Welcome guest. Before posting on our computer help forum, you must register. Click here it's easy and free.

Author Topic: Problem back again with PC, something stopping me going on the web.  (Read 22883 times)

0 Members and 1 Guest are viewing this topic.

harry 48

    Topic Starter


    Egghead

  • lay back , relax and chill out
  • Thanked: 129
    • Yes
    • Yes
    • Yes
    • Dribbling Pensioner
  • Certifications: List
  • Experience: Familiar
  • OS: Windows 7
Dave the trouble is back again with my PC, its going a little slow and I cannot get into my web sites or a few more I visit.

**********************************************

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Database version: v2014.03.01.02

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16518
harry :: HARRY-PC [administrator]

11/03/2014 19:59:11
mbam-log-2014-03-11 (19-59-11).txt

Scan type: Full scan (C:\|D:\|)
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 364318
Time elapsed: 59 minute(s), 45 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)

******************************************

Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.2 (02.20.2014:1)
OS: Windows 7 Ultimate x64
Ran by harry on 11/03/2014 at 21:11:06.78
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\Users\harry\appdata\local\big fish"
Successfully deleted: [Folder] "C:\bigfishcache"



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 11/03/2014 at 21:20:18.12
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


*******************************************
Malwarebytes Anti-root check



[recovering disk space, attachment deleted by admin]
« Last Edit: March 11, 2014, 03:45:42 PM by harry 48 »

harry 48

    Topic Starter


    Egghead

  • lay back , relax and chill out
  • Thanked: 129
    • Yes
    • Yes
    • Yes
    • Dribbling Pensioner
  • Certifications: List
  • Experience: Familiar
  • OS: Windows 7
Re: Problem back again with PC, something stopping me going on the web.
« Reply #1 on: March 11, 2014, 03:43:58 PM »
# AdwCleaner v3.021 - Report created 11/03/2014 at 21:30:02
# Updated 10/03/2014 by Xplode
# Operating System : Windows 7 Ultimate Service Pack 1 (64 bits)
# Username : harry - HARRY-PC
# Running from : C:\Users\harry\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JLPBG7X8\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****


***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16518


-\\ Google Chrome v33.0.1750.146

[ File : C:\Users\harry\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted : search_url
Deleted : keyword

*************************

AdwCleaner[R0].txt - [2312 octets] - [15/09/2013 15:33:29]
AdwCleaner[R1].txt - [1789 octets] - [21/09/2013 12:18:17]
AdwCleaner[R2].txt - [4100 octets] - [15/12/2013 16:11:28]
AdwCleaner[R3].txt - [4642 octets] - [28/12/2013 23:27:39]
AdwCleaner[R4].txt - [1583 octets] - [01/03/2014 21:47:22]
AdwCleaner[R5].txt - [1442 octets] - [02/03/2014 16:03:47]
AdwCleaner[R6].txt - [1626 octets] - [11/03/2014 21:29:17]
AdwCleaner[S0].txt - [2427 octets] - [15/09/2013 15:34:34]
AdwCleaner[S1].txt - [1719 octets] - [21/09/2013 12:18:54]
AdwCleaner[S2].txt - [4143 octets] - [15/12/2013 16:13:26]
AdwCleaner[S3].txt - [4061 octets] - [28/12/2013 23:28:52]
AdwCleaner[S4].txt - [1572 octets] - [01/03/2014 21:48:04]
AdwCleaner[S5].txt - [1467 octets] - [02/03/2014 16:11:44]
AdwCleaner[S6].txt - [1511 octets] - [11/03/2014 21:30:02]

