nasdaq

Hi, Any remaining issues? You did the fix in Safe Mode can you boot to Normal mode with this computer?

Hello, Welcome to Malwarebytes. I'm nasdaq and will be helping you. If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed. === Please download the attached Fixlist.txt file to the same folder where the Farbar tool is running from. The location is listed in the 3rd line of the FRST.txt log you have submitted. Run FRST and click Fix only once and wait. The tool will create a log (Fixlog.txt) please post it to your reply. === Run the AdwCleaner tool and delete the 3 items reported. === Please post the Fixlog.txt and let me know what problem persists. fixlist.txt

Hello, Welcome to Malwarebytes. I'm nasdaq and will be helping you. If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed. === Please download Malwarebytes Anti-Malware from here Right-click on the MBAM icon and select Run as administrator to run the tool. Click Yes to accept any security warnings that may appear. Once the MBAM dashboard opens, on the right detail pane click on the word "Current" under the Scan Status to update the tool database. On the left menu pane click the Settings tab, and then select the Protection tab on the top. Under the Scan Options, turn on the button Scan for rootkits and Scan within archives. Click the Scan tab on the right detail pane, select Threat Scan and click the Start Scan button Note: The scan may take some time to finish, so please be patient. If potential threats are detected, ensure to checkmark all the listed items, and click the Quarantine Selected button. While still on the Scan tab, click the View Report button, and in the window that opens click the Export button, select Text file (*.txt), and save the log to your Desktop. The log can also be viewed by clicking the log to select it, then clicking the View Report button. Please post the log for my review. Note: If asked to restart the computer, please do so immediately. === Please download AdwCleaner by Xplode onto your Desktop. Close all open programs and internet browsers. Double click on AdwCleaner.exe to run the tool. Click the Scan button and wait for the process to complete. Click the LogFile button and the report will open in Notepad. IMPORTANT If you click the Clean button all items listed in the report will be removed. If you find some false positive items or programs that you wish to keep, Close the AdwCleaner windows. Close all open programs and internet browsers. Double click on AdwCleaner.exe to run the tool. Click the Scan button and wait for the process to complete. Check off the element(s) you wish to keep. Click on the Clean button follow the prompts. A log file will automatically open after the scan has finished. Please post the content of that log file with your next answer. You can find the log file at C:\AdwCleanerCx.txt (x is a number). === Download the version of this tool for your operating system. Farbar Recovery Scan Tool (64 bit) Farbar Recovery Scan Tool (32 bit) and save it to a folder on your computer's Desktop. Double-click to run it. When the tool opens click Yes to disclaimer. Press Scan button. It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply. The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply. How to attach a file to your reply: In the Reply section in the bottom of the topic Click the "more reply Options" button. Attach the file. Select the "Choose a File" navigate to the location of the File. Click the file you wish to Attach. Click Attach this file. Click the Add reply button. === Please post the logs for my review. Let me know what problems persists. ==============================

Hello, Welcome to Malwarebytes. I'm nasdaq and will be helping you. If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed. === Remove these programs in bold via the Control Panel > Programs > Programs and Features. NETWatch (HKLM-x32\...\{7415AD3D-BDF6-4CD5-87AE-7237FAAACECF}) (Version: 3.1.13.0 - Sharpeware Ltd) netwatch 0.1 (HKLM-x32\...\netwatch_0) (Version: 0.1 - [taesiri]) Please download the attached Fixlist.txt file to the same folder where the Farbar tool is running from. The location is listed in the 3rd line of the FRST.txt log you have submitted. Run FRST and click Fix only once and wait. The tool will create a log (Fixlog.txt) please post it to your reply. === Please post also the AdwCleaner log with the items reported. fixlist.txt

Hi, Missing the first part of the FRST.TXT log. Please post it again.

Hi, The only suspicious items is this: (Sharpeware) C:\Program Files (x86)\NETWatch\NWATCH.EXE Did you install this program as I cannot find anything on Sharpeware

Hello, Welcome to Malwarebytes. I'm nasdaq and will be helping you. If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed. === Your logs are clean. Are you Syncing Chrome with other devices. To remove it you will have to reset the Sync in Chrome. Read this article and proceed. Chrome Secure Preferences detection always comes back https://forums.malwarebytes.com/topic/214325-chrome-secure-preferences-detection-always-comes-back/ <<<>>> Restart the computer normally after the change. Run MBAM once or twice to make sure this entry is gone. PUP.Optional.WinThruster, C:\USERS\NEVOLE\DOWNLOADS\SETUP_WINTHRUSTER_2018.EXE =========== Keep me posted.

