Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

malware removal


  • Please log in to reply
20 replies to this topic

#1 guy1511

guy1511

  • Members
  • 33 posts
  • OFFLINE
  •  
  • Local time:11:14 AM

Posted 02 January 2015 - 09:35 PM

Somehow I have become infected.
 
I'm running malware bytes (paid version) and today my free tryal of super anti spyware expired.  I also installed  hitman pro today.  None of these seem to remove it. They act like they are removing it but upon reboot it's there agian.
 
The one i'm finding is performance optimizer.  I can go into settings and disable it and Ive tried running malware tools in safe mode as well with no lasting results.
 
Unsure what else might of been installed.
 
Lastly my malware bytes (today) won't enable protection mode so somehow this has been disabled.
 
Thank you for the help.

Edit: Topic moved from Virus, Trojan, Spyware, and Malware Removal Logs to the more appropriate forum, due to the absence of malware logs included with the topic.~ Animal

BC AdBot (Login to Remove)

 


#2 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,490 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:12:14 PM

Posted 02 January 2015 - 11:12 PM

Hi guy lets try this way.

Please download Rkill by Grinler and save it to your desktop.
  • Link 1
  • Link 2
    • Double-click on the Rkill desktop icon to run the tool.
    • If using Vista, right-click on it and Run As Administrator.
    • A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
    • If not, delete the file, then download and use the one provided in Link 2.
    • If it does not work, repeat the process and attempt to use one of the remaining links until the tool runs.
    • If the tool does not run from any of the links provided, please let me know.
  • Do not reboot the computer, you will need to run the application again.
Run Malwarebytes again.
  • Click the Scan Now button, a threat scan will start automatically.
  • MalwareBytes Anti-Malware will now check for the latest updates. Click Update Now if new updates are available.
  • Your computer is now being scanned, please do not use your computer during the scan.
    • If no threats were found, click View detailed log.
      • Click Export and save the log as a .txt file on your Desktop or another location.
    • If the scan detected any threats, click Apply Actions.
      • To complete any actions taken you will be prompted to restart your computer...click on Yes.
      • After reboot, start Malwarebytes Anti-Malware again and click the History Tab at the top and select Application Logs.
      • Check the box next to Scan Log. Choose the most current scan and click View.
      • Click Export and save the log as a .txt file on your Desktop or another location.
  • Providing the MalwareBytes' Anti-Malware log file
    • Attach the log file you just saved to your next reply for further review.
    .
    ADW Cleaner

    Please download AdwCleaner by Xplode and save to your Desktop.
  • Double-click on AdwCleaner.exe to run the tool.
    Vista/Windows 7/8 users right-click and select Run As Administrator.
  • Click on the Scan button.
  • AdwCleaner will begin...be patient as the scan may take some time to complete.
  • After the scan has finished, click on the Report button...a logfile (AdwCleaner[R0].txt) will open in Notepad for review.
  • After reviewing the log, click on the Clean button.
  • Press OK when asked to close all programs and follow the onscreen prompts.
  • Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
  • After rebooting, a logfile report (AdwCleaner[S0].txt) will open automatically.
  • Copy and paste the contents of that logfile in your next reply.
  • A copy of all logfiles are saved in the C:\AdwCleaner folder which was created when running the tool.
  • -- Note: The contents of the AdwCleaner log file may be confusing. Unless you see a program name that you recognize and know should not be removed, don't worry about it. If you see an entry you want to keep, return to AdwCleaner before cleaning...all detected items will be listed (and checked) in each tab. Click on each one and uncheck any items you want to keep (except you cannot uncheck Chrome and Firefox preferences lines).

Edited by boopme, 02 January 2015 - 11:13 PM.

How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#3 guy1511

guy1511
  • Topic Starter

  • Members
  • 33 posts
  • OFFLINE
  •  
  • Local time:11:14 AM

Posted 03 January 2015 - 09:06 PM

Thank you for the super fast response.  I ran rkill/malwarebytes/adw cleaner yesterday before your response as I was trying to get the process moving.  i wont jump ahead from nowon and will follow your steps exaclty. 

