Jump to content

Naathim

Honorary Members
  • Posts

    1,931
  • Joined

  • Last visited

Posts posted by Naathim

  1. Hello and :welcome:

    I'm Radek and I'll try to help you with your issue.

    Before we start please note the following:

    • Analysis and research take some time, also sometimes real life gets in the way, please be patient.
    • Limit your internet access to posting here, some infections just wait to steal typed-in passwords.
    • Don't run any scripts or tools on your own, unsupervised usage may cause more harm than good.
    • Paste the logs in your posts, attachments make my work harder and more complicated.
    • Stay with me to the end, the absence of symtoms doesn't mean that your machine is fully operational.
    • Note that we may live in totally different time zones, what may cause some delays between answers.
    I can't foresee everything, so if anything unexpected happens, please stop and inform me!

    There are no silly questions. Never be afraid to ask if in doubt!

    warning.gif Rules and policies

    We won't support any piracy.

    That being told, if any evidence of illegal OS, software, cracks/keygens or any other will be revealed, any further assistance will be suspended. If you are aware that there is this kind of stuff on your machine, remove it before proceeding!

    The same applies to any use of P2P software: uTorrent, BitTorrent, Vuze, Kazaa, Ares... We don't provide any help for P2P, except for their removal. All P2P software has to be uninstalled or at least fully disabled before proceeding!

    Failure to follow these guidelines will result with closing your topic and withdrawning any assistance.

     


    51a46ae42d560-malwarebytes_anti_malware. Scan with Malwarebytes' Anti-Malware

    Please download and install Malwarebytes Anti-Malware, or re-run it if you already have it installed.

    • First of all select update.
    • Once updated, click the Settings tab, in the left panel choose Detctions & protection and tick Scan for rootkits.
    • Click the Scan tab, choose Threat Scan is checked and click Scan Now.
    • If threats are detected, click the Apply Actions button. You will now be prompted to reboot. Click Yes.
    • Upon completion of the scan (or after the reboot), click the History tab.
    • Click Application Logs and double-click the Scan Log.
    • At the bottom click Export and choose Text file.
    Save the file to your desktop and include its content in your next reply.
  2. Hi Njem,

    Please accept my sincere apologies - we have just discovered that the forum software is playing bad with my notifications and I was not informed that you replied. All e-mail were being pushed into my junk folder.

    We do not differ between paid and free support. If you want, we can continue this case in our helpdesk or here. Let me know which way suits you better.

     

  3. Hi Njem,

    Please accept my sincere apologies, I have not received an e-mail with your reply.

    Is System Restore disabled on a purpose on this machine?

    Also, while I understand and appreciate thet you are using a user account on a daily basis, bar in mind that the tools we use and fixes we do all have to be done from the administrative account.

     

    FRST.gif Fix with Farbar Recovery Scan Tool


     

    icon_exclaim.gif This fix was created for this user for use on that particular machine. icon_exclaim.gif
    icon_exclaim.gif Running it on another one may cause damage and render the system unstable. icon_exclaim.gif

     

    Press the WindowsKey.png + R on your keyboard at the same time. Type Notepad and click OK.

    • Copy the entire content of the codebox below and paste into the Notepad document:
      start
      CreateRestorePoint:
      CloseProcesses:
      HKLM\...\Run: [] => [X]
      HKU\S-1-5-21-491372964-234954144-3230604657-1002\...\Run: [akvplabe] => C:\Users\Admin\AppData\Roaming\setap21.exe
      IFEO\sethc.exe: [Debugger] C:\Windows\PreInstall\uddisrw.exe
      C:\Users\Admin\AppData\Roaming\setap21.exe
      EmptyTemp:
      end
    • Click File, Save As and type fixlist.txt as the File Name.

    Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

    • Right-click on FRST.gif icon and select RunAsAdmin.jpg Run as Administrator to start the tool.
      > XP users click run after receipt of Windows Security Warning - Open File.
      > 8 users will be prompted about Windows SmartScreen protection - click More information and Run.
    • Press the Fix button just once and wait.
    • If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
    • When finished FRST will generate a log on the Desktop, called Fixlog.txt.

    Please include it in your reply.

     

     

    FRST.gif Scan with Farbar Recovery Scan Tool

    Please re-run Farbar Recovery Scan Tool.

    • Right-click on FRST.gif icon and select RunAsAdmin.jpg Run as Administrator to start the tool.
      > XP users click run after receipt of Windows Security Warning - Open File.
      > 8 users will be prompted about Windows SmartScreen protection - click More information and Run.
    • Make sure that the Addition option is checked, then press Scan button and wait.
    • The tool will produce two logfiles on your desktop named FRST.txt and Addition.txt.

    Please include their content in your next reply.

  4.  

    Minion%20Welcome.jpg

    My name's Naathim and I'm a GeekU Minion! Now that we are mates and will be working together to clean your machine out of any junkware, feel free to call me Naat :)

    Before we start please note the following:

    • Analysis and research take some time, also sometimes real life gets in the way, please be patient.
    • Limit your internet access to posting here, some infections just wait to steal typed-in passwords.
    • Don't run any scripts or tools on your own, unsupervised usage may cause more harm than good.
    • Paste the logs in your posts, attachments make my work harder and more complicated.
    • Stay with me to the end, the absence of symtoms doesn't mean that your machine is fully operational.
    • Note that we may live in totally different time zones, what may cause some delays between answers.
    I can't foresee everything, so if anything unexpected happens, please stop and inform me!

    There are no silly questions. Never be afraid to ask if in doubt!

    Let's start and enjoy the fight! :)

    warning.gif Rules and policies

    We won't support any piracy.

    That being told, if any evidence of illegal OS, software, cracks/keygens or any other will be revealed, any further assistance will be suspended. If you are aware that there is this kind of stuff on your machine, remove it before proceeding!

    The same applies to any use of P2P software: uTorrent, BitTorrent, Vuze, Kazaa, Ares... We don't provide any help for P2P, except for their removal. All P2P software has to be uninstalled or at least fully disabled before proceeding!

    Failure to follow these guidelines will result with closing your topic and withdrawning any assistance.

     

     

    From what I see you were able to generate the logs, but they are not from the administrative account. Do you have the access to the Administrator one? Our tools have to be run from an administrative account.

  5. 1 hour ago, hallohome said:

    We had a "Block all" rule in our Firewall. We had to deactivate it. Dosnt work with our proxy. Does someone know the Ports this tool uses to connect?

     

    Hi and :welcome:

    Please try to allow port 80. Let me know the outcome.

  6. Glad we could help. :)

    If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

    Other members who need assistance please start your own topic in a new thread. Thanks!

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.