Hello, Welcome to Malwarebytes. I'm nasdaq and will be helping you. If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed. === Please make sure you have the IT's permission to run this program on the Co.'s computer. Download the version of this tool for your operating system. Farbar Recovery Scan Tool (64 bit) Farbar Recovery Scan Tool (32 bit) and save it to a folder on your computer's Desktop. Double-click to run it. When the tool opens click Yes to disclaimer. Press Scan button. It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply. The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply. How to attach a file to your reply: In the Reply section in the bottom of the topic Click the "more reply Options" button. Attach the file. Select the "Choose a File" navigate to the location of the File. Click the file you wish to Attach. Click Attach this file. Click the Add reply button. === Please post the logs for my review. Wait for further instructions.

Hello, Welcome to Malwarebytes. I'm nasdaq and will be helping you. If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed. === Hi, AleoVeuliah Download the version of this tool for your operating system. Farbar Recovery Scan Tool (64 bit) Farbar Recovery Scan Tool (32 bit) and save it to a folder on your computer's Desktop. Double-click to run it. When the tool opens click Yes to disclaimer. Press Scan button. It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply. The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply. How to attach a file to your reply: In the Reply section in the bottom of the topic Click the "more reply Options" button. Attach the file. Select the "Choose a File" navigate to the location of the File. Click the file you wish to Attach. Click Attach this file. Click the Add reply button. === Please post the logs for my review. Wait for further instructions.

Hello, Welcome to Malwarebytes. I'm nasdaq and will be helping you. If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed. === Please run the Farbar program one more time in an Administrator account., or as an Administrator. Post a fresh FRST.TXT log for my review.

Hello, Welcome to Malwarebytes. I'm nasdaq and will be helping you. If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed. === Your log is clean. Please post the Addition.txt log that was also created by the Farbar program. I need to review it. Give me more information on the type of problems you are having with this computer.

Hello, Welcome to Malwarebytes. I'm nasdaq and will be helping you. If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed. === Please download the attached Fixlist.txt file to the same folder where the Farbar tool is running from. The location is listed in the 3rd line of the FRST.txt log you have submitted. Run FRST and click Fix only once and wait. The tool will create a log (Fixlog.txt) please post it to your reply. === After the restart of the computer please run the Malwarebytes. Remove all items that are reported. Restart the computer normally and run Malwarebytes again. If an outbound traffic is persisting it may be a Syncing issue with Chrome. Read this article and proceed. Chrome Secure Preferences detection always comes back https://forums.malwarebytes.com/topic/214325-chrome-secure-preferences-detection-always-comes-back/ <<<>>> Let me know of any remaining issues. fixlist.txt

Hi, Any remaining issues with this computer?

Hello, Welcome to Malwarebytes. I'm nasdaq and will be helping you. If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed. === No problems. At the End of the topic you will see a filenamed fixlist.txt Click it and the file will be downloaded to your Computer. The file should be in this download folder in bold. C:\Users\dontdrama\Downloads Then Run FRST the Farbar program and click Fix only once and wait. The tool will create a log (Fixlog.txt) please post it to your reply. === Cliclk the line and folllow the instructions on the page. Restart the computer to reset the registry. Now reiinstall Malwarebytes. Download the latest version here. https://support.malwarebytes.com/docs/DOC-1141 Follow the instructions on the page. === When the installation is complete, Malwarebytes for Windows opens automatically and the recommended settings are enabled by default. If you have purchased a Premium license, refer to the article Activate Malwarebytes for Windows Premium https://support.malwarebytes.com/docs/DOC-1142 Follow the insltructions on the page. If at any time you need help please ask before proceeding.

Hello, Welcome to Malwarebytes. I'm nasdaq and will be helping you. If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed. === Download and run the Malwarebytes Cleanup Utility https://support.malwarebytes.com/docs/DOC-1112 When completed restart the computer normally to reset the registry. Reinstall the Malwarebytes. Run the program and delete every items found. Post the log sfor my review. Let me know what problem persists. === david29031995 Please note that you are not authorized to post in a topic you did not start for your needs.

