"DDA driver was not installed"

[killingerr]

here was the last successful scan

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 9/11/17
Scan Time: 2:11 PM
Log File: 6646353e-972d-11e7-b46f-f832e47285d7.json
Administrator: Yes

-Software Information-
Version: 3.2.2.2018
Components Version: 1.0.188
Update Package Version: 1.0.2777
License: Trial

-System Information-
OS: Windows 10 (Build 10586.1045)
CPU: x64
File System: NTFS
User: DESKTOP-MFHTHMM\Tony

-Scan Summary-
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 362905
Threats Detected: 0
(No malicious items detected)
Threats Quarantined: 0
(No malicious items detected)
Time Elapsed: 0 min, 12 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 0
(No malicious items detected)

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 0
(No malicious items detected)

File: 0
(No malicious items detected)

Physical Sector: 0
(No malicious items detected)

(end)

[kevinf80]

Not sure why that should happen, unless we still have infection on your system.... Lets try clean install of Malwarebytes:

Totally Remove Malwarebytes from your system: Download the latest version of Malwarebytes cleanup tool from here: https://downloads.malwarebytes.com/file/mb_clean and save to your Desktop.. If applicable, backup your Malwarebytes license key information and deactivate the product. Close all open applications and deactivate Malwarebytes <---- Very important, do not miss that step To deactivate Malwarebytes: Right click on tray icon, from the opened list select "Quit Malwarebytes" an UAC alert will open, select "Yes" to deactivate Malwarebytes...   Double-click mb-clean.exe to run it A prompt to confirm the cleanup will appear, select Yes or No Yes - will proceed with the cleanup process <---- Select this option to start the tool No - will exit the utility The Utility will launch a Command Prompt window which will disappear once the the cleanup process completes. Once completed, a log file ("mb-cleanresult.txt") will be on your desktop and you'll be prompted to reboot We recommend an immediate reboot <--- Do Not miss out this step Suppressing the reboot may result in an incomplete cleanup Upon reboot Malwarebytes will be totally removed from your system To re-install Malwarebytes: Download Malwarebytes version 3 from the following link: https://www.malwarebytes.com/mwb-download/thankyou/   Double click on the installer and follow the prompts. If necessary select the Blue Help tab for video instructions.... When the install completes and is updated do the following: Open Malwarebytes, select > "settings" > "protection tab" Scroll down to "Scan Options" ensure Scan for Rootkits and Scan within Archives are both on.... Go back to "DashBoard" select the Blue "Scan Now" tab...... When the scan completes deal with any found entries... Then select "Export Summary" then "Text File (*.txt)" name that log and save , you can copy or attach that to your reply... If you have lost the activation licence key information it can be located here: http://www.cleverbridge.com/342/?scope=cusecolp

 

[killingerr]

Still have this

Sac 230pm.txt

[kevinf80]

That entry is contained in FRST quarantine, is no problem for you... How is your system responding, any issues or concerns...

One more scan, this will be quick...

Download Microsoft's " Malicious Software Removal Tool" and save direct to the desktop Ensure to get the correct version for your system.... 32 Bit version: https://www.microsoft.com/downloads/en/confirmation.aspx?FamilyId=AD724AE0-E72D-4F54-9AB3-75B8EB148356&displaylang=en 64 Bit version: https://www.microsoft.com/downloads/en/confirmation.aspx?FamilyId=585D2BDE-367F-495E-94E7-6349F4EFFC74&displaylang=en Right click on the Tool, select “Run as Administrator” the tool will expand to the options Window In the "Scan Type" window, select Quick Scan Perform a scan and Click Finish when the scan is done. Retrieve the MSRT log as follows, and post it in your next reply: 1) Select the Windows key and R key together to open the "Run" function 2) Type or Copy/Paste the following command to the "Run Line" and Press Enter: notepad c:\windows\debug\mrt.log The log will include log details for each time MSRT has run, we only need the most recent log by date and time....

[killingerr]

---------------------------------------------------------------------------------------
Microsoft Windows Malicious Software Removal Tool v5.51, August 2017 (build 5.51.14100.0)
Started On Thu Aug 10 22:38:46 2017

Engine: 1.1.14003.0
Signatures: 1.249.316.0
Run Mode: Scan Run From Windows Update

Results Summary:
----------------
No infection found.
Successfully Submitted Heartbeat Report
Microsoft Windows Malicious Software Removal Tool Finished On Thu Aug 10 22:39:06 2017

Return code: 0 (0x0)

---------------------------------------------------------------------------------------
Microsoft Windows Malicious Software Removal Tool v5.51, August 2017 (build 5.51.14100.0)
Started On Mon Sep 11 14:51:34 2017

Engine: 1.1.14003.0
Signatures: 1.249.316.0
Run Mode: Interactive Graphical Mode

Results Summary:
----------------
No infection found.
Successfully Submitted MAPS Report
Successfully Submitted Heartbeat Report
Microsoft Windows Malicious Software Removal Tool Finished On Mon Sep 11 14:52:47 2017

Return code: 0 (0x0)
 

[kevinf80]

How is your PC behaving, any issues or concerns...?

[killingerr]

That Adware.5hex file bothers me. What is that?

[kevinf80]

That type of infection or adware is usually causing advertizing problems to your browsers, maybe redirects. Is a way of generating revenue for the malware writer... It can also harvest information from your system, specifically any that has financial implications...

