Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

will the following really remove malware?


  • Please log in to reply
17 replies to this topic

#1 Tierra93

Tierra93

  • Members
  • 206 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:06:27 AM

Posted 28 December 2015 - 09:15 PM

I received a false BSOD malware on the 19th. I requested help at TSF on 19th with bumps to remove it but TSF hasn't been answering my requests for help removing it.

 

My computer manufacturer told me to just download and run Kaspersky's tool Tdsskiller and run malwarebytes (which I run daily and it's not found anything) and download and run ADW Cleaner and that would make my computer clean. I find this difficult to believe. Is this true? They're a small company that doesn't do malware removal.

 

BTW, it was sandboxed (with sandboxie) when it happened. Unfortunately, I didn't know it was false and called the supposed MS phone number and let them take over my computer. It became obvious it was a scam as they didn't know much about computers (I really don't know much about computers but knew more than they did). I was new to windows 10 and everything looks different so thought the BSODs looked different too. I know better now.

 

Thank you.


Edited by Tierra93, 28 December 2015 - 09:17 PM.


BC AdBot (Login to Remove)

 


#2 buddy215

buddy215

  • Moderator
  • 13,195 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:08:27 AM

Posted 28 December 2015 - 09:25 PM

Did you allow the scammers access to your computer?

 

AdwCleaner is very good at removing adware. Well supported and used all across the web by professionals.

Same goes for Junkware Removal Tool.

 

Below are the instructions given here at BC for both of the above programs. If you would like, post the results for review.

I've included instructions for using two more programs as well.

 

Use CCleaner to remove Temporary files, program caches, cookies, logs, etc. Use the Default settings. No need to use the

Registry Cleaning Tool...risky. Pay close attention while installing and UNcheck offers of toolbars....especially Google.

After install, open CCleaner and run by clicking on the Run Cleaner button in the bottom right corner.

CCleaner - PC Optimization and Cleaning - Free Download

 

Download AdwCleaner by Xplode onto your desktop.

  • Close all open programs and internet browsers.
  • Double click on adwcleaner.exe to run the tool.
  • Click on Scan button.
  • When the scan has finished click on Clean button.
  • Your computer will be rebooted automatically. A text file will open after the restart.
  • Please post the contents of that logfile with your next reply.
  • You can find the logfile at C:\AdwCleaner[S1].txt as well.
  • download Junkware Removal Tool to your desktop.
  • Shut down your protection software now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message
  • Hold down Control and click on this link to open ESET OnlineScan in a new window.
  • Click the esetonlinebtn.png button.
  • For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
  • Click on esetsmartinstaller_enu.exe to download the ESET Smart Installer. Save it to your desktop.
  • Double click on the esetsmartinstaller_enu.png icon on your desktop.
  • Check "YES, I accept the Terms of Use."
  • Click the Start button.
  • Accept any security warnings from your browser.
  • Under scan settings, check "Scan Archives" and "Remove found threats"
  • ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
  • When the scan completes, click List Threats
  • Click Export, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
  • Click the Back button.
  • Click the Finish button.
  • NOTE:Sometimes if ESET finds no infections it will not create a log.

“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#3 Tierra93

Tierra93
  • Topic Starter

  • Members
  • 206 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:06:27 AM

Posted 28 December 2015 - 09:30 PM

Hi buddy215

 

Thank you for the information.  I have CCleaner (and never run the registry cleaner).  Also, I've already done ESET online and they didn't find anything.

 

Do I need to do the above in order?

 

Thank you.



#4 buddy215

buddy215

  • Moderator
  • 13,195 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:08:27 AM

Posted 28 December 2015 - 09:35 PM

Did you allow the scammer to access your computer? There was a good reason for asking that.

 

You can run those tools in any order. I prefer running CCleaner first as it may shorten the scan time.