 

I'm running malwarebytes again and will post the log file and will then run adw cleaner and will post the log file after the reboot in the next messages.

 

One thing I forgot to add in prevous post is that I can't enable "protection" on malwarebytes and also windows security service is off and won't enable.

 

I had malware bites installed before this happened.

 

Thank you again for the assistance.


Edited by guy1511, 03 January 2015 - 09:37 PM.


#4 guy1511

guy1511
  • Topic Starter

  • Members
  • 33 posts
  • OFFLINE
  •  
  • Local time:11:14 AM

Posted 03 January 2015 - 09:24 PM

todays malwarebytes scan

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 1/3/2015
Scan Time: 7:52:27 PM
Logfile:
Administrator: No

Version: 2.00.4.1028
Malware Database: v2015.01.03.01
Rootkit Database: v2014.12.30.01
License: Premium
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 8.1
CPU: x64
File System: NTFS
User: Justin

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 232223
Time Elapsed: 30 min, 4 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 0
(No malicious items detected)

Physical Sectors: 0
(No malicious items detected)


(end)



#5 guy1511

guy1511
  • Topic Starter

  • Members
  • 33 posts
  • OFFLINE
  •  
  • Local time:11:14 AM

Posted 03 January 2015 - 09:26 PM

yesterdays malwarebytes

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 1/2/2015
Scan Time: 8:29:32 PM
Logfile:
Administrator: No

Version: 2.00.4.1028
Malware Database: v2015.01.02.09
Rootkit Database: v2014.12.30.01
License: Premium
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 8.1
CPU: x64
File System: NTFS
User: Justin

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 230360
Time Elapsed: 18 min, 21 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 1
PUP.Optional.PerformanceOptimizer.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\892cc6a3, Delete-on-Reboot, [5d2832313f3d2412128c9f34887c768a],

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 0
(No malicious items detected)

Physical Sectors: 0
(No malicious items detected)


(end)



#6 guy1511

guy1511
  • Topic Starter

  • Members
  • 33 posts
  • OFFLINE
  •  
  • Local time:11:14 AM

Posted 03 January 2015 - 09:27 PM

malwarebytes yesterday protection log

Malwarebytes Anti-Malware
www.malwarebytes.org


Update, 1/2/2015 8:29:46 PM, SYSTEM, PEACEFREEDOM, Scheduler, Rootkit Database, 2014.12.14.1, 2014.12.30.1,
Update, 1/2/2015 8:29:48 PM, SYSTEM, PEACEFREEDOM, Scheduler, Malware Database, 2014.12.16.5, 2015.1.2.9,
Scan, 1/2/2015 8:58:27 PM, SYSTEM, PEACEFREEDOM, Manual, Start:1/2/2015 8:29:32 PM, Duration:18 min 21 sec, Threat Scan, Completed, 0 Malware Detections, 1 Non-Malware Detection,
Update, 1/2/2015 9:06:45 PM, SYSTEM, PEACEFREEDOM, Scheduler, Malware Database, 2015.1.2.9, 2015.1.3.1,
Scan, 1/2/2015 9:53:24 PM, SYSTEM, PEACEFREEDOM, Manual, Start:1/2/2015 9:46:35 PM, Duration:6 min 48 sec, Threat Scan, Completed, 0 Malware Detections, 0 Non-Malware Detections,

(end)



#7 guy1511

guy1511
  • Topic Starter

  • Members
  • 33 posts
  • OFFLINE
  •  
  • Local time:11:14 AM

Posted 03 January 2015 - 09:29 PM

the problem first showed up and I mostly stopped using this computer at this time as I was having difficulty cleaing it log.

