Jump to content

Naathim

Honorary Members
  • Posts

    1,944
  • Joined

  • Last visited

Everything posted by Naathim

  1. Fine, thank you Fix with Junkware Removal Tool Please download JRT by Thisisu and save the file to your desktop. Temporary disable your AntiVirus and AntiSpyware protection - instructions here. Right-click on icon and select Run as Administrator to start the tool.Follow the prompts and let this process run uninterrupted.This scan can take a while, depending on your System specs.Upon completion, a log (JRT.txt) will open on your desktop.Please include the contents of that file in your reply. Do not forget to re-enable your previously switched off protection software! Please also manually reboot your machine after this procedure. Scan with Farbar Recovery Scan Tool Please re-run Farbar Recovery Scan Tool. Right-click on icon and select Run as Administrator to start the tool. > XP users click run after receipt of Windows Security Warning - Open File. > 8 users will be prompted about Windows SmartScreen protection - click More information and Run.Make sure that Addition option is checked.Press Scan button and wait.The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.Please include their content in your next reply.
  2. OK, let's run Clean now. Fix with AdwCleaner Please re-run AdwCleaner. Right-click on icon and select Run as Administrator to start the tool.Follow the prompts and click Scan.When finished, please click Clean.Upon completion, click Report. A log (AdwCleaner[s*].txt) will open.Please include the contents of that file in your reply.
  3. OK, please do thi scan - but the scan only! Scan with AdwCleaner Please download AdwCleaner by Xplode and save the file to your desktop. Right-click on icon and select Run as Administrator to start the tool.Follow the prompts and click Scan.Upon completion, click Report. A log (AdwCleaner[R*].txt) will open.Please include the contents of that file in your reply. Do not click Clean unless told!
  4. OK, please skip Malwarebytes for now. Post me FRST & Addition logfiles.
  5. OK, means that I will have to collect the info manually. No worries Scan with ZOEK Please download ZOEK by Smeenk and save it to your desktop (preferred version is the *.exe one) Temporary disable your AntiVirus and AntiSpyware protection - instructions here. Right-click on icon and select Run as Administrator to start the tool.Wait patiently until the main console will appear, it may take a minute or two.In the main box please paste in the following script: createsrpoint;process;services-list;systemspecs;startupall;skipfix-iedefaults;firefoxlook;chromelook;filesrcm;installedprogs;Make sure that Scan All Users option is checked.Push Run Script and wait patiently. The scan may take a couple of minutes.When the scan completes, a zoek-results logfile should open in notepad.If a reboot is needed, it will be opened after it. You may also find it at your main drive (usually C:\ drive)Please include its content in your next reply. Don't forget to re-enable your switched-off protection software!
  6. Please do not attach logfiles. My work is much easier when they are copied and pasted directly into your posts as a plaintext. I told you that in my wecome speech If they won't fit in one post - use multiple ones, I don't mind it. Thank you for your cooperation, Naat
  7. Fix with Junkware Removal Tool Please download JRT by Thisisu and save the file to your desktop. Temporary disable your AntiVirus and AntiSpyware protection - instructions here. Right-click on icon and select Run as Administrator to start the tool.Follow the prompts and let this process run uninterrupted.This scan can take a while, depending on your System specs.Upon completion, a log (JRT.txt) will open on your desktop.Please include the contents of that file in your reply. Do not forget to re-enable your previously switched off protection software! Please also manually reboot your machine after this procedure. Fix with AdwCleaner Please download AdwCleaner by Xplode and save the file to your desktop. Right-click on icon and select Run as Administrator to start the tool.Follow the prompts and click Scan.When finished, please click Clean.Upon completion, click Report. A log (AdwCleaner[s*].txt) will open.Please include the contents of that file in your reply. Scan with Farbar Recovery Scan Tool Please re-run Farbar Recovery Scan Tool. Right-click on icon and select Run as Administrator to start the tool. > XP users click run after receipt of Windows Security Warning - Open File. > 8 users will be prompted about Windows SmartScreen protection - click More information and Run.Make sure that Addition option is checked.Press Scan button and wait.The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.Please include their content in your next reply.
