mauricev
-
Posts
12 -
Joined
-
Last visited
Content Type
Events
Profiles
Forums
Posts posted by mauricev
-
-
It made no difference.
-
Fixlog.txt attached.
-
ComboFix.exe extracts itself and just as it's about to run, it says it's expired. It offers to run in "reduced functionality" mode and then promptly quits and deletes itself after I click Yes.
-
Sorry, I wasn’t aware there was a second file, attaching now.
-
I have a 32-bit XP SP3 computer here (yes, they actually still exist) and it’s acting all weird. The WiseCare installer doesn’t run. Window complains falsely that it’s not a valid Win32 application. When I try to run the BIOS updater for this computer (a Dell Optiplex 745), Window claims a “Program Payload Error”. When I try to run the installer for CCleaner, it starts and then quits. Finally, when I try to run Malwarebytes (legacy version), it gives the error in the title, so it’s crossed my mind that the system could be infected. Tweaking.com did, however, run fine.
I’m attaching a FRST scan log.
-
-
I figured it out. There is a registry entry under (64-bit Windows) at HKEY_LOCAL_MACHINE\Software\Wow6432Node\Google\Chrome\Extensions This contains the identity of the extension and a URL where the extension is to be downloaded from. Once I removed this registry key, it no longer installs itself on new accounts.
-
I have an WIndows 7 image that I use for distribution. Somehow, the installer for Yahoo's Chrome extension got installed. That means whenever a user logs in and opens Chrome, the Yahoo Chrome extension get installed into their browser. Does anyone know where the installer is located so that I can remove it? I don't see anything in the registry and I don't see anything listed in AutoRuns. Chrome might have some location where it looks for extensions waiting to be installed. Where might that be? Malwareantibytes doesn't detect it because technically it's a legitimate software.
-
The Net Conf fix worked. Thanks.
-
In trying to update a freshly installed 2.0.2.1012 on Windows 7 SP1 64-bit, the program stops
\This looks a bit similar to another recent post https://forums.malwarebytes.org/index.php?/topic/154645-stopped-working/
I've attached the logs.
Runtime Error (at 434:1049). Could not call proc
in Resolved Malware Removal Logs
Posted
OK, thank you for all your help.