HereWeGoAgain2

Ok, I ran the scan using the free version. I could not recover my premium license, I entered my e-mail and the system recognized it but I never recieved anything in my e-mail. I checked my spam folder as well. If I continue to see symptoms over the next few hours I will report them. Malwarebytes Anti-Malware www.malwarebytes.org Scan Date: 3/8/2016 Scan Time: 9:44 AM Logfile: Administrator: Yes Version: 2.2.0.1024 Malware Database: v2016.03.08.04 Rootkit Database: v2016.02.27.01 License: Free Malware Protection: Disabled Malicious Website Protection: Disabled Self-protection: Disabled OS: Windows 10 CPU: x64 File System: NTFS User: Jeremy Scan Type: Threat Scan Result: Completed Objects Scanned: 403392 Time Elapsed: 30 min, 9 sec Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Enabled Heuristics: Enabled PUP: Enabled PUM: Enabled Processes: 0 (No malicious items detected) Modules: 0 (No malicious items detected) Registry Keys: 0 (No malicious items detected) Registry Values: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Folders: 0 (No malicious items detected) Files: 0 (No malicious items detected) Physical Sectors: 0 (No malicious items detected) (end) # AdwCleaner v5.101 - Logfile created 08/03/2016 at 11:46:10 # Updated 07/03/2016 by Xplode # Database : 2016-03-08.1 [server] # Operating system : Windows 10 Pro (x64) # Username : Jeremy - DESKTOP-NDLQJTL # Running from : C:\Users\Jeremy\Downloads\AdwCleaner (1).exe # Option : Clean # Support : http://toolslib.net/forum ***** [ Services ] ***** ***** [ Folders ] ***** ***** [ Files ] ***** [-] File Deleted : C:\Users\Jeremy\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_wtov9.com_0.localstorage [-] File Deleted : C:\Users\Jeremy\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_wtov9.com_0.localstorage-journal ***** [ DLLs ] ***** ***** [ Shortcuts ] ***** ***** [ Scheduled tasks ] ***** ***** [ Registry ] ***** ***** [ Web browsers ] ***** [-] [C:\Users\Physics and Tutoring\AppData\Local\Google\Chrome\User Data\Default\Web Data] [search Provider] Deleted : aol.com [-] [C:\Users\Physics and Tutoring\AppData\Local\Google\Chrome\User Data\Default\Web Data] [search Provider] Deleted : ask.com ************************* :: "Tracing" keys removed :: Winsock settings cleared ************************* C:\Program Files (x86)\AdwCleaner\AdwCleaner[C1].txt - [1211 bytes] - [08/03/2016 11:46:10] C:\Program Files (x86)\AdwCleaner\AdwCleaner[s1].txt - [1290 bytes] - [08/03/2016 11:44:52] ########## EOF - C:\Program Files (x86)\AdwCleaner\AdwCleaner[C1].txt - [1397 bytes] ########## ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Malwarebytes Version: 8.0.3 (02.09.2016) Operating System: Windows 10 Pro x64 Ran by Jeremy (Administrator) on Tue 03/08/2016 at 12:02:03.89 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ File System: 6 Successfully deleted: C:\Users\Jeremy\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.azlyrics.com_0.localstorage-journal (File) Successfully deleted: C:\Users\Jeremy\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.azlyrics.com_0.localstorage (File) Successfully deleted: C:\Users\Jeremy\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.lyricsfreak.com_0.localstorage-journal (File) Successfully deleted: C:\Users\Jeremy\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.lyricsfreak.com_0.localstorage (File) Successfully deleted: C:\Users\Jeremy\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.metrolyrics.com_0.localstorage-journal (File) Successfully deleted: C:\Users\Jeremy\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.metrolyrics.com_0.localstorage (File) Registry: 0 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on Tue 03/08/2016 at 13:38:41.24 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ FRST 2.txt

I had malwarebytes premium license, but when I reinstalled windows recently I lost it. I have been using the system for a while now with the free version but I think I still managed to pick up an annoying infection. Occasionally it will cause side-bars to move up-and-down, it will zoom-in or zoom-out on my browser, occasionally it will highlight and erase text. It is very irritating and I can't seem to remove it using malware bytes scans. I attached the documents as instructed to this post. Thanks for your help! FRST.txt Addition.txt

Everything seems to be back to normal.

Sorry for the delay, my roommate attempted to do a system restore insisting it would be a quick fix but I am still going to proceed with this topic. I conducted additional scans using the FRST scan and attached the documents just in case it was necessary, but I still went through the ZOEK scan. I know it's best not to make any system changes during this process so I'll leave things be from here on out. I will point out that symptoms seem to be gone, but let's see... zoek-results.txt FRST Second Scan.txt Addition Second Scan.txt

I ran Malwarebytes (premium and up-to-date) and removed a number of PUP files from my computer. It started 3 or 4 days ago, I would be typing text in word or in an e-mail and the cursor would occasionally jump around as I was typing and would suddenly typing in the middle of a previous sentence, sometimes an entire paragraph would be highlighted and then erased (The CTRL - z command kept me sane)) and it was no accident by me. I had something like this several years ago. Back then what happened was I updated Malwarbytes and ran a scan and it worked; the symptoms went away after I removed a few objects. This time Malwarebytes is not finding anything other than the PUP files that didn't cure anything upon deletion. I I think this may have occurred due to a malicious update alert I naively accepted I think for a flash player. I attached the scans because I received an error that they were too long when I went to submit this topic. Addition.txt FRST.txt