  8. Good so far. Scan with Malwarebytes' Anti-Malware Please download and install Malwarebytes Anti-Malware, or re-run it if you already have it installed. First of all select update.Once updated, click the Settings tab, in the left panel choose Detctions & protection and tick Scan for rootkits.Click the Scan tab, choose Threat Scan is checked and click Scan Now.If threats are detected, click the Apply Actions button. You will now be prompted to reboot. Click Yes.Upon completion of the scan (or after the reboot), click the History tab.Click Application Logs and double-click the Scan Log.At the bottom click Export and choose Text file.Save the file to your desktop and include its content in your next reply. Scan with Farbar Recovery Scan Tool Please re-run Farbar Recovery Scan Tool. Right-click on icon and select Run as Administrator to start the tool. > XP users click run after receipt of Windows Security Warning - Open File. > 8 users will be prompted about Windows SmartScreen protection - click More information and Run.Make sure that Addition option is checked.Press Scan button and wait.The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.Please include their content in your next reply.
  9. My name's Naathim and I'm a GeekU Minion! Now that we are mates and will be working together to clean your machine out of any junkware, feel free to call me Naat Before we start please note the following: Analysis and research take some time, also sometimes real life gets in the way, please be patient.Limit your internet access to posting here, some infections just wait to steal typed-in passwords.Don't run any scripts or tools on your own, unsupervised usage may cause more harm than good.Paste the logs in your posts, attachments make my work harder and more complicated.Stay with me to the end, the absence of symtoms doesn't mean that your machine is fully operational.Note that we may live in totally different time zones, what may cause some delays between answers.I can't foresee everything, so if anything unexpected happens, please stop and inform me! There are no silly questions. Never be afraid to ask if in doubt! Let's start and enjoy the fight! Rules and policies We won't support any piracy. That being told, if any evidence of illegal OS, software, cracks/keygens or any other will be revealed, any further assistance will be suspended. If you are aware that there is this kind of stuff on your machine, remove it before proceeding! The same applies to any use of P2P software: uTorrent, BitTorrent, Vuze, Kazaa, Ares... We don't provide any help for P2P, except for their removal. All P2P software has to be uninstalled or at least fully disabled before proceeding! Failure to follow these guidelines will result with closing your topic and withdrawning any assistance. Scan with Malwarebytes' Anti-Malware Please download and install Malwarebytes Anti-Malware, or re-run it if you already have it installed. First of all select update.Once updated, click the Settings tab, in the left panel choose Detctions & protection and tick Scan for rootkits.Click the Scan tab, choose Threat Scan is checked and click Scan Now.If threats are detected, click the Apply Actions button. You will now be prompted to reboot. Click Yes.Upon completion of the scan (or after the reboot), click the History tab.Click Application Logs and double-click the Scan Log.At the bottom click Export and choose Text file.Save the file to your desktop and include its content in your next reply.
  10. Please reboot your machine and try again. Also
  11. Scan with ZOEK Temporary disable your AntiVirus and AntiSpyware protection - instructions here. Right-click on icon and select Run as Administrator to start the tool.Wait patiently until the main console will appear, it may take a minute or two.In the main box please paste in the following script: C:\Users\Angela\AppData\Roaming\Mozilla\Firefox\Profiles\2zfcwolq.default\extensions\tklllza@kiyaojkal.edu;fMake sure that Scan All Users option is checked.Push Run Script and wait patiently. The scan may take a couple of minutes.When the scan completes, a zoek-results logfile should open in notepad.If a reboot is needed, it will be opened after it. You may also find it at your main drive (usually C:\ drive)Please include its content in your next reply. Don't forget to re-enable your switched-off protection software! Scan with Gmer This type of scan often produces false positives. At any point do not take any action for any suspicious entries you may see there. Instead post the log to be analyzed. Please download GMER by Gmer and save the file to your desktop. It will come as a randomly named file (like a6ge38b4.exe) - that's absolutely normal. Temporary disable your AntiVirus and AntiSpyware protection - instructions here. If you are a user of CD emulation software (like Daemon Tools or Alcohol) also disable it for the cleaning process - instructions here. Right-click on randomly named icon and select Run as Administrator to start the tool.It is very important that you do not use your computer while Gmer is running!Gmer will open to the Rootkit/Malware tab and perform an automatic quick scan.If you receive a warning about rootkit activity and are asked to fully scan your system click NO!When the pre-scan is completed, please do the following: Please check in the Quick scan box.Please uncheck the IAT/EAT and Show All.Click Scan.If you see a rootkit warning window click OK.When the scan is finished, Save the results to your desktop as gmer.log.Please include the content of this file in your next reply. Don't forget to re-enable previously switched-off protection software! If you encounter any problems, try running GMER in Safe Mode. If GMER crashes or keeps resulting in a Blue Screen of Death, uncheck Devices on the right side before scanning. Scan with Farbar Recovery Scan Tool Please re-run Farbar Recovery Scan Tool. Right-click on icon and select Run as Administrator to start the tool. > XP users click run after receipt of Windows Security Warning - Open File. > 8 users will be prompted about Windows SmartScreen protection - click More information and Run.Make sure that Addition option is checked.Press Scan button and wait.The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.Please include their content in your next reply.
