Staff jboursier Posted July 20, 2017 Staff ID:1144582 Share Posted July 20, 2017 @cene Please download the Farbar Recovery Scan Tool and save it to your desktop. Double-click to run it. When the tool opens, click Yes to disclaimer. Press the Scan button. It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply. The first time the tool is run, it also makes another log (Addition.txt). If you've, run the tool before you need to place a check mark here. Please attach the Additions.txt log to your reply as well. Link to post Share on other sites More sharing options...
cene Posted July 20, 2017 Author ID:1144584 Share Posted July 20, 2017 fr33tux, problem.... thanks Link to post Share on other sites More sharing options...
Staff jboursier Posted July 20, 2017 Staff ID:1144586 Share Posted July 20, 2017 @ceneOk, no worries. Please use https://downloads.malwarebytes.org/file/frst64 instead. Link to post Share on other sites More sharing options...
cene Posted July 20, 2017 Author ID:1144588 Share Posted July 20, 2017 Link to post Share on other sites More sharing options...
Staff jboursier Posted July 20, 2017 Staff ID:1144589 Share Posted July 20, 2017 Hm, it seems my link was corrupted. I meant this one: http://downloads.malwarebytes.org/file/frst64 Link to post Share on other sites More sharing options...
cene Posted July 20, 2017 Author ID:1144591 Share Posted July 20, 2017 fr33tux, ok Addition.txt FRST.txt Link to post Share on other sites More sharing options...
Staff jboursier Posted July 20, 2017 Staff ID:1144599 Share Posted July 20, 2017 Thanks. 1) Download fixlist.txt file and save it to the Desktop. NOTE. It's important that both files, FRST64 and fixlist.txt are in the same location or the fix will not work. NOTICE: This script was written specifically for @cene, for use on that particular machine. Running this on another machine may cause damage to your operating system. Run FRST/FRST64 and press the Fix button just once and wait. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run. When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply. Link to post Share on other sites More sharing options...
cene Posted July 20, 2017 Author ID:1144602 Share Posted July 20, 2017 fr33tux, maybe I did not understand but the link does not work Link to post Share on other sites More sharing options...
Staff jboursier Posted July 20, 2017 Staff ID:1144606 Share Posted July 20, 2017 Hello, No worries! Please copy pasthe the following lines into a "fixlist.txt" file as explained above: CreateRestorePoint: CloseProcesses: RemoveProxy: EmptyTemp: Link to post Share on other sites More sharing options...
cene Posted July 20, 2017 Author ID:1144612 Share Posted July 20, 2017 I apologize, but I do not understand how to create the file "fixlist.txt". With notepad, in a file that will name "fixlist.txt"? Link to post Share on other sites More sharing options...
cward Posted July 20, 2017 ID:1144613 Share Posted July 20, 2017 I have Pup.Optional.Legacy as well.... it keeps coming up when I use adwcleaner... I have the newest version.. 7, something; and I just bought the premium Malwarebytes... and it says no THREATS..... what gives? I tried to read the above... but I have no idea what any of you are talking about. Is malwarebytes just another scam? Link to post Share on other sites More sharing options...
Staff jboursier Posted July 20, 2017 Staff ID:1144617 Share Posted July 20, 2017 @cward 10 minutes ago, cward said: Is malwarebytes just another scam? No. Also, please do not post in someone else's topic. I've created yours here. @ceneCorrect! Save it at the same location that frst64.exe is. Link to post Share on other sites More sharing options...
cene Posted July 20, 2017 Author ID:1144618 Share Posted July 20, 2017 fr33tux, in the meantime, waiting for your kind reply, you can exclude a hacking problem? Link to post Share on other sites More sharing options...
Staff jboursier Posted July 20, 2017 Staff ID:1144619 Share Posted July 20, 2017 3 minutes ago, fr33tux said: @ceneCorrect! Save it at the same location that frst64.exe is. I've answered in my last message 3 minutes ago, cene said: you can exclude a hacking problem? Yes, definitively. The problem is that there is a network issue somewhere between you and the update servers, which make the update mechanism failing (so you still get the FPs fixed a few days ago). Link to post Share on other sites More sharing options...
cene Posted July 20, 2017 Author ID:1144624 Share Posted July 20, 2017 fr33tux, files fixlog.txt, attached. thanks Fixlog.txt Link to post Share on other sites More sharing options...
Staff jboursier Posted July 20, 2017 Staff ID:1144649 Share Posted July 20, 2017 Thanks! Can you retry with AdwCleaner now? It should be much better. Please provide the generated logfile at the end. Link to post Share on other sites More sharing options...
cene Posted July 21, 2017 Author ID:1144728 Share Posted July 21, 2017 fr33tux , yes, now it's OK. Question by an ignorant person: with the procedures you have shown me, have any changes been made to my computer? Can I be quiet? Is everything safe? Many thanks! AdwCleaner[S400].txt Link to post Share on other sites More sharing options...
Staff jboursier Posted July 21, 2017 Staff ID:1144839 Share Posted July 21, 2017 Hello, @cene Yes, you're all set! Link to post Share on other sites More sharing options...
Menago Posted July 22, 2017 ID:1145022 Share Posted July 22, 2017 Hey is ok or i need to do something Link to post Share on other sites More sharing options...
MKDB Posted July 22, 2017 ID:1145077 Share Posted July 22, 2017 4 hours ago, Menago said: Hey is ok or i need to do something That's a bug in CHR module, already reported by me. You should NOT do anything here. fr33tux is working to fix it. Link to post Share on other sites More sharing options...
Vegvisir Posted July 22, 2017 ID:1145093 Share Posted July 22, 2017 Hello everyone Since I downloaded the latest version of AdwCleaner it started detecting this one threat in registry: ***** [ Registry ] ***** PUP.Optional.Legacy, [Data] - HKLM\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Interfaces | [208.67.222.220,208.67.220.220] It seemed to me that it might be a legit service but my knowledge is not extensive enough to make an informed choice. I would be thankful if you could please tell me if this is a false positive or should I proceed with deleting it. Link to post Share on other sites More sharing options...
Staff jboursier Posted July 23, 2017 Staff ID:1145120 Share Posted July 23, 2017 Hello, @Vegvisir Do you use OpenDNS DNS, or is it unknown to you? Link to post Share on other sites More sharing options...
Vegvisir Posted July 23, 2017 ID:1145205 Share Posted July 23, 2017 Thank you for your answer @fr33tux. I checked and it seems that my DNS settings are set to use 208.67.222.220 and 208.67.220.220 that belong to OpenDNS. I remember that I had some problem with Internet connection couple of years ago so I might have switched manually to OpenDNS at the time. Link to post Share on other sites More sharing options...
Staff jboursier Posted July 23, 2017 Staff ID:1145208 Share Posted July 23, 2017 Ok, thanks - I'm working on it. Link to post Share on other sites More sharing options...
Nox Posted July 23, 2017 ID:1145361 Share Posted July 23, 2017 Hello, I have the same issue in the new version. ***** [ Registry ] ***** PUP.Optional.Legacy, [Data] - HKLM\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Interfaces | [8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1] I only use the google DNS: Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now