Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Floating Pop Up Disk Clean Up


  • Please log in to reply
18 replies to this topic

#1 ydelgado

ydelgado

  • Members
  • 32 posts
  • OFFLINE
  •  
  • Local time:12:44 AM

Posted 10 June 2014 - 08:26 AM

Hi 

 

I have windows 8.1 and I inadvertently downloaded IE and somehow must have also got some sort of spyware or virus. I have used Malware Bytes, Spybot Search and Destroy, Kaspersky, etc and have not been able to get rid of it. It comes up when the computer is idle and when you hover over it - it disappears. What can I do to get rid of it?

 

It appears to be from Microsoft but it is not. 

 

Thanks,

Yvette



BC AdBot (Login to Remove)

 


#2 kaz20

kaz20

  • Members
  • 165 posts
  • OFFLINE
  •  
  • Local time:12:44 AM

Posted 10 June 2014 - 08:54 AM

How did you download IE if it is already preloaded on your computer? Did you delete at one point?



#3 Kirbyofdeath

Kirbyofdeath

  • Members
  • 459 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Somewhere on Earth
  • Local time:11:44 PM

Posted 10 June 2014 - 09:08 AM

Please scan your computer with ESET OnlineScan

  • Hold down Control and click on this link to open ESET OnlineScan in a new window.
  •  
  • Click the esetonlinebtn.png button.
  •  
  • For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
    • Click on esetsmartinstaller_enu.exe to download the ESET Smart Installer. Save it to your desktop.
    •  
    • Double click on the esetsmartinstaller_enu.png icon on your desktop.
    •  
  •  
  • Check "YES, I accept the Terms of Use."
  •  
  • Click the Start button.
  •  
  • Accept any security warnings from your browser.
  •  
  • Under scan settings, check "Scan Archives" and "Remove found threats"
  •  
  • Click Advanced settings and select the following:
    • Scan potentially unwanted applications
    •  
    • Scan for potentially unsafe applications
    •  
    • Enable Anti-Stealth technology
    •  
  •  
  • ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
  •  
  • When the scan completes, click List Threats
  •  
  • Click Export, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
  •  
  • Click the Back button.
  •  
  • Click the Finish button.


#4 ydelgado

ydelgado
  • Topic Starter

  • Members
  • 32 posts
  • OFFLINE
  •  
  • Local time:12:44 AM

Posted 10 June 2014 - 12:22 PM

I had installed already but I was taking a course and I wasn't sure I had the latest version. So, I downloaded a new version by mistake. Should I delete it?



#5 ydelgado

ydelgado
  • Topic Starter

  • Members
  • 32 posts
  • OFFLINE
  •  
  • Local time:12:44 AM

Posted 10 June 2014 - 12:23 PM

I downloaded this scan product a few days ago - should I do this again? I am not at home or I could post what I had. 



#6 ydelgado

ydelgado
  • Topic Starter

  • Members
  • 32 posts
  • OFFLINE
  •  
  • Local time:12:44 AM

Posted 10 June 2014 - 12:25 PM

this is from another post and Nasdaq advised that I start a new post.

 

 

I did the esetscan

 

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE\service[4].exe Win32/Conduit.SearchProtect.O potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Rr Savings\CustomActionInstall.vir a variant of Win32/AdWare.Adpeak.I application cleaned by deleting - quarantined
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Rr Savings\CustomActionUninstall.vir a variant of Win32/AdWare.Adpeak.I application cleaned by deleting - quarantined
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Rr Savings\SendJson.dll.vir Win32/AdWare.Adpeak.H application cleaned by deleting - quarantined
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE\service[4].exe Win32/Conduit.SearchProtect.O potentially unwanted application deleted - quarantined
 
 
Thanks
 
Yvette


#7 aj9430dk

aj9430dk

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:06:44 AM

Posted 08 July 2014 - 03:21 PM

Attached File  skærmdump-diskclean2.jpg   98.84KB   0 downloadsi got this screendump:

 

 



#8 ydelgado

ydelgado
  • Topic Starter

  • Members
  • 32 posts
  • OFFLINE
  •  
  • Local time:12:44 AM

Posted 10 July 2014 - 09:27 AM

Ok, I will try this. 

 

thanks,

Yvette


Yes, that is it!! What do I do?



#9 Kirbyofdeath

Kirbyofdeath

  • Members
  • 459 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Somewhere on Earth
  • Local time:11:44 PM

Posted 17 July 2014 - 10:27 AM

Ok, I will try this. 

 

thanks,

Yvette


Yes, that is it!! What do I do?

Please clarify, what's "it"? What is "this"?



#10 Kirbyofdeath

Kirbyofdeath

  • Members
  • 459 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Somewhere on Earth
  • Local time:11:44 PM

Posted 17 July 2014 - 10:55 AM

this is from another post and Nasdaq advised that I start a new post.
 
