Jump to content
ttanin

Remove Pro PC Cleaner

Recommended Posts

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 20-04-2015
Ran by HP at 2015-04-23 17:11:50 Run:5
Running from C:\Users\HP\Desktop
Loaded Profiles: HP (Available profiles: HP)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
"C:\Users\HP\AppData\Roaming\Rainmaker Software Group LLC.?\Pro PC Cleaner 2.5.6"
*****************

"C:\Users\HP\AppData\Roaming\Rainmaker Software Group LLC.?\Pro PC Cleaner 2.5.6" => File/Directory not found.

==== End of Fixlog 17:11:50 ====

Share this post


Link to post
Share on other sites

Step 1

YjhLJro.pngSystemLook

  • Please download SystemLook (x64) and save the file to your Desktop.
  • Right-Click SystemLook_x64.exe and select AVOiBNU.jpg Run as administrator to run the programme.
  • Copy the entire contents of the codebox below and paste into the textfield.

    :filefind*Pro PC Cleaner*:folderfind*Pro PC Cleaner*:regfindPro PC Cleaner
  • Click the Ji0XpU4.png button to start the scan.
  • Upon completion, a log (SystemLook.txt) will open. Copy the contents of the log and paste in your next reply.
  • Click the OCFv7xc.png button.

Share this post


Link to post
Share on other sites

SystemLook 30.07.11 by jpshortstuff
Log created at 07:40 on 24/04/2015 by HP
Administrator - Elevation successful

========== filefind ==========

Searching for "*Pro PC Cleaner*"
No files found.

========== folderfind ==========

Searching for "*Pro PC Cleaner*"
C:\Users\HP\AppData\Roaming\Rainmaker Software Group LLC.​\Pro PC Cleaner 2.5.6    d------    [22:09 17/03/2015]

========== regfind ==========

Searching for "Pro PC Cleaner"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\8b8bdc00_0]
@="{0.0.0.00000000}.{37bbcb30-901f-4db6-b672-5702c2dc8c5f}|\Device\HarddiskVolume2\Program Files (x86)\Pro PC Cleaner\ProPCCleaner.exe%b{00000000-0000-0000-0000-000000000000}"
[HKEY_LOCAL_MACHINE\SOFTWARE\SUPERAntiSpyware.com\SUPERAntiSpyware\InUseFiles]
"File0"="C:\USERS\HP\APPDATA\ROAMING\RAINMAKER SOFTWARE GROUP LLC.?\PRO PC CLEANER 2.5.6\INSTALL\A5A8ADA\INSTACT.EXE"
[HKEY_LOCAL_MACHINE\SOFTWARE\SUPERAntiSpyware.com\SUPERAntiSpyware\InUseFiles]
"File1"="C:\USERS\HP\APPDATA\ROAMING\RAINMAKER SOFTWARE GROUP LLC.?\PRO PC CLEANER 2.5.6\INSTALL\A5A8ADA\SPLASH.EXE"
[HKEY_USERS\S-1-5-21-3292518850-759306849-2421569196-1000\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\8b8bdc00_0]
@="{0.0.0.00000000}.{37bbcb30-901f-4db6-b672-5702c2dc8c5f}|\Device\HarddiskVolume2\Program Files (x86)\Pro PC Cleaner\ProPCCleaner.exe%b{00000000-0000-0000-0000-000000000000}"

-= EOF =-

Share this post


Link to post
Share on other sites

Hi,

Step 1

frst.pngfrstfix.png

Press thew7.png + R on your keyboard at the same time. Type notepad and click OK.

  • Copy the entire content of the codebox below and paste into the notepad document:

    "C:\Users\HP\AppData\Roaming\Rainmaker Software Group LLC.​"
  • Click File, Save As and type fixlist.txt as the File Name.
Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!
  • Right-click on FRST.gif icon and select RunAsAdmin.jpg Run as Administrator to start the tool.

    (XP users click run after receipt of Windows Security Warning - Open File).

