Jump to content

Recommended Posts

Great looks good and you're welcome.

 

At this time there are no more signs of an infection on your system.

However if you are still seeing any signs of an infection please let me know.

Let's go ahead and remove the tools and logs we've used during this process.

Most of the tools used are potentially dangerous to use unsupervised or if ran at the wrong time.

They are often updated daily so if you went to use them again in the future they would be outdated anyways.

The following procedures will implement some cleanup procedures to remove these tools.

 

bwebb7v.jpgDownload Delfix from here and save it to your desktop. (you may already have this)

  • Ensure Remove disinfection tools is checked.
  • Click the Run button.
  • Reboot

Any other programs or logs that are still remaining, you can manually delete. (right click.....Delete)

IE: RogueKiller.exe, RKreport.txt, RK_Quarantine folder, C:\FRST folder, FRST-OlderVersion folder, MBAR folder, etc....AdwCleaner > just run the program and click uninstall.

 

If there are any other left over Folders, Files, Logs then you can delete them on your own.

 

Please visit the following link to see how to delete old System Restore Points. Please delete all of them and create a new one at this time.

How to Delete System Protection Restore Points in Windows 7 and Windows 8

Remove all but the most recent Restore Point on Windows XP

As Java seems to get exploited on a regular basis I advise not using Java if possible but to at least disable java in your web browsers

How do I disable Java in my web browser? - Disable Java

A lot of reading here but if you take the time to read a bit of it you'll see why/how infections and general damage are so easily inflicted on the computer. There is also advice on how to prevent it and keep the system working well. Don't forget about good, solid backups of your data to an external drive that is not connected except when backing up your data. If you leave a backup drive connected and you do get infected it can easily damage, encrypt, delete, or corrupt your backups as well and then you'd lose all data.

Nothing is 100% bulletproof but with a little bit of education you can certainly swing things in your favor.

If you're not currently using Malwarebytes Premium then you may want to consider purchasing the product which can also help greatly reduce the risk of a future infection.

 

 

So, I used the Delfix tool (sorry that it took me so long) and it didn't do anything I think.

I runned the program, and it detected some programs, however, I didn't read the intruction of rebooting the sistem and I runned the tool again, then I

Link to post
Share on other sites

So, I used the Delfix tool (sorry that it took me so long) and it didn't do anything I think.

I runned the program, and it detected some programs, however, I didn't read the intruction of rebooting the sistem and I runned the tool again, then 

 

Sorry I clicked by mistake a key and the message was sended unfinished.

However, I restarted the PC and nothing got deleted, at least that's what seems, FRST stills there, Javara stills there and I think everything that showed on the log stills there.

I can't send you the log, because I didn't know I messed it up and I didn't do it right, so I didn't save it.

When I run the tool again, the log appears blank (I mean, it doesn't detect any programs installed).

Is possible to delete all the programs I installed during the malware removal manually or I needed the tool?

Link to post
Share on other sites

Sorry for the delay. I've been on vacation.

 

Most of the programs if left over can be manually deleted. Did you still need help with anything?

 

Thanks

 

Ron

I need help with a pair of things more.

First, you told me to reset all my browsers, but I didn't reset Steam's browser. I've searched some information and it uses WebKit and it seems I need to delete some folders, I'm not sure what folders though. Do you know how to reset Steam's browser?

Also, for some reasons after I installed the new version of MBAM (I desactivated the Firewall, closed all programs and turned off my Antivirus, but I didn't use the unistalling tool before installing the new version), the icon of the program doesn't show anymore, is this a normal visual error or not?

I'll leave images to show the "broken" icon.

And thanks for still helping me with those little problems.

Link to post
Share on other sites

Sorry for the delay. I've been on vacation.

 

Most of the programs if left over can be manually deleted. Did you still need help with anything?

 

Thanks

 

Ron

I need help with a pair of things more.

First, you told me to reset all my browsers, but I didn't reset Steam's browser. I've searched some information and it uses WebKit and it seems I need to delete some folders, I'm not sure what folder though. Do you know how to reset Steam's browser?

Also, for some reason after installing the new version of MBAM, the icon has dissapeared. I turned off the antivirus, closed all the programs and turned off my firewall, the only thing I didn't do is using the unistalling tool. Is this a normal visual error or not?

I'll leave images showing the error.

And thanks for still helping me with these little problems.

post-191765-0-37796700-1444910213_thumb.

post-191765-0-74785200-1444910217_thumb.

post-191765-0-39807800-1444910503_thumb.

post-191765-0-23127800-1444910506_thumb.

Link to post
Share on other sites

I need help with a pair of things more.

