Computer Hope
Software => Computer viruses and spyware => Topic started by: debby on February 08, 2018, 04:26:42 PM
-
My computer has been acting strangely, freezing on websites and I have to X out of what I was doing, get off the internet and start all over again, and then it will work until it happens again. There are just a few things that don't seem to "jive" to me. When I go to shut it down for the night, something pops up on the screen telling me it cannot.....and then the blue screen comes on before I can read what it says and shuts my computer off. I have a Dell Inspirion i-5 - 4460, CPU @ 3.20 GHz, RAM 8 GB, 64-bit. I have read the "Please Read" on the forum and I have used CCCleaner and Malwarebyes, etc., before and want to try it again to see if it helps make the computer run better. I have Windows Defender and I ran a scan. It came up no threats detected but I don't know if I trust it. What do you think?
-
Hello and welcome to Computer Hope Forum. My name is Dave. I will be helping you out with your particular problem on your computer.
1. I will be working on your Malware issues. This may or may not solve other issues you have with your machine.
2. The fixes are specific to your problem and should only be used for this issue on this machine.
3. If you don't know or understand something, please don't hesitate to ask.
4. Please DO NOT run any other tools or scans while I am helping you.
5. It is important that you reply to this thread. Do not start a new topic.
6. Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.
7. Absence of symptoms does not mean that everything is clear.
If you can't access the internet with your infected computer you will have to download and transfer any programs to the computer you're using now and transfer them to the infected computer with a CD-RW or a USB storage device. I prefer a CD because a storage device can get infected. If you use a storage device hold the shift key down while inserting the USB storage device for about 10 secs. You will also have to transfer the logs you receive back to the good computer using the same method until we can get the computer back on-line.
*************************************************************************
Please download AdwareCleaner onto your Desktop. AdwCleaner (http://www.bleepingcomputer.com/download/adwcleaner/)
Before starting AdwCleaner, close all open programs and internet browsers, then double-click on the AdwCleaner icon.
(http://i424.photobucket.com/albums/pp322/digistar/AdwCleaner-icon.jpg)
If Windows prompts you as to whether or not you wish to run AdwCleaner, please allow it to run.
When the AdwCleaner program will open, click on the Scan button as shown below.
(http://i424.photobucket.com/albums/pp322/digistar/untitled.png)
AdwCleaner will now start to search for malicious files that may be installed on your computer.
To remove the files that were detected in the previous step, please click on the Clean button.
(http://i424.photobucket.com/albums/pp322/digistar/3.png)
AdwCleaner will now prompt you to save any open files or data as the program will need to reboot the computer. Please do so and then click on the OK button. AdwCleaner will now delete all detected adware from your computer. When it is done it will display an alert that explains what PUPs (Potentially Unwanted Programs) and Adware are. Please read through this information and then press the OK button. You will now be presented with an alert that states AdwCleaner needs to reboot your computer.
Please click on the OK button to allow AdwCleaner reboot your computer.A log will be produced. Please copy and paste this log in your next reply.
*********************************************
(http://i424.photobucket.com/albums/pp322/digistar/mbamicontw5.gif) Download and install: Please download Malwarebytes' scanner (http://downloads.malwarebytes.org/file/mbam) to your desktop.
Double Click mbam-setup.exe to install the application.
- It should update automatically if the computer is connected to the internet.
- Click on Threat Scan and click on Scan Now.
- The scan may take some time to finish,so please be patient.
- When the scan is complete make sure all the infections have "quarantine" selected in the Action box.
- Click on "Apply actions" You may be asked to Restart your computer to completely remove the infections.
- When disinfection is completed you can click on "Copy to Clipboard".
- Paste the log in you next reply (CTRL+ V)
*************************************************
Download Security Check by screen317 from the following link and save it to your desktop.
Security Check (http://www.bleepingcomputer.com/download/securitycheck/)
* Double-click Security Check.bat
* Follow the on-screen instructions inside of the black box.
* A Notepad document should open automatically called checkup.txt
* Post the contents of that document in your next reply.
Note: If a security program requests permission from dig.exe to access the Internet, allow it to do so.
