Jump to content

Impossible to remove Internet Download Manager


Recommended Posts

Hello,

 

I have a desktop computer running Win7 and have more or less the same problem than signaled here :

 

https://forums.malwarebytes.org/index.php?/topic/146735-internet-download-mananger-idmanexe/

 

except that it doesn't use 100% CPU, but I just can't get rid of it

 

I have tried to remove IDM but I always find these after searching on c: and j :

 

http://cjoint.com/?DHutC2nRe18

 

What seems to me very strange (but I'm a real noobie ) is that i have tried to use Malwarebytes, it ran correctly, but when it finished, it ebecame impossible to export the log,

either when I try "export" or "copy to notepad, I get this :

 

http://cjoint.com/14au/DHvrJ5mKjz7.htm

 

here are screenprints of the results :

 

http://cjoint.com/14au/DHvbHNdKHvH.htm

 

http://cjoint.com/14au/DHvbFBGdxNB.htm

 

and here is a .txt transcription of the .xml file recorded in c:/ programme data/malwarebytes/log :

 

http://cjoint.com/14au/DHvbFBGdxNB.htm

 

This morning, after quarantining the threats found and deleting them, I've ran alwarebytes a second time, it found nothing (of course, i suppose...) but I can export the log without problem....

 

I have deleted the original *.rar, but i thik it might be this one :

 

http://www.4shared.com/rar/01vKtq86/IDM_605_Build_1_Final_Precrack.html?locale=fr

 

(I knw that was stupid, but it was quite long ago, I was even stupider than I am today....)

 

 

I've already done a few operations, guided by a nice guy over there :

 

http://forum.telecharger.01net.com/forum/high-tech/SECURITE/Securite/supprimer-internet-download-sujet_66951_1.htm

 

 

Some help would be much appreciated...

 

Thanks

Link to post
Share on other sites

Hello and post-32477-1261866970.gif

 

P2P/Piracy Warning:

 

If you're using Peer 2 Peer software such as uTorrent, BitTorrent or similar you must either fully uninstall them or completely disable them from running while being assisted here.Failure to remove or disable such software will result in your topic being closed and no further assistance being provided.If you have illegal/cracked software, cracks, keygens etc. on the system, please remove or uninstall them now and read the policy on Piracy.

 

Download OTL from any of the following links and save to your desktop.

 

http://itxassociates.com/OT-Tools/OTL.com

http://oldtimer.geekstogo.com/OTL.exe

http://www.itxassociates.com/OT-Tools/OTL.scr

 

Double click the OTL icon to start the tool. (Note: If you are running on Vista or Windows 7/8 accept UAC alert)

 


  When the window appears, underneath Output at the top, make sure Standard output is selected.
Select Scan all users
Change Drivers to All
Under the Extra Registry section, check Use SafeList
In the lower right corner, checkmark "LOP Check" and checkmark "Purity Check".
Close out all browsers and turn off Security.
Click Run Scan and let the program run uninterrupted.
When the scan is complete, two text files will be created on your Desktop.
OTL.Txt <- this one will be opened
Extras.txt <- this one will be minimized

 

Copy (Ctrl+A then Ctrl+C) and paste (Ctrl+V) the contents of OTL.Txt and the Extras.txt in your next reply.

 

Kevin...
 

Link to post
Share on other sites

Download attached fixlist.txt file and save it to the Desktop, or the folder you saved FRST into.
NOTE. It's important that both FRST and fixlist.txt are in the same location or the fix will not work.

Run FRST and press the Fix button just once and wait.
The tool will make a log on the Desktop (Fixlog.txt) or the folder it was ran from. Please post it to your reply.

 

Next,

 

Open Malwarebytes Anti-Malware, from the Dashboard please Check for Updates by clicking the Update Now... link...

When the update completes select > Settings > Detection and Protection > Enable Scan for rootkit and Under Non Malware Protection set both PUP and PUM to Treat detections as malware.

Click on the SCAN button and run a Threat Scan with Malwarebytes Anti-Malware by clicking the Scan Now>> button.

 

When the scan is complete, if there have been detections, click Apply Actions to allow MBAM to clean what was detected.

In most cases, a restart will be required.

Wait for the prompt to restart the computer to appear, then click on Yes.


Once completed please click on the History > Application Logs and find your scan log and open it and then click on the "copy to clipboard" button and post back the results on your next reply.

 

Next,

 

Download AdwCleaner by Xplode onto your Desktop.

  • Double click on Adwcleaner.exe to run the tool.
  • Click on Scan
  • Once the scan is done, click on the Clean button.
  • You will get a prompt asking to close all programs. Click OK.
  • Click OK again to reboot your computer.
  • A text file will open after the restart. Please post the content of that logfile in your reply.
  • You can also find the logfile at C:\AdwCleaner[sn].txt. Where n in the scan reference number

 
Next,
 
thisisujrt.gif Please download Junkware Removal Tool to your desktop.
  • Shut down your protection software now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message.


 

Let me see those logs, also give an update on any remaining issues or concerns....

 

Kevin

 


 

fixlist.txt

Link to post
Share on other sites

Hi Kevinf80,

 

voilà :

 

Fixlog >     http://cjoint.com/?DHwqcuQgSrn

 

Malwarebytes log : http://cjoint.com/?DHwqfuDXhgW

 

Adwlog >   http://cjoint.com/?DHwqdUKfwBU

 

JRT > http://cjoint.com/?DHwqfVqa22T

 

no particular issue, I thik everything worked well except  :

 

I still can't export the original Malwarebytes log (done à 00:34 tyesterday, the one which found some problems) altough all logs created later (with no detections ) are available,

 

a search on C: and J: for "IDM" still gives 30 results (the same than in my first post...)

