Jump to content

Adware.Agent.SFP.Generic / SOUNDFLOWPICKER.EXE


Go to solution Solved by Maurice Naggar,

Recommended Posts

Hello @TatianaBio21    :welcome:

My name is Maurice.  I will be guiding you.   Please follow my guidance.  I will help to get rid of traces of SOUNDFLOWPICKER

Here below is a custom run intended to quash it.  Please take time to read carefully & apply all directions below.

If you have a question, stop and ask me first.

[    1    ]

As a next basic step, Please  set File Explorer to SHOW ALL folders, all files, including Hidden ones.  Use OPTION ONE or TWO of this article

https://www.tenforums.com/tutorials/7078-turn-off-show-all-folders-windows-10-navigation-pane.html

[    2    ]

We will use FRST64.exe  on Desktop folder to run a custom script.    The system will be rebooted after the script has run.

This custom script is for  TatianaBio21  only / for this machine only.

 

This custom script has some specific things, plus some general aspect to help the system overall.

NOTE-1:  This script will  run a scan using System File Checker to check that all Microsoft operating system files are valid and not corrupt and attempt to correct any invalid files.  It will rebuild the Winsock.  It will run the Windows DISM tool to check the system. It is also intended to run a Microsoft Defender antivirus scan.

 

  • Please be sure to Close any open work files, documents,¬† any apps you started yourself¬† before starting this.

 

  • If there are any CD / DVD / or USB-flash-thumb or USB-storage drives attached,¬† please disconnect any of those.
  • Please save the (attached file named) FIXLIST.txt ¬† to the¬† ¬†user Desktop¬† folder¬† ¬†

 

Fixlist.txt


Start the Windows Explorer and then, to the Desktop   folder.


RIGHT click on  FRST64.exe    and select RUN as Administrator and allow it to proceed.  Reply YES when prompted to allow to run.
  to run the tool. If the tool warns you the version is outdated, please download and run the updated version.
IF Windows prompts you about running this, select YES to allow it to proceed.

  • IF you get a block message from Windows about this tool......

               click line More info information on that screen
               and click button Run anyway on next screen.

  • on the FRST window:

Click the Fix button just once, and wait.

frst-fix.jpg.f6a25291b39a03d418acc9a3b7136900.jpg

 

PLEASE have lots and lots of patience when this starts. You will see a green progress bar start. Lots of patience. 
If you receive a message that a reboot is required, please make sure you allow it to restart normally.
The tool will complete its run after restart.
When finished, the tool will make a log ( Fixlog.txt) in the same location from where it was run.

Please attach the FIXLOG.txt with your next reply later, at your next opportunity   


We will do more after this.  Persistence & patience are called for here.

Stick with me because there will be more for later.

  • Thanks 1
Link to post
Share on other sites

  • Solution

Thank you for the report.

I have read the report.  It looks as if the run went over 60 minutes in run time and so was then ended because it exceeded the time limit.

We need to run the remaining parts of the task.   This run will be started in the same way.  Except for the new script, attached below.

First delete the old file named Fixlist.txt  on the DESKTOP 

 

We will use FRST64.exe  on Desktop folder to run a custom script.    The system will be rebooted after the script has run.

This custom script is for  TatianaBio21  only / for this machine only.

  • Please be sure to Close any open work files, documents,¬† any apps you started yourself¬† before starting this.

 

  • If there are any CD / DVD / or USB-flash-thumb or USB-storage drives attached,¬† please disconnect any of those.
  • Please save the (attached file named) FIXLIST.txt ¬† to the¬† ¬†user Desktop¬† folder

Fixlist.txt


Start the Windows Explorer and then, to the Desktop   folder.


RIGHT click on  FRST64.exe    and select RUN as Administrator and allow it to proceed.  Reply YES when prompted to allow to run.
  to run the tool. If the tool warns you the version is outdated, please download and run the updated version.
IF Windows prompts you about running this, select YES to allow it to proceed.

  • IF you get a block message from Windows about this tool......

               click line More info information on that screen
               and click button Run anyway on next screen.

