chrome.exe *32 in Processes - Numerous Entries - HELP!

# AdwCleaner v5.031 - Logfile created 27/01/2016 at 16:22:55
# Updated 25/01/2016 by Xplode
# Database : 2016-01-25.3 [Server]
# Operating system : Windows 7 Professional Service Pack 1 (x64)
# Username : [redacted] - SERUMOFFICE-PC
# Running from : C:\Users\[redacted]\Desktop\AdwCleaner.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****

[-] Service Deleted : vToolbarUpdater40.2.4

***** [ Folders ] *****

[-] Folder Deleted : C:\Program Files (x86)\4C4C4544-1450565426-5A10-8057-B2C04F563032
[-] Folder Deleted : C:\Program Files\Common Files\AVG Secure Search
[-] Folder Deleted : C:\Users\[redacted]\AppData\Local\Google\Chrome\User Data\Default\Extensions\chfdnecihphmhljaaejmgoiahnihplgn
[-] Folder Deleted : C:\Users\[redacted]\AppData\Local\Google\Chrome\User Data\Default\Extensions\madakpajlmcpaodhfbekojajlhbdklol
[-] Folder Deleted : C:\Users\[redacted]\AppData\Roaming\Elex-tech

***** [ Files ] *****

[-] File Deleted : C:\Users\[redacted]\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_chfdnecihphmhljaaejmgoiahnihplgn_0.localstorage
[-] File Deleted : C:\Users\[redacted]\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_chfdnecihphmhljaaejmgoiahnihplgn_0.localstorage-journal
[-] File Deleted : C:\Users\[redacted]\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_search.safesidesearch.com_0.localstorage
[-] File Deleted : C:\Users\[redacted]\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_search.safesidesearch.com_0.localstorage-journal
[-] File Deleted : C:\Users\[redacted]\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage
[-] File Deleted : C:\Users\[redacted]\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage-journal
[-] File Deleted : C:\Users\[redacted]\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.ask.com_0.localstorage
[-] File Deleted : C:\Users\[redacted]\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.ask.com_0.localstorage-journal
[-] File Deleted : C:\Users\[redacted]\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.bitchcrawler.com_0.localstorage
[-] File Deleted : C:\Users\[redacted]\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.bitchcrawler.com_0.localstorage-journal
[-] File Deleted : C:\Users\[redacted]\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.yourtango.com_0.localstorage
[-] File Deleted : C:\Users\[redacted]\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.yourtango.com_0.localstorage-journal
[-] File Deleted : C:\Users\[redacted]\AppData\Roaming\Mozilla\Firefox\Profiles\xusd85ou.default\user.js
[-] File Deleted : C:\Windows\SysNative\log\iSafeKrnlCall.log

***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****


***** [ Web browsers ] *****

[-] [C:\Users\[redacted]\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : chfdnecihphmhljaaejmgoiahnihplgn
[-] [C:\Users\[redacted]\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : madakpajlmcpaodhfbekojajlhbdklol

*************************

:: "Tracing" keys removed
:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt - [3492 bytes] ##########

Hi mbserum,

It was very nice of you to help me - I am very appreciative - thank you.

Thank you and that is good to here, but we are far from done.

Step 1.
Farbar Service Scanner (FSS)
SCAN Option
Please download Farbar Service Scanner ... by Farbar and save it to your Desktop.

1. Right click on FSS.exe select "Run As Administrator" to run it. If prompted by UAC, please allow it.
2. Make sure the following options are checked:
   
   • Internet Services (checked by default)
   • Windows Update
3. Press the "Scan" button.
   When finished, a text file named FSS.txt will be created on your desktop. (Same folder the tool is run).
4. Please copy and paste the contents of the FSS.txt log to your reply.

Step 2.
ESET online scanner

Note: You can use either Internet Explorer or Mozilla FireFox for this scan.

Note: If you are using Windows Vista or Windows 7, open your browser by right-clicking on its icon and select 'Run as administrator' to perform this scan.

• First please Disable any Antivirus you have active, as shown in This topic. Scroll down to find your product.
• Note: Remember to re-enable it after the scan.
• Next hold down Control then click on the following link to open a new window to ESET online scanner
• Press the Blue Run ESET Online Scanner button on the left side of the page.
• A popup box will open.
• Select the option YES, I accept the Terms of Use then click on Start.
  

  Note: If using Mozilla Firefox you will need to download esetsmartinstaller_enu.exe when prompted then double click on it to install.
  All of the below instructions are compatible with either Internet Explorer or Mozilla FireFox.