-
Hopefully, here are my results SuperDaveL
# Updated on 2018/08/02 by Malwarebytes
# Running on Windows 10 Home (X64)
# Mode: clean
# Support: https://www.malwarebytes.com/support
***** [ Services ] *****
Deleted: WtuSystemSupport
Deleted: vToolbarUpdater40.2.8
***** [ Folders ] *****
Deleted: C:\ProgramData\AVG Secure Search
Deleted: C:\ProgramData\Application Data\AVG Secure Search
Deleted: C:\Program Files\Common Files\AVG Secure Search
Deleted: C:\Program Files (x86)\Common Files\AVG Secure Search
Deleted: C:\Users\All Users\AVG Secure Search
Deleted: C:\ProgramData\AVG Security Toolbar
Deleted: C:\ProgramData\Application Data\AVG Security Toolbar
Deleted: C:\Users\All Users\AVG Security Toolbar
Deleted: C:\Windows\System32\config\systemprofile\AppData\Local\YSearchUtil
Deleted: C:\Windows\SysWOW64\config\systemprofile\AppData\Local\YSearchUtil
Deleted: C:\Users\robnd\AppData\Local\YSearchUtil
Deleted: C:\ProgramData\avg web tuneup
Deleted: C:\ProgramData\Application Data\avg web tuneup
Deleted: C:\Program Files\avg web tuneup
Deleted: C:\Program Files (x86)\avg web tuneup
Deleted: C:\Users\All Users\avg web tuneup
Deleted: C:\Users\robnd\AppData\Local\avg web tuneup
Deleted: C:\Program Files (x86)\Yahoo!\yset
Deleted: C:\Program Files\Reimage
***** [ Files ] *****
Deleted: C:\Windows\Reimage.ini
Deleted: C:\Windows\Temp\reimage.log
Deleted: C:\Users\robnd\AppData\Local\Temp\reimage.log
Deleted: C:\Users\robnd\AppData\Local\Temp\ReimagePackage.exe
***** [ DLL ] *****
No malicious DLLs cleaned.
***** [ WMI ] *****
No malicious WMI cleaned.
***** [ Shortcuts ] *****
No malicious shortcuts cleaned.
***** [ Tasks ] *****
No malicious tasks deleted.
***** [ Registry ] *****
Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\ask.com
Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\d16fk4ms6rqz1v.cloudfront.net
Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\d1af033869koo7.cloudfront.net
Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\d22j4fzzszoii2.cloudfront.net
Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\d2m2wsoho8qq12.cloudfront.net
Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\d386fcgv8lq3dy.cloudfront.net
Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\d3mwhxgzltpnyp.cloudfront.net
Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\dotomi.com
Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\driverupdate.net
Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\everydaylookup.dl.tb.ask.com
Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\plarium.com
Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\staticimgfarm.com
Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\ttdetect.staticimgfarm.com
Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.driverupdate.net
Deleted: [Key] - HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\metrolyrics.com
Deleted: [Key] - HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\www.metrolyrics.com
Deleted: [Key] - HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\metrolyrics.com
Deleted: [Key] - HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\www.metrolyrics.com
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Yahoo! SearchSet
Deleted: [Key] - HKLM\SOFTWARE\AVG Tuneup
Deleted: [Key] - HKLM\SOFTWARE\Classes\CLSID\{10ECCE17-29B5-4880-A8F5-EAD298611484}
Deleted: [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{10ECCE17-29B5-4880-A8F5-EAD298611484}
Deleted: [Key] - HKLM\SOFTWARE\Classes\CLSID\{801B440B-1EE3-49B0-B05D-2AB076D4E8CB}
Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{9BB31AD8-5DB2-459E-A901-DEA536F23BA4}
Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{BD51A48E-EB5F-4454-8774-EF962DF64546}
Deleted: [Key] - HKLM\SOFTWARE\Classes\TypeLib\{FA6468D2-FAA4-4951-A53B-2A5CF9CC0A36}
Deleted: [Key] - HKLM\SOFTWARE\Classes\AppID\{28FF42B8-A0DA-4BE5-9B81-E26DD59B350A}
Deleted: [Key] - HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
Deleted: [Key] - HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Deleted: [Key] - HKLM\SOFTWARE\Classes\CLSID\{CA3A5461-96B5-46DD-9341-5350D3C94615}
Deleted: [Key] - HKLM\SOFTWARE\Classes\TypeLib\{4BC8AD89-AC5F-4DBD-A38F-C355C7DD33D7}
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\services
Deleted: [Key] - HKLM\SOFTWARE\Classes\AppID\REI_AxControl.DLL
Deleted: [Key] - HKLM\SOFTWARE\MozillaPlugins\@avg.com\AVG SiteSafety plugin,version=11.0.0.1,application\x-avg-sitesafety-plugin
Deleted: [Key] - HKLM\SOFTWARE\Google\Chrome\NativeMessagingHosts\avgsh
Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\monopoly-usa-2013.en.softonic.com
Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\softonic.com
Deleted: [Key] - HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\arcsoft-mediaimpression.en.softonic.com
Deleted: [Key] - HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\softonic.com
Deleted: [Key] - HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\arcsoft-mediaimpression.en.softonic.com
Deleted: [Key] - HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\softonic.com
Deleted: [Key] - HKU\S-1-5-21-1257307892-3730737748-3268639384-1001\Software\Local AppWizard-Generated Applications\Reimage - Windows Problem Relief.
