Jimcat

Delfix has been run and Java has been updated. I think we are good to close this out now. Thanks again for your assistance.

Will follow those instructions in the morning.

It looks as though I am probably in the clear now. The web browser comes up quickly once again, and the kids' favorite sites don't have the ad links on them. I've re-activated Windows Defender and virus protection. Appreciate the help; I will be sending some thanks your way.

Finished at last. Here is the log file from ESET. log.txt

It's a big hard drive... ESET is still going, about 48% done after 1 hour and 50 minutes.

ESET is running now and has found a few more infections. Will post the log when done.

JRT log is attached. JRT.txt

MBAM_Scan.txt After the FRST fix, MBAM found no threats - first time that has happened in a long time! Attached is the scan log. I'm still going ahead with the following steps, just to be safe.

First step complete. Here is the Fixlog.txt file. Fixlog.txt

Thank you, starting now...

Here are the files from the FRST scan. FRST.txt Addition.txt

So, the kids' game box has some nasty infections on it. (This seems to happen to me about once per year.) At the very least it looks like Binkiland, Guffins toolbar, and Strong Signal are on there. I tried conventional methods to get rid of them: remove the programs via Control Panel, run AdwCleaner and MBAM, but that doesn't seem to fix the problem. After a Google search on how to remove Strong Signal, I found a link to a program called SpyHunter, which did a long scan of my drive and found a good number of infections - but it wouldn't let me remove them unless I registered, and these infections seem to be preventing me from calling up any Web browsers. I can click on Google Chrome (my preferred browser), but the drive just churns forever and the browser window never comes up. So, clearly I need a thorough cleaning. Where do we start? Thanks in advance for your help.

Thanks for the advice. I will be away from the computer for the rest of the evening but I will look at it again tomorrow.

The adware seems to have been successfully removed but Internet Explorer is still having difficulty connecting to sites.

Thanks... now I can finally be rid of that darned PC Backup window that kept popping up! Attached are the logs: AdwCleanerS0.txt mbam-log-2014-02-02 (14-50-47).txt

I ran a MBAM scan and it found about 31 malicious items. I removed them, and rebooted, and most things seem to be working correctly. One strange behavior, though: Internet Explorer doesn't seem to be accepting any input in its address bar. I can get to any website with Google Chrome, but if I type something into the address bar of IE, it doesn't seem to respond at all.

Sorry - trying the attach again. Fixlog.txt

Good news. The system seems to be back to normal. I rebooted and the Windows Safety Master did not come up. The fixlog.txt is attached. I am downloading the updated MBAM database now.

My apologies, I didn't follow the instructions thoroughly and I clicked "Fix" on RogueKiller instead of just closing and saving the report. Here is the report after running the fix. Please let me know if we have to do anything over again - I will be sure to follow the steps more carefully this time. RKreport0_D_02022014_082228.txt

Attached are the FRST logs from the initial run, before running RogueKiller. FRST.txt Addition.txt

I followed the link at the top of your post and I am unable to follow the directions literally. It seems to be a general script that assumes that one is able to download and run any program from Windows. But this is not the case for my infected computer. I think this will need some more analysis that is specific to my exact situation. 1. I already have a copy of Malwarebytes Anti-Malware. But I am unable to run this, or any other program, from a normal Windows login because the Windows Safety Master program keeps me from running anything. 2. The same applies to the DDS program. I can download it from a non-infected machine, but the only way that I can run it would be in safe mode. What are the next steps that I should take here? Should I run MBAM in safe mode? DDS in safe mode? Or is there something else that needs to be done?

Thank you, I will start working on this tomorrow morning.

I have a computer that recently got infested with Windows Safety Master. I googled the issue and tried the instructions at BleepingComputer.org, which usually has good advice. The guide instructed me to download the RemVimes registry file and run it from safe mode. Unfortunately, after doing this, I reboot the computer and Windows Safety Master still comes up when I go back to a normal Windows login. Any advice on dealing with this unusually persistent instance of malware will be appreciated.

Thank you for your assistance. I have read the above post and uninstalled the anti-malware programs. I am definitely going to be reading the "internet safety for kids" information because I have a six-year-old son who loves computer games, but of course isn't savvy enough to know what not to click on. Since he lost the use of the computer for the weekend while I looked for solutions, he is now swearing up and down that he will "never click on Miniclips.com again!" I've made a donation for my gratitude - you've provided professional quality help much more quickly and conveniently than consulting a local repair service. I knew the Malwarebytes forums would come through!

Finally complete. Attached is the ESET scan file. eset_scan.txt