Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Redirected hosts file - malware in laptop?


  • Please log in to reply
5 replies to this topic

#1 rooperi

rooperi

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:06:47 PM

Posted 19 September 2015 - 04:54 AM

Hi,

 

My parents bought a Brother printer for their laptop (Windows 8.1). Everything seemed to work fine for a while.

 

Then internet security software (F-secure based product, Elisa Security) started giving Deepguard warning about brstmonw.exe - Deepguard claimed that the executable tried to launch another executable. I used search engines and found out that this brstmonw.exe was related to that Brother printer and, therefore, we allowed brstmonw.exe to start that another process.

 

Later this internet security software started giving Deepguard warning about brccboot.exe  - Deepguard claimed that the executable tried to change another executable file. We decided not to allow because that sounded a bit suspicious.

 

These first two problems may have been false positives, but, a couple of days ago, F-Secure noticed 'Redirected_hosts_file' spyware and fixed that. So effectively, Windows hosts file was modified. So now I have been trying to figure out if there is still virus/malware/spyware installed to their laptop. I may be wrong, but hosts file cannot change by itself - another process would have to make the change.

 

I have run the following free malware removal tools (in Safe mode as much as possible):

  • Malwarebytes Anti-Malware
  • Kaspersky Virus Removal Tool 2015
  • SuperAntiSpyware
  • F-Secure online scanner
  • Norton Security scan
  • Microsoft Windows malware removal tool

Unfortunately, these software didn't find anything serious (only some tracking cookies which I removed).

 

So do you have any suggestions how to check if their laptop still has virus/malware/spyware?



BC AdBot (Login to Remove)

 


#2 buddy215

buddy215

  • Moderator
  • 13,134 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:10:47 AM

Posted 19 September 2015 - 06:47 AM

You can reset the Host file to default. Reset it to default by following the info at How to Reset Hosts File to Default in Windows? - AskVG

 

Use the programs below to clean the computer and find and remove adware.

 

Use CCleaner to remove Temporary files, program caches, cookies, logs, etc. Use the Default settings. No need to use the

Registry Cleaning Tool...risky. Pay close attention while installing and UNcheck offers of toolbars....especially Google.

After install, open CCleaner and run by clicking on the Run Cleaner button in the bottom right corner.

CCleaner - PC Optimization and Cleaning - Free Download

 

Download AdwCleaner by Xplode onto your desktop.

  • Close all open programs and internet browsers.
  • Double click on adwcleaner.exe to run the tool.
  • Click on Scan button.
  • When the scan has finished click on Clean button.
  • Your computer will be rebooted automatically. A text file will open after the restart.
  • Please post the contents of that logfile with your next reply.
  • You can find the logfile at C:\AdwCleaner[S1].txt as well.
  • download Junkware Removal Tool to your desktop.
  • Shut down your protection software now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message

“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#3 rooperi

rooperi
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:06:47 PM

Posted 19 September 2015 - 12:29 PM

Thanks for advice.

Hosts file was already OK - that was handled by F-Secure.

 

AdwCleaner:

# AdwCleaner v5.008 - Logfile created 19/09/2015 at 20:00:38
# Updated 18/09/2015 by Xplode
# Database : 2015-09-17.3 [Server]
# Operating system : Windows 8.1  (x64)
# Username : Jarkko - NUJAMA
# Running from : C:\Users\Jarkko\Downloads\AdwCleaner.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****

[-] Folder Deleted : C:\ProgramData\{4A268D42-77A5-4E91-AE73-470ED3BD9CA8}

***** [ Files ] *****

[-] File Deleted : C:\Users\Jarkko\AppData\Roaming\Mozilla\Firefox\Profiles\5iu4aq39.default\searchplugins\bingp.xml

***** [ Shortcuts ] *****

[-] Shortcut Disinfected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Start Now Technology.lnk

***** [ Scheduled tasks ] *****


***** [ Registry ] *****


***** [ Web browsers ] *****

[-] [C:\Users\Jarkko\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : bopakagnckmlgajfccecajhnimjiiedh

*************************

:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [1045 bytes] ##########
 

JRT:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 7.6.2 (09.14.2015:1)
OS: Windows 8.1 x64
Ran by Jarkko on la 19.09.2015 at 20:08:25,95
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Tasks



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{E6D568DE-8709-4431-BDB4-78E7ECF675E6}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{E6D568DE-8709-4431-BDB4-78E7ECF675E6}



~~~ Files



~~~ Folders



~~~ FireFox

Emptied folder: C:\Users\Jarkko\AppData\Roaming\mozilla\firefox\profiles\5iu4aq39.default\minidumps [2 files]



~~~ Chrome


[C:\Users\Jarkko\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - default search provider reset

[C:\Users\Jarkko\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:

[C:\Users\Jarkko\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset

[C:\Users\Jarkko\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:
[]





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on la 19.09.2015 at 20:25:21,74
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 



#4 buddy215

buddy215

  • Moderator
  • 13,134 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:10:47 AM

Posted 19 September 2015 - 01:05 PM

Did you actually clear the Host file per instructions in the link I provided....if not....it is often the case that security programs don't catch

the action of malware until after the fact...best to make sure the Host file is back to default settings/ entries.