Deleted: [Key] - HKCU\Software\Local AppWizard-Generated Applications\Reimage - Windows Problem Relief.
Deleted: [Key] - HKLM\SOFTWARE\Reimage
Deleted: [Key] - HKU\S-1-5-21-1257307892-3730737748-3268639384-1001\Software\Reimage
Deleted: [Key] - HKCU\Software\Reimage
Deleted: [Key] - HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\download.driversupport.com
Deleted: [Key] - HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\driversupport.com
Deleted: [Key] - HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\download.driversupport.com
Deleted: [Key] - HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\driversupport.com
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries deleted.
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries deleted.
*************************
::Tracing keys deleted
::Winsock settings cleared
::Additional Actions: 0
*************************
C:/AdwCleaner/AdwCleaner[S0].txt - [9416 B] - [2018/2/9 19:5:8]
# Updated on 2018/08/02 by Malwarebytes
# Running on Windows 10 Home (X64)
# Mode: clean
# Support: https://www.malwarebytes.com/support
***** [ Services ] *****
Deleted: WtuSystemSupport
Deleted: vToolbarUpdater40.2.8
***** [ Folders ] *****
Deleted: C:\ProgramData\AVG Secure Search
Deleted: C:\ProgramData\Application Data\AVG Secure Search
Deleted: C:\Program Files\Common Files\AVG Secure Search
Deleted: C:\Program Files (x86)\Common Files\AVG Secure Search
Deleted: C:\Users\All Users\AVG Secure Search
Deleted: C:\ProgramData\AVG Security Toolbar
Deleted: C:\ProgramData\Application Data\AVG Security Toolbar
Deleted: C:\Users\All Users\AVG Security Toolbar
Deleted: C:\Windows\System32\config\systemprofile\AppData\Local\YSearchUtil
Deleted: C:\Windows\SysWOW64\config\systemprofile\AppData\Local\YSearchUtil
Deleted: C:\Users\robnd\AppData\Local\YSearchUtil
Deleted: C:\ProgramData\avg web tuneup
Deleted: C:\ProgramData\Application Data\avg web tuneup
Deleted: C:\Program Files\avg web tuneup
Deleted: C:\Program Files (x86)\avg web tuneup
Deleted: C:\Users\All Users\avg web tuneup
Deleted: C:\Users\robnd\AppData\Local\avg web tuneup
Deleted: C:\Program Files (x86)\Yahoo!\yset
Deleted: C:\Program Files\Reimage
***** [ Files ] *****
Deleted: C:\Windows\Reimage.ini
Deleted: C:\Windows\Temp\reimage.log
Deleted: C:\Users\robnd\AppData\Local\Temp\reimage.log
Deleted: C:\Users\robnd\AppData\Local\Temp\ReimagePackage.exe
***** [ DLL ] *****
No malicious DLLs cleaned.
***** [ WMI ] *****
No malicious WMI cleaned.
***** [ Shortcuts ] *****
No malicious shortcuts cleaned.
***** [ Tasks ] *****
No malicious tasks deleted.
