more replies
Relevance 68.88%

Log for issue from this thread: http://www.bleepingcomputer.com/forums/t/555409/fake-google-chrome-slowing-computer/
 
Summary:  I run Windows 7.  Multiple processes labeled "Google Chrome" (which I do not have) had been slowing the computer.  I identified some of the files related to the issue, but when I deleted them they were recreated on next start-up.
 
I have not seen the processes running lately, but the related files are still present on the computer.  Norton and various malware removal programs have not identified or removed them.
 
DDS log:
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 11.0.9600.17420  BrowserJavaVersion: 10.71.2
Run by Home at 1:20:57 on 2014-12-09
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.1.1033.18.5887.4080 [GMT -5:00]
.
AV: Norton Internet Security *Enabled/Updated* {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB}
SP: Norton Internet Security *Enabled/Updated* {631E4324-D31C-783F-EC5C-35AD42B18466}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Norton Internet Security *Enabled* {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted... Read more

Answer:Fake Google Chrome Infestation

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/559154 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

4 more replies
Relevance 68.88%

I just migrated Windows 7 from one SSD to another SSD today. I did not do any type of install - just cloned the drives and set up the new drive to be the boot master. I ran the ZOEK before I knew what I was supposed to do with requesting help from this forum, so I uploaded that log, too.
 

Answer:Fake Google Chrome Processes

Hello,

They call me TwinHeadedEagle around here, and I'll be working with you.

Before we start please read and note the following:

At the top of your post, please click on the "Watch thread" button and make sure to check Watch this thread...and receive email notifications. This will send an email to you as soon as I reply to your topic, allowing me to solve your problem faster.
Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process. Please do not perform System Restore or any other restore.
Instructions I give to you are very simple and made for complete beginner to follow. That's why you need to read through my instructions carefully and completely before executing them.
Please do not run any tools other than the ones I ask you to, when I ask you to. Some of these tools can be very dangerous if used improperly. Also, if you use a tool that I have not requested you use, it can cause false positives, thereby delaying the complete cleaning of your machine.

All tools we use here are completely clean and do not contain any malware. If your antivirus detects them as malicious, please disable your antivirus and then continue.
If during the process you run across anything that is not in my instructions, please stop and ask. If any tool is running too much time (few hours), please stop and inform me.
I visit forum several times at day, making sure to respond to everyon... Read more

5 more replies
Relevance 68.88%

Hello,
 
Our HTPC got infected with virus:
C:\Users\Rita\AppData\LocalLow\Move Networks\Tssjgwzkpwxk\Qtnhygxoegxf\bewzwczd (bewzwczd.exe *32)
 
Here is FIRST.txt:
 
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-11-2014
Ran by Rita (administrator) on LIVINGROOMPC on 03-11-2014 12:57:41
Running from C:\Users\Rita\Desktop
Loaded Profile: Rita (Available profiles: Rita & UpdatusUser)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(AVAST Software) C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Lavasoft Limited                                                  ) C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe
() C:\Program Files\NVIDIA C... Read more

Answer:Fake Google Chrome Process

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/554585 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

2 more replies
Relevance 68.88%

Looks like my grandmother's computer has succumbed to some malware and she's not having too great a time with it. Any help would be greatly appreciated. Thanks, and Merry Christmas!
 

Answer:Fake Google Chrome malware

Hello,

They call me TwinHeadedEagle around here, and I'll be working with you.

Before we start please read and note the following:

At the top of your post, please click on the "Watch thread" button and make sure to check Watch this thread...and receive email notifications. This will send an email to you as soon as I reply to your topic, allowing me to solve your problem faster.
Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process. Please do not perform System Restore or any other restore.
Instructions I give to you are very simple and made for complete beginner to follow. That's why you need to read through my instructions carefully and completely before executing them.
Please do not run any tools other than the ones I ask you to, when I ask you to. Some of these tools can be very dangerous if used improperly. Also, if you use a tool that I have not requested you use, it can cause false positives, thereby delaying the complete cleaning of your machine.

All tools we use here are completely clean and do not contain any malware. If your antivirus detects them as malicious, please disable your antivirus and then continue.
If during the process you run across anything that is not in my instructions, please stop and ask. If any tool is running too much time (few hours), please stop and inform me.
I visit forum several times at day, making sure to respond to everyon... Read more

5 more replies
Relevance 68.88%

No idea where to begin with this. Please help!
 