“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#5 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,471 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:09:27 AM

Posted 29 December 2015 - 07:38 AM

AdwCleaner is a portable adware cleaner created by Xplode (a BC Security Colleague) that is designed to search for and remove many potentially unwanted programs (PUPs), adware, toolbars, browser hijackers, browser extensions, add-ons/plug-ins, browser helper objects (BHOs) and other junkware as well as related services, registry entries (values, keys), files, folders and potentially unwanted extensions.

However, no single product is 100% foolproof and can prevent, detect and remove all threats at any given time. Therefore it may take a series of several scans to clean all the malware from your computer so just follow whatever instructions are provided by buddy215.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#6 Tierra93

Tierra93
  • Topic Starter

  • Members
  • 206 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:06:27 AM

Posted 29 December 2015 - 09:04 AM

Thank you buddy215 and quietman7.

 

Unfortunately, I did let them take control.

 

Also, should I run everything in safe mode with networking?

 

Should I go to every account to run CCleaner before starting the rest?

 

Thank you.



#7 Tierra93

Tierra93
  • Topic Starter

  • Members
  • 206 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:06:27 AM

Posted 29 December 2015 - 09:43 AM

Here's the file from AdwCleaner (I didn't do in safe mode):

 

 

# AdwCleaner v5.026 - Logfile created 29/12/2015 at 06:40:17
# Updated 21/12/2015 by Xplode
# Database : 2015-12-23.1 [Server]
# Operating system : Windows 10 Home  (x64)
# Username : 777 - DESKTOP-QE9K77P
# Running from : C:\Users\777\Desktop\AdwCleaner.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****


***** [ Files ] *****


***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****


***** [ Web browsers ] *****

[-] [C:\Users\4\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : aol.com
[-] [C:\Users\4\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : ask.com

*************************

:: "Tracing" keys removed
:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [874 bytes] ##########


Edited by Tierra93, 29 December 2015 - 09:44 AM.


#8 Tierra93

Tierra93
  • Topic Starter

  • Members
  • 206 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:06:27 AM

Posted 29 December 2015 - 09:49 AM

Here's the results of the JRT:

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.1 (11.24.2015)
Operating System: Windows 10 Home x64
Ran by 777 (Administrator) on 2015-12-29 at  6:46:46.30
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 0




Registry: 0





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 2015-12-29 at  6:48:15.50
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 



#9 Tierra93

Tierra93
  • Topic Starter

  • Members
  • 206 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:06:27 AM

Posted 29 December 2015 - 10:23 AM

I ran ESET online scanner once again (3rd time since this happened - I usually run after downloading something, think there may be malware, or monthly to be sure no malware (I know not 100% sure - however, feel safer running it monthly)). 

 

It found nothing, again.

 

Do you think it's safe to download ebooks to my kindle by USB cord - or do I have malware still?

 

I have a few screen shots from when my computer was taken over by the phony MS techs.  Would that help?  I'm not sure how to attach in this forum.

 

Thank you very much for your help.


Edited by Tierra93, 29 December 2015 - 10:25 AM.


#10 buddy215

buddy215

  • Moderator
  • 13,195 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:08:27 AM

Posted 29 December 2015 - 11:05 AM

I doubt that malware was installed by the scammers or you would of found some evidence of that. But their

software used to access your computer may still be there unless you have deleted/ uninstalled it.

 

That scammer's ad is usually a result of some adware being on the computer. What was removed I wouldn't suspect being the source

of the scam ad.

 

Download Malwarebytes' Anti-Malware from Here

Double-click mbam-setup-2.X.X.XXXX.exe to install the application (X's are the current version number).

