johnooo Posted January 31, 2015 ID:934832 Share Posted January 31, 2015 To start yes I use Malwarebytes as well!I keep, daily, getting a Pop Up stating that AVG Free version needs updating, but I know I have the latest version, 2015.0.5645I have run Malwarbytes but it has found nothing.I have also run Junkware removal tool & adwarecleaner that found 3 things, two programs containing the word "fighters" that I deleted & another described as:-HKCU\Software\Micrsoft\Windows\Current Version\Internet Setting\[Proxy Override]I'm concerned about deleting this as it mentions Microsoft & I am using windows 8.1Advise please. Link to post Share on other sites More sharing options...
kevinf80 Posted January 31, 2015 ID:934839 Share Posted January 31, 2015 Hello and welome, P2P/Piracy Warning: If you're using Peer 2 Peer software such as uTorrent, BitTorrent or similar you must either fully uninstall them or completely disable them from running while being assisted here.Failure to remove or disable such software will result in your topic being closed and no further assistance being provided.If you have illegal/cracked software, cracks, keygens etc. on the system, please remove or uninstall them now and read the policy on Piracy. Download Farbar Recovery Scan Tool and save it to your desktop. Note: You need to run the version compatible with your system (32 bit or 64 bit). If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.Double-click to run it. When the tool opens click Yes to disclaimer.Press Scan button.It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply. Next, Please download RogueKiller and save it to your desktop from the following link: http://www.bleepingcomputer.com/download/roguekiller/ Quit all running programs.For Windows XP, double-click to start.For Vista,Windows 7/8, Right-click on the program and select Run as Administrator to start and when prompted allow it to run.Read and accept the EULA (End User Licene Agreement)Click Scan to scan the system.When the scan completes select "Report", log will open. Close the program > Don't Fix anything!Post back the report which should also be located here: C:\Programdata\RogueKiller\Logs <-------- W7/8C:\Documents and Settings\All Users\Application Data\RogueKiller\Logs <------XP Let me see those logs.... Kevin.. Link to post Share on other sites More sharing options...
johnooo Posted January 31, 2015 Author ID:934902 Share Posted January 31, 2015 Kevin,Firstly good evening from the UK, & thanks for your help.I'm working blind here but have run both programs & these are the logs attached.Ref the file FRST64.exe, I got the message that I am not permitted to uploadFRST.txtRKreport_SCN_01312015_182740.log Link to post Share on other sites More sharing options...
johnooo Posted January 31, 2015 Author ID:934906 Share Posted January 31, 2015 Sorry, should have also attached this file Addition.txt Link to post Share on other sites More sharing options...
kevinf80 Posted January 31, 2015 ID:934920 Share Posted January 31, 2015 What do you mean working blind? also do not see any obvious malware/infection in those logs. Run the following: 1.Download Malwarebytes Anti-Rootkit from this link: http://www.malwarebytes.org/products/mbar/ 2. Unzip the File to a convenient location. (Recommend the Desktop)3. Open the folder where the contents were unzipped to run mbar.exe 4. Double-click on the mbar.exe file, you may receive a User Account Control prompt asking if you are sure you wish to allow the program to run. Please allow the program to run and MBAR will now start to install any necessary drivers that are required for the program to operate correctly. If a rootkit is interfering with the installation of the drivers you will see a message that states that the DDA driver was not installed and that you should reboot your computer to install it. You will see this image: 5. If you receive this message, please click on the Yes button and Malwarebytes Anti-Rootkit will now restart your computer. Once the computer is rebooted and you login, MBAR will automatically start and you will now be at the start screen. (If no Rootkit warning you will go from step 4 to 6.) 6. The following image opens, select Next. 7. The following image opens, select Update 8. When the update completes select Next. 9. In the following window ensure "Targets" are ticked. Then select "Scan" 10. If an infection is found select the "Cleanup Button" to remove threats, Reboot if prompted. Wait while the system shuts down and the cleanup process is performed. 11. Perform another scan with Malwarebytes Anti-Rootkit to verify that no threats remain. If they do, then click "Cleanup Button" once more and repeat the process.12. If no threats were found you will see the following image, Select Exit: 13. Verify that your system is now running normally, making sure that the following items are functional: Internet access Windows Update Windows Firewall 14. If there are additional problems with your system, such as any of those listed above or other system issues, then run the 'fixdamage' tool included within Malwarebytes Anti-Rootkit folder. 15. Select "Y" from your Keyboard, tap Enter. 16. The fix will be applied, select any key to Exit. 17. Let me know how your system now responds. Copy and paste the two following logs from the mbar folder: System - logMbar - log Date and time of scan will also be shown Thanks, Kevin... Link to post Share on other sites More sharing options...
johnooo Posted January 31, 2015 Author ID:934955 Share Posted January 31, 2015 Kevin, Thanks again, by "working Blind" I meant that I am not a experienced user & get scared on using these tools. Anyway I have run the Antirootkit Beta tool & the result was "No Malware Found" So I will see if this annoying Pop up appears on the next start up (it generally only comes on when I start up) Link to post Share on other sites More sharing options...
kevinf80 Posted January 31, 2015 ID:934958 Share Posted January 31, 2015 Thanks for the update and explanation, maybe is worthwhile uninstall then re-install AVG if the issue continues... Run the following to clean up.. Download "Delfix by Xplode" and save it to your desktop. Or use the following if first link is down: "Delfix link mirror" Double Click to start the program. If you are using Vista or higher, please right-click and choose run as administrator Make Sure the following items are checked: Remove disinfection tools Now click on "Run" and wait patiently until the tool has completed. The tool will create a log when it has completed. We don't need you to post this. Any remnant files/logs from tools we have used can be deleted… Next, Read the following link to fully understand PC security and best practices, you may find it useful.... http://www.bleepingcomputer.com/forums/t/407147/answers-to-common-security-questions-best-practices/#entry2316629 Let me know if we are ok to close out.... Thanks, Kevin.. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted February 5, 2015 Root Admin ID:936413 Share Posted February 5, 2015 Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Thanks! Link to post Share on other sites More sharing options...
Recommended Posts