Your PC has a cold

Post #422,733 by scoenye 2/28/18 8:07:20 PM 2/28/18 8:07:20 PM Reply	Your PC has a cold https://www.bleepingcomputer.com/virus-removal/remove-ad-by-counterflix-and-rockettab Looks like something got on that hijacked the DNS settings. This is at the OS level, not Chrome. (I used to run ComboFix to clean up infested PCs but it does not work on Windows 8.1/10 and is rather ruthless. There are a couple of cases where it would dump part of the network stack. Caveat utilitor ;-)
Post #422,734 by Another Scott 2/28/18 9:17:18 PM 2/28/18 9:17:18 PM Reply	Yeah, I gotta do some medical treatments... I don't recall downloading anything on to it recently, but I haven't done forensics yet. As if I didn't have enough things to do... Thanks. Cheers, Scott. ("But I thought Winders Defender was supposed to be a great AV program!!!1")
Post #422,735 by Another Scott 2/28/18 11:32:41 PM 2/28/18 11:32:41 PM Reply	Followed the instructions, made no difference. I'm able to "Zap" the ad elements with UBlock Origin, but it isn't general enough to stick. Gotta do some more investigating. Grrr. Cheers, Scott.
Post #422,736 by Another Scott 3/1/18 12:03:43 AM 3/1/18 12:03:43 AM Reply	Deleted Chrome (keeping settings), reinstalled. Eventually fixed - infected Extension. No change. Decided to delete all my Chrome Extensions except for TamperMonkey and UBlock Origin. That finally worked. Apparently one of the Extensions had been infected. Deleting all the others (an HP35 calculator, a font extension, an "Edit Office files with Google Docs, an HTML5 video autoplay stopper, and a couple of other similar things) got rid of the offending behavior. Hope this helps someone else out there. Cheers, Scott.

Welcome to IWETHEY!