Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

tons of junk on parents computer


  • Please log in to reply
5 replies to this topic

#1 likuid99

likuid99

  • Members
  • 49 posts
  • OFFLINE
  •  
  • Local time:05:23 PM

Posted 16 March 2014 - 03:58 PM

Windows 7 64x

AMD E1-1200 APU with Radeon HD Graphics 1.40Ghz

4.00GB RAM

 

This pc is one my mom purchased from Office Depot or the like, It is a Toshiba and has a ton of Toshiba programs loaded on it, and I am not sure which ones I can remove.

Mcafee antivirus and firewall are installed.

Tons of pop ups, generally slow, and has a hard time showing video.

I removed everything I could find in the programs list that was just junk. Please help me clean this pc up so it is usable.

Thanks



BC AdBot (Login to Remove)

 


#2 buddy215

buddy215

  • Moderator
  • 13,099 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:04:23 PM

Posted 16 March 2014 - 06:12 PM

If the popups are from McAfee firewall, for example, then click on their icon and usually there is a setting to change to show such as every time

they block something.

If the popups are for ads then you can use the programs below to find and remove. It's a good idea use them on a new computer...

 

download AdwCleaner to your desktop.
 Run adwcleaner.exe

  • Hit Scan and wait for the scan to finish.
  • Confirm the message but don´t uncheck anything.
  • Hit Clean
  • When the run is finished, it will open up a text file
  • Please post its contents in your next post
  • You´ll find the log file at C:\AdwCleaner[S1].txt, too

download Junkware Removal Tool to your desktop.

  • Shut down your protection software now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next post.

As far as which of the manufacturer's software that is safe to remove, it would be best to search for each item and then decide. Some of those will

be to your benefit to keep. Others, such as games or some photo albums, etc. are for you decide whether to keep.

 

A suggestion....you will likely want to install some of the more common programs. Almost all the free ones come with adware. Check here Ninite - Install or Update Multiple Apps at Once

first as the programs listed at Ninite are adware free.

 

If you don't intend to keep McAfee, then there are free antivirus programs such as Avast.

McAfee Removal Tool - McAfee Uninstaller


“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#3 likuid99

likuid99
  • Topic Starter

  • Members
  • 49 posts
  • OFFLINE
  •  
  • Local time:05:23 PM

Posted 16 March 2014 - 07:54 PM

# AdwCleaner v3.022 - Report created 16/03/2014 at 18:59:57
# Updated 13/03/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : user - USER-PC
# Running from : C:\Users\user\Downloads\adwcleaner.exe
# Option : Clean
 
***** [ Services ] *****
 
 
***** [ Files / Folders ] *****
 
Folder Deleted : C:\AI_RecycleBin
Folder Deleted : C:\SearchProtect
Folder Deleted : C:\ProgramData\apn
Folder Deleted : C:\Program Files (x86)\Conduit
Folder Deleted : C:\Program Files (x86)\SingAlong
Folder Deleted : C:\windows\SysWOW64\AI_RecycleBin
Folder Deleted : C:\users\user\AppData\Local\Conduit
Folder Deleted : C:\users\user\AppData\Local\SwvUpdater
Folder Deleted : C:\users\user\AppData\LocalLow\Conduit
Folder Deleted : C:\users\user\AppData\LocalLow\PriceGong
Folder Deleted : C:\users\user\AppData\Roaming\PerformerSoft
Folder Deleted : C:\users\user\AppData\Roaming\SearchProtect
Folder Deleted : C:\users\user\AppData\Roaming\strongvault
File Deleted : C:\END
File Deleted : C:\windows\System32\roboot64.exe
File Deleted : C:\users\user\AppData\Local\Temp\Uninstall.exe
 
***** [ Shortcuts ] *****
 
 
***** [ Registry ] *****
 
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3289847
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{72D89EBF-0C5D-4190-91FD-398E45F1D007}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{058F0E48-61CA-4964-9FBA-1978A1BB060D}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{18F33C35-8EF2-40D7-8BA4-932B0121B472}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{408CFAD9-8F13-4747-8EC7-770A339C7237}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AF175732-0D59-716D-F757-9F1492D808D9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{07CAC314-E962-4F78-89AB-DD002F2490EE}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{44ED99E2-16A6-4B89-80D6-5B21CF42E78B}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A1E28287-1A31-4B0F-8D05-AA8C465D3C5A}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{44ED99E2-16A6-4B89-80D6-5B21CF42E78B}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Key Deleted : HKCU\Software\AppDataLow\Software\lyricsspeaker
Key Deleted : HKCU\Software\AppDataLow\Software\PriceGong
Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\Software\InstallIQ
Key Deleted : [x64] HKLM\SOFTWARE\DomaIQ
 
