seventech

Do I need to have this thread locked or deleted by an admin or a malwarbytes support tech?

awesome thank you for your help. $10 donation sent. appreciate your help. off to the rocky mountain audio expo. thanks again.

system seems fine. ie and firefox both working, running malwarebytes quick scan for fun and grins

ok got it. combo fix IS uninstalled, whats next?

preparing log, Ill save just in case you want it and can dlete later when done

question about win7 functions: 1. should I doa sys backup? I got a prompt fomr win7 to start doing this 2. do I need to redo the sys image I made on my usb stick last weekend? 3. should create a repair disc? these ideas came form the control panel> system and security > backup and restore section of win7

ok stage 32 now

yikes, took a shower and its still only at 6a, not sure whats up on 2nd PC

ok Ill set up armour free later, thanks 2. yeah I X'd out of combofix, tried the uninstall renamed desktop file again. amd its running its course now. 3. wierd it locked my internet use and firefox 4. norton diabled 5. Im going to uninstall norton later and introduce my karperky secirty suite, since its a year subscription 6. ok will updated the combofix uninstall asap

that combofix uninstallation is acting like it's a new install vs uninstall, is that right? its saying norton is active, should I disable and install combofix again? then uninstall?

ok done, I have some reading to do and my new firewall to configure? or do you use ARMOUR FREE IN ITS DEFAULT? do I need to create a new restore point now? doing the combofix uninstall now

ok, almost all were already preset to your parameters in IE, but I couldnt find one: Change the Installation of desktop items to Prompt

the combofix I deleted off my destop and I didnt realize when I ran ccleaner, it earsed it fomr my recycle bin, as the Combofix /Uninstal, gives me a error now. cannot find combo fix, make sure you typed correctly, I copy/paste, so it should be accurate,

ok let me read and go to this final step. GOOD MORNING by the way. Ill make you a direct $10 donation (Thank You). I DL'd keepass and plan to use that now.

since I run eset and nod32 on my sys already, how often should i do that deep scan? can I do with internal soft vs the online version? also costco gave me a subscription to kaspersky for a year, this Symantec was a 90day trial from HP. let me know your recommendations? actually I take that back BOX2 is nod32 form eset, it's the bomb, light footprint

running really good. no hang ups. I did have a couple last questions? is there anything I should be concerned about? like banking data entered while I was hijacked or did I catch it early enough. last time this happened, I gave up after a week and had to re image., Thank You for all your help and expertise. If I donate, who gets the donation? malwarebytes, you? or the forum? I just paid malwarebytes $30 yesterday and that's how I found the infection, which must of happened early Saturday am.

100% clean, didn't give me a log option

still at 99% 126K files processed and 0% infected

99%

ok deleted quarantine> and eset is at 7%

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F90A5A0D-CD98-49CC-9AA7-9CD11C7478BF} (Trojan.BHO) -> No action taken.

quarantine: HKCR\CLSID\{F90A5A0D-CD98-49CC-9AA7-9CD11C7478BF} (Trojan.BHO) -> No action taken. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F90A5A0D-CD98-49CC-9AA7-9CD11C7478BF} (Trojan.BHO) -> No action taken. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{F90A5A0D-CD98-49CC-9AA7-9CD11C7478BF} (Trojan.BHO) -> No action taken. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{F90A5A0D-CD98-49CC-9AA7-9CD11C7478BF} (Trojan.BHO) -> No action taken. HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F90A5A0D-CD98-49CC-9AA7-9CD11C7478BF} (Trojan.BHO) -> No action taken. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F90A5A0D-CD98-49CC-9AA7-9CD11C7478BF} (Trojan.BHO) -> No action taken. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{F90A5A0D-CD98-49CC-9AA7-9CD11C7478BF} (Trojan.BHO) -> No action taken. HKCR\TypeLib\{B00FE392-639D-4688-976E-A1BFF368CB96} (Trojan.BHO) -> No action taken. HKCR\Interface\{3AE26843-9171-4F23-A8E5-5421701276A4} (Trojan.BHO) -> No action taken. HKCR\AppID\{186E19A3-B909-4F48-B687-BB81EB8BC7CE} (Trojan.BHO) -> No action taken.

yes, eset is taking long time. i just posted the malwarebytes log, still holding on to delete. have 10 items still in quarantine, not sure how to show the quarantine logs

like Oapps, was strange, then I had a stange deal last week with chrome, so I uninstalled and had to delete a couple files because of that too. this browser helper look strange as I didn't approve that as well.

can I delete the quantineed files in malwarebytes now?