Hi,
When I browse (Chrome, PC, Win 10) I'm constantly getting notifications from Malwarebytes Anti-Malware that malicious websites are being blocked. Three domains are being blocked in particular: okw.portshilwalking.com, fjh.prefecturehorticulturists.com, and nlw.underwearliftoff.com. See example below:
Also when I browse, sometimes a "Reimage Repair - Speed up my PC" or a "links-yahoo.com" tab would open inviting me to download a Windows 10 repair tool, or to perform a search.
Finally, some random words on a website would appear blue with a green pop-up icon next to them, and hovering over them would show an ad related to the highlighted word. See example below:
I don't know how I got infected and I can't remove the infection. I tried Malwarebytes, AdwCleaner, HitmanPro, RogueKiller, CCleaner and Windows Defender (in that order) but nothing helps. AdwCleaner was able to find some cookies and removed them. RogueKiller found some registry abnormalities and suspicious tasks. I think when it tried repairing the tasks it wasn't able to do it, because for the 3 tasks it found, it updated their status to "ERROR [1]", but I wasn't able to find anything beyond this error label (click here to see the full log). I also tried running all of them in Safe Mode.
Any advice?
Thanks,
Dave
Edit: Also sometimes I would see this VNPApps pop-up on websites:
When I browse (Chrome, PC, Win 10) I'm constantly getting notifications from Malwarebytes Anti-Malware that malicious websites are being blocked. Three domains are being blocked in particular: okw.portshilwalking.com, fjh.prefecturehorticulturists.com, and nlw.underwearliftoff.com. See example below:
Also when I browse, sometimes a "Reimage Repair - Speed up my PC" or a "links-yahoo.com" tab would open inviting me to download a Windows 10 repair tool, or to perform a search.
Finally, some random words on a website would appear blue with a green pop-up icon next to them, and hovering over them would show an ad related to the highlighted word. See example below:
I don't know how I got infected and I can't remove the infection. I tried Malwarebytes, AdwCleaner, HitmanPro, RogueKiller, CCleaner and Windows Defender (in that order) but nothing helps. AdwCleaner was able to find some cookies and removed them. RogueKiller found some registry abnormalities and suspicious tasks. I think when it tried repairing the tasks it wasn't able to do it, because for the 3 tasks it found, it updated their status to "ERROR [1]", but I wasn't able to find anything beyond this error label (click here to see the full log). I also tried running all of them in Safe Mode.
Any advice?
Thanks,
Dave
Edit: Also sometimes I would see this VNPApps pop-up on websites:
Facebook
Twitter