daledoc1

January 3, 2015

Hi:

In addition to noknojon's excellent advice....
You wrote:

Strangely enough, the malware omiga-search and WebGuard was installed with Firefox.

That suggests that you may have obtained Firefox from a source other than the official one (or that the unwanted stuff came from somewhere else, perhaps an unofficial Firefox extension or another software download).

After following noknojon's advice to get from free, expert cleanup help, you might want to remove all traces of Firefox (including your profile) and to cleanly reinstall from scratch with a fresh download from the only trustworthy, official source:

https://www.mozilla.org/

Just a thought from another home user,

January 2, 2015

Hello and :welcome: :

It's hard to know for sure what happened, without seeing the scan log.

Under the circumstances, since you were/are infected, the most efficient way to get help would be to have one of the forum malware experts assist you.

That sort of malware work cannot be performed here in this particular section of the forum.

So I suggest that you might want to please follow the advice in this pinned topic: Available Assistance For Possibly Infected Computers.
It explains the options for free, expert help >>AND<< the suggested preliminary steps to expedite the process.
A malware analyst will assist you with looking into your issue.

Thanks,

January 2, 2015

Hi:

Thank you for the log.

It is clean -- the false positive detection is gone.

Now, it might be a good idea to clean up all those extra anti-virus (AVs) applications.

Having remnants of so many AVs on the system could eventually lead to problems.

>>If you would like help with that and unless the staff reviewing your logs here see anything warranting a trip to the malware removal section, I suggest starting a new, separate topic in the PC Help section >>HERE<<.

>>When you do, it would help if you would attach BOTH of your FRST logs (the same ones you posted in Reply #4), AND if you would copy and paste this link into the body of the post:

https://forums.malwarebytes.org/index.php?/topic/162930-malwaretrace-will-not-go-away/

Thank you again,

January 2, 2015

Hi:

Thanks for those logs.

General note: MBAM Premium runs in real-time, alongside one's AV. So, that does consume a wee bit more resources than one would expect from the free, manual, on-demand version.

While we wait for a staff member or expert to review your logs, a couple of things stand out:

I see that you have added Avast to the MBAM exclusions. Have you done the same for MBAM exclusions in Avast? If not, the instructions are below. (ALSO: I see that you disabled Avast for the scans -- please be sure you have re-enabled it.)
You only have 1 GB of physical RAM -- while that meets the minimum "system requirements" to install MBAM, it doesn't leave a lot of spare capacity to run other resource-intensive applications, such as your AV and other programs.
There are a couple of settings changes that were flagged by the scanner -- these can sometimes be the result of malware.

As such, it might be worth taking a deeper look at the system and performing some cleanup.

Doing so might improve your performance a bit, as well as excluding malware.
That sort of work is not permitted in this area of the forum.

So, for expert assistance, I suggest that you please follow the advice in this pinned topic: Available Assistance For Possibly Infected Computers.
It explains the options for free, expert help >>AND<< the suggested preliminary steps to expedite the process.
A malware analyst will assist you with looking into your issue.
>>>As you have already run the preliminary scans, you just need to attach the same logs to a new, separate topic in the malware removal section. Then please wait for an expert helper to pick up your thread.

Thanks,
-----------------------

Please exclude the following files from your Antivirus Software for your version of Windows:

For 32 bit versions of Windows XP, Windows Vista, Windows 7 & Windows 8:

C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
C:\Program Files\Malwarebytes Anti-Malware\mbamdor.exe
C:\Program Files\Malwarebytes Anti-Malware\mbampt.exe
C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
For 64 bit versions of Windows Vista or Windows 7 & 8:
- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamdor.exe
- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbampt.exe
- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
- C:\Program Files (x86)\Malwarebytes Anti-Malware \mbamscheduler.exe
Note: If you are using a software firewall besides the built in Windows Firewall, you'll need to exclude MBAM.EXE and MBAMSERVICE.EXE from it as well.

Note: Once that's done, please make sure that if either of those programs has any sort of web filter, that you add the following as a trusted site:
```
data-cdn.mbamupdates.com
```

January 2, 2015

Hello:

It looks as if you recently worked with Blackbird in the malware removal section here?

Let's get some fresh logs for the staff and experts, please.

Please read the following and attach to your next reply the 3 requested logs - Diagnostic Logs (the 3 logs are: FRST.txt, Addition.txt and CheckResults.txt)

>>>NOTES:

Please delete from your computer any copies of the above scanners and download fresh copies, as explained in the link.

As you have previously run FRST on this system, please place a check-mark in the "Addition.txt" option before running it again.

Then, please ATTACH all 3 logs to your next reply here.

Also, please tell us: what abnormal computer behavior are you experiencing?

Thank you,

January 2, 2015

Please re-run mbam-check and post a new Checkresults.txt log.

The staff will need that file to analyze, along with the others.

If you have the minidump I mentioned earlier, please zip and attach it here, too.

If you get an error because it's too large, please let us know -- we will provide instructions to upload it to a preferred cloud site.