• When prompted allow the Add-On/Active X to install.
• Make sure that the option Remove found threats is NOT checked, and the option Scan archives is checked.
• Now click on Advanced Settings and select the following:

• Scan for potentially unwanted applications
  
• Scan for potentially unsafe applications
• Enable Anti-Stealth Technology
• Now click on Start.
• The virus signature database... will begin to download. Be patient this make take some time depending on the speed of your Internet Connection.
• When completed the Online Scan will begin automatically.
• When the scan is completed and you would like the program removed, select Uninstall application on close. Be sure you have copied the log file first!
• Now click on Finish.
• Use notepad to open the logfile located at C:\Program Files (x86)\ESET\ESET Online Scanner\log.txt. NOTE: The file may not be at this exact location.
• Copy and paste that log as a reply to this topic.

Note: Remember to re-enable your Anti-Virus application after running the above scan!


Step 3.
Please download SystemLook from one of the links below and save it to your Desktop.

Download Mirror #1
Download Mirror #2

• Double-click SystemLook.exe to run it.
• Right mouse click SystemLook.exe, select "Run As Administrator" to run it... if UAC prompts, please allow it.
• Copy and paste the content of the following codebox into the main textfield;
• To make this easy, click the "select all" button then hover over the highlighted text and right mouse click to select copy.
  

  
  
  :filefind
  
  *AskToolbar*
  
  *Ask.com*
  
  *Bandoo*
  
  *Babylon*
  
  *borgata*
  
  *Cheat*
  
  *Conduit*
  
  *Coupons*
  
  *deluge*
  
  *Enigma*
  
  *searchab*
  
  *Fun4IM*
  
  *Funmoods*
  
  *Hoyle*
  
  *iLivid*
  
  *MyPC*
  
  *Iminent*
  
  *Poker*
  
  *Realms*
  
  *Searchqu*
  
  *Searchnu*
  
  *Slick*
  
  *smartbar*
  
  *Somoto*
  
  *Sweet*
  
  *Tarma*
  
  *Torre*
  
  *trolltech*
  
  *systweak*
  
  *vshare*
  
  *whitesmoke*
  
  *YahooPartnerToolbar*
  
  *Yontoo*
  
  
  
  :folderfind
  
  *AskToolbar*
  
  *Ask.com*
  
  *Babylon*
  
  *Bandoo*
  
  *borgata*
  
  *Cheat*
  
  *Conduit*
  
  *Coupons*
  
  *deluge*
  
  *Enigma*
  
  *searchab*
  
  *smartbar*
  
  *Fun4IM*
  
  *Funmoods*
  
  *Hoyle*
  
  *iLivid*
  
  *MyPC*
  
  *Iminent*
  
  *Poker*
  
  *Realms*
  
  *Searchqu*
  
  *Searchnu*
  
  *Slick*
  
  *smartbar*
  
  *Somoto*
  
  *Sweet*
  
  *Tarma*
  
  *Torre*
  
  *trolltech*
  
  *systweak*
  
  *vshare*
  
  *whitesmoke*
  
  *YahooPartnerToolbar*
  
  *Yontoo*
  
  
  
  :Regfind
  
  AskToolbar
  
  Ask.com
  
  Babylon
  
  Bandoo
  
  borgata
  
  Cheat
  
  Conduit
  
  Coupons
  
  deluge
  
  Enigma
  
  searchab
  
  Fun4IM
  
  Funmoods
  
  Hoyle
  
  iLivid
  
  MyPC
  
  Iminent
  
  Poker
  
  Realms
  
  Searchqu
  
  Searchnu
  
  Slick
  
  smartbar
  
  Somoto
  
  Sweetpack
  
  Tarma
  
  Torre
  
  trolltech
  
  systweak
  
  vshare
  
  whitesmoke
  
  YahooPartnerToolbar
  
  Yontoo
  
  

• Click the Look button to start the scan.
  Because of the Registry searches, the scan may take 15 minutes or a bit more to run on a large machine. Please be patient.
• When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.

Note: The log can also be found on your Desktop entitled SystemLook.txt


Please include in your next reply:

1. Contents of FSS.txt
2. Contents of C:\Program Files (x86)\ESET\ESET Online Scanner\log.txt
3. Contents of SystemLook.txt
4. Any problem executing the instructions?
5. How is the computer behaving?

Thanks,
wbg