Action Center confusing advice

[SuperDave]

Ok, how's your computer running now?

[denisaf]

Action Center report now is that there are no issues. I will see if "Not Responding" message now occurs with Firefox and report on this issue in a day or so. The "Not Responding" in Excel was probably due to the workbook being very large and the AutoRecovery set for 10 minutes and the slow response due to automatically running a large number of the RAND() functions. I know what to do to improve the Excel response.

[SuperDave]

You could try uninstalling and re-installing FireFox.

[denisaf]

Super Dave. I have reinstalled Firefox. I will report on what is happening in a couple of days.
I have not run the Malwarebytes Anti-Malware that you originally listed in the program. Is it necessary to run it now or has that issue been resolved by the subsequent tests?

[SuperDave]

Super Dave. I have reinstalled Firefox. I will report on what is happening in a couple of days.
I have not run the Malwarebytes Anti-Malware that you originally listed in the program. Is it necessary to run it now or has that issue been resolved by the subsequent tests?

Yes, please run it to see what turns up.

[denisaf]

I ran Anti-Malware. The scan took 70 minutes and examined over 437000 objects. 40 objects were identified in Show Results and removed. The PC was then rebooted. The Notepad log follows

Malwarebytes Anti-Malware (Trial) 1.75.0.1300
www.malwarebytes.org

Database version: v2014.01.07.06

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16476
denisaf :: DENISAF-PC [administrator]

Protection: Enabled

8/01/2014 9:16:37 AM
mbam-log-2014-01-08 (09-16-37).txt

Scan type: Full scan (C:\|I:\|)
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 437597
Time elapsed: 1 hour(s), 10 minute(s), 5 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 10
HKCU\Software\BrowseSmart (PUP.Optional.BrowseSmart.A) -> Quarantined and deleted successfully.
HKCU\Software\jzipmusictoolbarmo (PUP.Optional.JZipMusicToolbar.A) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Classes\AppID\DynConIE.DLL (PUP.Optional.DynConIE.A) -> Quarantined and deleted successfully.
HKLM\Software\BrowseSmart (PUP.Optional.BrowseSmart.A) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\SWEETIM (PUP.Optional.SweetIM.A) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{251ef57c-0612-478c-978e-c86d3879caa4} (PUP.Optional.MusicToolBar.A) -> Quarantined and deleted successfully.
HKCR\CLSID\{251ef57c-0612-478c-978e-c86d3879caa4} (PUP.Optional.MusicToolBar.A) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{251EF57C-0612-478C-978E-C86D3879CAA4} (PUP.Optional.MusicToolBar.A) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{251EF57C-0612-478C-978E-C86D3879CAA4} (PUP.Optional.MusicToolBar.A) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{251EF57C-0612-478C-978E-C86D3879CAA4} (PUP.Optional.MusicToolBar.A) -> Quarantined and deleted successfully.

Registry Values Detected: 2
HKLM\Software\SweetIM|simapp_id (PUP.Optional.SweetIM.A) -> Data: 1763663117034848255 -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar|{251EF57C-0612-478C-978E-C86D3879CAA4} (PUP.Optional.MusicToolBar.A) -> Data: Music Toolbar (Dist. by Bandoo Media, Inc.) -> Quarantined and deleted successfully.

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 3
C:\ProgramData\Datamngr (PUP.Optional.Datamngr.A) -> Quarantined and deleted successfully.
C:\Users\denisaf\AppData\Local\Temp\CT3317209 (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\Users\denisaf\AppData\Local\Temp\CT3317212 (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.