  12. Please update me about any other issues Clean Temporary Files with TFC Please download TFC by OldTimer and save it to your desktop. Right-click on icon and select Run as Administrator to start the tool.Close any open programs and save your current work.Click the Start button to begin. Depending on how often you clean temp files, execution time should be anywhere from a few seconds to a couple of minutes.Once it's finished it should reboot your machine. If it does not, please manually reboot the machine yourself to ensure a complete clean.This tool doesn't generate any report. Instead I recommend to keep it for good maintenance of your machine. Scan with Security Check Please download Security Check by Screen317 and save it to your desktop. Right-click on icon and select Run as Administrator to start the tool.Follow onscreen instructions inside the black box. This scan won't take long.Soon a notepad document called checkup.txt will open automaticaly.Please include the content of that document.
  13. My name's Naathim and I'm a GeekU Minion! Now that we are mates and will be working together to clean your machine out of any junkware, feel free to call me Naat Before we start please note the following: Analysis and research take some time, also sometimes real life gets in the way, please be patient.Limit your internet access to posting here, some infections just wait to steal typed-in passwords.Don't run any scripts or tools on your own, unsupervised usage may cause more harm than good.Paste the logs in your posts, attachments make my work harder and more complicated.Stay with me to the end, the absence of symtoms doesn't mean that your machine is fully operational.Note that we may live in totally different time zones, what may cause some delays between answers.I can't foresee everything, so if anything unexpected happens, please stop and inform me! There are no silly questions. Never be afraid to ask if in doubt! Let's start and enjoy the fight! Rules and policies We won't support any piracy. That being told, if any evidence of illegal OS, software, cracks/keygens or any other will be revealed, any further assistance will be suspended. If you are aware that there is this kind of stuff on your machine, remove it before proceeding! The same applies to any use of P2P software: uTorrent, BitTorrent, Vuze, Kazaa, Ares... We don't provide any help for P2P, except for their removal. All P2P software has to be uninstalled or at least fully disabled before proceeding! Failure to follow these guidelines will result with closing your topic and withdrawning any assistance. Scan with Malwarebytes' Anti-Malware Please download and install Malwarebytes Anti-Malware, or re-run it if you already have it installed. First of all select update.Once updated, click the Settings tab, in the left panel choose Detctions & protection and tick Scan for rootkits.Click the Scan tab, choose Threat Scan is checked and click Scan Now.If threats are detected, click the Apply Actions button. You will now be prompted to reboot. Click Yes.Upon completion of the scan (or after the reboot), click the History tab.Click Application Logs and double-click the Scan Log.At the bottom click Export and choose Text file.Save the file to your desktop and include its content in your next reply. Scan with Farbar Recovery Scan Tool Please download Farbar Recovery Scan Tool and save it to your Desktop. There will be two versions to download: 32-bit and 64-bit. Please download the one that is designed for your system. If you don't know which one should it be, download both of them and try each other out. Only one will run - this is the right one. Please leave it and delete the other. Right-click on icon and select Run as Administrator to start the tool.> XP users click run after receipt of Windows Security Warning - Open File. > 8 users will be prompted about Windows SmartScreen protection - click More information and Run. When the tool opens click Yes to disclaimer.Make sure that Addition option is checked.Press Scan button and wait.The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.Please include their content in your next reply.