 

Post the three lists mentioned below using CCleaner.

 

Open CCleaner and click on Tools. Choose Startups. On that page you will see a list of Windows Startups and at the top tabs for each browser and Scheduled Tasks.

At the bottom right of that page you will see a button when clicked will allow you to Copy and Paste the list of Windows Startups and Scheduled Tasks into your next

post. Please do that.

 

Open CCleaner and click on Tools. Choose Uninstall. On that page you will see a list of programs installed on your computer and at the bottom right of that page you

will see a button when clicked will allow you to Copy and Paste that list in your next post. Please do that.


Edited by buddy215, 19 September 2015 - 01:06 PM.

“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#5 rooperi

rooperi
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:06:47 PM

Posted 19 September 2015 - 03:02 PM

Here's three logs (hopefully these are the right ones):

 

Yes    HKCU:Run    CCleaner Monitoring    Piriform Ltd    "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
Yes    HKCU:Run    GarminExpressTrayApp        "C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe"
Yes    HKCU:Run    Skype    Skype Technologies S.A.    "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
Yes    HKLM:Run    AccelerometerSysTrayApplet    Hewlett-Packard Company    C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerST.exe
Yes    HKLM:Run    BrStsMon00    Brother Industries, Ltd.    C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe /AUTORUN
Yes    HKLM:Run    BtTray    IVT Corporation    "C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe"
Yes    HKLM:Run    ControlCenter4    Brother Industries, Ltd.    C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe /autorun
Yes    HKLM:Run    F-Secure Hoster (28313)    F-Secure Corporation    "C:\Program Files (x86)\Elisa\fshoster32.exe" -app -hosterid:1
Yes    HKLM:Run    F-Secure Manager    F-Secure Corporation    "C:\Program Files (x86)\Elisa\apps\ComputerSecurity\Common\FSM32.EXE" /splash
Yes    HKLM:Run    HP Software Update    Hewlett-Packard    C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
Yes    HKLM:Run    HPMessageService    Hewlett-Packard Development Company, L.P.    C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe
Yes    HKLM:Run    RTHDVCPL    Realtek Semiconductor    "C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
Yes    HKLM:Run    StartCCC    Advanced Micro Devices, Inc.    "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
Yes    HKLM:Run    SunJavaUpdateSched    Oracle Corporation    "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
Yes    HKLM:Run    SynTPEnh    Synaptics Incorporated    %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
Yes    HKLM:Run    YouCam Service    CyberLink Corp.    "C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe" /s
 

 

Yes    Task    Adobe Acrobat Update Task    Adobe Systems Incorporated    C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
Yes    Task    Adobe Flash Player Updater    Adobe Systems Incorporated    C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Yes    Task    CCleanerSkipUAC    Piriform Ltd    "C:\Program Files\CCleaner\CCleaner.exe" $(Arg0)
Yes    Task    CreateChoiceProcessTask    Microsoft Corporation    C:\Windows\BrowserChoice\browserchoice.exe /launch
Yes    Task    GarminUpdaterTask        C:\Program Files (x86)\Garmin\Express Self Updater\ExpressSelfUpdater.exe
Yes    Task    GoogleUpdateTaskMachineCore    Google Inc.    C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
Yes    Task    GoogleUpdateTaskMachineUA    Google Inc.    C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
No    Task    Optimize Start Menu Cache Files-S-1-5-21-872180547-653541518-2545348423-1002        
Yes    Task    Optimize Start Menu Cache Files-S-1-5-21-872180547-653541518-2545348423-500        
 

 