Files Detected: 40
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Music Toolbar\Datamngr\Datamngr.dll.vir (PUP.Optional.Bandoo.A) -> Quarantined and deleted successfully.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Music Toolbar\Datamngr\DatamngrCoordinator.exe.vir (PUP.Optional.Bandoo.A) -> Quarantined and deleted successfully.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Music Toolbar\Datamngr\DatamngrUI.exe.vir (PUP.Optional.Bandoo.A) -> Quarantined and deleted successfully.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Music Toolbar\Datamngr\IEBHO.dll.vir (PUP.Optional.Bandoo.A) -> Quarantined and deleted successfully.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Music Toolbar\Datamngr\SRTOOL~1\IE\uninstall.exe.vir (PUP.Optional.MusicToolbar.A) -> Quarantined and deleted successfully.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Music Toolbar\Datamngr\x64\Datamngr.dll.vir (PUP.Optional.Bandoo.A) -> Quarantined and deleted successfully.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Music Toolbar\Datamngr\x64\IEBHO.dll.vir (PUP.Optional.Bandoo.A) -> Quarantined and deleted successfully.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchprotect\Main\bin\CltMngSvc.exe.vir (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchprotect\Main\bin\SPTool.dll.vir (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchprotect\Main\bin\uninstall.exe.vir (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchprotect\SearchProtect\bin\cltmng.exe.vir (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchprotect\SearchProtect\bin\SPTool64.exe.vir (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchprotect\SearchProtect\bin\SPVC32.dll.vir (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchprotect\SearchProtect\bin\SPVC32Loader.dll.vir (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchprotect\SearchProtect\bin\SPVC64.dll.vir (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchprotect\SearchProtect\bin\SPVC64Loader.dll.vir (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchprotect\UI\bin\cltmngui.exe.vir (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\Users\denisaf\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\581ZV0BY\spstub[1].exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\Users\denisaf\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RC0HIJAR\SPSetup[1].exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\Users\denisaf\AppData\Local\Temp\nsh5842.exe (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Users\denisaf\AppData\Local\Temp\nsh9B4B.exe (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Users\denisaf\AppData\Local\Temp\nsm9D8D.exe (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Users\denisaf\AppData\Local\Temp\nsr55C1.exe (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Users\denisaf\AppData\Local\Temp\Yyv9z_vN.exe.part (PUP.Optional.DomaIQ) -> Quarantined and deleted successfully.
C:\Users\denisaf\Downloads\AdwCleaner_TSV16311.exe (PUP.Optional.OpenCandy) -> Quarantined and deleted successfully.
C:\Users\denisaf\Downloads\installer_avira_antivir_personal_-_free_antivirus_English.exe (PUP.Optional.Freemium.A) -> Quarantined and deleted successfully.
C:\Users\denisaf\Downloads\Java(1).exe (PUP.Optional.DomaIQ) -> Quarantined and deleted successfully.
C:\Users\denisaf\Downloads\Java.exe (PUP.Optional.DomaIQ) -> Quarantined and deleted successfully.
C:\Users\denisaf\Downloads\Java7(1).exe (PUP.Optional.Domalq) -> Quarantined and deleted successfully.
C:\Users\denisaf\Downloads\Java7.exe (PUP.Optional.Domalq) -> Quarantined and deleted successfully.
C:\Users\denisaf\Downloads\jZipSetup-r250-w-bf.exe (PUP.Optional.Bandoo.A) -> Quarantined and deleted successfully.
C:\Users\denisaf\Downloads\MailNotifierAUSetup(2).exe (PUP.Optional.Inbox) -> Quarantined and deleted successfully.
C:\Users\denisaf\Downloads\SoftonicDownloader_for_stellarium(1).exe (PUP.Optional.Softonic.A) -> Quarantined and deleted successfully.
C:\Users\denisaf\Downloads\SoftonicDownloader_for_stellarium.exe (PUP.Optional.Softonic.A) -> Quarantined and deleted successfully.
C:\ProgramData\Datamngr\coordinator.cfg (PUP.Optional.Datamngr.A) -> Quarantined and deleted successfully.
C:\ProgramData\Datamngr\general.cfg (PUP.Optional.Datamngr.A) -> Quarantined and deleted successfully.
C:\ProgramData\Datamngr\S-1-5-21-3023884638-2710209032-2036161082-1000.cfg (PUP.Optional.Datamngr.A) -> Quarantined and deleted successfully.
C:\ProgramData\Datamngr\S-1-5-32.cfg (PUP.Optional.Datamngr.A) -> Quarantined and deleted successfully.
C:\Users\denisaf\AppData\Local\Temp\CT3317209\ddt.csf (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\Users\denisaf\AppData\Local\Temp\CT3317212\ddt.csf (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.

(end)

[SuperDave]

Wow, that was a lot of infections. How's your computer running now?

[denisaf]

SuperDave
Occasionally the message
 "Warning: Unresponsive Plugin
Shockwave Flash - stop or continue" appears and holds things up. I understand that it is a sound process and I could cancel that message without causing any problems although there will be a slow response on occasions.

[SuperDave]

Why not disable that plugin?

Update Your Java (JRE)

Old versions of Java have vulnerabilities that malware can use to infect your system.

First Verify your Java Version

If there are any other version(s) installed then update now.

Get the new version (if needed)

If your version is out of date install the newest version of the Sun Java Runtime Environment.

Note: UNCHECK any pre-checked toolbar and/or software offered with the Java update. The pre-checked toolbars/software are not part of the Java update.

Be sure to close ALL open web browsers before starting the installation.

Remove any old versions

1. Download JavaRa and unzip the file to your Desktop.
2. Open JavaRA.exe and choose Remove Older Versions
3. Once complete exit JavaRA.

Additional Note: The Java Quick Starter (JQS.exe) adds a service to improve the initial startup time of Java applets and applications. To disable the JQS service if you don't want to use it, go to Start > Control Panel > Java > Advanced > Miscellaneous and uncheck the box for Java Quick Starter. Click OK and reboot your computer.
*****************************************
Click Start> Computer> right click the C Drive and choose Properties> enter
Click Disk Cleanup from there.



Click OK on the Disk Cleanup Screen.
Click Yes on the Confirmation screen.



This runs the Disk Cleanup utility along with other selections if you have chosen any. (if you had a lot System Restore points, you will see a significant change in the free space in C drive)

[denisaf]

Latest Java is installed and an old version uninstalled. Disk clean up freed up quite a slice.

[SuperDave]

Go to Microsoft Windows Update and get all critical updates.

----------

I suggest using WOT - Web of Trust. WOT is a free Internet security addon for your browser. It will keep you safe from online scams, identity theft, spyware, spam, viruses and unreliable shopping sites. WOT warns you before you interact with a risky website. It's easy and it's free.

Check out Keeping Yourself Safe On The Web for tips and free tools to help keep you safe in the future.

Also see Slow Computer? It may not be Malware for free cleaning/maintenance tools to help keep your computer running smoothly.
Safe Surfing!

[denisaf]

Thank you, SuperDave for all your help. I will record your last post as it provides advice on how to ensure this pc is being used soundly. I need this record to refer to periodically as I am too old to remember how to handle the increasing complexity.

[SuperDave]

You're welcome. I will lock this thread. If you need it re-opened, please send me a pm.