jonsey1886
Members-
Posts
12 -
Joined
-
Last visited
Reputation
0 NeutralRecent Profile Visitors
The recent visitors block is disabled and is not being shown to other users.
-
Sorry it's taken me so long to reply, it's happened roughly 2-3 times since the 7th. I'll look at the link you posted in a few.
-
C:\Windows\System32>lodctr /r Error: Unable to rebuild performance counter setting from system backup store, error code is 2 C:\Windows\System32>cd %windir%\sysWOW64 C:\Windows\SysWOW64>lodctr /R Info: Successfully rebuilt performance counter setting from system backup store C:\Windows\SysWOW64> DisablePerformanceCounters value was already 0, no change needed. Rebooting now.
-
Dammit it happened again today for the first time since my post on 30 JAN 17. Going to try your last set of instructions before I turn in for the evening.
-
Followed instructions to the letter. Will let you know if problem reoccurs.
-
Malwarebytes continually consumes RAM (i.e. the amount it uses climbs higher & higher) until it is using all available RAM and eventually my computer locks up.
-
Since I can't edit previous posts due to time, Internet Explorer has been uninstalled via Windows Features (under "Turn Windows Features on & off" in Add or Remove Programs in Win10). TFC has been run. All steps completed...what did you want me to "check out" in Chrome?
-
Firefox has been uninstalled in total No idea how to remove Internet Exploder Running TFC and your next steps now.
-
No threats found by Sophos Addition.txt FRST.txt
-
# AdwCleaner v6.042 - Logfile created 19/01/2017 at 22:53:49 # Updated on 06/01/2017 by Malwarebytes # Database : 2017-01-18.1 [Local] # Operating System : Windows 10 Home (X64) # Username : Josh - JOSH-PC # Running from : C:\Users\Josh\Desktop\antivirus stuff\AdwCleaner.exe # Mode: Scan # Support : https://www.malwarebytes.com/support ***** [ Services ] ***** No malicious services found. ***** [ Folders ] ***** No malicious folders found. ***** [ Files ] ***** No malicious files found. ***** [ DLL ] ***** No malicious DLLs found. ***** [ WMI ] ***** No malicious keys found. ***** [ Shortcuts ] ***** No infected shortcut found. ***** [ Scheduled Tasks ] ***** No malicious task found. ***** [ Registry ] ***** Key Found: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7854F00C-DC77-477E-A10E-603F48442D3B} Key Found: HKU\S-1-5-21-2457984809-3361707231-4273056994-1000\Software\APN PIP Key Found: HKCU\Software\APN PIP Key Found: HKLM\SOFTWARE\PIP Key Found: [x64] HKCU\Software\APN PIP ***** [ Web browsers ] ***** No malicious Firefox based browser items found. No malicious Chromium based browser items found. ************************* C:\AdwCleaner\AdwCleaner[S1].txt - [1324 Bytes] - [19/01/2017 22:53:49] ########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1397 Bytes] ########## # AdwCleaner v6.042 - Logfile created 19/01/2017 at 22:56:48 # Updated on 06/01/2017 by Malwarebytes # Database : 2017-01-18.1 [Local] # Operating System : Windows 10 Home (X64) # Username : Josh - JOSH-PC # Running from : C:\Users\Josh\Desktop\antivirus stuff\AdwCleaner.exe # Mode: Clean # Support : https://www.malwarebytes.com/support ***** [ Services ] ***** ***** [ Folders ] ***** ***** [ Files ] ***** ***** [ DLL ] ***** ***** [ WMI ] ***** ***** [ Shortcuts ] ***** ***** [ Scheduled Tasks ] ***** ***** [ Registry ] ***** [-] Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7854F00C-DC77-477E-A10E-603F48442D3B} [-] Key deleted: HKU\S-1-5-21-2457984809-3361707231-4273056994-1000\Software\APN PIP [#] Key deleted on reboot: HKCU\Software\APN PIP [-] Key deleted: HKLM\SOFTWARE\PIP [#] Key deleted on reboot: [x64] HKCU\Software\APN PIP ***** [ Web browsers ] ***** ************************* :: "Tracing" keys deleted :: Winsock settings cleared ************************* C:\AdwCleaner\AdwCleaner[C0].txt - [1094 Bytes] - [19/01/2017 22:56:48] C:\AdwCleaner\AdwCleaner[S1].txt - [1480 Bytes] - [19/01/2017 22:53:49] ########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [1313 Bytes] ##########
-
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Malwarebytes Version: 8.1.0 (12.05.2016) Operating System: Windows 10 Home x64 Ran by Josh (Administrator) on Thu 01/19/2017 at 22:15:23.86 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ File System: 17 Successfully deleted: C:\Users\Josh\AppData\Local\{00AE5103-7D1C-402A-AF96-8F4B029F0C43} (Empty Folder) Successfully deleted: C:\Users\Josh\AppData\Local\{1180B657-BB85-4FCC-AEEF-8A9AE6AB1055} (Empty Folder) Successfully deleted: C:\Users\Josh\AppData\Local\{37960C89-D178-4BAA-8FCC-ED8FE529A9A9} (Empty Folder) Successfully deleted: C:\Users\Josh\AppData\Local\{4CA076E8-AFE9-449E-AE7F-3C80858FCA8C} (Empty Folder) Successfully deleted: C:\Users\Josh\AppData\Local\{63D814EC-0276-4974-B6C3-470087EDD7EC} (Empty Folder) Successfully deleted: C:\Users\Josh\AppData\Local\{67EDA2B9-E780-4A27-9E20-703BD284C167} (Empty Folder) Successfully deleted: C:\Users\Josh\AppData\Local\{8A6305D7-99F2-49FC-9BD9-FC9AA2BEB420} (Empty Folder) Successfully deleted: C:\Users\Josh\AppData\Local\crashrpt (Folder) Successfully deleted: C:\Users\Josh\AppData\Local\Google\Chrome\User Data\Default\Extensions\klbibkeccnjlkjkiokjodocebajanakg (Folder) Successfully deleted: C:\Users\Josh\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_klbibkeccnjlkjkiokjodocebajanakg_0.localstorage-journal (File) Successfully deleted: C:\Users\Josh\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_klbibkeccnjlkjkiokjodocebajanakg_0.localstorage (File) Successfully deleted: C:\Users\Josh\AppData\Local\ysearchutil (Folder) Successfully deleted: C:\users\Public\Documents\downloaded installers (Folder) Successfully deleted: C:\ProgramData\SPL3B24.tmp (File) Successfully deleted: C:\ProgramData\SPLA993.tmp (File) Successfully deleted: C:\ProgramData\SPLD84F.tmp (File) Successfully deleted: C:\ProgramData\SPLF800.tmp (File) Registry: 0 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on Thu 01/19/2017 at 22:23:19.78 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
Already have Malwarebytes Premium (had it for years now) and it comes up clean as a whistle. Here is latest log Windows 10 Anniversary Edition 64 bit mbam1-19-17log.txt
-
Trying to get rid of a nasty bit of malware that my little brother accidentally got on my laptop while I was on vacation visiting him. Files attached. Any more info you need I should be able to provide. Addition.txt Shortcut.txt FRST.txt