Jump to content


  • Content Count

  • Joined

  • Last visited

Everything posted by _JimmyB

  1. And to answer your other question. I removed all partitions, format C then installed new windows 10... James
  2. My 6th Post into this thread shows another person getting this type of error and how he applied a work-around which corrected the issue. BTW, I’ve been using this laptop now for close to 4 years without any “pop-ups” so I’m not at all convinced that this “pop-up” is at all legit. James
  3. I've done all of those already... This is a wipe clean - install... James
  4. Root Admin... Ok I booted to "Normal" but with no Internet connected and ran all 3 steps as requested. Attached you'll find my 2 .txt files from the Farbar run. Please review and recommend next step(s)... James Bennett Addition.txt FRST.txt
  5. So my question is... should ai now boot to “Normal” mode without connecting to the internet and run the same scans..? Or..? James
  6. Because every single time that I go into “Normal” mode and connect to the internet the message appears locking my entire computer... Thus the reason that I opened this trouble issue within the blog. I’ve never experienced such a lock-down virus/malware ever. Usually I just wipe clean and install the OS and I’m back up and running. This time no..! So after 8 attempts with some movement with each try I’ve gotten here. James
  7. Ron... Okay I noticed that the scan tool wanted it run from the admin acct so I re-ran. Pls find the attachments created. James Addition.txt FRST.txt
  8. Ron... Ok, I've just completed step 3. Please find the 2 files created during the scan... James Addition.txt FRST.txt
  9. Ron... This morning when I jumped back onto my laptop I noticed that Malwarebytes ran a scan and found several threats so I ran a quarantine of them and exported the log of which is attached. Please kindly review and suggest or comment. I'm going to restart the laptop and move into step 3 now... James Malwarebytes_scan_w_quarantine_10092019.txt
  10. Moving onto Step 3... Will get back to you later this evening as I need to head into work now. James
  11. Ron... I ran AdwCleaner again after the restart and am showing clean. Pls see report..: # ------------------------------- # Malwarebytes AdwCleaner # ------------------------------- # Build: 09-05-2019 # Database: 2019-10-03.2 (Cloud) # Support: https://www.malwarebytes.com/support # # ------------------------------- # Mode: Scan # ------------------------------- # Start: 10-08-2019 # Duration: 00:00:12 # OS: Windows 10 Pro # Scanned: 35164 # Detected: 0 ***** [ Services ] ***** No malicious services found. ***** [ Folders ] ***** No malicious folders found. ***** [ Files ] ***** No malicious files found. ***** [ DLL ] ***** No malicious DLLs found. ***** [ WMI ] ***** No malicious WMI found. ***** [ Shortcuts ] ***** No malicious shortcuts found. ***** [ Tasks ] ***** No malicious tasks found. ***** [ Registry ] ***** No malicious registry entries found. ***** [ Chromium (and derivatives) ] ***** No malicious Chromium entries found. ***** [ Chromium URLs ] ***** No malicious Chromium URLs found. ***** [ Firefox (and derivatives) ] ***** No malicious Firefox entries found. ***** [ Firefox URLs ] ***** No malicious Firefox URLs found. ***** [ Preinstalled Software ] ***** No Preinstalled Software found. AdwCleaner_Debug.log - [40557 octets] - [08/10/2019 06:36:09] AdwCleaner[S00].txt - [4185 octets] - [08/10/2019 06:37:02] AdwCleaner[C00].txt - [3881 octets] - [08/10/2019 06:37:58] AdwCleaner[S01].txt - [1510 octets] - [08/10/2019 06:45:36] AdwCleaner[C01].txt - [1698 octets] - [08/10/2019 06:46:03] ########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S02].txt ##########
  12. Ron... Ok I went and downloaded/installed AdwCleaner onto my laptop and ran a scan. There were 27 items found of which I processed "Quarantine". Restarted the laptop as requested... James
  13. Ron... Here's the IObit Malware Fighter 7.2 Pro scan report..: IObit Malware Fighter OS: Windows 10 Version: Engine Version: Database Version: 1905 BDVersion: 7.82530(10/08/2019 03:42:29 GMT) Scan Mode: Manual Scan Type: Smart Scan Time Elapsed: 00:05:32 Objects Scanned: 110630 Threats Detected: 0 Save Time: 10/8/2019 6:31:16 AM Scan Status: Completed |Name|Type|Description|ID|Hash|