  14. My name's Naathim and I'm a GeekU Minion! Now that we are mates and will be working together to clean your machine out of any junkware, feel free to call me Naat Before we start please note the following: Analysis and research take some time, also sometimes real life gets in the way, please be patient.Limit your internet access to posting here, some infections just wait to steal typed-in passwords.Don't run any scripts or tools on your own, unsupervised usage may cause more harm than good.Paste the logs in your posts, attachments make my work harder and more complicated.Stay with me to the end, the absence of symtoms doesn't mean that your machine is fully operational.Note that we may live in totally different time zones, what may cause some delays between answers.I can't foresee everything, so if anything unexpected happens, please stop and inform me! There are no silly questions. Never be afraid to ask if in doubt! Let's start and enjoy the fight! Rules and policies We won't support any piracy. That being told, if any evidence of illegal OS, software, cracks/keygens or any other will be revealed, any further assistance will be suspended. If you are aware that there is this kind of stuff on your machine, remove it before proceeding! The same applies to any use of P2P software: uTorrent, BitTorrent, Vuze, Kazaa, Ares... We don't provide any help for P2P, except for their removal. All P2P software has to be uninstalled or at least fully disabled before proceeding! Failure to follow these guidelines will result with closing your topic and withdrawning any assistance. You have got Poweliks infection. Scan with ComboFix This is a very powerful tool that should be used only if advised by Malware Analyst. Do not run ComboFix on your own! Referring to this instruction, please download ComboFix by sUBs and save it to your desktop. Temporary disable your AntiVirus and AntiSpyware protection - instructions here. If you are a user of CD emulation software (like Daemon Tools or Alcohol) also disable it for the cleaning process - instructions here. Right-click on icon and select Run as Administrator to start the tool.Accept the disclaimer and agree if prompted to install Recovery Console.Do not take any actions while ComboFix goes through your System - it may cause it to stall!This scan may take some time!When finished - it will display a logfile (located also on your main drive, usually C:\ComboFix.txt).Include that log in your next reply. If you'll encounter any issues with internet connection after running ComboFix, please visit this link. If an error about operation on the key marked for deletion will appear after running the tool, please reboot your machine. Don't forget to re-enable your previously switched-off protection software!
  15. My name's Naathim and I'm a GeekU Minion! Now that we are mates and will be working together to clean your machine out of any junkware, feel free to call me Naat Before we start please note the following: Analysis and research take some time, also sometimes real life gets in the way, please be patient.Limit your internet access to posting here, some infections just wait to steal typed-in passwords.Don't run any scripts or tools on your own, unsupervised usage may cause more harm than good.Paste the logs in your posts, attachments make my work harder and more complicated.Stay with me to the end, the absence of symtoms doesn't mean that your machine is fully operational.Note that we may live in totally different time zones, what may cause some delays between answers.I can't foresee everything, so if anything unexpected happens, please stop and inform me! There are no silly questions. Never be afraid to ask if in doubt! Let's start and enjoy the fight! Rules and policies We won't support any piracy. That being told, if any evidence of illegal OS, software, cracks/keygens or any other will be revealed, any further assistance will be suspended. If you are aware that there is this kind of stuff on your machine, remove it before proceeding! The same applies to any use of P2P software: uTorrent, BitTorrent, Vuze, Kazaa, Ares... We don't provide any help for P2P, except for their removal. All P2P software has to be uninstalled or at least fully disabled before proceeding! Failure to follow these guidelines will result with closing your topic and withdrawning any assistance. Scan with Malwarebytes' Anti-Malware Please download and install Malwarebytes Anti-Malware, or re-run it if you already have it installed. First of all select update.Once updated, click the Settings tab, in the left panel choose Detctions & protection and tick Scan for rootkits.Click the Scan tab, choose Threat Scan is checked and click Scan Now.If threats are detected, click the Apply Actions button. You will now be prompted to reboot. Click Yes.Upon completion of the scan (or after the reboot), click the History tab.Click Application Logs and double-click the Scan Log.At the bottom click Export and choose Text file.Save the file to your desktop and include its content in your next reply. SpyBot S&D Warning MVPS.org is no longer recommending SpyBot S&D due to very poor testing results (scroll down and read under Freeware Antispyware Products). My advice is to get rid of this program. To do so: Press the + R on your keyboard at the same time. Type appwiz.cpl and click OK.Search for SpyBot, right-click the entry and click Uninstall.This is optional, but please consider it. Scan with ZOEK Please download ZOEK by Smeenk and save it to your desktop (preferred version is the *.exe one) Temporary disable your AntiVirus and AntiSpyware protection - instructions here. Right-click on icon and select Run as Administrator to start the tool.Wait patiently until the main console will appear, it may take a minute or two.In the main box please paste in the following script: createsrpoint;process;services-list;systemspecs;startupall;skipfix-iedefaults;firefoxlook;chromelook;filesrcm;installedprogs;Make sure that Scan All Users option is checked.Push Run Script and wait patiently. The scan may take a couple of minutes.When the scan completes, a zoek-results logfile should open in notepad.If a reboot is needed, it will be opened after it. You may also find it at your main drive (usually C:\ drive)Please include its content in your next reply. Don't forget to re-enable your switched-off protection software!