Answer:Fake Google Chrome Processes

Helllo,

Before we begin, please note the following:

I will working be on your Malware issues, this may or may not, solve other issues you have with your machine.
The logs can take some time to research, so please be patient with me.
Stay with the topic until I tell you that your system is clean. Missing symptoms does not mean that everything is okay.
Instructions that I give are for your system only!
Please do not run any tools until requested ! The reason for this is so I know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.
Please perform all steps in the order received. If you can't understand something don't hesitate to ask.
Again I would like to remind you to make no further changes to your computer unless I direct you to do so. I will not help you if you do not follow my instructions.
===================================


Download Malwarebytes Anti-Rootkit to your desktop.

Double-click the icon to start the tool.
It will ask you where to extract it, then it will start.
Warning! Malwarebytes Anti-Rootkit needs to be run from an account with administrator rights.
Click in the introduction screen "next" to continue.
Click in the following screen "Update" to obtain the latest malware definitions.
Once the update is complete select "Next" and click "Scan".
When the scan is finished and no malware has been found select "Exit".
If malware wa... Read more

7 more replies
Relevance 68.88%

My computer is running very slow. I found several Google Chrome processes (with the image name of okursqwayt.exe) going on all at once. I don't have Google Chrome installed.
 

Answer:Fake Google Chrome Virus

Hello,

They call me TwinHeadedEagle around here, and I'll be working with you.

Before we start please read and note the following:

At the top of your post, please click on the "Watch thread" button and make sure to check Watch this thread...and receive email notifications. This will send an email to you as soon as I reply to your topic, allowing me to solve your problem faster.
Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process. Please do not perform System Restore or any other restore.
Instructions I give to you are very simple and made for complete beginner to follow. That's why you need to read through my instructions carefully and completely before executing them.
Please do not run any tools other than the ones I ask you to, when I ask you to. Some of these tools can be very dangerous if used improperly. Also, if you use a tool that I have not requested you use, it can cause false positives, thereby delaying the complete cleaning of your machine.

All tools we use here are completely clean and do not contain any malware. If your antivirus detects them as malicious, please disable your antivirus and then continue.
If during the process you run across anything that is not in my instructions, please stop and ask. If any tool is running too much time (few hours), please stop and inform me.
I visit forum several times at day, making sure to respond to everyon... Read more

28 more replies
Relevance 68.88%

I'm waiting on the Zoek application to complete. I'll then run FRST and attach the Zoek and FRST logs to this post.
 

Answer:Fake Google Chrome virus

Zoek results - .exe file still running after running Zoek. I may have been able to delete the "Temp" file it was in, but am afraid it is still in the registry and will re-load if the computer is rebooted.
 

3 more replies
Relevance 68.88%

I'm at the affected PC to communicate and hopefully resolve this issue. Thanks for any help that you can give me. Tried to end process but keeps replicating and is using up large amount of memory. Google Chrome is not installed on this PC.
 

Answer:Fake google chrome process

Hello,

They call me TwinHeadedEagle around here, and I'll be working with you.

Before we start please read and note the following:

At the top of your post, please click on the "Watch thread" button and make sure to check Watch this thread...and receive email notifications. This will send an email to you as soon as I reply to your topic, allowing me to solve your problem faster.
Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process. Please do not perform System Restore or any other restore.
Instructions I give to you are very simple and made for complete beginner to follow. That's why you need to read through my instructions carefully and completely before executing them.
Please do not run any tools other than the ones I ask you to, when I ask you to. Some of these tools can be very dangerous if used improperly. Also, if you use a tool that I have not requested you use, it can cause false positives, thereby delaying the complete cleaning of your machine.