 

Malwarebytes Anti-Malware
www.malwarebytes.org


Update, 10/18/2014 1:20:55 PM, SYSTEM, PEACEFREEDOM, Manual, Rootkit Database, 2014.9.18.1, 2014.10.17.1,
Protection, 10/18/2014 1:21:05 PM, SYSTEM, PEACEFREEDOM, Protection, Malware Protection, Starting,
Protection, 10/18/2014 1:21:05 PM, SYSTEM, PEACEFREEDOM, Protection, Malware Protection, Started,
Protection, 10/18/2014 1:21:06 PM, SYSTEM, PEACEFREEDOM, Protection, Malicious Website Protection, Starting,
Protection, 10/18/2014 1:21:09 PM, SYSTEM, PEACEFREEDOM, Protection, Malicious Website Protection, Started,
Update, 10/18/2014 1:21:12 PM, SYSTEM, PEACEFREEDOM, Manual, Malware Database, 2014.9.19.5, 2014.10.18.6,
Protection, 10/18/2014 1:21:12 PM, SYSTEM, PEACEFREEDOM, Protection, Refresh, Starting,
Protection, 10/18/2014 1:21:12 PM, SYSTEM, PEACEFREEDOM, Protection, Malicious Website Protection, Stopping,
Protection, 10/18/2014 1:21:13 PM, SYSTEM, PEACEFREEDOM, Protection, Malicious Website Protection, Stopped,
Protection, 10/18/2014 1:21:54 PM, SYSTEM, PEACEFREEDOM, Protection, Refresh, Success,
Protection, 10/18/2014 1:21:54 PM, SYSTEM, PEACEFREEDOM, Protection, Malicious Website Protection, Starting,
Protection, 10/18/2014 1:21:56 PM, SYSTEM, PEACEFREEDOM, Protection, Malicious Website Protection, Started,
Detection, 10/18/2014 1:27:46 PM, SYSTEM, PEACEFREEDOM, Protection, Malware Protection, File, Trojan.Agent, C:\ProgramData\Performance Optimizer\PerformanceOptimizer.dll, Quarantine Failed, 5, Access is denied.  , [032be4324537191db98d879117ee5fa1]
Detection, 10/18/2014 1:28:13 PM, SYSTEM, PEACEFREEDOM, Protection, Malware Protection, File, PUP.Optional.Astromenda.A, C:\Windows\System32\Tasks\WSE_Astromenda, Quarantine, [ed414bcb7ffd8fa730edfc1ee023a957]
Detection, 10/18/2014 1:28:13 PM, SYSTEM, PEACEFREEDOM, Protection, Malware Protection, File, PUP.Optional.Astromenda.A, C:\Users\Justin\AppData\Roaming\WSE_Astromenda\UpdateProc\UpdateTask.exe, Quarantine, [6ac439dd5f1d0b2b0690e42b768d7888]
Detection, 10/18/2014 1:28:25 PM, SYSTEM, PEACEFREEDOM, Protection, Malware Protection, File, Trojan.Agent, C:\ProgramData\Performance Optimizer\PerformanceOptimizer.dll, Quarantine Failed, 5, Access is denied.  , [032be4324537191db98d879117ee5fa1]
Detection, 10/18/2014 1:28:51 PM, SYSTEM, PEACEFREEDOM, Protection, Malware Protection, File, Trojan.Agent, C:\ProgramData\Performance Optimizer\PerformanceOptimizer.dll, Quarantine Failed, 5, Access is denied.  , [032be4324537191db98d879117ee5fa1]