  16. Good. Scan with Farbar Recovery Scan Tool Please re-run Farbar Recovery Scan Tool. Right-click on icon and select Run as Administrator to start the tool. > XP users click run after receipt of Windows Security Warning - Open File. > 8 users will be prompted about Windows SmartScreen protection - click More information and Run.Make sure that Addition option is checked.Press Scan button and wait.The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.Please include their content in your next reply.
  17. Hi Yes, I need to see a complete report. Scan with ZOEK Temporary disable your AntiVirus and AntiSpyware protection - instructions here. Right-click on icon and select Run as Administrator to start the tool.Wait patiently until the main console will appear, it may take a minute or two.In the main box please paste in the following script: createsrpoint;autoclean;process;services-list;systemspecs;startupall;skipfix-iedefaults;firefoxlook;chromelook;filesrcm;installedprogs;Make sure that Scan All Users option is checked.Push Run Script and wait patiently. The scan may take a couple of minutes.When the scan completes, a zoek-results logfile should open in notepad.If a reboot is needed, it will be opened after it. You may also find it at your main drive (usually C:\ drive)Please include its content in your next reply. Don't forget to re-enable your switched-off protection software!
  18. My name's Naathim and I'm a GeekU Minion! Now that we are mates and will be working together to clean your machine out of any junkware, feel free to call me Naat Before we start please note the following: Analysis and research take some time, also sometimes real life gets in the way, please be patient. Limit your internet access to posting here, some infections just wait to steal typed-in passwords. Don't run any scripts or tools on your own, unsupervised usage may cause more harm than good. Paste the logs in your posts, attachments make my work harder and more complicated. Stay with me to the end, the absence of symtoms doesn't mean that your machine is fully operational. Note that we may live in totally different time zones, what may cause some delays between answers. I can't foresee everything, so if anything unexpected happens, please stop and inform me! There are no silly questions. Never be afraid to ask if in doubt! Let's start and enjoy the fight! Questions: - is the machine bootable at all? - what happens after booting/logging in? Be very descriptive. - do you have the access to another clean machine and a Usb drive? I suspect lots of issues here and I'm not sure if we could bring this machine to its previous state, but I will do my best.