***** [ Registry ] *****
Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\ask.com
Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\d16fk4ms6rqz1v.cloudfront.net
Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\d1af033869koo7.cloudfront.net
Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\d22j4fzzszoii2.cloudfront.net
Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\d2m2wsoho8qq12.cloudfront.net
Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\d386fcgv8lq3dy.cloudfront.net
Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\d3mwhxgzltpnyp.cloudfront.net
Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\dotomi.com
Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\driverupdate.net
Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\everydaylookup.dl.tb.ask.com
Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\plarium.com
Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\staticimgfarm.com
Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\ttdetect.staticimgfarm.com
Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.driverupdate.net
Deleted: [Key] - HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\metrolyrics.com
Deleted: [Key] - HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\www.metrolyrics.com
Deleted: [Key] - HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\metrolyrics.com
Deleted: [Key] - HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\www.metrolyrics.com
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Yahoo! SearchSet
Deleted: [Key] - HKLM\SOFTWARE\AVG Tuneup
Deleted: [Key] - HKLM\SOFTWARE\Classes\CLSID\{10ECCE17-29B5-4880-A8F5-EAD298611484}
Deleted: [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{10ECCE17-29B5-4880-A8F5-EAD298611484}
Deleted: [Key] - HKLM\SOFTWARE\Classes\CLSID\{801B440B-1EE3-49B0-B05D-2AB076D4E8CB}
Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{9BB31AD8-5DB2-459E-A901-DEA536F23BA4}
Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{BD51A48E-EB5F-4454-8774-EF962DF64546}
Deleted: [Key] - HKLM\SOFTWARE\Classes\TypeLib\{FA6468D2-FAA4-4951-A53B-2A5CF9CC0A36}
Deleted: [Key] - HKLM\SOFTWARE\Classes\AppID\{28FF42B8-A0DA-4BE5-9B81-E26DD59B350A}
Deleted: [Key] - HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
Deleted: [Key] - HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Deleted: [Key] - HKLM\SOFTWARE\Classes\CLSID\{CA3A5461-96B5-46DD-9341-5350D3C94615}
Deleted: [Key] - HKLM\SOFTWARE\Classes\TypeLib\{4BC8AD89-AC5F-4DBD-A38F-C355C7DD33D7}
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\services
Deleted: [Key] - HKLM\SOFTWARE\Classes\AppID\REI_AxControl.DLL
Deleted: [Key] - HKLM\SOFTWARE\MozillaPlugins\@avg.com\AVG SiteSafety plugin,version=11.0.0.1,application\x-avg-sitesafety-plugin
Deleted: [Key] - HKLM\SOFTWARE\Google\Chrome\NativeMessagingHosts\avgsh
Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\monopoly-usa-2013.en.softonic.com
Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\softonic.com
Deleted: [Key] - HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\arcsoft-mediaimpression.en.softonic.com
Deleted: [Key] - HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\softonic.com
Deleted: [Key] - HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\arcsoft-mediaimpression.en.softonic.com
Deleted: [Key] - HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\softonic.com
Deleted: [Key] - HKU\S-1-5-21-1257307892-3730737748-3268639384-1001\Software\Local AppWizard-Generated Applications\Reimage - Windows Problem Relief.
Deleted: [Key] - HKCU\Software\Local AppWizard-Generated Applications\Reimage - Windows Problem Relief.
Deleted: [Key] - HKLM\SOFTWARE\Reimage
Deleted: [Key] - HKU\S-1-5-21-1257307892-3730737748-3268639384-1001\Software\Reimage
Deleted: [Key] - HKCU\Software\Reimage
Deleted: [Key] - HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\download.driversupport.com
Deleted: [Key] - HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\driversupport.com
Deleted: [Key] - HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\download.driversupport.com
Deleted: [Key] - HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\driversupport.com
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries deleted.
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries deleted.
*************************
::Tracing keys deleted
::Winsock settings cleared
::Additional Actions: 0
*************************
C:/AdwCleaner/AdwCleaner[S0].txt - [9416 B] - [2018/2/9 19:5:8]
Results of screen317's Security Check version 1.014 --- 12/23/15
x64 (UAC is enabled)
Internet Explorer 11
``````````````Antivirus/Firewall Check:``````````````[/u]
Windows Firewall Enabled!
Windows Defender
McAfee Anti-Virus and Anti-Spyware
WMI entry may not exist for antivirus; attempting automatic update.
`````````Anti-malware/Other Utilities Check:`````````[/u]
AVG Web TuneUp
Java 8 Update 161
Java version 32-bit out of Date!
Google Chrome (64.0.3282.140)
Google Chrome (SetupMetrics...)
````````Process Check: objlist.exe by Laurent````````[/u]
Windows Defender MSMpEng.exe
Malwarebytes Anti-Malware mbamservice.exe
Malwarebytes Anti-Malware mbamtray.exe
Microsoft Windows Defender Platform 4.12.17007.18011-0\MpCmdRun.exe
Windows Defender MSASCuiL.exe
`````````````````System Health check`````````````````[/u]
Total Fragmentation on Drive C: %
````````````````````End of Log``````````````````````[/u]
-
You're running two AV's on your computer: Windows Defender which is the default AV with Windows 10 and McAfee. Once should be disabled/ uninstalled.You should uninstall McAfee. If you need help with this, please let me know.
Update Your Java (JRE)
Old versions of Java have vulnerabilities that malware can use to infect your system.
First Verify your Java Version (http://www.java.com/en/download/installed.jsp)
If there are any other version(s) installed then update now.
Get the new version (if needed)
If your version is out of date install the newest version of the Sun Java Runtime Environment (http://www.majorgeeks.com/Sun_Java_Runtime_Environment_d4648.html).