 

 

Tahnk you very much for the time spent...

Link to post
Share on other sites

Please download SystemLook from the following link below and save it to your Desktop. Use the correct version 32bit or 64bit.

http://jpshortstuff.247fixes.com/SystemLook_x64.exe      <<-   64 bit….

http://images.malwareremoval.com/jpshortstuff/SystemLook.exe  <<-  32 bit

  • Double-click SystemLook.exe to run it.
  • Copy the content of the following codebox into the main textfield:

    :regfindIDM*IDM*Internet Download Manager*Internet Download Manager*
  • Click the Look button to start the scan.
  • When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.


Note: The log can also be found on your Desktop entitled SystemLook.txt

 

Post that log, also let me know if there are any remaining issues or concerns...

 

Kevin

Link to post
Share on other sites

Download GeekUninstaller from here: http://www.geekuninstaller.com/download (Choose free version) Save Geek.zip to your Desktop. (Visit the Home page at that link for necessary information)

 

Extract Geek Uninstaller and save to your Desktop. There is no need to install, the executable is portable and can also be run from a USB if required.

 

Run the tool, the main GUI will populate with installed programs list,

 

Left click on Internet Download Manager to highlight that entry.

 

Select Action from the Menu bar, then Uninstall from there follow the prompts.

 

If Uninstall fails open the "Action" menu one more time and use "Force Removal" option

 

Next,

 

run SystemLook one more time with the following copied to the text field....

 

:regfindIDMInternet Download Manager

 

[*]Click the Look button to start the scan.

[*]When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.

Note: The log can also be found on your Desktop entitled SystemLook.txt

 

Let me know if the uninstaller is successful, also post log from Systemlook...

 

Kevin.

Link to post
Share on other sites

Download OTM from either of the following links and save to your Desktop: (If your security alerts to OTM, either accept the alert or turn off security to allow OTM to run)

http://oldtimer.geekstogo.com/OTM.exe.
http://www.itxassociates.com/OT-Tools/OTM.com
http://www.itxassociates.com/OT-Tools/OTM.exe  

Double click OTM.exe to start the tool. Vista or Windows 7 users accepy UAC alert. Be aware all processes will be stopped during run, also Desktop will disappear, this will be put back on completion.... If your security alerts to OTM either, accept the alert or turn off security until OTM completes...

  • Copy the text from the code box belowbelow to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy). Ensure to start with and include the colon before Reg :Reg

    :Reg[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{436D67E1-2FB3-4A6C-B3CD-FF8A41B0664D}][-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4764030F-2733-45B9-AE62-3D1F4F6F2861}][-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{52F6F7BD-DF73-44B3-AE13-89E1E1FB8F6A}[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5312C54E-A385-46B7-B200-ABAF81B03935}[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7D11E719-FF90-479C-B0D7-96EB43EE55D7}[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CDC95B92-E27C-4745-A8C5-64A52A78855D}[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CDD67718-A430-4AB9-A939-83D9074B0038}:FilesC:\Program Files (x86)\Internet Download ManagerC:\Users\Grégory\AppData\Roaming\IDMC:\Users\Jean Pierre\AppData\Roaming\IDM:Commands[EmptyTemp]
  • Return to OTMoveIt3, right click in the "Paste Instructions for Items to be Moved" window (under the yellow bar) and choose Paste.
  • Click the red btnmoveit.png button.
  • Copy everything in the Results window (under the green bar) to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy), and paste it in your next reply.
  • Close OTM


Note: If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes.

If the machine reboots, the Results log can be found here:

c:\_OTMoveIt\MovedFiles\mmddyyyy_hhmmss.log

Where mmddyyyy_hhmmss is the date of the tool run.

 

Next,

 

Download and install CCleaner from here:

http://www.piriform.com/ccleaner/builds Ensure to select Slim version. (No Toolbar)

  • Run the installer to install the application.
  • Run CCleaner. default settings are fine
  • Select > Cleaner > Run Cleaner > all temp files and caches will be deleted/emptied
  • Select > Registry > "Scan for Issues" > with all found entries checked select > "Fix Selected Issues" follow prompts to make back up and remove all entries...



close CCleaner and re-boot your PC....

 

What is the current status, any remaining issues or concerns...

 

Kevin

Link to post
Share on other sites

What is the curret status of your system, are there any remaining issues or concerns. If none continue as follows to clean up..

 

Download "Delfix by Xplode" and save it to your desktop.

Or use the following if first link is down:

"Delfix link mirror"

Double Click to start the program. If you are using Vista or higher, please right-click and choose run as administrator

Make Sure the following items are checked:


  •    
  • Activate UAC
       
  • Remove disinfection tools
       
  • Create registry backup
       
  • Purge System Restore
       
  • Reset system settings



Now click on "Run" and wait patiently until the tool has completed.

The tool will create a log when it has completed. We don't need you to post this.

Part of the routine will be to create a registry back up with ERUNT,  the back up will be created here:

C:\Windows\ERUNT

When all is known to be well with your system you can delete that back up folder if you consider it as not needed...

 

Any logs/files from previous actions can be deleted....

 

Kevin

Link to post
Share on other sites

Those files are remnants from a previous install of a removed program (IDM) they will remain in the registry as fragmented remnants, if they cause no concern or issue to your system in general they can be ignored....

 

It was a pleasure to work with you, take care and surf safe....

 

Kevin

Link to post
Share on other sites

  • Root Admin

Glad we could help. :)

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.