  19. Fix with Farbar Recovery Scan Tool This fix was created for this user for use on that particular machine. Running it on another one may cause damage and render the system unstable. Press the + R on your keyboard at the same time. Type Notepad and click OK. Copy the entire content of the codebox below and paste into the Notepad document: startHKU\S-1-5-21-1367087300-1485594865-1163891642-1001\...\Run: [ShopAtHomeWatcher] => C:\Users\Cody & LaGina\AppData\Roaming\ShopAtHome\ShopAtHomeHelper\ShopAtHomeWatcher.exeHKU\S-1-5-21-1367087300-1485594865-1163891642-1001\...\Run: [ShopAtHomeUpdater] => C:\Users\Cody & LaGina\AppData\Roaming\ShopAtHome\ShopAtHomeHelper\ShopAtHomeUpdater.exeC:\Users\Cody & LaGina\AppData\Roaming\ShopAtHomeHKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://search.coupons.com/StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe http://www.safesear.ch/?type=20140818-155-ie-smSearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.com/rover/1/711-154371-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}SearchScopes: HKLM-x32 - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.com/rover/1/711-154371-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}SearchScopes: HKCU - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = http://rover.ebay.com/rover/1/711-154371-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}BHO-x32: Perk Prize Panel -> {47F3EB15-C230-4A0B-BE4B-D527FF483B48} -> C:\Program Files (x86)\Perk Prize Panel\pp.dll No FileC:\Program Files (x86)\Perk Prize PanelToolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No FileFF HKLM-x32\...\Firefox\Extensions: [{jid1-eFRcA0eiPxecTQ@jetpack}] - 6590440\extensions\{jid1-eFRcA0eiPxecTQ@jetpack}FF HKLM-x32\...\Firefox\Extensions: [{jid1-vS7biDmom8YxhA@jetpack}] - 1\extensions\{jid1-vS7biDmom8YxhA@jetpack}FF HKCU\...\Firefox\Extensions: [pp@perk.com] - C:\Program Files (x86)\Perk Prize Panel\FFFF StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox\firefox.exe http://www.safesear.ch/?type=20140818-155-ff-smS2 Update ClearThink; "C:\Program Files (x86)\ClearThink\updateClearThink.exe" [X]S2 Util ClearThink; "C:\Program Files (x86)\ClearThink\bin\utilClearThink.exe" [X]2014-08-18 10:10 - 2014-08-18 12:23 - 00000000 ____D () C:\Users\Cody & LaGina\AppData\Local\Fast Browser2014-08-21 11:33 - 2014-04-17 17:01 - 00000430 _____ () C:\WINDOWS\Tasks\PassShow_wd.job2014-08-18 15:52 - 2014-08-18 12:37 - 00000000 ____D () C:\Program Files (x86)\ClearThink2014-08-18 12:38 - 2014-08-18 12:38 - 00000000 ____D () C:\Users\Cody & LaGina\AppData\Local\IsolatedStorage2014-08-18 12:38 - 2014-08-18 12:33 - 00000000 ____D () C:\Users\Cody & LaGina\AppData\Local\fastcleanpro2014-08-18 12:32 - 2014-08-18 12:33 - 25755448 _____ (Microsoft Corporation) C:\Users\Cody & LaGina\Downloads\Windows Media Player-Installer.exeTask: {76965A4D-6334-418B-955E-F2A2996B8DF3} - \PassShow_wd No Task File <==== ATTENTIONTask: C:\WINDOWS\Tasks\PassShow_wd.job => C:\Program Files (x86)\PassShow-soft\PassShowZTwzBw.exe <==== ATTENTIONC:\Program Files (x86)\PassShow-softendClick File, Save As and type fixlist.txt as the File Name.Both files, FRST and fixlist.txt have to be in the same location or the fix will not work! Right-click on icon and select Run as Administrator to start the tool.> XP users click run after receipt of Windows Security Warning - Open File. > 8 users will be prompted about Windows SmartScreen protection - click More information and Run. Press the Fix button just once and wait.If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.When finished FRST will generate a log on the Desktop, called Fixlog.txt.Please include it in your reply. Scan with Malwarebytes' Anti-Malware Please re-run Malwarebytes' Anti-Malware. First of all, select update.Once updated, click the Settings tab, in the left panel choose Detctions & protection and tick Scan for rootkits.Click the Scan tab, choose Threat Scan is checked and click Scan Now.If threats are detected, click the Apply Actions button. You will now be prompted to reboot. Click Yes.Upon completion of the scan (or after the reboot), click the History tab.Click Application Logs and double-click the newest Scan Log.At the bottom click Export and choose Text file.Save the file to your desktop and include its content in your next reply. Scan with Panda Cloud Cleaner This type of scan often produces false positives. In any case do not remove on your own any of its findings! Removal will be made after the careful analysis of the scan results. Please download Panda Cloud Cleaner and save the file to your desktop. Temporary disable your AntiVirus and AntiSpyware protection - instructions here. Install the scanner by right-click on icon and select Run as Administrator.It should start itself automaticaly after the installation.In the main console click Accept and Scan.This scan won't take long, about several minutes (depending on your system specs). Let it run uninterrupted.At the last stage you will see a couple of messages about veryfying & analyzing results. Wait patiently.Upon completion you will see detections window. Enter one of them and click there View Report at the bottom right side.A notepad window named PCloudCleaner.log will open. Save it to your desktop.Please include the contents of that file in your next reply.Don't forget to re-enable your switched-off protection software! After that you may uninstall Panda Cloud Cleaner from your machine, if you wish to.