  • Press the Fix button just once and wait.
  • If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
  • When finished FRST will generate a log on the Desktop, called Fixlog.txt.
Please post it to your reply.

Share this post


Link to post
Share on other sites

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 20-04-2015
Ran by HP at 2015-04-25 10:26:08 Run:7
Running from C:\Users\HP\Desktop
Loaded Profiles: HP (Available profiles: HP)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
"C:\Users\HP\AppData\Roaming\Rainmaker Software Group LLC.?"
*****************


"C:\Users\HP\AppData\Roaming\Rainmaker Software Group LLC.?" directory move:

Could not move "C:\Users\HP\AppData\Roaming\Rainmaker Software Group LLC.?" directory. => Scheduled to move on reboot.


=> Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2015-04-25 10:27:32)<=

"C:\Users\HP\AppData\Roaming\Rainmaker Software Group LLC.?" => Directory could not move.

==== End of Fixlog 10:27:32 ====

Share this post


Link to post
Share on other sites

Step 1

frst.pngfrstfix.png

Press thew7.png + R on your keyboard at the same time. Type notepad and click OK.

  • Copy the entire content of the codebox below and paste into the notepad document:
    Folder: "C:\Users\HP\AppData\Roaming\Rainmaker Software Group LLC."
  • Click File, Save As and type fixlist.txt as the File Name.

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

  • Right-click on FRST.gif icon and select RunAsAdmin.jpg Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • Press the Fix button just once and wait.
  • If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
  • When finished FRST will generate a log on the Desktop, called Fixlog.txt.

Please post it to your reply.

Share this post


Link to post
Share on other sites

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 20-04-2015
Ran by HP at 2015-04-25 10:35:55 Run:8
Running from C:\Users\HP\Desktop
Loaded Profiles: HP (Available profiles: HP)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Folder: "C:\Users\HP\AppData\Roaming\Rainmaker Software Group LLC."
*****************


========================= Folder: "C:\Users\HP\AppData\Roaming\Rainmaker Software Group LLC." ========================

Directory Not Found

==== End of Fixlog 10:35:55 ====

Share this post


Link to post
Share on other sites

Please navigate to "C:\Users\HP\AppData\Roaming\Rainmaker Software Group LLC." using this way:
 

Step 1

Click hidden2.png
In the Start Search box, type %Appdata% and delete the PC Cleaner folder manually.

Share this post


Link to post
Share on other sites

It's good to hear that your problems appear to be solved.

That's it! abklatsch.gif
Your logs look clean to me at the moment. :thumbup2:
We're gonna clean up everything now, close security holes on your computer and in the end I'll provide you with a list of security tips so you hopefully will not need our help anymore in the future.


My help is free for everybody, however...
If I have helped you fix your PC, then please consider donating to continue the fight against malware: btn_donate_SM.gif
Thank you!


Clean Upcleanupm.PNG

Now we remove all the tools we used (including their logs and quarantine folders), restore your settings and delete old and infected system restorepoints:

  • You can uninstall programs that you had to install (e.g. MBAM or ESET Onlinescanner) in the control panel if you so wish.
  • Download delfix.pngDelFix (by Xplode) and save it to your Desktop.
    • Close all running programs and start delfix.exe.
    • Make sure that all available options are checked.
    • Click on Run
    • DelFix should remove all our tools and delete itself afterwards. I don't need the log file.
  • If there is still something left you can delete it manually.

Closing security holes

Many infections happen via drive-by downloads that run unnoticed in the background while the user visits an infected website. To achieve this malware exploits security holes in installed software (e.g. browser or its plugins). Older versions of such software often have lots of known exploitable holes. Therefore it's very important to always keep your software up-to-date.
The following software is outdated:

 

Java 8 Update 31

 

Tips

I recommend to read and follow the "16 simple and easy ways to keep your computer safe and secure on the Internet" (Link) by Lawrence Abrams.

Share this post


Link to post
Share on other sites

Glad we could help. :)

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Share this post


Link to post
Share on other sites
Guest
This topic is now closed to further replies.

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.