All tools we use here are completely clean and do not contain any malware. If your antivirus detects them as malicious, please disable your antivirus and then continue.
If during the process you run across anything that is not in my instructions, please stop and ask. If any tool is running too much time (few hours), please stop and inform me.
I visit forum several times at day, making sure to respond to everyon... Read more

20 more replies
Relevance 68.88%

Hi - I'm new here, and found that I'm having the same problem as the user who posted this:
 
http://www.bleepingcomputer.com/forums/t/553030/fake-google-chrome-jhtrmnotfjhvexe-processes/
 
I've read through the above mentioned post above along with many others. I also followed a post on Reddit about this - below:
http://www.reddit.com/r/sysadmin/comments/2kl04m/fake_google_chrome_browser_process_max_out_cpu/
 
This process was continually running and spawning new processes.
C:\Users\Mike\AppData\LocalLow\Roblox\Lxjonxrom\lqsxdhhzll.exe
 
I also noticed information was being cleared and rewritten to this folder continuously:
C:\Users\Mike\AppData\LocalLow\Google\Dcdeecveb
 
I followed the suggestion about using Taskkill in the Reddit post and killed the process then immediately deleted the two folders mentioned above. I actually have all the contents of these folders still in my recycle bin (if needed).
 
Since killing the processes and removing the folders the offending processes have not restarted, however I am concerned there may be more lurking. Can you please assist with this?
 
Also, any idea how this virus/malware is being spread?  I noticed the create time on the folders was on 11/3/14 and 6:28pm.
 
Thank you in advance for all the great work you do!  This appears to be a great community!
 
Logs from DDS are attached.
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 11.0.9600.17344... Read more

Answer:Fake Google Chrome Processes

Hi & to Bleeping Computer Forums!My name is Jürgen and I will be assisting you with your Malware related problems.Before we move on, please read the following points carefully: My native language isn't English. So please do not use slang or idioms. It could be hard for me to read. Thanks for your understanding.Please read my instructions completely. If there is anything that you do not understand kindly ask before proceeding.Perform everything in the correct order. Sometimes one step requires the previous one.If you have any problems while you are follow my instructions, Stop there and tell me the exact nature of your problem.Do not run any other scans without instruction or Add/ Remove Software unless I tell you to do so. This would change the output of our tools and could be confusing for me.Post all Logfiles as a reply rather than as an attachment unless I specifically ask you. If you can not post all logfiles in one reply, feel free to use more posts.If I don't hear from you within 5 days from this initial or any subsequent post, then this thread will be closed.If I don't reply within 24 hours please PM me!Stay with me. I will give you some advice about prevention after the cleanup process. Absence of symptoms does not always mean the computer is clean.Step 1Please run a FRST scan. This will help us diagnose your problem.Please download Farbar Recovery Scan Tool and save it to your Desktop.(If you are not sure which version (32-/64-bit) applies to your system, d... Read more

10 more replies
Relevance 68.88%

Noticed other people having the same issue. Hopefully this can get fixed.
 

Answer:Fake Google Chrome processes

Fix with Farbar Recovery Scan Tool

This fix was created for this user for use on that particular machine.
Running it on another one may cause damage and render the system unstable. ​Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!
Right-click on icon and select Run as Administrator to start the tool.
(XP users click run after receipt of Windows Security Warning - Open File).
Press the Fix button just once and wait.
If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
When finished FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.
 

1 more replies
Relevance 68.88%

Mine is another case of fake Google Chrome processes running. I deleted the relevant files in the C:\Users\XXXX\AppData\LocalLow directory, but they start back up again! Thanks in advance for your help!
 

Answer:Another fake Google Chrome issue

Helllo,

Before we begin, please note the following:

I will working be on your Malware issues, this may or may not, solve other issues you have with your machine.
The logs can take some time to research, so please be patient with me.
Stay with the topic until I tell you that your system is clean. Missing symptoms does not mean that everything is okay.
Instructions that I give are for your system only!
Please do not run any tools until requested ! The reason for this is so I know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.
Please perform all steps in the order received. If you can't understand something don't hesitate to ask.
Again I would like to remind you to make no further changes to your computer unless I direct you to do so. I will not help you if you do not follow my instructions.
==================================



Fix with AdwCleaner

Please download AdwCleaner by Xplode and save the file to your desktop.
Right-click on icon and select Run as Administrator to start the tool.
Follow the prompts and click Scan.
When finished, please click Clean.
Upon completion, click Report. A log (AdwCleaner[S*].txt) will open.

Please include the contents of that file in your reply.


Fix with Farbar Recovery Scan Tool

This fix was created for this user for use on that particular machine.
Running it on another one may cause damage and render the system unstable. ​Downl... Read more

4 more replies
Relevance 68.88%

Have a Windows 7 Pro 64bit system that has multiple chrome.exe processes running. The system does not have Chrome installed.Have run a full virus check with NIS and it did not find anything.Ran TDSSKiller and it came back clean.Do you have any suggestions as to how I might remove the Trojan or virus that infected my system? Thank You,Decatur31

Answer:Fake google chrome ( browser.exe)

Please download MiniToolBox, save it to your desktop and run it.
 