  20. I was asking about this: Leave AdwCleaner. Here's the instruction for FRST:
  21. No need to feel like this. I told you - ask if unsure And if necessary I can deal with attachments. Was uninstallation succesful? Please post me also fresh FRST& Addition logfiles.
  22. It means that scanning is over. You should choose the clean option now.
  23. You are running a 64-bit OS, so I'm gonna need another reports. And no worries about attaching, my friend. Scan with Farbar Recovery Scan Tool Please download Farbar Recovery Scan Tool x64 and save it to your Desktop. Right-click on icon and select Run as Administrator to start the tool. > Windows 8 users will be prompted about Windows SmartScreen protection - click More information and Run.When the tool opens click Yes to disclaimer.Make sure that Addition option is checked.Press Scan button and wait.The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.Please include their content in your next reply. Scan with Gmer This type of scan often produces false positives. At any point do not take any action for any suspicious entries you may see there. Instead post the log to be analyzed. Please download GMER by Gmer and save the file to your desktop. It will come as a randomly named file (like a6ge38b4.exe) - that's absolutely normal. Temporary disable your AntiVirus and AntiSpyware protection - instructions here. If you are a user of CD emulation software (like Daemon Tools or Alcohol) also disable it for the cleaning process - instructions here. Right-click on randomly named icon and select Run as Administrator to start the tool.It is very important that you do not use your computer while Gmer is running!Gmer will open to the Rootkit/Malware tab and perform an automatic quick scan.If you receive a warning about rootkit activity and are asked to fully scan your system click NO!When the pre-scan is completed, please do the following: Please check in the Quick scan box.Please uncheck the IAT/EAT and Show All.Click Scan.If you see a rootkit warning window click OK.When the scan is finished, Save the results to your desktop as gmer.log.Please include the content of this file in your next reply. Don't forget to re-enable previously switched-off protection software! If you encounter any problems, try running GMER in Safe Mode. If GMER crashes or keeps resulting in a Blue Screen of Death, uncheck Devices on the right side before scanning.
  24. Hi No worries, if you are unable to post them, you may attach instead. It makes my work harder, but not impossible Now let's kick some butts Uninstall some programs We need to uninstall some programs. Press the + R on your keyboard at the same time. Type appwiz.cpl and click OK.Search there for each entry mentioned below, right-click the entry and click Uninstall one at a timeThe list of programs to uninstall: Coupon Printer for WindowsPerk Prize PanelShopAtHome.com HelperWindows Media Player PackagesAfter completing uninstalls, please manually reboot your machine! Fix with Junkware Removal Tool Please download JRT by Thisisu and save the file to your desktop. Temporary disable your AntiVirus and AntiSpyware protection - instructions here. Right-click on icon and select Run as Administrator to start the tool.Follow the prompts and let this process run uninterrupted.This scan can take a while, depending on your System specs.Upon completion, a log (JRT.txt) will open on your desktop.Please include the contents of that file in your reply. Do not forget to re-enable your previously switched off protection software! Please also manually reboot your machine after this procedure. Fix with AdwCleaner Please download AdwCleaner by Xplode and save the file to your desktop. Right-click on icon and select Run as Administrator to start the tool.Follow the prompts and click Scan.When finished, please click Clean.Upon completion, click Report. A log (AdwCleaner[s*].txt) will open.Please include the contents of that file in your reply. Scan with Farbar Recovery Scan Tool Please re-run Farbar Recovery Scan Tool. Right-click on icon and select Run as Administrator to start the tool. > XP users click run after receipt of Windows Security Warning - Open File. > 8 users will be prompted about Windows SmartScreen protection - click More information and Run.Make sure that Addition option is checked.Press Scan button and wait.The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.Please include their content in your next reply.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.