First, you told me to reset all my browsers, but I didn't reset Steam's browser. I've searched some information and it uses WebKit and it seems I need to delete some folders, I'm not sure what folders though. Do you know how to reset Steam's browser?

Also, for some reasons after I installed the new version of MBAM (I desactivated the Firewall, closed all programs and turned off my Antivirus, but I didn't use the unistalling tool before installing the new version), the icon of the program doesn't show anymore, is this a normal visual error or not?

I'll leave images to show the "broken" icon.

And thanks for still helping me with those little problems.

Sorry for double posting again... something went wrong while sending the message and I thought it didn't got send, so this happened, the same with the images.

Link to post
Share on other sites
  • Root Admin

The forum may have had an issue during your post.

 

As for the Steam Browser - I didn't know they even had one. I don't use Steam myself and see little need for most browsers beyond IE and Firefox. If you've reset the main ones that should be good enough.

 

If the MBAM program installation is giving you issues then I'd suggest a clean removal and reinstall.

 

Please uninstall your current version of MBAM and reinstall the latest version. MBAM Clean Removal Process 2x

 

Please try that and let me know.

 

Link to post
Share on other sites

The forum may have had an issue during your post.

 

As for the Steam Browser - I didn't know they even had one. I don't use Steam myself and see little need for most browsers beyond IE and Firefox. If you've reset the main ones that should be good enough.

 

If the MBAM program installation is giving you issues then I'd suggest a clean removal and reinstall.

 

Please uninstall your current version of MBAM and reinstall the latest version. MBAM Clean Removal Process 2x

 

Please try that and let me know.

So, the MBAM problem with the icon got resolved without doing nothing, it wasn't the first time it happens to me actually, and it always gets solved by just waiting.

Can you tell me which clean tools can't be removed manually, please?

And if you're curious, this is the Steam browser, it's simple in style and functions, but I suposse it can get hijacked too.

post-191765-0-51066900-1445186527_thumb.

Link to post
Share on other sites
  • Root Admin

Up to you which browser you use I'm just of the opinion that most are knock offs and are not needed and lack the proper resources to ensure security updates are taken care of for them.

As for removal of software anything that is left over from the scans should be able to be deleted manually.

What is left there that won't delete?

Link to post
Share on other sites

Up to you which browser you use I'm just of the opinion that most are knock offs and are not needed and lack the proper resources to ensure security updates are taken care of for them.

As for removal of software anything that is left over from the scans should be able to be deleted manually.

What is left there that won't delete?

The Steam browser is just there to use it while you're playing a game, is not an everyday use browser (unless you play a lot).

And I think everything is left, Delfix didn't do anything because probably of what I did.

Also, I just discovered a pair of days ago that when you told me to make every hidden file show, I just selected the 'Show hidden files and folders' option and I didn't unselect the 'Hide protected files' and 'Hide file extensions' options. I'm really sorry.

Would that have affect the malware removal at any point?

Link to post
Share on other sites
  • Root Admin

No. Please download a new fresh copy of Delfix. Then temporarily disable your antivirus and run the Delfix program again.

It only targets certain files and programs so if you have something left over it could be that it just does not target those items. It is a tool designed to help clean up the tools removed but it's not going to remove everything on it's own. Now that we're pretty much done you can set the folders back to hidden if you like.

Link to post
Share on other sites

No. Please download a new fresh copy of Delfix. Then temporarily disable your antivirus and run the Delfix program again.

It only targets certain files and programs so if you have something left over it could be that it just does not target those items. It is a tool designed to help clean up the tools removed but it's not going to remove everything on it's own. Now that we're pretty much done you can set the folders back to hidden if you like.

I did what you told me and it sort of work I think? It deleted the AdwCleaner folder I have (and the launcher I have in downloads) but the one I have in another folder with the rest of removal tools stills there, also, a lot more of tools are still there, I'll copy and paste the TXT file from Delfix.

Also, if you can, could you tell me what tools are left to delete?

 

Also, this is what I meant with the hidden files, this is the configuration I had during all the clean up, would that have affected the malware moval at some point?

 

Here's the log.

# DelFix v1.011 - Logfile created 22/10/2015 at 17:41:52
# Updated 18/08/2015 by Xplode
# Username : PAQUITO - PAQUITO-PC
# Operating System : Windows 7 Home Premium Service Pack 1 (32 bits)
 
~ Removing disinfection tools ...
 
Deleted : C:\AdwCleaner
Deleted : C:\Users\PAQUITO\Downloads\adwcleaner_5.014.exe
Deleted : HKLM\SOFTWARE\AdwCleaner
 
########## - EOF - ##########

post-191765-0-70540400-1445529411_thumb.

post-191765-0-06156600-1445529415_thumb.

