Something is installing Chrome Extensions, and I can't find it.

CurrentlyPissed

CurrentlyPissed

New member
Halp. Malware Bytes, Kaspersky, Avast, and Avira cannot find anything yet some how I keep getting "adsbyxxx" extensions installed into chrome.
 
Have you disabled all other extensions and plugins to see if it stops?
 
Lazy8s said:
Have you disabled all other extensions and plugins to see if it stops?
Click to expand...

It stops, but they keep getting reinstalled somehow. The only other extensions I have are Adblock. And Chromes standard Drive, files, etc.

I think I might just nuke'n'pave this weekend to be safe.
 
CurrentlyPissed said:
It stops, but they keep getting reinstalled somehow. The only other extensions I have are Adblock. And Chromes standard Drive, files, etc.

I think I might just nuke'n'pave this weekend to be safe.
Click to expand...

You might want to ditch Chrome for now too. I did some searching and it's a fairly common issue with a number of unwanted extensions being installed.

https://productforums.google.com/forum/#!topic/chrome/aAZKnusWbYg

http://superuser.com/questions/695790/how-are-chrome-extensions-installed-without-my-knowledge

Those are over a year old,so it's been happening for a while. Some of the reading showed anti-malware programs as the culprit, like AVG.

I think this might be your culprit though.

http://computerviruskiller.blogspot.com/2014/12/remove-ads-by-sasa-effective-ways-help.html

SASA is actually an adware which uses numerous ads to make profits. It can come into your PC without any knowledge and permission. What's worse, it also has a follower called Obrona BlockAds. The two often come hand in hand. And they often sign their names like "Ads by XXX". So it's very easy for you to recognize it.


Infected ways

Usually SASA penetrates into your computer system bundled with fake updates.
The downloading of freeware or shareware may bring you the adware.
It can also hide in Sponsored links, hacked websites and suspicious pop-up ads.
Spam email attachments may also contain it.
Click to expand...
 
You must log in or register to reply here.
Back
Top