Note: UNCHECK any pre-checked toolbar and/or software offered with the Java update. The pre-checked toolbars/software are not part of the Java update.
Be sure to close ALL open web browsers before starting the installation.
Remove any old versions
1. Download JavaRa (http://raproducts.org/click/click.php?id=1) and unzip the file to your Desktop.
2. Open JavaRA.exe and choose Remove Older Versions
3. Once complete exit JavaRA.
Additional Note: The Java Quick Starter (JQS.exe) (http://java.sun.com/javase/6/docs/technotes/guides/jweb/otherFeatures/jqs.html) adds a service to improve the initial startup time of Java applets and applications. To disable the JQS service if you don't want to use it, go to Start > Control Panel > Java > Advanced > Miscellaneous and uncheck the box for Java Quick Starter. Click OK and reboot your computer.
*********************************************
ESET Online Scanner
Note : If you use Internet Explorer to get the ESET Online Scanner, you won't have to download, nor install the tool, as everything will be ran in a contextual (pop-up) window of Internet Explorer. However, for every other browsers, you will have to download and install ESET Online Scanner. In this set of instruction, I'll use Google Chrome to download it and run it (since a lot of people will do it), however, except for the download and installation procedure, the same instructions applies if you use Internet Explorer. Please note that two or three prompts will appear if you use Internet Explorer asking you to reload the page, authorize the application, execute it, etc. Accept all of them in order to run ESET Online Scanner.
Download and execute ESET OnlineScan (http://eset.com/onlinescan) (on this window, click on ESET Smart Installer to trigger the download). People accessing this URL via Internet Explorer will start the integration process of ESET Online Scanner in their browser;
Once the installation is done (it requires Admin Rights), check the following settings (two of them are under Advanced Settings, click on it to display them) :
Enable detection of potentially unwanted applications;
Scan archives;
Scan for potentially unsafe applications;
Optional : If you want to scan more drives, click on Change... and select the drives you want to include in the scan;
(http://i424.photobucket.com/albums/pp322/digistar/Lilp6C2_1.png) (http://s424.photobucket.com/user/digistar/media/Lilp6C2_1.png.html)
After you're done checking these options, click on Start and ESET Online Scanner will download it's virus signature database before starting the scan;
(http://i424.photobucket.com/albums/pp322/digistar/PbI6QoP_1.png) (http://s424.photobucket.com/user/digistar/media/PbI6QoP_1.png.html)
Once done, the scan will start automatically. Detections will appear at the bottom of the window. ESET Online Scanner can have an extremely long scan time that can last between 2 or 3 hours. So if you start the scan, do not interrupt it, let it complete until the end;
(http://i424.photobucket.com/albums/pp322/digistar/iYk249p_1.png) (http://s424.photobucket.com/user/digistar/media/iYk249p_1.png.html)
After the scan is finished, a summary window will appear to give you the information about the scan. Then you'll have to the option to see what threads were found and to manage the threats that were quarantined;
(http://i424.photobucket.com/albums/pp322/digistar/SQWS56I.png) (http://s424.photobucket.com/user/digistar/media/SQWS56I.png.html)
Click on List of found threats, it'll display every threat identified during that scan, their type and what action was taken against them. Click on Copy to clipboard to copy these results on our clipboard and post them in your next reply;
(http://i424.photobucket.com/albums/pp322/digistar/OkgGDKc_1.png) (http://s424.photobucket.com/user/digistar/media/OkgGDKc_1.png.html)
Once you're done, click on the Back button;
Check both checkboxes at the bottom: Uninstall application on close and Delete quarantined files before clicking on the Finish button;
-
Okay Dave, I will do that later as I need to use this computer this afternoon. I'll let that scan run while I'm watching the Olympics. I just downloaded the newest version of Java last week, so that's been done. When I went to JavaRa, it came up on the screen NOTHING FOUND. Look for my report from ESTOnline Scanner a bit later. Thank you. Sure is nice you are still here Dave. You've been here for me for many years. Feels like I'm talking to an old friend!
-
Oh yeah, forgot to tell you. I went to Programs and it showed no MacAfee installed, so I couldn't uninstall it unless there is another way for me to find it and do it.
-
I ran the eset online scanner and when it was near the end I looked at it and said no threats found. So I left it and came back a few hours later to check and see if it had finished. There was no eset scanner boxes on the computer. I do not know what has happened, but everything is different. My desktop was not the picture that was there before, there was an icon on the taskbar that looked like a people thing and when I clicked on it, it said People, there are two new tabs at the top of the page next to the address bars, one is "New Tab" and the other is "Open Microsoft Edge". The search on the taskbar now has a little microphone next to it and when I click on the search, it opens to a total different look. I do not know what has happened. Even My Favorites menu looks different. I hope this computer did not update that program for Windows 10 that is supposed to make it better. It keeps asking me to do it and I didn't want it. What the heck?????