  • Make sure a checkmark is placed next to Launch Malwarebytes' Anti-Malware, then click Finish.
  • Once MBAM opens, when it says Your databases are out of date, click the Fix Now button.
  • Click the Settings tab at the top, and then in the left column, select Detections and Protections, and if not already checked place a checkmark in the selection box for Scan for rootkits.
  • Click the Scan tab at the top of the program window, select Threat Scan and click the Scan Now button.
  • If you receive a message that updates are available, click the Update Now button (the update will be downloaded, installed, and the scan will start).
  • When MBAM is finished scanning it will display a screen that displays any malware that it has detected.
  • Click the Remove Selected button.
  • MBAM will now delete all of the files and registry keys and add them to the programs quarantine. When removing the files, MBAM may require a reboot in order to remove some of them. If it displays a message stating that it needs to reboot, please allow it to do so.
  • While still on the Scan tab, click the link for View detailed log, and in the window that opens click the Export button, select Text file (*.txt), and save the log to your Desktop.
  • The log is automatically saved by MBAM and can also be viewed by clicking the History tab and then selecting Application Logs.

POST THE LOG FOR  REVIEW.

 

Post the three lists mentioned below using CCleaner.

Open CCleaner and click on Tools. Choose Startups. On that page you will see a list of Windows Startups and at the top tabs for each browser and Scheduled Tasks.

At the bottom right of that page you will see a button when clicked will allow you to Copy and Paste the list of Windows Startups and Scheduled Tasks into your next

post. Please do that.

 

Open CCleaner and click on Tools. Choose Uninstall. On that page you will see a list of programs installed on your computer and at the bottom right of that page you

will see a button when clicked will allow you to Copy and Paste that list in your next post. Please do that.


“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#11 Tierra93

Tierra93
  • Topic Starter

  • Members
  • 206 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:06:27 AM

Posted 29 December 2015 - 11:52 AM

Hi Buddy215,

 

I think the phony BSOD was loaded (sandboxed) when I couldn't get a video to play on FF (I have a lot of protection on FF) and tried chrome.  As soon as I loaded the page the phony BSOD popped up.  I found out later that even though usually a safe site (I check by clicking on the noscripts with the wheel and checking the different sites for the sites I use - I do this regularly for sites I use regularly) it had been attacked that day when I went to watch a vid.  I'm most worried about what they did after taking control of my computer as chrome (and FF) was sandboxed (although, I know that isn't total protection - just one layer).

 

I update and scan with both malwarebytes and window defenders daily.  Had already this morning; however, when checking I didn't have rootkits checked so have checked it and scanned.  Malwarebytes  has not found anything at all at any time, even the latest scan with rootkit checked.  I can't find the link for view detailed log.  But found save results and clicked and copied:

 

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 2015-12-29
Scan Time: 08:38 AM
Logfile:
Administrator: Yes

Version: 2.2.0.1024
Malware Database: v2015.12.29.04
Rootkit Database: v2015.12.26.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 10
CPU: x64
File System: NTFS
User: 777

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 521028
Time Elapsed: 10 min, 49 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 0
(No malicious items detected)

Physical Sectors: 0
(No malicious items detected)


(end)

 

I'll do the CCLeaner now.

 

Thank you, once again.



#12 Tierra93

Tierra93
  • Topic Starter

  • Members
  • 206 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:06:27 AM

Posted 29 December 2015 - 11:58 AM

Here are the CCleaner requested (I only counted 2 not 3 - it could be me - I have poor vision):

 

Startups:

 

Yes    Task    CCleanerSkipUAC    Piriform Ltd    "C:\Program Files\CCleaner\CCleaner.exe" $(Arg0)
Yes    Task    GoogleUpdateTaskMachineCore    Google Inc.    C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
Yes    Task    GoogleUpdateTaskMachineUA    Google Inc.    C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
 

 