Checkmark the following checkbox:
 
List Installed Programs
 
Click on Go to start the scan.  Once it is finished highlight the text, copy it and paste it in your next post.

2 more replies
Relevance 68.88%

I need help with a fake google chrome problem. Many processes are running and slowing my computer way down. I've taken multiple steps to attempt to fix this but my problem is still here. please help me
 

Answer:Need help on fake google chrome processes

Here are zoek results, I realized they may be helpful. Like I said above, the problem is still afflicting my computer after this.
 

11 more replies
Relevance 68.88%

Hello. Recently my PC has become infected with the "Google Chrome" virus where a fake .exe posing as Chrome creates itself, runs itself, and opens many processes which hogs CPU and RAM. Deleting the .exe is no good because this virus recreates itself in a new random folder upon next PC startup and does its same thing again. I have already run Farbar Recovery Tool, so attached are my FRST and Addition txts.
 

Answer:Fake Google Chrome processes

Hello,

They call me TwinHeadedEagle around here, and I'll be working with you.

Before we start please read and note the following:

At the top of your post, please click on the "Watch thread" button and make sure to check Watch this thread...and receive email notifications. This will send an email to you as soon as I reply to your topic, allowing me to solve your problem faster.
Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process. Please do not perform System Restore or any other restore.
Instructions I give to you are very simple and made for complete beginner to follow. That's why you need to read through my instructions carefully and completely before executing them.
Please do not run any tools other than the ones I ask you to, when I ask you to. Some of these tools can be very dangerous if used improperly. Also, if you use a tool that I have not requested you use, it can cause false positives, thereby delaying the complete cleaning of your machine.

All tools we use here are completely clean and do not contain any malware. If your antivirus detects them as malicious, please disable your antivirus and then continue.
If during the process you run across anything that is not in my instructions, please stop and ask. If any tool is running too much time (few hours), please stop and inform me.
I visit forum several times at day, making sure to respond to everyon... Read more

5 more replies
Relevance 68.88%

Hello,
 
I've seen others with the same problem, but I am getting a process in Windows Task Manager that won't go away even if I go into Safe Mode and delete the file.  It is located in User\AppData\LocalLow.  I have attached the image of Windows Task Manager and the 2 FRST files.
 
Thank you for any help!
 

Answer:Fake Google Chrome Processes

Hello! Welcome to BleepingComputer Forums!
My name is Georgi and and I will be helping you with your computer problems.
Before we begin, please note the following:
I will working be on your Malware issues, this may or may not, solve other issues you have with your machine.
The logs can take some time to research, so please be patient with me.
Stay with the topic until I tell you that your system is clean. Missing symptoms does not mean that everything is okay.
Instructions that I give are for your system only!
Please do not run any tools until requested ! The reason for this is so I know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.
Please perform all steps in the order received. If you can't understand something don't hesitate to ask.
Again I would like to remind you to make no further changes to your computer unless I direct you to do so. I will not help you if you do not follow my instructions.
 
I will reply back later today with a fix.
 
 
Regards,
Georgi

8 more replies
Relevance 68.88%

Hello, I have followed the instructions for posting to this thread and uploaded the two documents from FRST. I am having the fake google chrome process virus as well, please help!
 

Answer:Fake Google Chrome Process

Hello,

They call me TwinHeadedEagle around here, and I'll be working with you.

Before we start please read and note the following:

At the top of your post, please click on the "Watch thread" button and make sure to check Watch this thread...and receive email notifications. This will send an email to you as soon as I reply to your topic, allowing me to solve your problem faster.
Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process. Please do not perform System Restore or any other restore.
Instructions I give to you are very simple and made for complete beginner to follow. That's why you need to read through my instructions carefully and completely before executing them.
Please do not run any tools other than the ones I ask you to, when I ask you to. Some of these tools can be very dangerous if used improperly. Also, if you use a tool that I have not requested you use, it can cause false positives, thereby delaying the complete cleaning of your machine.