-
One more thing...my cd/rom had quit working. BCProgrammer was helping me with that earlier this week. He said I probably need a new one, they don't last long. All of a sudden, my cd/rom is now working. The screen stays blue when I play a CD, can't get the visualizations on it, but it works! Really confused now!
-
Really confused now!
That would explain your alternative history where I was involved in helping with some CD-ROM issue... :P
-
Download the McAfee Consumer Product Removal Tool (http://www.majorgeeks.com/McAfee_Consumer_Product_Removal_Tool_d5420.html) to your Desktop.
Using McAfee Consumer Product Removal tool:
* Double click the MCPR.exe
* A Command Line window will be displayed, and then close automatically.
* Wait for a second Command Line window to be displayed.
Note: Do not double-click MCPR.exe again, you may have to wait up to 1 minute for the next window to appear.
* After the second window appears, the program will begin the cleanup.
* Observe the installation, which could take several minutes. The following message will be displayed in the Command Line window: The machine must reboot to complete the un-installation. Reboot now? [y.n]
* Press Y on the keyboard.
* Wait for the computer to restart.
* All McAfee products are now removed from your computer.
******************************************************
I hope this computer did not update that program for Windows 10 that is supposed to make it better. It keeps asking me to do it and I didn't want it.
It is very difficult to disable the updates in Windows 10. That is likely happened.
The screen stays blue when I play a CD, can't get the visualizations on it, but it works! Really confused now!
What program is playing the CD? Is it MS Media player?
-
Okay, did the McAfee removal tool. I also got my Windows Media Player to work correctly. I don't know how, but it is working now like it is supposed to. I feel as if I have a new computer! The only thing bugging me is down on the taskbar the "type here to search" box is now white instead of blue like the rest of it. It just kind of shouts at my eyes! I've tried changing settings but that white box won't change. Thank you Dave, you know how computer challenged I am. Is there anything more for me to do? I really appreciate all the help.
-
Could you give me a screenshot of that search box?
-
Why yes, Dave, I can do that...once I figure it out. I used the Snipping Tool, saved on my desktop, thought I could easily slide it onto here, but I can't. How do I get it from my desktop to here?
-
Sounds like the Windows 10 bug described here (https://answers.microsoft.com/en-us/windows/forum/windows_10-start/cortana-ask-me-anything-is-always-white/3672a8a0-3cd2-4a44-b46a-6fa14a0adedc?page=2).
-
With snipping tool you can use different photo formats.
I believe you can do HTML, PNG, JPG, and another one I can't remember. Have you tried the other formats?
-
Coco, I have it as a PNG. I put it in Photos, but still cannot get it to post here. I'll keep trying it.
Thanks
-
How to post screenshots or images (http://www.computerhope.com/forum/index.php/topic,61232.0.html)
-
Okay, I have it here as an attachment...does this work?
[attachment deleted by admin to conserve space]
-
Looks like it too.
Sounds like the Windows 10 bug described here (https://answers.microsoft.com/en-us/windows/forum/windows_10-start/cortana-ask-me-anything-is-always-white/3672a8a0-3cd2-4a44-b46a-6fa14a0adedc?page=2).
-
Well, BG, what I did was on go that link you put on the reply, I checked it out, looked it over, wasn't sure what to do, then I did what one guy did. He went and changed the Region where there is no Cortana, it turned back to the blue color it was, then he went back and changed Region back to United States, and it still stayed blue. So far, mine is staying blue. Thank you, you are such a sweet thing having to deal with a computer stupid person like me. You guys sure are patient and helpful!
THANK YOU ALL!!!!!
-
My mistake! The search bar didn't stay blue! I don't even remember seeing it change. I can't figure it out.
-
As I mentioned, It's a Windows/Cortana bug. Really, there is nothing for you to "figure out"- It's Microsoft's problem.
In the meantime, You can remove it altogether by right-clicking it, it's under either Search or Cortana in the pop-up menu. You can have it appear only as a search icon, or you can hide it altogether.
You can get the same search capability by simply pressing the windows key and starting to type. Because of that, personally, it's never been clear to me why it ever needed to exist in the first place. Probably dictated by their marketing department(s) to help push Cortana. That it seems to be unable to actually display properly for more than a few femtoseconds doesn't help either.