Do you not yet feel your system is secure, do you want to maybe run an indepth AV scan...?

[killingerr]

Well that file keeps showing up in the scans

 

[kevinf80]

Have you ran a recent scan that shows it..?

[killingerr]

When I do a custom scan on my C:\ it shows up, not on the default threat scan.

 

[kevinf80]

Ok lets run indepth scan with ESET, this may take a few hours, is very thorough but well worth doing:

Go here and click 'SCAN NOW' under 'ESET Online Scanner' save to your Desktop. Turn off the real-time scanner of any existing antivirus program before performing the online scan. Here's how Right click on and select "Run as Administrator" In the new Window accept the terms of service In the new Window select "Enable detection of potentially unwanted applictions" then expand "Advanced Settings" In the new Window checkmark (tick) the entries as shown, make sure "Clean threats automatically" is not checkmarked. Now select "Scan" In the new Window new virus database signatures will download, Do Not Select Stop The Window will progress showing the scan in action.... In the new Window if no threats are found, select "Delete applications data on close" then select "Finish" no log is produced, confirm that in your reply... If threats are found the following Window will open: Click on "Select All" then "Save to Text file" name and save that file, attach to your reply. Now select "Do not clean" and then close out....   Is late for me now will catch up tomorrow...

 

[killingerr]

Here is the Eset log

esetScan.txt

[kevinf80]

The issues I can deal with are Chrome extensions, the others you will have to clear yourself. So you can empty the recycle bin for G:\ drive, now you have to decide on the references to programs/files you have downloaded yourself, I strongly recommend that you remove them, many infections find there way onto computers vis P2P conduits....

For Chrome I`d like you to complete a clean reinstall as follows:

If your Chrome Bookmarks are important do this first: Go to this link: http://www.wikihow.com/Export-Bookmarks-from-Chrome follow the instructions and Export your Bookmarks from Chrome, save to your Desktop or similar. Note the instructions can also be used to Import the bookmarks..... Continue for a clean install: Download Chrome installer and save to install later: https://www.google.com/intl/en_uk/chrome/browser/desktop/index.html https://www.google.com/intl/en_usa/chrome/browser/desktop/index.html Remove all synced data from Chrome go here: https://support.google.com/chrome/answer/6386691?hl=en-GB follow those instructions... It is essntial that any/all synced data is removed when the browser is hijacked or exploited in anyway... Uninstall Chrome: https://support.google.com/chrome/answer/95319?hl=en-GB follow those instructions, ensure the option to "Also delete your browsing data" is selected. <<--- Very important!! Navigate to C:\Users\Your user name\Appdata\Local from that folder delete the folder named Google (you will need to show hidden files/folders to see the folder Appdata) For XP that will be My Computer > C:\ Documents and Settings\Your User Name\Application Data\Roaming How to show hidden files and folders for windows: http://www.howtogeek.com/howto/windows-vista/show-hidden-files-and-folders-in-windows-vista/ Install Google Chrome : Install Adblock Plus to Chrome: https://chrome.google.com/webstore/detail/adblock-plus/cfhdojbkjhnklbpkdaibdccddilifddb Install DrWeb Link Ant-virus Link Checker: https://chrome.google.com/webstore/detail/drweb-anti-virus-link-che/aleggpabliehgbeagmfhnodcijcmbonb?hl=en   Let me know if you have any remaining issues or concerns, if none i`ll give instructions to clean up..   Thank you,   Kevin

[kevinf80]

Do you still need help...?

[killingerr]

Hey Kevin sorry for the late response, work has been crazy.. I do, I will follow your instructions as soon as I can. Thank you.

[kevinf80]

Thanks for the update killingerr, catch up later.. Also let me know if there are any remaining issues or concerns...

Regards,

Kevin....

[kevinf80]

still with us killingerr...?

[killingerr]

Hey Kevin, so everything seems normal. I've done a scan and no threats. I appreciate the help. As far as the P2P files, I know the risk. I know exactly where the virus came from. Thank you again for the assistance.

[kevinf80]

Thanks for the update killinger,

If no issues/concerns run the following to clear up....

Navigate to and delete the esetonlinescanner directory from the following location: %userprofile%\appdata\local\eset Next, Uninstall Sophos AV http://www.askvg.com/how-to-completely-uninstall-remove-a-software-program-in-windows-without-using-3rd-party-software/ Next, Download "Delfix by Xplode" and save it to your desktop. Or use the following if first link is down: "Delfix link mirror" If your security program alerts to Delfix either, accept the alert or turn your security off. Double Click to start the program. If you are using Vista or higher, please right-click and choose run as administrator Make Sure the following items are checked:   Remove disinfection tools <----- this will remove tools we may have used. Purge System Restore <--- this will remove all previous and possibly exploited restore points, a new point relative to system status at present will be created. Reset system settings <--- this will reset any system settings back to default that were changed either by us during cleansing or malware/infection Now click on "Run" and wait patiently until the tool has completed. The tool will create a log when it has completed. We don't need you to post this. Any remnant files/logs from tools we have used can be deleted… Next, Read the following links to fully understand PC Security and Best Practices, you may find them useful.... Answers to Common Security Questions and best Practices Do I need a Registry Cleaner? Take care and surf safe Kevin...

[kevinf80]

Glad we could help. :)If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread. Thanks!