Hello, Welcome to Malwarebytes. I'm nasdaq and will be helping you. If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed. === Your logs are clean. Have you any issues with computer?

Remove and reinstall FireFox. Before proceeding save your Bookmarks. (Export) https://support.mozilla.org/en-US/kb/export-firefox-bookmarks-to-backup-or-transfer Firefox Password manager - Import your passwords. Password Manager - Remember, delete, change and import saved passwords in Firefox https://support.mozilla.org/en-US/kb/password-manager-remember-delete-change-passwords If you are Syncing Firefox it with other Devices remove it. https://support.mozilla.org/en-US/kb/how-do-i-set-sync-my-computer When all is well you can re-sync your devices. NOT NOW. <<<>>> Clean the Firefox Cache. https://kb.iu.edu/d/ahic#firefox Remove Firefox using the instructions one this page. https://support.mozilla.org/en-US/kb/uninstall-firefox-from-your-computer Restart the computer normallhy. Install the latest version of the application. https://www.mozilla.org/en-US/firefox/new/ Import your Bookmarks. Same link as the Export function above. Restart the computer normally. Keep me posted.

Hi, Please run the RogueKiller and remove every items EXCEPT Let me know what problems persists if any.

Hello, Welcome to Malwarebytes. I'm nasdaq and will be helping you. If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed. === Please download the attached Fixlist.txt file to the same folder where the Farbar tool is running from. The location is listed in the 3rd line of the FRST.txt log you have submitted. Run FRST and click Fix only once and wait. The tool will create a log (Fixlog.txt) please post it to your reply. === Download and run the Malwarebytes Cleanup Utility https://support.malwarebytes.com/docs/DOC-1112 When completed restart the computer normally to reset the registry. Reinstall your Premium Copy. Do you have any remaining issues? fixlist.txt

Hello, Welcome to Malwarebytes. I'm nasdaq and will be helping you. If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed. === Remove this program in bold via the Control Panel > Programs > Programs and Features. Ace Stream Media 3.1.20.2 (HKU\S-1-5-21-5627231-2930812037-1976179604-1002\...\AceStream) (Version: 3.1.20.2 - Ace Stream Media) <==== ATTENTION === Lets start with running this fix. Please download the attached Fixlist.txt file to the same folder where the Farbar tool is running from. The location is listed in the 3rd line of the FRST.txt log you have submitted. Run FRST and click Fix only once and wait. The tool will create a log (Fixlog.txt) please post it to your reply. === CHR res: Infected resources.pak (Adware script). Reinstall Chrome. <==== ATTENTION Remove Chrome from your Computer and reinstall a fresh copy later. Before you remove Chrome Export your Bookmarks Chrome will export your bookmarks as a HTML file, which you can then import into another browser. How To: http://ccm.net/faq/31791-how-to-backup-your-google-chrome-bookmarks If you sync you account you must remove it before you save your bookmarks etc... Delete Your Google Chrome Browser Sync Data if you sync with other defices. <- Important ... https://forums.malwarebytes.com/topic/214325-chrome-secure-preferences-detection-always-comes-back/ Clear your Chrome cache and cookies https://support.google.com/chromebook/answer/183083?hl=en Remove Chrome using the the instructions on this page. https://support.google.com/chrome/answer/95319?hl=en Re-install Chrome and the Bookmarks. ==== After a restart of the computer doiwnload this program --RogueKiller-- Download & SAVE to your Desktop Download RogueKiller Quit all programs that you may have started. Please disconnect any USB or external drives from the computer before you run this scan! For Vista or above, right-click the program file and select "Run as Administrator" Accept the user agreements. Execute the scan and wait until it has finished. If a Windows opens to explain what [PUM's] are, read about it. Click the RoguKiller icon on your taksbar to return to the report. Click open the Report Click Export TXT button Save the file as ReportRogue.txt Click the Remove button to delete the items in RED Click Finish and close the program. Locate the ReportRogue.txt file on your Desktop and copy/paste the contents in your next. ======= These are presently your IP addresses. Check with your Internet provider and see if these xxx.xx.xxx.xx are required. If not delete them if listed in the RogueKiller scan. Restart the computer normally. Run the Farbar program and post a fresh FRST.txt log for my review. Let me know what problem persists. fixlist.txt