 
I did the esetscan
 
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE\service[4].exe Win32/Conduit.SearchProtect.O potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Rr Savings\CustomActionInstall.vir a variant of Win32/AdWare.Adpeak.I application cleaned by deleting - quarantined
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Rr Savings\CustomActionUninstall.vir a variant of Win32/AdWare.Adpeak.I application cleaned by deleting - quarantined
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Rr Savings\SendJson.dll.vir Win32/AdWare.Adpeak.H application cleaned by deleting - quarantined
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE\service[4].exe Win32/Conduit.SearchProtect.O potentially unwanted application deleted - quarantined
 
 
Thanks
 
Yvette

You will have to do a scan with malwarebytes also.
 

this is from another post and Nasdaq advised that I start a new post.

What do you mean?



#11 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,601 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:09:44 PM

Posted 17 July 2014 - 12:07 PM

 
Please download AdwCleaner and run it.
 
An image like the one below will open, click on Scan.
 
adwcleaner11_zps48314883.png
 
Once the search is complete a list of the pending items will be displayed.  If you see any which you do not want removed, remove the check mark next to it.  
 
Click on Clean to remove the selected items.  If you have any questions about any items in the list please copy and paste the list in your topic so we can review it.  
 
You will receive a message telling you that all programs will be close so that the infections can be removed.  Click on Ok.
 
When the cleaning process is complete a log of what was removed will be presented.  Please copy and the paste this log in your next post.
 
 

Please download Junkware Removal Tool.
 
Open your browser and go to Downloads, then click on the Junkware Removal Tool to install it.  
 
Click on Run to initiate the installation.
 
To avoid potential conflicts, temporarily disable your antivirus and firewall.  You will want to be offline when you do this.
 
Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select Run as Administrator.
 
The tool will open and start scanning your system.
 
Please be patient as this can take a while to complete depending on your system's specifications.
 
On completion, a log (JRT.txt) is saved to your desktop and will automatically open.  Copy and this and then post this in your topic.

Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#12 ydelgado

ydelgado
  • Topic Starter

  • Members
  • 32 posts
  • OFFLINE
  •  
  • Local time:12:44 AM

Posted 19 July 2014 - 09:22 AM

# AdwCleaner v3.216 - Report created 19/07/2014 at 10:17:26
# Updated 17/07/2014 by Xplode
# Operating System : Windows 8.1  (64 bits)
# Username : Yvette - YVETTE
# Running from : C:\Users\Yvette\Downloads\AdwCleaner (1).exe
# Option : Clean
 
***** [ Services ] *****
 
 
***** [ Files / Folders ] *****
 
Folder Deleted : C:\Program Files\pcreg
[x] Not Deleted : C:\Program Files\Reimage
File Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk
File Deleted : C:\Users\Yvette\AppData\Roaming\Mozilla\Firefox\Profiles\nwdhq728.default\user.js
 
***** [ Shortcuts ] *****
 
 
***** [ Registry ] *****
 
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\Software\BrowserSafeGuard
 
***** [ Browsers ] *****
 
-\\ Internet Explorer v11.0.9600.16384
 
 
-\\ Mozilla Firefox v29.0.1 (en-US)
 
[ File : C:\Users\Yvette\AppData\Roaming\Mozilla\Firefox\Profiles\nwdhq728.default\prefs.js ]
 
 
-\\ Google Chrome v36.0.1985.125
 
[ File : C:\Users\Yvette\AppData\Local\Google\Chrome\User Data\Default\preferences ]


#13 ydelgado

ydelgado
  • Topic Starter

  • Members
  • 32 posts
  • OFFLINE
  •  
  • Local time:12:44 AM

Posted 19 July 2014 - 09:38 AM

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 8.1 x64
Ran by Yvette on Sat 07/19/2014 at 10:25:07.72
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 
~~~ Services
 
 
 
~~~ Registry Values
 
 
 
~~~ Registry Keys
 
 
 
~~~ Files
 
 
 
~~~ Folders
 
 
 
~~~ Event Viewer Logs were cleared
 
 
 
 
 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Sat 07/19/2014 at 10:35:15.59
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


#14 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,601 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:09:44 PM

Posted 19 July 2014 - 10:06 AM

 

this is from another post and Nasdaq advised that I start a new post.

What do you mean?

 

Yvette previously had a topic posted in the Virus, Trojan, Spyware, and Malware Removal Logs forum.


Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#15 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,601 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:09:44 PM

Posted 19 July 2014 - 10:09 AM

Hi 

 

I have windows 8.1 and I inadvertently downloaded IE and somehow must have also got some sort of spyware or virus. I have used Malware Bytes, Spybot Search and Destroy, Kaspersky, etc and have not been able to get rid of it. It comes up when the computer is idle and when you hover over it - it disappears. What can I do to get rid of it?

 

It appears to be from Microsoft but it is not. 

 

Thanks,

Yvette

Was this before or after you had your topic in the Virus, Trojan, Spyware, and Malware Removal Logs forum.


Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users