3

I have been looking all over the internet, to remove this Google Chrome based malware. I have encountered such malwares in the past, and I was able to remove it by disabling the extensions, delete them from the chrome's folder and even removing them from registry. But this malware by "AdFreeApp" has no trace in my extension and have taken over my web pages, it shows up on my google search, pop ups, whenever I open a new link. Although I'm using the popular AdBlock extension (which is the only active extension on my chrome right now), disabling that doesn't work even.

Online somewhere it was recommended to download adwcleaner, but I'm scared as whether it is even safe and will resolve my issue.

Firstly, I was looking for a systematic way to first of all remove such Malware without possible using any such tools.

Secondly, if there's a way to prevent them completely. Can sandboxing of Google chrome work in windows 8 and help resolve this issue?

1

Ads by AdFreeApp is an unpacked extension, so to see it under extensions menu you need to install a developer extension like "Chrome Apps & Extensions Developer Tool", launch it from the task bar and then you'd be able to see the annoying extension called "Ads by AdFreeApp" under Extensions -> Unpacked, uninstall it and you will never see it again.

0

Using browsers in a sandbox might help, but won't help if the adware is proxy-based. The best way to avoid adware is to be careful while installing programs and to reject "offers" (Unchecky can do this automatically but isn't perfect), avoid downloading programs from advertisements (try disabling AdBlock and searching for Firefox, there's a lot of fake download links in the form of ads), close unfamiliar webpages and pop-ups that tell you that your programs need to be updated, if you're on a website like Download.com which bundles offers with its programs always choose things like "Direct Download Link" instead of clicking the big download button (especially buttons that say suspicious things like Smart/Sponsored uninstaller), things like that. You can buy premium antimalware programs like Malwarebytes Pro which have real time protection to block adware or just scan frequently if you have antimalware programs without real timeprotection. Note that an antivirus is not the same as an antimalware. Antiviruses are designed to detect most threats but can miss adware, and antimalware programs are designed to detect adware and maybe a little bit of what Antiviruses detect.

-1

Use Malware Bytes, this usually works for removing adware, as well as avg antivirus free, use both, then for 3rd times the charm get windows security essentials and or windows defender. Secondly I highly recommend install Comodo Firewall, it would have prevent this in the first place, it prevents anything being written to registry or critical files from being changed, or files that shouldn't be access the internet without your consent.

You should do this while in safe made without networking, uninstall chrome, use ccleaner to remove unused registry files. Then run malwarebytes, avg, windows essentials/defender. Run ccleaner again to clean up registry files. Do a fresh install of chrome and see how it goes. Definitely install a firewall like Comodo or one that you like. Do not download anything you do not know either.

  • 1
    Running multiple realtime antivirus software at once (AVG and MSE) is a terrible idea. – nyuszika7h Jun 23 '15 at 8:03
  • 1
    You don't run them all at once, you run one after another. This is not something that is meant to stay installed after the fact, it is just to scan, detect and remove. You uninstall everything after and use your choice of anti-virus afterwards. Not rocket science. – arealhobo Jun 23 '15 at 8:19

protected by Community Jul 11 '15 at 7:01

Thank you for your interest in this question. Because it has attracted low-quality or spam answers that had to be removed, posting an answer now requires 10 reputation on this site (the association bonus does not count).

Would you like to answer one of these unanswered questions instead?

Not the answer you're looking for? Browse other questions tagged or ask your own question.