***** [ Browsers ] *****
 
-\\ Internet Explorer v10.0.9200.16798
 
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
 
-\\ Google Chrome v33.0.1750.117
 
[ File : C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
 
*************************
 
AdwCleaner[R0].txt - [5095 octets] - [16/03/2014 18:57:20]
AdwCleaner[S0].txt - [4848 octets] - [16/03/2014 18:59:57]
 
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [4908 octets] ##########
 
 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.2 (02.20.2014:1)
OS: Windows 7 Home Premium x64
Ran by user on Sun 03/16/2014 at 19:33:09.10
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 
~~~ Services
 
 
 
~~~ Registry Values
 
 
 
~~~ Registry Keys
 
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\dsiteproducts
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1BB8B3AE-757D-443F-B3A4-0629E709B0D9}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\strongvaultapp_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\strongvaultapp_rasmancs
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{293B1E3C-EDF7-4B01-A34B-DC4A3D071E98}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{784025FA-D525-4249-9678-7D345B72CD29}
 
 
 
~~~ Files
 
 
 
~~~ Folders
 
Successfully deleted: [Folder] "C:\ProgramData\strongvault online backup"
Successfully deleted: [Folder] "C:\Users\user\appdata\local\cre"
 
 
 
~~~ Event Viewer Logs were cleared
 
 
 
 
 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Sun 03/16/2014 at 19:49:56.10
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 


#4 buddy215

buddy215

  • Moderator
  • 13,099 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:04:23 PM

Posted 16 March 2014 - 08:47 PM

Well...that computer certainly had a ton of adware....most likely got there from installing free apps and browser add-ons. 

 

You should do another scan using this...Free Virus Scan | Online Virus Scanner from ESET

 

  • Turn off the real time scanner of any existing antivirus program while performing the online scan
  • Tick the box next to YES, I accept the Terms of Use.
  • Click Start
  • When asked, allow the activex control to install
  • Click Start
  • Click Scan
  • Wait for the scan to finish
  • If any threats were found, click the 'List of found threats' , then click Export to text file....
  • Save it to your desktop, then please copy and paste that log as a reply to this topic.

In your next post, tell me if you are seeing ads, browser misdirects or any other problem.

 

Use CCleaner to cleanup the temporary files, ad/ tracking cookies, logs, etc. Pay close attention during install and UNcheck any

offer of toolbars such as Yahoo. Use the default settings. No need to use the Registry Cleaning tool and it may cause a problem if you do.

If you check the other tools in CCleaner you will find the option to block programs from startup. Use it to block from startup such programs

as media players, Apple products, office programs, Java, etc. That will decrease boot time and those programs can be manually accessed when needed.

CCleaner - PC Optimization and Cleaning - Free Download


“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#5 likuid99

likuid99
  • Topic Starter

  • Members
  • 49 posts
  • OFFLINE
  •  
  • Local time:05:23 PM

Posted 17 March 2014 - 09:33 PM

C:\AdwCleaner\Quarantine\C\AI_RecycleBin\{9C94E780-AF17-49D0-8433-5AD59421341F}\3\Strongvault\StrongVaultApp.exe.vir MSIL/Adware.StrongVault.A application cleaned by deleting - quarantined
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AH1A1YL4\LyricsSpeaker_1060-1052_v122[1] multiple threats cleaned by deleting - quarantined
C:\Users\user\AppData\Local\Temp\LyrcStmp.exe multiple threats cleaned by deleting - quarantined
C:\Users\user\Downloads\Chrome_Setup.exe Win32/AdWare.iBryte.S application cleaned by deleting - quarantined
C:\Users\user\Downloads\Flash_Player_Pro.exe a variant of Win32/AdWare.iBryte.K.gen application cleaned by deleting - quarantined
C:\Users\user\Downloads\Player-Chrome (1).exe Win32/AdWare.iBryte.S application cleaned by deleting - quarantined
C:\Users\user\Downloads\Player-Chrome (2).exe Win32/AdWare.iBryte.S application cleaned by deleting - quarantined
C:\Users\user\Downloads\Player-Chrome.exe Win32/AdWare.iBryte.S application cleaned by deleting - quarantined
 
I am not getting pop ups now when I open chrome. I removed the 5 or so extensions that were all added by a 3rd party and reset to default browser settings before I posted on bleepingcomputer. 

Edited by likuid99, 17 March 2014 - 09:36 PM.


#6 buddy215

buddy215

  • Moderator
  • 13,099 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:04:23 PM

Posted 18 March 2014 - 05:37 AM

You can block the third party ad/ tracking cookies from installing on the computer by following the directions in the link below.

Disable third-party cookies in IE, Firefox, and Google Chrome | How To - CNET

 

Once you have blocked the cookies from installing, use CCleaner again to remove the existing ad/ tracking cookies.

 

Unless you know of another problem, I'd say you are good to go.

 

If you want to install a media player on that computer then VLC is a very good choice. It is available for download from the Ninite link I posted in my first response.


“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users