7-Zip 9.20 (x64 edition)    Igor Pavlov    19.7.2013    4,53 MB    9.20.00.0
Adobe Flash Player 18 NPAPI    Adobe Systems Incorporated    15.9.2015    17,8 MB    18.0.0.232
Adobe Reader XI (11.0.12) - Suomi    Adobe Systems Incorporated    16.7.2015    187 MB    11.0.12
Adobe Shockwave Player 12.0    Adobe Systems, Inc.    30.10.2014        12.0.2.122
AMD Catalyst Install Manager    Advanced Micro Devices, Inc.    8.8.2013    26,3 MB    8.0.911.0
Bonjour    Apple Inc.    8.8.2013    2,00 MB    3.0.0.10
Brother MFL-Pro Suite DCP-1610W series    Brother Industries, Ltd.    12.3.2015        1.0.2.0
Catalyst Control Center    AMD    30.10.2014        1.00.0000
CCleaner    Piriform    19.9.2015        5.09
CyberLink LabelPrint    CyberLink Corp.    8.8.2013    280 MB    2.5.4.6515
CyberLink Media Suite 10    CyberLink Corp.    8.8.2013    58,0 MB    10.0.4.2928
Cyberlink PhotoDirector    CyberLink Corp.    8.8.2013    219 MB    3.0.2.4128
CyberLink Power2Go 8    CyberLink Corp.    8.8.2013    404 MB    8.0.4.3026
CyberLink PowerDirector 10    CyberLink Corp.    8.8.2013    615 MB    10.0.4.3021
CyberLink PowerDVD 12    CyberLink Corp.    8.8.2013    313 MB    12.0.1.3024
CyberLink YouCam    CyberLink Corp.    8.8.2013    278 MB    5.0.1.2922
Elisa Turvakeskus    F-Secure Corporation    24.3.2015        1.83.315.0
Energy Star    Hewlett-Packard Company    8.8.2013    6,70 MB    1.0.9
Garmin Express    Garmin Ltd or its subsidiaries    11.4.2015    136 MB    4.0.16.0
Google Chrome    Google Inc.    2.1.2014        45.0.2454.93
HP 3D DriveGuard    Hewlett-Packard Company    8.8.2013    2,39 MB    6.0.9.1
HP Connected Music (Meridian - installer)    Meridian Audio Ltd    30.10.2014    605 KB    1.0
HP CoolSense    Hewlett-Packard Company    20.7.2013    10,9 MB    2.10.62
HP Documentation    Hewlett-Packard    8.8.2013    255 MB    1.1.0.0
HP FWUpdateEDO2    Hewlett-Packard    10.4.2014    1,53 MB    1.2.0.0
HP Photo Creations    HP    30.10.2014    14,6 MB    1.0.0.7702
HP Quick Start    Hewlett-Packard    8.8.2013    1,67 MB    1.0.4660.30220
HP Registration Service    Hewlett-Packard    8.8.2013    29,5 MB    1.2.6838.4521
HP Support Assistant    Hewlett-Packard Company    20.7.2013    90,0 MB    7.2.23.56
HP System Event Utility    Hewlett-Packard Company    19.7.2013    7,00 MB    1.0.8
HP Update    Hewlett-Packard    2.1.2014    3,98 MB    5.003.003.001
HP Utility Center    Hewlett-Packard Company    8.8.2013    4,77 MB    2.2.2
HP Wireless Button Driver    Hewlett-Packard Company    8.8.2013    733 KB    1.0.6.1
Java 8 Update 60    Oracle Corporation    15.9.2015    20,6 MB    8.0.600.27
Microsoft Office Home and Student 2013 - fi-fi    Microsoft Corporation    15.9.2015        15.0.4753.1002
Microsoft Silverlight    Microsoft Corporation    17.8.2015    249 MB    5.1.40728.0
Microsoft SkyDrive    Microsoft Corporation    30.10.2014    25,1 MB    16.4.6013.0910
Microsoft SQL Server 2005 Compact Edition [ENU]    Microsoft Corporation    20.7.2013    1,92 MB    3.1.0000
Microsoft Visual C++ 2005 Redistributable    Microsoft Corporation    8.8.2013    4,84 MB    8.0.59193
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022    Microsoft Corporation    8.8.2013    8,14 MB    9.0.21022
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161    Microsoft Corporation    24.2.2014    13,2 MB    9.0.30729.6161
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022    Microsoft Corporation    8.8.2013    6,68 MB    9.0.21022
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17    Microsoft Corporation    8.8.2013    8,76 MB    9.0.30729
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148    Microsoft Corporation    8.8.2013    8,69 MB    9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161    Microsoft Corporation    24.2.2014    10,1 MB    9.0.30729.6161
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219    Microsoft Corporation    14.2.2015    13,8 MB    10.0.40219
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219    Microsoft Corporation    14.2.2015    11,1 MB    10.0.40219
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030    Microsoft Corporation    14.2.2015    20,5 MB    11.0.61030.0
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030    Microsoft Corporation    15.2.2015    17,3 MB    11.0.61030.0
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005    Microsoft Corporation    30.10.2014    17,1 MB    12.0.21005.1
Microsoft Visual Studio 2010 Tools for Office Runtime (x64)    Microsoft Corporation    14.2.2015        10.0.50903
Microsoft Visual Studio 2010 Tools for Office Runtimen (x64) kielipaketti - FIN    Microsoft Corporation    14.2.2015        10.0.50903
Mozilla Firefox 40.0.3 (x86 fi)    Mozilla    4.9.2015    84,5 MB    40.0.3
Mozilla Maintenance Service    Mozilla    4.9.2015    341 KB    40.0.3.5716
Ralink Bluetooth Stack64    Mediatek    8.8.2013    81,8 MB    11.0.738.3
Ralink RT3290 802.11bgn Wi-Fi Adapter    Mediatek    8.8.2013        5.0.27.0
Realtek Card Reader    Realtek Semiconductor Corp.    28.3.2014        6.2.9200.29068
Realtek Ethernet Controller Driver    Realtek    8.8.2013        8.15.410.2013
Realtek High Definition Audio Driver    Realtek Semiconductor Corp.    30.10.2014        6.0.1.6950
Skype Click to Call    Microsoft Corporation    6.8.2015    13,1 MB    7.4.0.9058
Skype™ 7.8    Skype Technologies S.A.    29.8.2015    71,1 MB    7.8.102
Synaptics Pointing Device Driver    Synaptics Incorporated    30.10.2014    46,4 MB    17.0.6.2
Windows Live Essentials    Microsoft Corporation    20.7.2013        16.4.3505.0912
Windowsin ohjainpaketti - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201)    Dynastream Innovations, Inc.    11.4.2015        04/11/2012 1.2.40.201
Windowsin ohjainpaketti - Silicon Labs Software (DSI_SiUSBXp_3_1) USB  (02/06/2007 3.1)    Silicon Labs Software    11.4.2015        02/06/2007 3.1
 