-
Debby, is there anything else we can do to help you?
-
No, Dave, I think I got it all. Just always be there...you know I'll not know how to do something sooner or later. I just wish I could "pick up" all the computer stuff you guys know but I'm always afraid I'll hit something wrong and never get back where I was. All of you have a Happy Valentine's Day! You are all my Valentines!
Thank you and love you all!!!!
-
Happy Valentines day to all of you! Also, as BC said, the search box turning blue is a glitch in the operating system, and is Microsoft's fault and is their problem.
-
Yeah, I did what BC said...I just did away with it on my taskbar. I've had the computer for two years, wonder why it decided to do that now? Probably had something to do with all those updates they did.
I hope you all had a nice Valentine's Day! Me, I got a dozen red roses! I was so shocked. You see, some of you may remember, I had pancreatic cancer eight years ago, and that awful Whipple surgery for it. Fortunately, I am of the few 10% that made it. Most, if they get it back, comes back within about two years. This coming March 31, I will be seven years (date of Whipple Surgery) cancer free. So being here for Valentine's Day another year is a blessing to us. Although it changes your body terribly, I feel fortunate. If I have to spend a good majority of my time at home, at least I'm here. I have my husband and my cats (no, not the crazy cat lady - I only have two), unfortunately just lost my mother a month ago but I'm okay with it, she was, after all, 86, and a boatload of friends who keep me happy. And of course, for you all here who keep me and my computer running and you are so nice and sweet about it. Sorry, it's just challenging to me! Well, I guess you know that.
Anyway, didn't mean to write a book, but wanted to THANK YOU again and hope you had a very good Valentine's Day!
-
Click Start> Computer> right click the C Drive and choose Properties> enter
Click Disk Cleanup from there.
(http://i424.photobucket.com/albums/pp322/digistar/diskcleanup2.jpg)
Click OK on the Disk Cleanup Screen.
Click Yes on the Confirmation screen.
(http://i424.photobucket.com/albums/pp322/digistar/diskcleanup.jpg)
This runs the Disk Cleanup utility along with other selections if you have chosen any. (if you had a lot System Restore points, you will see a significant change in the free space in C drive)
***************************************
Check out Keeping Yourself Safe On The Web (http://evilfantasy.wordpress.com/2008/05/20/keeping-yourself-safe-on-the-web/) for tips and free tools to help keep you safe in the future.
Also see Slow Computer? It may not be Malware (http://evilfantasy.wordpress.com/2008/05/24/slow-computer-it-may-not-be-malware/) for free cleaning/maintenance tools to help keep your computer running smoothly.
Safe Surfing and congratulations on beating this terrible disease.
-
I will do the Disk Cleanup, Dave. Something strange happened today when I cut my computer on. It seems like it is taking longer to load up since updates were done earlier this week, but today I had a black screen, then this little box comes up saying Explorer is not responding, then it just sat there. I had to manually cut off the computer after about five minutes. When I cut it on again, I got that black screen, I waited, and finally my desktop stuff came on like it is supposed to, but it still took longer to boot up than it used to. I looked at what I have on Startup, I disabled Microsoft One Drive Setup, but I do not know what that other stuff is so I didn't disable any of it. One is Delayed Launcher - ????? - EEvent Monitor - ????? - Groove Manager???? There were more but I left them alone. Computers are cool, but they can be exasperating at the same time!
-
Sorry about your loss. Personally, I got a bunch of candy for Valentines Day. One of my cats I can't find right now and I am worried.
-
Oh Coco, sorry about your cat! How old is it? How long has it been missing? I feel for you. If one of mine went missing, I'd be going nuts. We live on a busy country road and I tried to teach mine not to go past a certain point in the front yard. They are pretty good about it. We've been here 30 years and taken in every stray that came, but one was chasing a squirrel right when a car came and that was that. So I try to be attentive to where they are during the day if they are out (we don't allow them out at night...too many coyotes). Does your cat come for anything, like rattling a bag of treats or a toy that makes noise? Carry that around with you when looking. I hope you find it soon. If it is a male that hasn't been neutered, they tend to cruise for females and don't always show up like they should. Good luck, let me know what happens.
And glad you got candy...that's always the best!
-
StartupLite
Download StartupLite by MalwareBytes (http://www.malwarebytes.org/StartUpLite.exe) to your Desktop.
Doubleclick StartupLite.exe to launch the program.
Ensure the Disable box is checked.
Click Continue.
A pop up message will tell you the unecessary startup items in your list have been disabled and ask you to restart your computer.
