Question Adware won't go away after reinstalling OS multiple times

Apr 22, 2017
6
0
4,510
Recently I've been visiting a video game forum and it on top of the page it was said "Not Secure" but normally, when I visit "Not Secure" websites, I never had any troubles. But now, all "Not Secure" websites redirect me to this random download sites and have this pop up that says "I would like to meet you tonight" or whatever.



I've ran scans with Malwarebytes, Adwcleaner, and all that you could possibly think of (ESET, Bitdefender, Avast, etc etc). As my last resort, I decided to reinstall my OS multiple times.



After reinstalling, I assumed that it would be gone so I simply downloaded chrome and logged into my account which automatically synced. Then I checked the same forum site and I got the same ad. So I launched my PC in safe-mode and the issue was still there. So I decided to reinstall my OS again and then launch Edge and go to the forum site. The issue still persisted.



I saw another thread similar to my issue that was fixed by his ISP so I decided to try out my hotspot and the ad would still pop up, which I now knew the adware was still in my computer.



Went to my mother's computer which I never synced my account to, and the ad will still pop up when I visit the forum website or any other "Not Secure website" so I thought it was just my IP being revealed or something after going to sketchy websites for cracks.



What I've noticed was I ran this scanning tool that was suggested to me and it detected PUP and Adware extensions that were in the app data folder of my chrome with random alphabet names such as "adijjiafsdfasfadsfdsfdasfa" as if it was randomly generated. I simply deleted them manually and then I also reset my edge since there was this thing that was detected called Hijack.edge.DOMstorage or something. I deleted all of them and launched chrome while looking at my extensions folder and the files will automatically regenerate.





ESET will tell me that JS/Adware.name.name was trying to launch something using chrome whenever I visited the website.



I've heard that it could be my router being infected, but I'm not sure. I just cannot think straight at this point.



It's been two days and I'm pulling my hair out. Please help.
 
Last edited:
Apr 22, 2017
6
0
4,510
Reinstall OS and don't visit that site. Seems a pretty straightforward way to know if it's the website or not.:spamafote:


But it's not only that site. It's every "Not Secure" website. Even Autodesk's Thank you page for downloading Fusion 360.

Update: I reinstalled OS on my laptop to try out new things and this is what I just got

Without logging onto my Microsoft account, I opened edge and checked the page: Nothing
Downloaded chrome through edge and opened the page (any not secure site): Nothing
Logged into my Microsoft account and launched the site on edge: Nothing
Logged into my Microsoft account and launched the site on chrome: Redirect/Porn pop ups
Logged out of my Microsoft account and launched site on chrome: Redirect/Porn pop ups
Logged out of my Microsoft account and launched site on chrome but deleted and reset chrome: Nothing


Could it be my Microsoft sync that the adware is on?