  • on the FRST window:

Click the Fix button just once, and wait.

frst-fix.jpg.f6a25291b39a03d418acc9a3b7136900.jpg

 

PLEASE have lots and lots of patience when this starts. You will see a green progress bar start. Lots of patience. 
If you receive a message that a reboot is required, please make sure you allow it to restart normally.
The tool will complete its run after restart.
When finished, the tool will make a log ( Fixlog.txt) in the same location from where it was run.

Please attach the FIXLOG.txt with your next reply later, at your next opportunity   


We will do more after this.  Persistence & patience are called for here.

Stick with me because there will be more for later.

  • Thanks 1
Link to post
Share on other sites

Thank you for that run report.    ^_^

The next steps I suggest to be done is a Update run for Malwarebytes for Windows, then a new special scan.

Start Malwarebytes for Windows.

  1. Click Settings.
  2. In the General tab,    click on "Check for Updates " button.   
  3. Watch & follow all prompts. 

  4. Then click the Security tab.  Scroll down and lets be sure the line in SCAN OPTIONs for 

"Scan for rootkits" is ON¬†ūüĎą¬†¬†¬†Click it to get it ON if it does not show a blue-color .

 

Next, click the small x on the Settings line to go to the main Malwarebytes Window.   Next click the blue button marked Scan.

 

When the scan phase is done, be real sure you Review and have all detected lines items check-marked on each line on the left. That too is very critical.

>>>>>>¬†¬†¬† ¬†¬†ūüĎȬ†¬† ¬†¬† You can actually click¬†the topmost¬†left ¬†check-box ¬†on the very top¬†line to¬†get ALL lines ¬†ticked ¬† ( all selected).¬†¬†¬†¬†¬†¬†¬†¬† <<<<¬†¬†¬†¬†¬†ūüíĘ

MB4_scan_tick_ALL.jpg.d04ef98c885b4f44f51bfe735922fba7.jpg

 

Please double verify you have that TOP  check-box tick marked.   and that then, all lines have a tick-mark

 

Then click on Quarantine  button.

MB4_scan_all_Quarantine.jpg.8639e1dfc2301bc6d60a8cfb3c339241.jpg

 


Then, locate the Scan run report;  export out a copy;  & then attach in with your  reply.
See https://support.malwarebytes.com/hc/en-us/articles/360038479194-View-Reports-and-History-in-Malwarebytes-for-Windows-v4

 

  • Thanks 1
Link to post
Share on other sites

  • AdvancedSetup changed the title to Adware.Agent.SFP.Generic / SOUNDFLOWPICKER.EXE

Yaay !  That is great.  Thanks.    :D

Let's do one scan with Malwarebytes Adwcleaner to check for adwares. Just before pressing that "scan" button, be sure that Chrome & Edge, or other web browser are Closed.

It will not take much time,

First download & save it

https://support.malwarebytes.com/hc/en-us/articles/360038520054-Download-and-install-Malwarebytes-AdwCleaner

 

Then be sure to close all web browsers.

Then go to where the EXE file is saved. Start Adwcleaner.  Then do a scan with Adwcleaner

https://support.malwarebytes.com/hc/en-us/articles/360038520114-Malwarebytes-AdwCleaner-scan-and-clean

Attach the clean log.   and let me know, How is this pc doing now, overall?

  • Thanks 1
Link to post
Share on other sites

Hi.   :D

You are very welcome. I am glad to have worked with you.

We can proceed with cleanup of tools we used.

To remove the FRST64 tool & its work files, do this. Go to your Desktop folder. Do a RIGHT-click on FRST64.exe & select RENAME & then change it to

UNINSTALL.exe

.
Then run that ( double click on it) to begin the cleanup process.

 

Any other download file I had you download, you may delete. I wish you all the best. Stay safe.     :cool:

Sincerely.

Maurice

  • Thanks 1
Link to post
Share on other sites

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Please review the following for Tips to help protect from infection

Thank you

 

 

  • Thanks 1
Link to post
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.