Weird extension respawns

[bob saget]

Recently I have been having issues with text in web pages becoming underlined, and when i place cursor over an underlined word, some advertisements would pop up.

A quick google search told me that I probably installed some malware along with an intended program. First thing is I went into control panel and deleted everything suspicious. There were some items titled something along the lines of "deal finder" or something like that.

Problem is that the extension keeps re-appearing when I restart chrome even after I delete it. This is what it looks like:



Really hope I don't have to do a reformat... Currently doing a full MSE scan...

Thanks for all your help guys, as always.

[nutcrackr]

Run http://www.malwarebytes.org/

[The PyroPath]

And spybot S&D while you're at it.

[@md_Guy]

Recently I have been having issues with text in web pages becoming underlined, and when i place cursor over an underlined word, some advertisements would pop up.

A quick google search told me that I probably installed some malware along with an intended program. First thing is I went into control panel and deleted everything suspicious. There were some items titled something along the lines of "deal finder" or something like that.

Problem is that the extension keeps re-appearing when I restart chrome even after I delete it. This is what it looks like:



Really hope I don't have to do a reformat... Currently doing a full MSE scan...

Thanks for all your help guys, as always.

when that happens there is a relatively easy way to forever kill it.. right click the web page (view source).. look for "javascript" (.js). The most common cuprits are Intellitext and Kontera.

Open C:\Windows\System32\Drivers\HOSTS file in Notepad

add the following to the bottom of the file and SAVE (overwriting current HOST file):

127.0.0.1 *.kontera.com
127.0.0.1 *.intellitxt.com

adding the follow and kiss google analytics goodbye

127.0.0.1 google-analytics.com
127.0.0.1 googleadservices.com
127.0.0.1 googlesyndication.com

Do this for any all "ads" you want to block and NEVER be bothered by them again. Opera users can simply import a comprehensive urlfilter (like a host file for opera) from http://www.fanboy.co.nz/adblock/opera/

you can download prebuilt hosts files from: http://pgl.yoyo.org/as/serverlist.ph...stformat=hosts or http://winhelp2002.mvps.org/hosts.htm and say hello to a new better interweb

More info:

http://lifehacker.com/5817447/how-to-block-unwanted-ads-in-all-applications-and-speed-up-web-browsing-with-the-hosts-file

[bob saget]

Followed everything ^ but when it came time to save, wouldn't let me save because said "Access Denied" even though I am admin.

I selected to replace the hosts file when saving, selecting all file types, and no go.

Nutcrackr kindly suggested this site

http://www.howtogeek.com/140464/how-to-manually-uninstall-a-globally-installed-chrome-extension/

And I followed it to here:

Open your profile folder – generally named Default, unless you have created a new profile – and open the Extensions folder inside it. You should be in a folder like the following:

C:\Users\NAME\AppData\Local\Google\Chrome\User Data\Default\Extensions

If you have a variety of extensions and apps installed, you’ll see quite a few subfolders. To determine which one is associated with the Ask Toolbar (or whatever globally installed extension you want to remove), we can open Chrome’s Extensions page, enable the Developer mode check box, and view the Ask Toolbar’s extension ID.

Locate the folder with the same name as the extension ID, delete it, and restart Chrome. The extension will be removed.

So i removed all the extensions (except the ones i wanted to keep). While in chrome the unwanted extension keeps coming up, no longer are words underlined and ads popping up on webpages, such as on rage.

[ViN86]

Followed everything ^ but when it came time to save, wouldn't let me save because said "Access Denied" even though I am admin.

I selected to replace the hosts file when saving, selecting all file types, and no go.

Nutcrackr kindly suggested this site

http://www.howtogeek.com/140464/how-to-manually-uninstall-a-globally-installed-chrome-extension/

And I followed it to here:

So i removed all the extensions (except the ones i wanted to keep). While in chrome the unwanted extension keeps coming up, no longer are words underlined and ads popping up on webpages, such as on rage.

You can't update the HOSTS file directly. You will need to copy it to your desktop, edit it there, then overwrite the existing HOSTS file (i.e. copy/paste it back to the Windows directory). Then restart for it to take effect.

[bob saget]

You can't update the HOSTS file directly. You will need to copy it to your desktop, edit it there, then overwrite the existing HOSTS file (i.e. copy/paste it back to the Windows directory). Then restart for it to take effect.

thank you, it worked.

browsing seems way more snappy. no ads on page. stupid extension keeps reinstalling itself :|

[Redeemed]

I think you should post a screenshot of your browsing history so we can track where it may have come from, and then recommend how to permanently remove it.