Adware.Agent.SFP.Generic / SOUNDFLOWPICKER.EXE

[TatianaBio21]

Hello ! I'm new here. I have a file on my notebook that keeps returning when I delete it.
Could you help me, please ? I appreciate. 😉

(Its something called Soundflowpicker.exe) 

 

 

Addition.txt FRST.txt Desktop.txt AdwCleaner[S06].txt

[Maurice Naggar]

Hello @TatianaBio21    

My name is Maurice.  I will be guiding you.   Please follow my guidance.  I will help to get rid of traces of SOUNDFLOWPICKER

Here below is a custom run intended to quash it.  Please take time to read carefully & apply all directions below.

If you have a question, stop and ask me first.

[    1    ]

As a next basic step, Please  set File Explorer to SHOW ALL folders, all files, including Hidden ones.  Use OPTION ONE or TWO of this article

https://www.tenforums.com/tutorials/7078-turn-off-show-all-folders-windows-10-navigation-pane.html

[    2    ]

We will use FRST64.exe  on Desktop folder to run a custom script.    The system will be rebooted after the script has run.

This custom script is for  TatianaBio21  only / for this machine only.

 

This custom script has some specific things, plus some general aspect to help the system overall.

NOTE-1:  This script will  run a scan using System File Checker to check that all Microsoft operating system files are valid and not corrupt and attempt to correct any invalid files.  It will rebuild the Winsock.  It will run the Windows DISM tool to check the system. It is also intended to run a Microsoft Defender antivirus scan.

 

• Please be sure to Close any open work files, documents,  any apps you started yourself  before starting this.

 

• If there are any CD / DVD / or USB-flash-thumb or USB-storage drives attached,  please disconnect any of those.
• Please save the (attached file named) FIXLIST.txt   to the   user Desktop  folder   

 

Fixlist.txt

Start the Windows Explorer and then, to the Desktop   folder.

RIGHT click on  FRST64.exe    and select RUN as Administrator and allow it to proceed.  Reply YES when prompted to allow to run.
  to run the tool. If the tool warns you the version is outdated, please download and run the updated version.
IF Windows prompts you about running this, select YES to allow it to proceed.

• IF you get a block message from Windows about this tool......

               click line More info information on that screen
               and click button Run anyway on next screen.

• on the FRST window:

Click the Fix button just once, and wait.

 

PLEASE have lots and lots of patience when this starts. You will see a green progress bar start. Lots of patience. 
If you receive a message that a reboot is required, please make sure you allow it to restart normally.
The tool will complete its run after restart.
When finished, the tool will make a log ( Fixlog.txt) in the same location from where it was run.

Please attach the FIXLOG.txt with your next reply later, at your next opportunity   

We will do more after this.  Persistence & patience are called for here.

Stick with me because there will be more for later.

[TatianaBio21]

Here is the result: 

Fixlog.txt

[Maurice Naggar]

Thank you for the report.

I have read the report.  It looks as if the run went over 60 minutes in run time and so was then ended because it exceeded the time limit.

We need to run the remaining parts of the task.   This run will be started in the same way.  Except for the new script, attached below.

First delete the old file named Fixlist.txt  on the DESKTOP 

 

We will use FRST64.exe  on Desktop folder to run a custom script.    The system will be rebooted after the script has run.

This custom script is for  TatianaBio21  only / for this machine only.

• Please be sure to Close any open work files, documents,  any apps you started yourself  before starting this.

 

• If there are any CD / DVD / or USB-flash-thumb or USB-storage drives attached,  please disconnect any of those.
• Please save the (attached file named) FIXLIST.txt   to the   user Desktop  folder

Fixlist.txt

Start the Windows Explorer and then, to the Desktop   folder.

RIGHT click on  FRST64.exe    and select RUN as Administrator and allow it to proceed.  Reply YES when prompted to allow to run.
  to run the tool. If the tool warns you the version is outdated, please download and run the updated version.
IF Windows prompts you about running this, select YES to allow it to proceed.

• IF you get a block message from Windows about this tool......

               click line More info information on that screen
               and click button Run anyway on next screen.

• on the FRST window:

Click the Fix button just once, and wait.

 

PLEASE have lots and lots of patience when this starts. You will see a green progress bar start. Lots of patience. 
If you receive a message that a reboot is required, please make sure you allow it to restart normally.
The tool will complete its run after restart.
When finished, the tool will make a log ( Fixlog.txt) in the same location from where it was run.

Please attach the FIXLOG.txt with your next reply later, at your next opportunity   

We will do more after this.  Persistence & patience are called for here.

Stick with me because there will be more for later.

[TatianaBio21]

Done ;) 

Fixlog.txt

[Maurice Naggar]

Thank you for that run report.    

The next steps I suggest to be done is a Update run for Malwarebytes for Windows, then a new special scan.

Start Malwarebytes for Windows.

1. Click Settings.
2. In the General tab,    click on "Check for Updates " button.   

3. Watch & follow all prompts. 

4. Then click the Security tab.  Scroll down and lets be sure the line in SCAN OPTIONs for 

"Scan for rootkits" is ON 👈   Click it to get it ON if it does not show a blue-color .

 

Next, click the small x on the Settings line to go to the main Malwarebytes Window.   Next click the blue button marked Scan.

 

When the scan phase is done, be real sure you Review and have all detected lines items check-marked on each line on the left. That too is very critical.

>>>>>>      👉      You can actually click the topmost left  check-box  on the very top line to get ALL lines  ticked   ( all selected).         <<<<     💢

 

Please double verify you have that TOP  check-box tick marked.   and that then, all lines have a tick-mark

 

Then click on Quarantine  button.

 

Then, locate the Scan run report;  export out a copy;  & then attach in with your  reply.
See https://support.malwarebytes.com/hc/en-us/articles/360038479194-View-Reports-and-History-in-Malwarebytes-for-Windows-v4

 

[TatianaBio21]

Yaay !! MB found nothing !!! 👏🤸‍♀️

REPORT.txt

[Maurice Naggar]

Yaay !  That is great.  Thanks.    

Let's do one scan with Malwarebytes Adwcleaner to check for adwares. Just before pressing that "scan" button, be sure that Chrome & Edge, or other web browser are Closed.

It will not take much time,

First download & save it

https://support.malwarebytes.com/hc/en-us/articles/360038520054-Download-and-install-Malwarebytes-AdwCleaner

 

Then be sure to close all web browsers.

Then go to where the EXE file is saved. Start Adwcleaner.  Then do a scan with Adwcleaner

https://support.malwarebytes.com/hc/en-us/articles/360038520114-Malwarebytes-AdwCleaner-scan-and-clean

Attach the clean log.   and let me know, How is this pc doing now, overall?

[TatianaBio21]

Here you are ! 😉

AdwCleaner[S07].txt

[Maurice Naggar]

Thank you.  That report is all good.   How is your pc at this point ?   Are you needing other help?

[TatianaBio21]

Thank you so much ! I appreciate your help, attention and patience.

My pc is working very well ! 🙂😉

 

[Maurice Naggar]

Hi.   

You are very welcome. I am glad to have worked with you.

We can proceed with cleanup of tools we used.

To remove the FRST64 tool & its work files, do this. Go to your Desktop folder. Do a RIGHT-click on FRST64.exe & select RENAME & then change it to

UNINSTALL.exe

.
Then run that ( double click on it) to begin the cleanup process.

 

Any other download file I had you download, you may delete. I wish you all the best. Stay safe.     

Sincerely.

Maurice

[Maurice Naggar]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Please review the following for Tips to help protect from infection

Thank you