########## EOF - C:\AdwCleaner\AdwCleaner[S6].txt - [1571 octets] ##########

**********************************

 Results of screen317's Security Check version 0.99.80 
 Windows 7 Service Pack 1 x64 (UAC is enabled) 
 Internet Explorer 11 
``````````````Antivirus/Firewall Check:``````````````[/u]
 Windows Firewall Enabled! 
avast! Antivirus   
 Antivirus up to date!   
`````````Anti-malware/Other Utilities Check:`````````[/u]
 Malwarebytes Anti-Malware version 1.75.0.1300 
 Java 7 Update 51 
 Adobe Reader XI 
 Google Chrome 33.0.1750.117 
 Google Chrome 33.0.1750.146 
````````Process Check: objlist.exe by Laurent````````[/u] 
 AVAST Software Avast AvastSvc.exe 
 AVAST Software Avast AvastUI.exe 
`````````````````System Health check`````````````````[/u]
 Total Fragmentation on Drive C: 5%
````````````````````End of Log``````````````````````[/u]



SuperDave

  • Malware Removal Specialist


  • Genius
  • Thanked: 1020
  • Certifications: List
  • Experience: Expert
  • OS: Windows 10
Re: Problem back again with PC, something stopping me going on the web.
« Reply #2 on: March 11, 2014, 04:16:19 PM »
I don't believe this is malware but let's check the internet connection.

Please download Farbar Service Scanner and run it on the computer with the issue.
  • Press "Scan".
  • It will create a log (FSS.txt) in the same directory the tool is run.
  • Please copy and paste the log to your reply.
Windows 8 and Windows 10 dual boot with two SSD's

harry 48

    Topic Starter


    Egghead

  • lay back , relax and chill out
  • Thanked: 129
    • Yes
    • Yes
    • Yes
    • Dribbling Pensioner
  • Certifications: List
  • Experience: Familiar
  • OS: Windows 7
Re: Problem back again with PC, something stopping me going on the web.
« Reply #3 on: March 11, 2014, 04:30:34 PM »
running it now, the following log was cleaned.

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 03/11/2014 at 10:14 PM

Application Version : 5.7.1018

Core Rules Database Version : 11073
Trace Rules Database Version: 8885

Scan type       : Complete Scan
Total Scan Time : 00:26:13

Operating System Information
Windows 7 Ultimate 64-bit, Service Pack 1 (Build 6.01.7601)
UAC On - Limited User

Memory items scanned      : 511
Memory threats detected   : 0
Registry items scanned    : 76412
Registry threats detected : 0
File items scanned        : 49271
File threats detected     : 49

Adware.Tracking Cookie
   C:\Users\harry\AppData\Roaming\Microsoft\Windows\Cookies\S3NMXIF0.txt [ /doubleclick.net ]
   C:\Users\harry\AppData\Roaming\Microsoft\Windows\Cookies\WN3UP7RH.txt [ /ads.yahoo.com ]
   C:\Users\harry\AppData\Roaming\Microsoft\Windows\Cookies\Low\L8NM0OVT.txt [ /doubleclick.net ]
   C:\Users\harry\AppData\Roaming\Microsoft\Windows\Cookies\Low\0FZI401P.txt [ /clickfuse.com ]
   C:\Users\harry\AppData\Roaming\Microsoft\Windows\Cookies\Low\0MUOUP71.txt [ /2o7.net ]
   C:\Users\harry\AppData\Roaming\Microsoft\Windows\Cookies\Low\Q7094MW4.txt [ /tradefx.advertserve.com ]
   C:\Users\harry\AppData\Roaming\Microsoft\Windows\Cookies\Low\CS20O2Q3.txt [ /tribalfusion.com ]
