LadsW53

Thank you. You too!

I was able to delete all the scans and schedule the one. NOW I know what to do if I have an issue. Thanks again. Lisa

There doesn't seem to be any issue. Thank you very much for your help.

Ah okay!

Yes, I did. A pencil doesn't come up to edit.

mbst-grab-results.zip

I've had Malwarebytes (windows) for years. Scanning has never been a problem. I don't know what has happened. I'm sure it's something in my settings that I did without realizing it. I have a scheduled scan for 6pm. For example this morning, it scanned at 8, 8:30, 8:38, and 8:51. WHY?? I called for support on 9/29 and was given a ticket number. I haven't rec'd a response. It just scanned again 8:55!

Hi nasdaq, I misspoke, I didn't quarantine Farbar I just "ignored" it. Yes, I was able to 'system restore' and got everything back. I did everything you instructed me to do. However, when I tried to send this to you a message came up saying that there was wording that could mean malware and wouldn't let me send it. Do you want me to send the scans as an attached file? FRST.txt Addition.txt

Hi nasdaq, I misspoke, I didn't quarantine Farbar I just "ignored" it. Yes, I was able to 'system restore' and got everything back. I did everything you instructed me to do. However, when I tried to send this to you a message came up saying that there was wording that could mean malware and wouldn't let me send it. Do you want me to send the scans as an attached file? FRST.txt Addition.txt

Hi nasdaq, I misspoke, I didn't quarantine Farbar I just "ignored" it. Yes, I was able to 'system restore' and got everything back. I did everything you instructed me to do. However, when I tried to send this to you a message came up saying that there was wording that could mean malware and wouldn't let me send it. Do you want me to send the scans as an attached file? FRST.txt Addition.txt

Hi nasdaq, well it worked running it as an administrator. All of my scans were clean yesterday. However, I still couldn't open any of my files normally. I notice the "cmd" is still there when I double click on the folder I want to open. I was surprised when I did my scan for AdwCleaner this morning and all of the PUPS were detected again. I have attached yesterday's AdwCleaner scan, as well as, today's. This morning was interesting to say the least. When I got to scanning HitmanPro, I noticed once again it said that the Farbar Recovery Tool was detected as potential malware. I had it quarantined since day 1. I decided since my scans yesterday were clean I would go ahead and delete it. Well, I couldn't do anything after that. I couldn't get access to the internet, couldn't complete a system restore (I tried 3x's). I tried everything, no go. I looked at the time of the HitmanPro scan and the time on the system restore. It looked like the time was not before the scan so I didn't use that date. I tried it anyway and the restore finally completed with no problem just as if I hadn't done anything. So now it seems I'm back to square 1. BTW, I don't have any of these "Note that since the Domains are deleted SpywareBlaster protection must be re-enabled. Spybot's Immunize feature must be used again, also you have to re-install IE-SpyAd if installed." Should I? Adwcleaner scan for 7.24.txt Adwcleaner scan for 7.23.txt

Hi nasdaq, well it worked running it as an administrator. All of my scans were clean yesterday. However, I still couldn't open any of my files normally. I notice the "cmd" is still there when I double click on the folder I want to open. I was surprised when I did my scan for AdwCleaner this morning and all of the PUPS were detected again. I have attached yesterday's AdwCleaner scan, as well as, today's. This morning was interesting to say the least. When I got to scanning HitmanPro, I noticed once again it said that the Farbar Recovery Tool was detected as potential malware. I had it quarantined since day 1. I decided since my scans yesterday were clean I would go ahead and delete it. Well, I couldn't do anything after that. I couldn't get access to the internet, couldn't complete a system restore (I tried 3x's). I tried everything, no go. I looked at the time of the HitmanPro scan and the time on the system restore. It looked like the time was not before the scan so I didn't use that date. I tried it anyway and the restore finally completed with no problem just as if I hadn't done anything. So now it seems I'm back to square 1. BTW, I don't have any of these "Note that since the Domains are deleted SpywareBlaster protection must be re-enabled. Spybot's Immunize feature must be used again, also you have to re-install IE-SpyAd if installed." Should I? Adwcleaner scan for 7.24.txt Adwcleaner scan for 7.23.txt

Hi nasdaq, well it worked running it as an administrator. All of my scans were clean yesterday. However, I still couldn't open any of my files normally. I notice the "cmd" is still there when I double click on the folder I want to open. I was surprised when I did my scan for AdwCleaner this morning and all of the PUPS were detected again. I have attached yesterday's AdwCleaner scan, as well as, today's. This morning was interesting to say the least. When I got to scanning HitmanPro, I noticed once again it said that the Farbar Recovery Tool was detected as potential malware. I had it quarantined since day 1. I decided since my scans yesterday were clean I would go ahead and delete it. Well, I couldn't do anything after that. I couldn't get access to the internet, couldn't complete a system restore (I tried 3x's). I tried everything, no go. I looked at the time of the HitmanPro scan and the time on the system restore. It looked like the time was not before the scan so I didn't use that date. I tried it anyway and the restore finally completed with no problem just as if I hadn't done anything. So now it seems I'm back to square 1. BTW, I don't have any of these "Note that since the Domains are deleted SpywareBlaster protection must be re-enabled. Spybot's Immunize feature must be used again, also you have to re-install IE-SpyAd if installed." Should I? Adwcleaner scan for 7.24.txt Adwcleaner scan for 7.23.txt

I'm not sure I understand what you mean by "You must have the first line in the file"?? I followed your instructions exactly.

Good day nasdaq, I followed your instructions and when I went to merge this is what messages I received... Registry Editor message "Adding information can unintentionally change or delete values and cause components to stop working correctly. If you do not trust the source of this information in C:\name\Desktop\fixme.reg, do not add it to the registry. Are you sure you want to continue? Answered Yes. Registry Editor response? Cannot import C:\Users\name\Desktop\fixme.reg: The specified file is not a registry script. You can only import binary registry files from within the registry editor. What do I do next? Thanks.

Hi nasdaq, thank you for your help with this. - This is not a syncing issue. I have nothing syncing with Chrome or with any other devices. - I read the article prior to the new thread. I've done everything on that page except for the very bottom. Malwarebytes Premium (it is current) will not allow me to type in those files. That is why I started the new thread. FRST.txt Addition.txt

I'm pretty sure I know where these came from. I've done all the steps from two other Techs on here. My Malwarebytes Premium does not show these "potential malware". They showed up before and again today, using Malwarebytes AdwCleaner. The only one I had before was PUP.Optional.Legacy. The others are new. PUP.Optional.SweetPacks PUP.Optional.Photor PUP.Optional.Legacy PUP.Optional.Bettersearch AdwCleaner states it has removed all but "Not Deleted HKU\S-1-5-21-171530419-2049931822-3861400332-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\favorit-network.com" Of course, none of them have been permanently removed. Any help will be greatly appreciated.