Install:
3D Builder    Microsoft Corporation    2015-12-13        10.10.38.0
Adobe Acrobat Reader DC    Adobe Systems Incorporated    2015-12-12    373 MB    15.009.20079
Adobe Flash Player 20 NPAPI    Adobe Systems Incorporated    2015-12-24    17.9 MB    20.0.0.235
Alarms & Clock    Microsoft Corporation    2015-12-29        10.1512.58020.0
App connector    Microsoft Corporation    2015-12-12        1.3.3.0
ASUS Welcome    ASUSTeK COMPUTER INC.    2015-12-12        1.0.1.0
Calculator    Microsoft Corporation    2015-12-18        10.1512.47020.0
Camera    Microsoft Corporation    2015-12-16        2015.1211.10.0
Candy Crush Soda Saga    king.com    2015-12-17        1.57.200.0
Canon Easy-WebPrint EX    Canon Inc.    2015-11-24    17.8 MB    1.6.0.0
Canon IJ Network Scanner Selector EX    Canon Inc.    2015-11-24    2.66 MB    1.5.2.3
Canon IJ Network Tool    Canon Inc.    2015-11-23        3.5.0
Canon IJ Scan Utility    Canon Inc.    2015-11-24    18.4 MB    1.1.10.15
Canon Inkjet Printer/Scanner/Fax Extended Survey Program    Canon Inc.    2015-11-23        4.2.0
Canon MG6600 series MP Drivers    Canon Inc.    2015-11-23        1.00
Canon MG6600 series On-screen Manual    Canon Inc.    2015-11-23        7.7.0
Canon MG6600 series User Registration    ‭Canon Inc.    2015-11-23        
Canon My Image Garden    Canon Inc.    2015-11-24    348 MB    3.3.0
Canon My Image Garden Design Files    Canon Inc.    2015-11-24    348 MB    3.2.0
Canon My Printer    Canon Inc.    2015-11-24    13.1 MB    3.3.0
Canon Quick Menu    Canon Inc.    2015-11-24    20.2 MB    2.6.1
CCleaner    Piriform    2015-12-29    17.4 MB    5.13
ESET Online Scanner v3        2015-12-19        
f.lux        2015-12-12        
Get Office    Microsoft Corporation    2015-12-12        17.6508.23761.0
Get Skype    Skype    2015-12-12        3.2.1.0
Get Started    Microsoft Corporation    2015-12-12        2.5.6.0
Google Chrome    Google Inc.    2015-11-12    465 MB    47.0.2526.106
Groove Music    Microsoft Corporation    2015-12-12        3.6.15131.0
Mail and Calendar    Microsoft Corporation    2015-12-19        17.6515.64021.0
Malwarebytes Anti-Malware version 2.2.0.1024    Malwarebytes    2015-11-13    55.9 MB    2.2.0.1024
Maps    Microsoft Corporation    2015-12-15        4.1512.3450.0
Messaging + Skype    Microsoft Corporation    2015-12-19        2.12.15004.0
Microsoft Office Home and Student 2010    Microsoft Corporation    2015-12-16    27.8 MB    14.0.7015.1000
Microsoft Solitaire Collection    Microsoft Studios    2015-12-19        3.6.12153.0
Microsoft Visual C++ 2005 Redistributable    Microsoft Corporation    2015-11-18    9.69 MB    8.0.61001
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219    Microsoft Corporation    2015-11-18    27.6 MB    10.0.40219
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219    Microsoft Corporation    2015-11-18    23.5 MB    10.0.40219
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610    Microsoft Corporation    2015-11-12    20.5 MB    11.0.60610.1
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610    Microsoft Corporation    2015-11-12    17.3 MB    11.0.60610.1
Microsoft Visual Studio 2010 Tools for Office Runtime (x64)    Microsoft Corporation    2015-11-20    17.1 MB    10.0.50903
Microsoft Wi-Fi    Microsoft Corporation    2015-12-12        1.1511.2.0
Money    Microsoft Corporation    2015-12-12        4.7.118.0
Movies & TV    Microsoft Corporation    2015-12-12        3.6.15731.0
Mozilla Firefox 43.0.3 (x86 en-US)    Mozilla    2015-12-28    89.5 MB    43.0.3
Mozilla Maintenance Service    Mozilla    2015-12-28    233 KB    43.0.3.5835
News    Microsoft Corporation    2015-12-12        4.7.118.0
OneNote    Microsoft Corporation    2015-12-12        17.6366.15841.0
People    Microsoft Corporation    2015-12-19        10.0.3450.0
Phone    Microsoft Corporation    2015-12-12        2.12.2002.0
Phone Companion    Microsoft Corporation    2015-12-12        10.1511.18010.0
Photos    Microsoft Corporation    2015-12-12        15.1208.10480.0
Realtek High Definition Audio Driver    Realtek Semiconductor Corp.    2015-11-13    40.0 MB    6.0.1.7503
Sandboxie 5.06 (64-bit)    Sandboxie Holdings, LLC    2015-11-18        5.06
Sports    Microsoft Corporation    2015-12-12        4.7.130.0
SpywareBlaster 5.4    BrightFort LLC    2015-12-24    8.04 MB    5.4.0
Store    Microsoft Corporation    2015-12-17        2015.25.5.0
Sway    Microsoft Corporation    2015-12-19        17.6509.20251.0
Twitter    Twitter Inc.    2015-12-18        4.3.3.0
VLC media player    VideoLAN    2015-11-24    118 MB    2.2.1
Voice Recorder    Microsoft Corporation    2015-12-22        10.1512.21110.0
Weather    Microsoft Corporation    2015-12-12        4.7.118.0
Windows Driver Package - U.S. Robotics Corporation Model 5637 Voice Driver (01/28/2011 3.1.0.46)    U.S. Robotics Corporation    2015-11-18        01/28/2011 3.1.0.46
Xbox    Microsoft Corporation    2015-12-12        11.12.9011.0
 