Link to post
Share on other sites
  • Root Admin

No the tools would not care. Its for your own viewing purposes.

 

Just find any files that we used and delete them manually. If they won't delete then let me know. There is no way for me to tell what you have left without running maybe a new FRST scan

Link to post
Share on other sites

No the tools would not care. Its for your own viewing purposes.

 

Just find any files that we used and delete them manually. If they won't delete then let me know. There is no way for me to tell what you have left without running maybe a new FRST scan

I tried to find and delete all the files I remembered they existed, however I did a FRST scan to know if anything is missing, I'll attach the logs.

Also, it's me or the logs are now shorter? If that's the case, how do I solve it?

Addition.txt

FRST.txt

Link to post
Share on other sites
  • Root Admin

There is nothing really listed there that is an issue. I think you're probably just over complicating or thinking about this. The computer seems fine from the logs overall. It is not infected there are no specific files listed. Certainly nothing I'm seeing that would give trouble removing even if found.

 

I would not worry about the other browser unless it is giving you trouble.

 

Unless there is something else we should be done here.

 

Thank you

 

Ron

Link to post
Share on other sites

There is nothing really listed there that is an issue. I think you're probably just over complicating or thinking about this. The computer seems fine from the logs overall. It is not infected there are no specific files listed. Certainly nothing I'm seeing that would give trouble removing even if found.

 

I would not worry about the other browser unless it is giving you trouble.

 

Unless there is something else we should be done here.

 

Thank you

 

Ron

I sended you the logs to know if there was any tool left to remove.

Anyways, you're probably right with the infection thing, I'll do a full scan with every anti-malware or anti-spyrare I have to be totally sure and for the things I got left (the old program files and a little thing with Nvidia drivers), I have a thread on the Adlice forum if I need any help with them

Link to post
Share on other sites
  • Root Admin

And I said no. The logs are not showing any specific tool left to remove. I have helped 10 of thousands of users, it really is not that hard to remove the tools used. Delfix removes most of the main ones and the other typically may leave a text file here or there and that's about it.If you're really having that much trouble perhaps you can ask a friend, relative, or neighbor to assist you on the computer to remove any left over tools. Not sure why you keep scanning or wanting to scan. The logs are not indicating any infection. What are you seeing or what makes you think you are infected?

 

Thank you

Link to post
Share on other sites

And I said no. The logs are not showing any specific tool left to remove. I have helped 10 of thousands of users, it really is not that hard to remove the tools used. Delfix removes most of the main ones and the other typically may leave a text file here or there and that's about it.If you're really having that much trouble perhaps you can ask a friend, relative, or neighbor to assist you on the computer to remove any left over tools. Not sure why you keep scanning or wanting to scan. The logs are not indicating any infection. What are you seeing or what makes you think you are infected?

 

Thank you

What I see is that I'm really paranoid with all this stuff, I thought I was clean quite before I opened this thread and then I did a full, scan with MBAM and it detected 5 PUMs at once, so I prefer to be completely sure always.

Also, sorry for the tool removal thing.

Link to post
Share on other sites
  • Root Admin

On any given day there could easily be left over elements of some type of PUP that we add that removes some key, or file entry that possibly was not known at the time the original removal rules were made.

 

Please read the following to understand the complexity in 100% removal. The main culprit will have been removed to a point where it cannot harm your computer but it is possible that a reg entry or file could have been left over. Again something like that is common with all security software and not something to be concerned about really. If in doubt you can always post the log and ask but in most cases its just a residual left over piece.

 

The complexity of finding, preventing, and cleanup from malware
 

Thank you

Link to post
Share on other sites

On any given day there could easily be left over elements of some type of PUP that we add that removes some key, or file entry that possibly was not known at the time the original removal rules were made.

 

Please read the following to understand the complexity in 100% removal. The main culprit will have been removed to a point where it cannot harm your computer but it is possible that a reg entry or file could have been left over. Again something like that is common with all security software and not something to be concerned about really. If in doubt you can always post the log and ask but in most cases its just a residual left over piece.

 

The complexity of finding, preventing, and cleanup from malware

 

Thank you

Well if that's the case, I think we're done.

Steam's browser is acting a bit strange, when I'm watching a video it sometimes totally stops and I need to close the tab and open it again to make it work, but I'll wait some time to see if Steam fixes it.

Thanks a lot for helping me all this time.

Link to post
Share on other sites
  • Root Admin

Glad we could help. :)

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    No registered users viewing this page.

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.