[SOLVED] advertising junk sites

[johnrobert]

Win 8.1 on 3 computers in home office kids came to visit over Christmas

When I go to a site and hover over links above it changes into a hand witch is normal but it changes back again to a pointer and takes me to advertising junk sites
I tried everything in D7 to remove this plus system restore on one computer but cannot get rid of it.
uninstalled Chrome deleted profile re-installed Chrome it does it in all browsers

 

[NYJimbo]

When I go to a site and hover over links above it changes into a hand witch is normal but it changes back again to a pointer and takes me to advertising junk sites

Are you saying that you get taken to sites WITHOUT clicking on a link, just hovering over a link ?

 

[johnrobert]

No it has to be clicked but I know when it’s going to an advertising site
When it changes into a pointer
Usually JRT works but not in this case

 

[pcmedicri]

have you tried adwcleaner?

Try hitmanpro

Also try resetting the browser.

Check your hosts file too.

 

[johnrobert]

Thanks
I did try hitmanpro also checked hosts
I will try adwcleaner I think that the only one left

 

[bertie40]

Maybe try a freshly created profile. If that's malware free, transfer over to that.

 

[bertie40]

Process explorer. Anything weird running ? I'm assuming you cleared out temp files etc. I find system ninja good for that.

Not forgetting good ol ccleaner

 

[bertie40]

Ps. Ain't kids great [emoji48]

Maybe try a Linux boot disk viral scan, such as Kaspersky boot disk.

 

[TimM]

Did you make a new shortcut, and does the shortcut have anything except a plain link to chrome.exe?
Is it using a proxy? Does the proxy come back after it is deleted?
Are there any extensions (.crx files) outside the chrome profile that are being loaded by registry entries in

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions

?

 

[johnrobert]

Same thing happened to a friends laptop while visiting, but when friend went home problem disappeared

When he connected into his apple hotspot instead of normal router problem disappears
I am goint to reset router tomorrow
Has anybody heard of a network being infected along with router
I had him turn off all computer then re-power router and switch but that did no good, see if resetting router helps

 

[carrcomp]

Yeah, bunch of different ways too.

DNS is likely changed.

 

[johnrobert]

I tried my own router and problem went away.
I reset his and updated firmware and so far that solved the problem.
No wonder I couldn't remove it from computers using removal software, I would have never expected router being hacked