Hello, Welcome to Malwarebytes. I'm nasdaq and will be helping you. If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed. === Could be this be just a MBAM setting. Check this topic. https://forums.malwarebytes.com/topic/205873-malicious-memory-protectionexploit-code-executing-from-heap-memory-blocked/ If not please run this program. Post the logs and wait for further instructions. Download the version of this tool for your operating system. Farbar Recovery Scan Tool (64 bit) Farbar Recovery Scan Tool (32 bit) and save it to a folder on your computer's Desktop. Double-click to run it. When the tool opens click Yes to disclaimer. Press Scan button. It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply. The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply. How to attach a file to your reply: In the Reply section in the bottom of the topic Click the "more reply Options" button. Attach the file. Select the "Choose a File" navigate to the location of the File. Click the file you wish to Attach. Click Attach this file. Click the Add reply button. === Please post the logs for my review.

Hello, Welcome to Malwarebytes. I'm nasdaq and will be helping you. If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed. === Your issue with Malwarebytes was not the same as that of the other topic. Now all your logs are clean. If you still have some issues with this computer please advice.

Just click on the Here link.

Hi, The fixlog.txt you attached is actualy the FixList.txt. Post the Fixlog.txt for my review. === Acer Collection it's not required at startUP. You can disable it with the TaskManager Task: {9217D83A-C467-4BC7-934D-FDD5EB6D8F67} - System32\Tasks\Acer Collection Monitor Application => C:\Program Files (x86)\Acer\Acer Collection\ACEMon.exe [2017-12-14] (Acer Incorporated) p.s. 10% will remove it. It's your call. http://www.herdprotect.com/acemon.exe-5ee5dbd8d9b78eadd7fdf0c15c040f8522d98b17.aspx === Each program that needs it will create one. If all is well leave it alone. ===

Hello, Welcome to Malwarebytes. I'm nasdaq and will be helping you. If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed. === Please download Malwarebytes Anti-Malware from here Right-click on the MBAM icon and select Run as administrator to run the tool. Click Yes to accept any security warnings that may appear. Once the MBAM dashboard opens, on the right detail pane click on the word "Current" under the Scan Status to update the tool database. On the left menu pane click the Settings tab, and then select the Protection tab on the top. Under the Scan Options, turn on the button Scan for rootkits and Scan within archives. Click the Scan tab on the right detail pane, select Threat Scan and click the Start Scan button Note: The scan may take some time to finish, so please be patient. If potential threats are detected, ensure to checkmark all the listed items, and click the Quarantine Selected button. While still on the Scan tab, click the View Report button, and in the window that opens click the Export button, select Text file (*.txt), and save the log to your Desktop. The log can also be viewed by clicking the log to select it, then clicking the View Report button. Please post the log for my review. Note: If asked to restart the computer, please do so immediately. === Please download AdwCleaner by Xplode onto your Desktop. Close all open programs and internet browsers. Double click on AdwCleaner.exe to run the tool. Click the Scan button and wait for the process to complete. Click the LogFile button and the report will open in Notepad. IMPORTANT If you click the Clean button all items listed in the report will be removed. If you find some false positive items or programs that you wish to keep, Close the AdwCleaner windows. Close all open programs and internet browsers. Double click on AdwCleaner.exe to run the tool. Click the Scan button and wait for the process to complete. Check off the element(s) you wish to keep. Click on the Clean button follow the prompts. A log file will automatically open after the scan has finished. Please post the content of that log file with your next answer. You can find the log file at C:\AdwCleanerCx.txt (x is a number). === Download the version of this tool for your operating system. Farbar Recovery Scan Tool (64 bit) Farbar Recovery Scan Tool (32 bit) and save it to a folder on your computer's Desktop. Double-click to run it. When the tool opens click Yes to disclaimer. Press Scan button. It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply. The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply. How to attach a file to your reply: In the Reply section in the bottom of the topic Click the "more reply Options" button. Attach the file. Select the "Choose a File" navigate to the location of the File. Click the file you wish to Attach. Click Attach this file. Click the Add reply button. === Please post the logs for my review. Wait for further instructions. ==============================