#6 buddy215

buddy215

  • Moderator
  • 13,134 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:10:47 AM

Posted 19 September 2015 - 04:38 PM

Disable these Startups: Use CCleaner by clicking on each item to highlight and then choosing on the right Disable or Remove or Uninstall

Yes    HKCU:Run    CCleaner Monitoring    Piriform Ltd    "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
Yes    HKCU:Run    GarminExpressTrayApp        "C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe"

Yes    HKLM:Run    BrStsMon00    Brother Industries, Ltd.    C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe /AUTORUN

Yes    HKLM:Run    ControlCenter4    Brother Industries, Ltd.    C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe /autorun

Yes    HKLM:Run    HP Software Update    Hewlett-Packard    C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
Yes    HKLM:Run    HPMessageService    Hewlett-Packard Development Company, L.P.    C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe

Yes    HKLM:Run    StartCCC    Advanced Micro Devices, Inc.    "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
Yes    HKLM:Run    SunJavaUpdateSched    Oracle Corporation    "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

Yes    HKLM:Run    YouCam Service    CyberLink Corp.    "C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe" /s
 

Disable these Tasks:

Yes    Task    Adobe Acrobat Update Task    Adobe Systems Incorporated    C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
Yes    Task    Adobe Flash Player Updater    Adobe Systems Incorporated    C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Yes    Task    CCleanerSkipUAC    Piriform Ltd    "C:\Program Files\CCleaner\CCleaner.exe" $(Arg0)
Yes    Task    CreateChoiceProcessTask    Microsoft Corporation    C:\Windows\BrowserChoice\browserchoice.exe /launch
Yes    Task    GarminUpdaterTask        C:\Program Files (x86)\Garmin\Express Self Updater\ExpressSelfUpdater.exe
Yes    Task    GoogleUpdateTaskMachineCore    Google Inc.    C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
Yes    Task    GoogleUpdateTaskMachineUA    Google Inc.    C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

Yes    Task    Optimize Start Menu Cache Files-S-1-5-21-872180547-653541518-2545348423-500        
 

Uninstall Skype Click to Call    Microsoft Corporation    6.8.2015    13,1 MB    7.4.0.9058 (UNLESS you actually click on phone numbers in ads)

 

Run a scan using Eset and if it comes up clean....nothing found and removed....then I think you are good to go.

 

 

  • Hold down Control and click on this link to open ESET OnlineScan in a new window.
  • Click the esetonlinebtn.png button.
  • For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
  • Click on esetsmartinstaller_enu.exe to download the ESET Smart Installer. Save it to your desktop.
  • Double click on the esetsmartinstaller_enu.png icon on your desktop.
  • Check "YES, I accept the Terms of Use."
  • Click the Start button.
  • Accept any security warnings from your browser.
  • Under scan settings, check "Scan Archives" and "Remove found threats"
  • ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
  • When the scan completes, click List Threats
  • Click Export, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
  • Click the Back button.
  • Click the Finish button.
  • NOTE:Sometimes if ESET finds no infections it will not create a log.

“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users