All tools we use here are completely clean and do not contain any malware. If your antivirus detects them as malicious, please disable your antivirus and then continue.
If during the process you run across anything that is not in my instructions, please stop and ask. If any tool is running too much time (few hours), please stop and inform me.
I visit forum several times at day, making sure to respond to everyon... Read more

3 more replies
Relevance 68.88%

TwinHeadedEagle helped me last week with a Trojan Ad Clicker virus. That seemed to have been fixed, but now having a different issue with a corrupt Google Chrome file. (even though I don't use Google Chrome or have even downloaded it)
 

Answer:Fake Google Chrome Process

Re-run FRST.exe as you did before ...
Download fixlist.txt that you find attached at the bottom of this post and save it same place you
Press the Fix button once and wait.
FRST will process fixlist.txt
When finished, it will produce a log fixlog.txt and will keep that log in the same folder where FRST.exe is.
> Attach here fixlog.txt logreport.
 

4 more replies
Relevance 68.88%

The description pretty much says it all, I ran FRST and those files are attached.
 

Answer:Fake Google Chrome Processes

Hello,

They call me TwinHeadedEagle around here, and I'll be working with you.

Before we start please read and note the following:

At the top of your post, please click on the "Watch thread" button and make sure to check Watch this thread...and receive email notifications. This will send an email to you as soon as I reply to your topic, allowing me to solve your problem faster.
Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process. Please do not perform System Restore or any other restore.
Instructions I give to you are very simple and made for complete beginner to follow. That's why you need to read through my instructions carefully and completely before executing them.
Please do not run any tools other than the ones I ask you to, when I ask you to. Some of these tools can be very dangerous if used improperly. Also, if you use a tool that I have not requested you use, it can cause false positives, thereby delaying the complete cleaning of your machine.

All tools we use here are completely clean and do not contain any malware. If your antivirus detects them as malicious, please disable your antivirus and then continue.
If during the process you run across anything that is not in my instructions, please stop and ask. If any tool is running too much time (few hours), please stop and inform me.
I visit forum several times at day, making sure to respond to everyon... Read more

7 more replies
Relevance 68.88%

Hello,
 
I am hoping you guys can help me with my problem. I keep getting fake google processes and I don't know how to get rid of them. In users/user/appdata/locallow I see a number of things that, when I try to delete them, they auto-regenerate.  I am at a loss and would greatly appreciate any help you could give me. here are the scan logs from FRST, and thank you very much in advance.
 
 
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 30-10-2014 01
Ran by Slaight (administrator) on JOHN on 30-10-2014 19:50:06
Running from C:\Users\Slaight\Downloads
Loaded Profiles: UpdatusUser & Slaight (Available profiles: UpdatusUser & Slaight)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\WINDOWS\System32\nvvsvc.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\WINDOWS\System32\nvvsvc.exe
(Microsoft Corporation) C:\WINDOWS\System32\wlanext.exe
(Intel Corporation) C:\Program Files (x86)\Intel\... Read more

Answer:Vinylinfinity (browser.exe*) fake google application

Hello! Welcome to BleepingComputer Forums!
My name is Georgi and and I will be helping you with your computer problems.
Before we begin, please note the following:
I will working be on your Malware issues, this may or may not, solve other issues you have with your machine.
The logs can take some time to research, so please be patient with me.
Stay with the topic until I tell you that your system is clean. Missing symptoms does not mean that everything is okay.
Instructions that I give are for your system only!
Please do not run any tools until requested ! The reason for this is so I know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.
Please perform all steps in the order received. If you can't understand something don't hesitate to ask.
Again I would like to remind you to make no further changes to your computer unless I direct you to do so. I will not help you if you do not follow my instructions.
 
 
Please download the latest version of Farbar Recovery Scan Tool and save it to your desktop.Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy a... Read more

3 more replies
Relevance 68.88%

Currently hve Norton antivirus blocking this threat with every second click of any link in any webpage
 
Here are my DDS logs:
 