Detection, 10/18/2014 1:29:01 PM, SYSTEM, PEACEFREEDOM, Protection, Malware Protection, File, PUP.Optional.Updater.A, C:\Users\Justin\AppData\Roaming\UpdaterEX\UpdateProc\UpdateTask.exe, Quarantine, [9599fc1a8eeef046ba4e4dbdfc078c74]
Detection, 10/18/2014 1:29:21 PM, SYSTEM, PEACEFREEDOM, Protection, Malware Protection, File, Trojan.Agent, C:\ProgramData\Performance Optimizer\PerformanceOptimizer.dll, Quarantine Failed, 5, Access is denied.  , [032be4324537191db98d879117ee5fa1]
Detection, 10/18/2014 1:32:08 PM, SYSTEM, PEACEFREEDOM, Protection, Malware Protection, File, Trojan.Agent, C:\ProgramData\Performance Optimizer\PerformanceOptimizer.dll, Quarantine Failed, 5, Access is denied.  , [032be4324537191db98d879117ee5fa1]
Detection, 10/18/2014 1:49:01 PM, SYSTEM, PEACEFREEDOM, Protection, Malware Protection, File, Trojan.Agent, C:\ProgramData\Performance Optimizer\PerformanceOptimizer.dll, Quarantine Failed, 5, Access is denied.  , [032be4324537191db98d879117ee5fa1]
Update, 10/18/2014 1:54:35 PM, SYSTEM, PEACEFREEDOM, Scheduler, Failed, Unable to access update server,
Update, 10/18/2014 1:55:47 PM, SYSTEM, PEACEFREEDOM, Manual, Failed, Unable to access update server,
Scan, 10/18/2014 2:02:21 PM, SYSTEM, PEACEFREEDOM, Manual, Start:10/18/2014 1:55:47 PM, Duration:0 min 0 sec, Hyper Scan, Completed, 1 Malware Detection, 10 Non-Malware Detections,
Detection, 10/18/2014 2:02:58 PM, SYSTEM, PEACEFREEDOM, Protection, Malware Protection, File, Trojan.Agent, C:\ProgramData\Performance Optimizer\PerformanceOptimizer.dll, Quarantine Failed, 5, Access is denied.  , [949a71a54e2e3bfb2a1cc2560bfaf60a]
Detection, 10/18/2014 2:11:01 PM, SYSTEM, PEACEFREEDOM, Protection, Malware Protection, File, Trojan.Agent, C:\ProgramData\Performance Optimizer\PerformanceOptimizer.dll, Quarantine Failed, 5, Access is denied.  , [949a71a54e2e3bfb2a1cc2560bfaf60a]
Protection, 10/18/2014 2:25:28 PM, SYSTEM, PEACEFREEDOM, Protection, Malware Protection, Starting,
Protection, 10/18/2014 2:25:28 PM, SYSTEM, PEACEFREEDOM, Protection, Malware Protection, Started,
Protection, 10/18/2014 2:25:28 PM, SYSTEM, PEACEFREEDOM, Protection, Malicious Website Protection, Starting,
Protection, 10/18/2014 2:25:28 PM, SYSTEM, PEACEFREEDOM, Protection, Malicious Website Protection, Started,
Update, 10/18/2014 2:28:33 PM, SYSTEM, PEACEFREEDOM, Manual, Failed, Unable to access update server,
Scan, 10/18/2014 2:44:57 PM, SYSTEM, PEACEFREEDOM, Manual, Start:10/18/2014 2:28:33 PM, Duration:16 min 23 sec, Threat Scan, Completed, 0 Malware Detections, 0 Non-Malware Detections,

