Potential malware problem?

Question

I tried accessing my online banking but after clicking to look at the account, the page displayed briefly and then reverted back to the start page. (Chrome)

I tried in a different broswer (Edge) and the same thing happened...

Trying on a different PC and it worked fine.

I then noticed that no matter what browser I use, the google sponsored links at the top of the seach results show up momentarily and then disappear. Even on a fresh install of Firefox

I have run Malwarebytes and Spybot. They found the usual minor things which I cleaned but the issue still occurs...

Answer 1

The system is clean; no rogue processes/startup or browser hijackers were found.

"llbcnfanfmjhpedaedhbcnpgeepdnnok" is the only plugin of concern. It's Reason Labs Online security. You may remove it.

1. Please see if the problem occurs if you clean boot the system.

How to perform a clean boot in Windows - Microsoft Support:

https://support.microsoft.com/en-us/topic/how-to-perform-a-clean-boot-in-windows-da2f9573-6eec-00ad-2f8a-a97a1807f3dd

2. Also, access the website in incognito/inprivate modes to see if an extension is causing the problem.

Answer 2

FRST.txt

Addition.txt

Answer 3

Please run the Farbar Scanner and share your logs.

• Download Farbar Recovery Scan Tool (FRST64.exe) [See also: Collect Farbar Recovery Scan Tool logs.]
• Rename FRST64.exe to EnglishFRST64.exe.
• Run the program. Don't check or uncheck any options. Click "Scan".
• Upload the two logs, FRST.txt and Addition.txt, to your OneDrive and share the link here.

(How-To: Share OneDrive files and folders - Microsoft Support)

Note: If Microsoft Edge or Chrome mislabels the Farbar Scanner executable as PUA/malware, choose to keep it by tapping … in the bottom bar, choosing Keep, and then choosing Keep anyway in the dialog that appears.