Caught a "discountman" bug

[lovingit]

Hey Folks, I keep getting popups by this weird spyware called "discountman". When I google it, it tells me to do things I have already done like remove it from my Chrome extensions, manually delete the extensions folder from my C: drive, and scan my computer with various spyware programs. However, it goes fine for a couple of days but then somehow manages to come back. Has anyone else encountered this "discountman" bug?

[ron spencer]

you have installed something and not unchecked the browser extension option.

see:

http://malwaretips.com/blogs/ads-by-discountman-removal/

[lovingit]

Ron, I have done all 5 steps but it comes back.
1) Discountman is not found under control panel
2) Used AdwCleaner
3) Used Malwarebytes Anti Malware trial version
4) Used Hitman Pro trial version
5) Deleted extensions and reset Chrome browser
I even installed Revo Uninstaller, but it cannot find "Discountman".
I also used Spyhunter 4 and StopZilla!

That is a total of 5 programs I am using to scan and remove. How can it come back???????????????


When I go to Chrome and under "extensions" (developer mode) it says C:\ProgramFiles\Google\Chrome\Application\Extensio ns\chrome\app\37.1329.1.2

But when I go to the C drive and follow to the "Application folder", there is no "Extensions" folder. It must be hiding somehow.

[lovingit]

Is there a difference between running these scanners in NORMAL mode vs SAFE MODE?

[redwudz]

Yes. With Safe Mode, many of the drivers for programs don't load, and if you are lucky, the malware won't load and you can remove it a lot easier.
I would also unplug from the internet and if your antimalware programs uninstalls the program, reboot before plugging back into the net.

[lovingit]

redwudz, anything else you would try? Seems like I have ran out of spyware programs and options. Discountman is tricky.

[newpball]

When the system is compromised it is best to simply restore a system backup.

[hech54]

Disconnect from the internet, SAFE Mode and "have at it".
Don't forget CCleaner and it's Registry Cleaner function as well(run it last after the others remove junk).

[ron spencer]

please also see

http://blog.doofix.com/how-to-remove-ads-by-discountman-pop-up/


yes, disconnect from internet and be in safe mode.

[lovingit]

please also see

http://blog.doofix.com/how-to-remove-ads-by-discountman-pop-up/


yes, disconnect from internet and be in safe mode.

Yes done all that
I found this link
http://www.amfastech.com/2014/08/remove-keeps-coming-back-browser.html

It states that generally, the chrome extensions will exist in the following path:
C:\Users\USERNAME\AppData\Local\Google\Chrome\User Data\Default\Extensions

I am trying to manually follow each folder in sequence to get to the Extensions folder. Where is Appdata? I can go to C drive, then the "Users" folder, where "Users" is my name folder, but after that, I do not see "Appdata" folder. I see these following folder

Contact
Desktop
Downloads
Favorites
Links
My Documents
My Music
My Pictures
My Videos
Saved Games
Searches
Tracing
Video Player Picture

[jagabo]

Appdata is a hidden folder. Just enable the display of hidden files and folder in Explorer's options. But really, if you don't know that much maybe you shouldn't be attempting this yourself.