.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2012-11-20.01)
.
Microsoft Windows 7 Home Premium 
Boot Device: \Device\HarddiskVolume1
Install Date: 23/10/2012 1:02:25 PM
System Uptime: 21/10/2014 1:32:35 PM (1 hours ago)
.
Motherboard: PEGATRON CORPORATION |  | 2ACB
Processor: AMD A8-3800 APU with Radeon™ HD Graphics | P0 | 2400/100mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 1847 GiB total, 1778.171 GiB free.
D: is FIXED (NTFS) - 16 GiB total, 1.964 GiB free.
E: is CDROM ()
F: is Removable
G: is Removable
H: is Removable
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
RP140: 1/10/2014 4:56:27 PM - Windows Update
RP141: 9/10/2014 8:35:04 AM - Scheduled Checkpoint
RP142: 16/10/2014 3:57:55 PM - Windows Update
RP143: 20/10/2014 11:13:10 AM - Removed Bonjour
RP144: 21/10/2014 8:12:56 AM - Restore Operation
RP145: 21/10/2014 12:56:17 PM - Norton_Power_Eraser_20141021125615584
RP147: 21/10/2014 1:25:37 PM - Revo Uninstaller Pro's restore point - MyBestOffersToday 027.70
RP149: 21/10/2014 1:27:05 PM - Revo Uninstaller Pro's restore point - C:\Program Files (x86)\mbot_au_70
.
==== Installed Programs ======================
.
64 Bit HP CIO Components Installer
7500_7600_7700_Help1
Adobe AIR... Read more

Answer:'PUP: Fake application download 4' opens popups in all browsers Windows 7

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/552721 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

2 more replies
Relevance 68.47%

I looked this up and went through the fixes at howtogeek.com but I could not find the issue.  I was trying to view this websites videos:  http://comediansincarsgettingcoffee.com/seth-meyers-really
Any help would be great, you can view my setup below.  I might have to go to the dreaded firefox and try it out.
 
I definitely don't have two Adobe Flashes installed that I can see after clicking on the + in the upper right hand corner.
 
Perhaps this is a Linux issue, please take a look at this:  http://get.adobe.com/flashplayer/?no_redirect
 
I have Adobe Flash Player - Version: 15.0.0.189, perhaps this is not supported anymore but is updating because of google chrome.  I almost posted this in the Linux section but here I am hoping for the best lol.

Answer:Shockwave Flash has crashed warning, Google Chrome

Thought I would add some more info.  Also, my Google Chrome is up to date, Version 38.0.2125.111:
Adobe Flash Player - Version: 15.0.0.189
Shockwave Flash 15.0 r0


Name: Shockwave Flash
Description: Shockwave Flash 15.0 r0
Version: 15.0.0.189
Location: /opt/google/chrome/PepperFlash/libpepflashplayer.so
Type: PPAPI (out-of-process)
  Disable
MIME types: MIME type Description File extensions application/x-shockwave-flash Shockwave Flash .swf application/futuresplash FutureSplash Player .spl
 
This post was interesting:  http://forums.linuxmint.com/viewtopic.php?p=883068#p883068

17 more replies
Relevance 68.47%

My google chrome has crashed. The screen also says t8ExtPEx.d11 is missing. How should I correct this error ?

Answer:GOOGLE CHROME INSTALL HAS CRASHED ,t8ExtPEx.d11 is missing.

Here are the first 2 steps, more steps will be needed, after I look at the logs.Run both of these, in this order.Step 1: Run AdwCleaner http://www.softpedia.com/get/Antivi...http://www.raymond.cc/blog/adwclean...http://www.bleepingcomputer.com/dow...Author's sitehttp://general-changelog-team.fr/en...Tutorialhttp://general-changelog-team.fr/en...Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click on Clean.Confirm each time with Ok.Your computer will be rebooted automatically. A text file will open after the restart.Please Copy & Paste the contents of that logfile with your next answer.You can find the logfile at C:\AdwCleaner[S1].txt as well.Step 2: Run Junkware Removal Toolhttp://www.softpedia.com/get/Securi...http://www.bleepingcomputer.com/dow...http://thisisudax.blogspot.com.au/2...Download Junkware Removal Tool onto your Desktop. If your default download location is not the Desktop, drag it out of it's location onto the Desktop.Warning! Once the scan is complete JRT will shut down your browser with NO warning.Shut down your protection software now to avoid potential conflicts.Temporarily disable your antivirus and any antispyware real time protection before performing a scan.Click this link to see a list of security programs that should be disabled and how to disable them.http://www.bleepingcomputer.com/for...http://www.techsupportforum.com/for... Run the tool by double-clicking it. If you are using Windows Vista or Windows 7... Read more

5 more replies