 

Thank you.



#13 Tierra93

Tierra93
  • Topic Starter

  • Members
  • 206 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:06:27 AM

Posted 29 December 2015 - 12:00 PM

I found windows start ups I think that's what is missing:

 

Yes    HKCU:Run    CCleaner Monitoring    Piriform Ltd    "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
Yes    HKCU:Run    f.lux    Flux Software LLC    "C:\Users\777\AppData\Local\FluxSoftware\Flux\flux.exe" /noshow
Yes    HKCU:Run    OneDrive    Microsoft Corporation    "C:\Users\777\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
No    HKLM:Run    CanonQuickMenu    CANON INC.    C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE /logon
No    HKLM:Run    IJNetworkScannerSelectorEX    CANON INC.    C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe /FORCE
Yes    HKLM:Run    RTHDVCPL    Realtek Semiconductor    "C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
 



#14 buddy215

buddy215

  • Moderator
  • 13,195 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:08:27 AM

Posted 29 December 2015 - 12:27 PM

Disable ALL three Scheduled Tasks: Use CCleaner by clicking on each item and then choosing Disable on the right.

 

Uninstall this program:

Candy Crush Soda Saga    king.com    2015-12-17        1.57.200.0 (Unless you intentionally installed it and use it)

 

I don't see any security program in Windows Startups....is it possible you didn't copy all of the startups?

 

If you don't have Adblock Plus installed in Google Chrome and Firefox I suggest you install it. Once installed, click on its ABP icon and

choose Filter Preferences. Then UNcheck the box next to Allow some non-intrusive advertisements.

Adblock Plus :: Add-ons for Firefox

Adblock Plus - Chrome Web Store


“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#15 Tierra93

Tierra93
  • Topic Starter

  • Members
  • 206 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:06:27 AM

Posted 29 December 2015 - 12:44 PM

Thank you, again buddy215!

 

I disabled the three scheduled tasks.  I never heard of Candy Crush Soda Saga and it wasn't in add/remove programs but removed with CCleaner. 

 

I have windows defender, malwarebytes, spywareblaster, and sandboxie.  On FF I have adblock plus, WOT, noscripts, ghostrery, better privacy, cookie monster, redirect remover.  I've only used Chrome the one time so hadn't added any addons/plugins to it and will add some, including adblock plus. 

 

I don't know why it's not showing any security programs.  I  did copy all the startups.






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users