(end)



#8 guy1511

guy1511
  • Topic Starter

  • Members
  • 33 posts
  • OFFLINE
  •  
  • Local time:11:14 AM

Posted 03 January 2015 - 09:36 PM

ADW cleaner log files from yesterday, 4 files total below

 

1st one titled AdwCleaner[RO].txt

# AdwCleaner v4.106 - Report created 02/01/2015 at 21:22:23
# Updated 21/12/2014 by Xplode
# Database : 2015-01-01.1 [Live]
# Operating System : Windows 8.1 Pro  (64 bits)
# Username : Admin - PEACEFREEDOM
# Running from : C:\Users\Justin\Desktop\AdwCleaner.exe
# Option : Scan

***** [ Services ] *****

Service Found : 892cc6a3

***** [ Files / Folders ] *****

Folder Found : C:\ProgramData\topdueAl
Folder Found : C:\Users\Justin\AppData\Local\Astromenda
Folder Found : C:\Users\Justin\AppData\Roaming\UpdaterEX

***** [ Scheduled Tasks ] *****

Task Found : UpdaterEX
Task Found : UpdaterEX

***** [ Shortcuts ] *****


***** [ Registry ] *****

Data Found : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~3\PERFOR~1\PERFOR~2.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\{9CB2CD61-FFA0-406C-9D2D-8FDE6F4A4D8A}
Key Found : HKLM\SOFTWARE\InstallCore
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2E00D31D-D171-423D-836D-1A4D7EA7F1A9}

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17416


*************************

AdwCleaner[R0].txt - [1244 octets] - [02/01/2015 21:22:23]

########## EOF - \AdwCleaner\AdwCleaner[R0].txt - [1304 octets] ##########

 

second one titled AdwCleaner[R1].txt

 

# AdwCleaner v4.106 - Report created 02/01/2015 at 21:28:50
# Updated 21/12/2014 by Xplode
# Database : 2015-01-01.1 [Live]
# Operating System : Windows 8.1 Pro  (64 bits)
# Username : Admin - PEACEFREEDOM
# Running from : C:\Users\Justin\Desktop\AdwCleaner.exe
# Option : Scan

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****


***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17416


*************************

AdwCleaner[R0].txt - [1394 octets] - [02/01/2015 21:22:23]
AdwCleaner[R1].txt - [613 octets] - [02/01/2015 21:28:50]
AdwCleaner[S0].txt - [1455 octets] - [02/01/2015 21:25:15]

########## EOF - \AdwCleaner\AdwCleaner[R1].txt - [732 octets] ##########

 

 

Third one titled AdwCleaner[S0].txt

# AdwCleaner v4.106 - Report created 02/01/2015 at 21:25:15
# Updated 21/12/2014 by Xplode
# Database : 2015-01-01.1 [Live]
# Operating System : Windows 8.1 Pro  (64 bits)
# Username : Admin - PEACEFREEDOM
# Running from : C:\Users\Justin\Desktop\AdwCleaner.exe
# Option : Clean

***** [ Services ] *****

[#] Service Deleted : 892cc6a3

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\topdueAl
Folder Deleted : C:\Users\Justin\AppData\Local\Astromenda
Folder Deleted : C:\Users\Justin\AppData\Roaming\UpdaterEX

***** [ Scheduled Tasks ] *****

Task Deleted : UpdaterEX

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\AppID\{9CB2CD61-FFA0-406C-9D2D-8FDE6F4A4D8A}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2E00D31D-D171-423D-836D-1A4D7EA7F1A9}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Key Deleted : HKLM\SOFTWARE\InstallCore
Data Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~3\PERFOR~1\PERFOR~2.DLL

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17416


*************************

AdwCleaner[R0].txt - [1394 octets] - [02/01/2015 21:22:23]
AdwCleaner[S0].txt - [1305 octets] - [02/01/2015 21:25:15]

########## EOF - \AdwCleaner\AdwCleaner[S0].txt - [1365 octets] ##########

 

 

4th one titled AdwCleaner[S1].txt

# AdwCleaner v4.106 - Report created 02/01/2015 at 21:31:52
# Updated 21/12/2014 by Xplode
# Database : 2015-01-01.1 [Live]
# Operating System : Windows 8.1 Pro  (64 bits)
# Username : Admin - PEACEFREEDOM
# Running from : C:\Users\Justin\Desktop\AdwCleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****


***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17416


*************************

AdwCleaner[R0].txt - [1394 octets] - [02/01/2015 21:22:23]
AdwCleaner[R1].txt - [809 octets] - [02/01/2015 21:28:50]
AdwCleaner[S0].txt - [1455 octets] - [02/01/2015 21:25:15]
AdwCleaner[S1].txt - [733 octets] - [02/01/2015 21:31:52]

########## EOF - \AdwCleaner\AdwCleaner[S1].txt - [792 octets] ##########




 



#9 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,490 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:12:14 PM