Then please be patient and wait for a staff member to review all of the logs.

Thank you again,

January 2, 2015

Malwarebytes does not detect this or remove it.

In addition to David's expert advice, if you think you have a new malware sample for possible inclusion in the MBAM database, I suggest the following:

First, please follow the steps in these pinned topics:
Then, please start a new, separate topic -- with the requested information (zipped file, VT link, etc) -- here: Newest Malware Threats

The Research Team will analyze the file.

Thank you again,

January 2, 2015

Hello and :welcome: :

We are not permitted to work on possible malware-related issues here in this section of the forum.

So, for expert assistance, I suggest that you please follow the advice in this pinned topic: Available Assistance For Possibly Infected Computers.
It explains the options for free, expert help >>AND<< the suggested preliminary steps to expedite the process.
A malware analyst will assist you with looking into your issue.

Thanks,

January 2, 2015

Hello and :welcome: :

It's not clear from your post if you "activated" an existing installation or whether you cleanly upgraded/reinstalled the program.

So let's start with some routine troubleshooting:

Please follow the steps in this pinned topic to uninstall your current version of MBAM and reinstall the latest build - MBAM Clean Removal Process 2x
If that does not correct the issue, then please read the following and attach to your next reply the 3 requested logs - Diagnostic Logs (the 3 logs are: FRST.txt, Addition.txt and CheckResults.txt)
NOTE: There is an FAQ section with valuable information located here - Common Questions, Issues, and their Solutions

Please let us know how it goes.

Thanks,

January 2, 2015

Hi:

Actually the images were never there.

I replied without seeing them.

(In the future, you can just ATTACH the files directly here, in your thread. There's no need to upload them to a 3rd-party site.)

If everything is working as expected, then you should be good to go for now.

If the problem recurs, I suggest following the original advice.

As for reinstalling Windows, advanced users do it all the time. Novice home users are probably advised to seek professional on-site help or local (NOT big box) computer shop help.

But, yes it would be a bit of an undertaking, if not a last resort.

Cheers,

January 2, 2015

Hello and :welcome: :

Enjoy your stay!

January 2, 2015

Great!
I'm glad that rebooting seems to have solved the problem.

There's no way to say for sure what happened.
Windows has had issues with disappearing/changing icons for a long time, going back many versions.
It could have been a "hiccup".
Having said that, it looks as if you've recently experienced a wide range of intermittent issues with this same computer?
These sorts of things can be hard to track down and fix.
Sometimes it gets to the point where it's advisable to consider backing up one's data and reinstalling the Windows OS.

Ennywho, for the icon issue, you might want to have a look at these tutorials, if you are comfortable with this sort of thing:
HERE or HERE or HERE

>>>Otherwise, we would need to see a bit of system information to better help you.

If so, please read the following and attach to your next reply the 3 requested logs - Diagnostic Logs (the 3 logs are: FRST.txt, Addition.txt and CheckResults.txt)

NOTE: If you have run FRST on this system previously, please place a check-mark in the "Addition.txt" option before you run it again.

Thank you,

January 2, 2015

@AlexH123:

Yes, let's see if the item detection has been fixed:

First of all, open the main program dashboard from your desktop shortcut icon.
Select Update Now.
Click the Scan tab, choose Threat Scan and click Scan Now.
If threats are detected, click the Apply Actions button. You will now be prompted to reboot. Click Yes.
Upon completion of the scan (or after the reboot), open the MBAM dashboard again and click the History tab.
Click Application Logs and double-click the Scan Log for the scan that was just run.
At the bottom click Export and choose Text file.

Save the file to your desktop and attach it to your next reply, just like you did the last time (same instructions as in my previous reply here).

It will be TODAY's scan log this time.

We'll go from there.

Thanks!

January 2, 2015

Hello and welcome back:

Let's start with MBAM first (especially since MBAE support is conducted in a different area of the forum).

If rebooting the computer does not resolve the issue:

Please follow the steps in this pinned topic to uninstall your current version of MBAM and reinstall the latest build - MBAM Clean Removal Process 2x
If that does not correct the issue, then please read the following and attach to your next reply the 3 requested logs - Diagnostic Logs (the 3 logs are: FRST.txt, Addition.txt and CheckResults.txt) -- NOTE: If you have run FRST on this system previously, please place a check-mark in the "Addition.txt" option before you run it again.
NOTE: There is an FAQ section with valuable information located here - Common Questions, Issues, and their Solutions

Please let us know how it goes.

Thanks,

January 2, 2015

Hi:

Thanks for the information.

As far as 3rd-party hosting for the logs -- please wait for one of the staff members to review what you've submitted.

If you've attached this file here in your previous attachments in this thread, that may be sufficient:

2015-01-02 11:15 - 2015-01-02 11:15 - 00275888 _____ () C:\Windows\Minidump\010215-40263-01.dmp

If they need additional dump files, they will provide instructions for uploading to another, preferred hosting site.

Thanks again for your patience,

January 2, 2015

Thanks for the logs -- we'll need to wait for the staff members to review them. Please be patient, as many folks are still on holiday.