Re-start your computer.
-
I told you something always goes wrong with me and a computer. I did what you said, the Disabled box was checked, I clicked on Next and this box comes up saying: Error on value: SunJavaUpdateSched. There was an error creating a MSConfig key. Then when I went to X out, it said complete and restart the computer. ????????? That's how it goes with me, something is always thrown up on the screen that I never know what to do with! I'm leaving it alone, it said it did it, so that's fine with me.
-
About the cat - it is about a year old. I rescued it from outside when it was sick and its mother abonded it. It is a female, not spayed yet (planned to do so but if she was pregnant, I wanted to wait, and wasnt sure), possibly pregnant. There are a lot of wild cats in my area, and I saw her, tried to get her, but she just ran. All my other pets loved her as a friend, and I lived her very much. I hope one of the wild cats didnt convince her to leave me.
-
(P.S The cat has been missing for a few days now).
-
Oh no, Coco. I am so sorry. Since she was a female rescue, if it's possible she was pregnant, she very well could be looking for a safe place to have her kittens. That happened to us on the first one we rescued. We were feeding her, petting her, letting her in, we figure she's our cat at this point. Then she disappeared for a four days and we looked everywhere and called for her. (Unlike my cats, she actually came to "kitty, kitty, kitty"!) When she showed up, she was skinnier. She would come every day, hang out a bit, but always left and was gone most of the time. One day I decided to follow her and we went way up the road until we got to someone's house where she cut back behind and into the woods. I didn't want to trespass on someone's land, so I went back home. A few days later she showed up at a shed way down at the end of our property with the kittens. The next day she moved them up to the house and behind the hedges in front of the house. So maybe that's what yours is doing. Don't give up yet. How long had you had her? Because this cat we had only a month when she left to have her babies. Keep your fingers crossed and I hope she shows up.
-
I have had her about a year, since she was a few weeks old.
(P.S. Can we go back on topic somewhat? Thanks for the message.)
-
I know, I figure we'll get in trouble if we keep talking cats. I hope you get her back. If you do, do let me know. I'll keep my fingers crossed for you!
-
My cat returned! And she is back to her normal self!
-
OMG! WONDERFUL! She was out "catting around". Now she just might be pregnant, so look out! I'm so glad she's back and I know you are too. You never knew whether they are somewhere hurt or lost when that happens, but am so terribly delighted she is back home. Give her tons of love!
-
(P.S. Can we go back on topic somewhat? Thanks for the message.)
Can we please at least get somewhat back on topic? Thank you for the encouragement.
-
Click Start> Computer> right click the C Drive and choose Properties> enter
Click Disk Cleanup from there.
(http://i424.photobucket.com/albums/pp322/digistar/diskcleanup2.jpg)
Click OK on the Disk Cleanup Screen.
Click Yes on the Confirmation screen.
(http://i424.photobucket.com/albums/pp322/digistar/diskcleanup.jpg)
This runs the Disk Cleanup utility along with other selections if you have chosen any. (if you had a lot System Restore points, you will see a significant change in the free space in C drive)
***************************************
I suggest using WOT - Web of Trust (http://www.mywot.com/). WOT is a free Internet security addon for your browser. It will keep you safe from online scams, identity theft, spyware, spam, viruses and unreliable shopping sites. WOT warns you before you interact with a risky website. It's easy and it's free.
Check out Keeping Yourself Safe On The Web (http://evilfantasy.wordpress.com/2008/05/20/keeping-yourself-safe-on-the-web/) for tips and free tools to help keep you safe in the future.
Also see Slow Computer? It may not be Malware (http://evilfantasy.wordpress.com/2008/05/24/slow-computer-it-may-not-be-malware/) for free cleaning/maintenance tools to help keep your computer running smoothly.
Safe Surfing!
-
Thanks, Dave. I did run the Disk Cleanup. My computer seems fine now. I did not know about WOT...how interesting. I will download that for sure! Now, because I have that on my computer, will it work with both IE and Google Chrome? For some reason, when I get on Facebook with IE, it starts messing up and things go haywire, like freezing, not showing big spaces of text or pictures, and sometimes just totally stops working. So I use Google Chrome for Facebook and do not have that problem. Somewhere along the way I was told IE has glitches that it will do that sometimes as Facebook is not the only website I've been on with IE and it has acted up.
-
I went to WOT and got my question answered...they do not have WOT for IE evidently. I saw Google Chrome, Foxfire, Opera, and one other, but not IE. So I guess you don't need to answer that question for me!
-
I will lock this thread. If you need it re-opened, please send me a pm.