Posted 03 January 2015 - 10:02 PM

Run Rkill and then MBAM again
post 2 logs.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#10 guy1511

guy1511
  • Topic Starter

  • Members
  • 33 posts
  • OFFLINE
  •  
  • Local time:11:14 AM

Posted 03 January 2015 - 10:40 PM

Rkill 2.6.9 by Lawrence Abrams (Grinler)
http://www.bleepingcomputer.com/
Copyright 2008-2015 BleepingComputer.com
More Information about Rkill can be found at this link:
 http://www.bleepingcomputer.com/forums/topic308364.html

Program started at: 01/03/2015 09:39:09 PM in x64 mode.
Windows Version: Windows 8.1 Pro

Checking for Windows services to stop:

 * No malware services found to stop.

Checking for processes to terminate:

 * No malware processes found to kill.

Checking Registry for malware related settings:

 * No issues found in the Registry.

Resetting .EXE, .COM, & .BAT associations in the Windows Registry.

Performing miscellaneous checks:

 * No issues found.

Checking Windows Service Integrity:

 * Security Center (wscsvc) is not Running.
   Startup Type set to: Manual

Searching for Missing Digital Signatures:

 * No issues found.

Checking HOSTS File:

 * No issues found.

Program finished at: 01/03/2015 09:40:01 PM
Execution time: 0 hours(s), 0 minute(s), and 52 seconds(s)



#11 guy1511

guy1511
  • Topic Starter

  • Members
  • 33 posts
  • OFFLINE
  •  
  • Local time:11:14 AM

Posted 04 January 2015 - 03:36 PM

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 1/4/2015
Scan Time: 1:34:33 AM
Logfile:
Administrator: No

Version: 2.00.4.1028
Malware Database: v2015.01.04.06
Rootkit Database: v2014.12.30.01
License: Premium
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 8.1
CPU: x64
File System: NTFS
User: Justin

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 232366
Time Elapsed: 3 min, 11 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 0
(No malicious items detected)

Physical Sectors: 0
(No malicious items detected)


(end)



#12 guy1511

guy1511
  • Topic Starter

  • Members
  • 33 posts
  • OFFLINE
  •  
  • Local time:11:14 AM

Posted 04 January 2015 - 04:04 PM

# AdwCleaner v4.106 - Report created 04/01/2015 at 15:02:00
# Updated 21/12/2014 by Xplode
# Database : 2015-01-03.1 [Live]
# Operating System : Windows 8.1 Pro  (64 bits)
# Username : Admin - PEACEFREEDOM
# Running from : C:\Users\Justin\Desktop\AdwCleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****


***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17416


*************************

AdwCleaner[R0].txt - [1394 octets] - [02/01/2015 21:22:23]
AdwCleaner[R1].txt - [809 octets] - [02/01/2015 21:28:50]
AdwCleaner[R2].txt - [927 octets] - [03/01/2015 20:38:19]
AdwCleaner[R3].txt - [986 octets] - [04/01/2015 14:37:21]
AdwCleaner[S0].txt - [1455 octets] - [02/01/2015 21:25:15]
AdwCleaner[S1].txt - [869 octets] - [02/01/2015 21:31:52]
AdwCleaner[S2].txt - [910 octets] - [04/01/2015 15:02:00]

########## EOF - \AdwCleaner\AdwCleaner[S2].txt - [969 octets] ##########
 



#13 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,490 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:12:14 PM

Posted 05 January 2015 - 04:48 PM

Please go HERE and read, then use the FIX-IT button for WIN 8
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#14 guy1511

guy1511
  • Topic Starter

  • Members
  • 33 posts
  • OFFLINE
  •  
  • Local time:11:14 AM

Posted 05 January 2015 - 11:51 PM

Thank you, after some tryal and error, and my microsoft account password not working even though I'm sure it was correct I finally got microsoft security back online.

Now it's just malware bytes protection that can't be enabled.

 

making good progress.  Thank you.



#15 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,490 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:12:14 PM

Posted 06 January 2015 - 01:04 PM

Good, Run MBAM CLEAN and see.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users