Quick question: did you alter or edit the logs, as at least one of them is missing some information?

As for editing posts: new members are no permitted to do so, because of prior abuse (no problem about the duplicate attachments).

Thank you for your patience,

January 2, 2015

Hello and :welcome: :

Sorry to hear about the BSOD.
They are usually caused by hardware problems, driver issues or (sometimes) malware (such as rootkits).

>>>In addition to the files you submitted, please read the following and attach to your next reply the 3 requested logs - Diagnostic Logs (the 3 logs are: FRST.txt, Addition.txt and CheckResults.txt)

>>>ALSO: Can you please tell us whether you recently made any changes to the system (installed new hardware, new software (e.g. AV or MBAM or other), or new peripherals?)??

The staff will review all of the logs to try to determine the cause and a solution.

Thank you,

January 2, 2015

Ops!!!!!!!!! I need too set up a custom scan sorry 4 wasting every ones time. Did say I was a noob.

I think you meant to post this reply in your other topic with the same title >>here<<??

But, yes, you are correct. It would be a custom scan.

For more info, please see my reply in that other thread, here.

Please post back in that other thread, if you need more help with SCANNING.

Cheers,

January 2, 2015

LOL.

I had forgotten about the SNL parody!

January 2, 2015

Hello and :welcome: :

I suggest that you please start here:

Please follow the steps in this pinned topic to uninstall your current version of MBAM and reinstall the latest build - MBAM Clean Removal Process 2x
If that does not correct the issue, then please read the following and attach to your next reply the 3 requested logs - Diagnostic Logs (the 3 logs are: FRST.txt, Addition.txt and CheckResults.txt)
NOTE: There is an FAQ section with valuable information located here - Common Questions, Issues, and their Solutions

Please let us know how it goes.

Thanks,

January 2, 2015

Hi:

What type of scan are you running?

The recommended, routine scan is a Threat scan -- such a scan runs in all the important areas on the OS boot drive.
To scan other drives, one would need to run a "Custom" scan and select the drives you want.

Hyper scan is available only to paid, PREMIUM (andTrial) users and is not routinely needed or recommended -- if anything is found, a subsequent Threat scan will be needed anyway.
THREAT scan is the most important and most useful scan -- it is the one that ought be run on a regular basis (daily is the default setting now in 2.0).
Custom depends on what drives, folders and files are selected -- routine use of a "full" system scan is neither necessary nor recommended, as it's a task better suited to your antivirus.

More info about scan types may be found HERE.

ALSO, for additional information:
There is an FAQ Section here: Common Questions, Issues, and their Solutions
And here are links to the MBAM 2.0 User Guide: Online and PDF
And there are many useful KB topics and videos at the helpdesk support page

Thank you,

P.S. The moderator team may move this post to the MBAM Help section. And, as a friendly suggestion, a more descriptive subject for your posts would help us to better help you. (Both of your topics about totally different issues have the same subject; that can be confusing, at least for us old fogeys.) No worries, though, on either account.

January 1, 2015

Hello and welcome back:

Please read the following and attach to your next reply the 3 requested logs - Diagnostic Logs (the 3 logs are: FRST.txt, Addition.txt and CheckResults.txt).

The staff and forum experts may need additional information (such as crash dumps).

However, those first 3 logs will be a good starting point.

Thank you,

January 1, 2015

Hello and :welcome: :

We are not permitted to review scan logs or work on possible malware-related issues here in this section of the forum.

So, for expert assistance deciding what to remove and what to keep, I suggest that you please follow the advice in this pinned topic: Available Assistance For Possibly Infected Computers.
It explains the options for free, expert help >>AND<< the suggested preliminary steps to expedite the process.
A malware analyst will assist you with looking into your issue.

Thanks,

January 1, 2015

Tubular Bells was the first vinyl LP I purchased, for $7.29. That was a lot of cash for music back then. I was barely a teen back then and listening to great music, thanks to my older brother and sisters.

Yep, I think I wore out the vinyl....

For those thinking they haven't heard Mike Oldfield's TB before, perhaps you've seen the movie "The Exorcist" ?
Oldfield started working on Tubular Bells at age 18 and released it just after his 20th B-Day. Amazing.

LOL.

I was intentionally a bit cryptic in my earlier post, to see if any of the young 'uns would know:

Aside from being the soundtrack to very famous movie most of us boomers will remember, apparently, this album launched the music mogul career of Richard Branson

Seeing the movie in the theater, back in days before Netflix, was a mind-blowing experience, to be sure.

One scary film and one groovy soundtrack!

January 1, 2015

Hello and :welcome: :

We are not permitted to work on possible malware-related issues here in this section of the forum.

So, if you think you might be infected, I suggest that you please follow the advice in this pinned topic: Available Assistance For Possibly Infected Computers.
It explains the options for free, expert help >>AND<< the suggested preliminary steps to expedite the process.
A malware analyst will assist you with looking into your issue.

Thanks,

Events

Profiles

Forums

Posts posted by daledoc1

Important Information