seventech
-
Posts
55 -
Joined
-
Last visited
Content Type
Events
Profiles
Forums
Posts posted by seventech
-
-
awesome thank you for your help. $10 donation sent. appreciate your help. off to the rocky mountain audio expo. thanks again.
-
system seems fine. ie and firefox both working, running malwarebytes quick scan for fun and grins
-
ok got it. combo fix IS uninstalled, whats next?
-
preparing log, Ill save just in case you want it and can dlete later when done
-
question about win7 functions:
1. should I doa sys backup? I got a prompt fomr win7 to start doing this
2. do I need to redo the sys image I made on my usb stick last weekend?
3. should create a repair disc?
these ideas came form the control panel> system and security > backup and restore section of win7
-
-
yikes, took a shower and its still only at 6a, not sure whats up
on 2nd PC
-
ok Ill set up armour free later, thanks
2. yeah I X'd out of combofix, tried the uninstall renamed desktop file again. amd its running its course now.
3. wierd it locked my internet use and firefox
4. norton diabled
5. Im going to uninstall norton later and introduce my karperky secirty suite, since its a year subscription
6. ok will updated the combofix uninstall asap
Don't worry about this.
When you download and run Online Armor it will help you with setup.
-
that combofix uninstallation is acting like it's a new install vs uninstall, is that right? its saying norton is active, should I disable and install combofix again? then uninstall?
-
ok done, I have some reading to do and my new firewall to configure? or do you use ARMOUR FREE IN ITS DEFAULT? do I need to create a new restore point now?
doing the combofix uninstall now
-
ok, almost all were already preset to your parameters in IE, but I couldnt find one:
Change the Installation of desktop items to Prompt
-
the combofix I deleted off my destop and I didnt realize when I ran ccleaner, it earsed it fomr my recycle bin, as the Combofix /Uninstal, gives me a error now. cannot find combo fix, make sure you typed correctly, I copy/paste, so it should be accurate,
-
ok let me read and go to this final step. GOOD MORNING by the way. Ill make you a direct $10 donation (Thank You). I DL'd keepass and plan to use that now.
-
since I run eset and nod32 on my sys already, how often should i do that deep scan? can I do with internal soft vs the online version? also costco gave me a subscription to kaspersky for a year, this Symantec was a 90day trial from HP. let me know your recommendations? actually I take that back BOX2 is nod32 form eset, it's the bomb, light footprint
-
running really good. no hang ups. I did have a couple last questions? is there anything I should be concerned about? like banking data entered while I was hijacked or did I catch it early enough. last time this happened, I gave up after a week and had to re image., Thank You for all your help and expertise. If I donate, who gets the donation? malwarebytes, you? or the forum? I just paid malwarebytes $30 yesterday and that's how I found the infection, which must of happened early Saturday am.
-
100% clean, didn't give me a log option
-
still at 99% 126K files processed and 0% infected
-
-
ok deleted quarantine> and eset is at 7%
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F90A5A0D-CD98-49CC-9AA7-9CD11C7478BF} (Trojan.BHO) -> No action taken. -
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F90A5A0D-CD98-49CC-9AA7-9CD11C7478BF} (Trojan.BHO) -> No action taken.
I am not quite sure what you mean? Could you explain where you are seeing this...in what browser? Be sure to run ESET and post that log too. -
quarantine:
HKCR\CLSID\{F90A5A0D-CD98-49CC-9AA7-9CD11C7478BF} (Trojan.BHO) -> No action taken.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F90A5A0D-CD98-49CC-9AA7-9CD11C7478BF} (Trojan.BHO) -> No action taken.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{F90A5A0D-CD98-49CC-9AA7-9CD11C7478BF} (Trojan.BHO) -> No action taken.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{F90A5A0D-CD98-49CC-9AA7-9CD11C7478BF} (Trojan.BHO) -> No action taken.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F90A5A0D-CD98-49CC-9AA7-9CD11C7478BF} (Trojan.BHO) -> No action taken.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F90A5A0D-CD98-49CC-9AA7-9CD11C7478BF} (Trojan.BHO) -> No action taken.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{F90A5A0D-CD98-49CC-9AA7-9CD11C7478BF} (Trojan.BHO) -> No action taken.
HKCR\TypeLib\{B00FE392-639D-4688-976E-A1BFF368CB96} (Trojan.BHO) -> No action taken.
HKCR\Interface\{3AE26843-9171-4F23-A8E5-5421701276A4} (Trojan.BHO) -> No action taken.
HKCR\AppID\{186E19A3-B909-4F48-B687-BB81EB8BC7CE} (Trojan.BHO) -> No action taken.
-
yes, eset is taking long time. i just posted the malwarebytes log, still holding on to delete. have 10 items still in quarantine, not sure how to show the quarantine logs
-
like Oapps, was strange, then I had a stange deal last week with chrome, so I uninstalled and had to delete a couple files because of that too. this browser helper look strange as I didn't approve that as well.
-
can I delete the quantineed files in malwarebytes now?
1st time noob with 10 regsitry hits, please help decipher
in Resolved Malware Removal Logs
Posted
Do I need to have this thread locked or deleted by an admin or a malwarbytes support tech?