  14. Ron... I also downloaded and installed ran updates on IObit Malware Fighter 7.2 Pro... - Scan was clean Ran Windows Defender with updates - Scan was clean James
  15. Ron... Thanks for the plan. I went ahead and wiped the disk clean again and reinstalled Win10. Created a second account called James-Local as I need it to be able to run things in Safe Mode. I booted into Safe Mode with Networking. Here I installed Marwarebytes 3 premium trial - pulled updates - ran scan... I noticed you wanted me to select "threat scan" then click "start scan" but there isn't a "threat scan" option to select. please advise... Anyway, I am attaching my exported scan .txt file. James Malwarebytes_exp_scan_summary.txt
  16. After some research on the name of the html file I found the following..: Pop-up says: "This machine is not in compliance with Under Armour security standards. Please contact the Global Service Desk at +1 ***-***-**** to enable your machine"I've managed to trace the file to: c:/program data/wcttempoff.html. For those who face the same issue, but can't achieve the same result in negotiations on laptop unlocking, there is a way-around that blocking pop-up. Once the fresh OS is installed, make sure not to connect to the internet. After system is booted, go ahead to the Windows/system32 and/or windows/syswow64. find files rpcnet.exe, rpcnet.dll, rpcnetp.exe, rpcnetp.dll. delete them. after that, with a notepad, create 4 empty documents, name them as those files that were deleted, apply read only, move them to the folder files were deleted from (I've also changed all the rights to "deny" for all users). After this, feel free to connect to web, install drivers, and updates. Pop-up won't bother You. I’m going to try this above now... James
  17. 1-833-342-9237 is the phone number. See attached pic. As stated, I am “completely” frozen. No mouse unless I Ctrl-alt-del then it will work. I do not understand what you mean by “You can't just use the mouse and choose the file ( Highlight the file ) and hit the Delete key ?”. When, how, where..??? James Bennett
  18. David... The only thing I can do is right click on the html page that appears. A page does show up and stay present. There are a list of things that I can choose. They are..: Select all; All Accelerators; Create shortcut; Add to favorites; View source; Inspect Element; Encoding; Print; Print preview; Refresh and Properties. When I select Properties I see the following URL Address: file:///C:/ProgramData/wcttempoff.html How do I delete that file..? James
  19. David... Every time I press CTRL- Alt and delete all at the same time to access task manager the task manager screen shows up for a second and then goes away quickly. I can see that Internet Explorer is running.How do we get the screen to stay present so that I can stop process on IE..?James
  20. Thanks David for responding sir. So it does appear to be “Malvertisement” that appears as it is in the form of http format and only shows up once I connect to the internet. There is no way, to my understanding, to get to “Task Manager” when the Malvertisement appears. I’m completely frozen..! Even when I reboot and enter into safe mode that message appears and I’m completely frozen..! I can walk through my steps again to wipe clean and reinstall and go into safe mode. But what do I do then..??? I’d appreciate any assistance from you or anyone that reads this forum thread. James Bennett
  21. My laptop has received the following error..: This system has been frozen pending remediation of malicious software. Please contact <phone number> with any questions regarding this. I’ve wiped the hard disk clean and reinstalled windows 10 fresh w/o network. Booted into safe mode and installed malwarebytes and IObit Malware Fighter 7 PRO. Scanned with both and found no threats. Ran windows defender which was clean. Then when I went back into normal (non-safe mode) I received the exact same error..! Frustrated..! James Bennett
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.