   C:\Users\harry\AppData\Roaming\Microsoft\Windows\Cookies\Low\2YMW8D0O.txt [ /www.googleadservices.com ]
   C:\Users\harry\AppData\Roaming\Microsoft\Windows\Cookies\Low\5JC246GM.txt [ /tacoda.at.atwola.com ]
   C:\Users\harry\AppData\Roaming\Microsoft\Windows\Cookies\Low\A1YVZXZZ.txt [ /mediaplex.com ]
   C:\Users\harry\AppData\Roaming\Microsoft\Windows\Cookies\Low\CGF1MCB4.txt [ /revsci.net ]
   C:\Users\harry\AppData\Roaming\Microsoft\Windows\Cookies\Low\NY8TMNL0.txt [ /virginmedia.com ]
   C:\Users\harry\AppData\Roaming\Microsoft\Windows\Cookies\Low\Z5JIWTFN.txt [ /collective-media.net ]
   C:\Users\harry\AppData\Roaming\Microsoft\Windows\Cookies\Low\SE0OAXAG.txt [ /c1.adform.net ]
   C:\Users\harry\AppData\Roaming\Microsoft\Windows\Cookies\Low\G5C1UPHO.txt [ /server.cpmstar.com ]
   C:\Users\harry\AppData\Roaming\Microsoft\Windows\Cookies\Low\9QOILEMP.txt [ /media6degrees.com ]
   C:\Users\harry\AppData\Roaming\Microsoft\Windows\Cookies\Low\1Z9TN23J.txt [ /fr.sitestat.com ]
   C:\Users\harry\AppData\Roaming\Microsoft\Windows\Cookies\Low\DSDXHNHQ.txt [ /ads.undertone.com ]
   C:\Users\harry\AppData\Roaming\Microsoft\Windows\Cookies\Low\IKJJEQXS.txt [ /casalemedia.com ]
   C:\Users\harry\AppData\Roaming\Microsoft\Windows\Cookies\Low\7MCS9AXB.txt [ /serving-sys.com ]
   C:\Users\harry\AppData\Roaming\Microsoft\Windows\Cookies\Low\2FUQO21T.txt [ /server.adformdsp.net ]
   C:\Users\harry\AppData\Roaming\Microsoft\Windows\Cookies\Low\GU18Y2DL.txt [ /fr.sitestat.com ]
   C:\Users\harry\AppData\Roaming\Microsoft\Windows\Cookies\Low\RLUBR18P.txt [ /ads.p161.net ]
   C:\Users\harry\AppData\Roaming\Microsoft\Windows\Cookies\Low\YV8O612W.txt [ /ads.yahoo.com ]
   C:\Users\harry\AppData\Roaming\Microsoft\Windows\Cookies\Low\ZZ2PVWP1.txt [ /specificclick.net ]
   C:\Users\harry\AppData\Roaming\Microsoft\Windows\Cookies\Low\GS0CGDAF.txt [ /zedo.com ]
   C:\Users\harry\AppData\Roaming\Microsoft\Windows\Cookies\Low\SK95A7XC.txt [ /uk.at.atwola.com ]
   C:\Users\harry\AppData\Roaming\Microsoft\Windows\Cookies\Low\4M02CX2A.txt [ /adform.net ]
   C:\Users\harry\AppData\Roaming\Microsoft\Windows\Cookies\Low\NIQWZALZ.txt [ /advertising.com ]
   C:\Users\harry\AppData\Roaming\Microsoft\Windows\Cookies\Low\M6QO1ZTY.txt [ /ru4.com ]
   C:\Users\harry\AppData\Roaming\Microsoft\Windows\Cookies\Low\VVBCPJTK.txt [ /ads.clicmanager.fr ]
   C:\Users\harry\AppData\Roaming\Microsoft\Windows\Cookies\Low\3O430KZK.txt [ /track.adform.net ]
   C:\Users\harry\AppData\Roaming\Microsoft\Windows\Cookies\Low\MLOAJI8O.txt [ /lucidmedia.com ]
   C:\Users\harry\AppData\Roaming\Microsoft\Windows\Cookies\Low\RR9ZU40B.txt [ /atdmt.com ]
   C:\Users\harry\AppData\Roaming\Microsoft\Windows\Cookies\Low\UXSEC1K2.txt [ /statse.webtrendslive.com ]
   C:\Users\harry\AppData\Roaming\Microsoft\Windows\Cookies\Low\BY2JNLHX.txt [ /statcounter.com ]
   C:\Users\harry\AppData\Roaming\Microsoft\Windows\Cookies\Low\AMH2A5C4.txt [ /ad.360yield.com ]
   C:\Users\harry\AppData\Roaming\Microsoft\Windows\Cookies\Low\CHW8TW2S.txt [ /at.atwola.com ]
   C:\Users\harry\AppData\Roaming\Microsoft\Windows\Cookies\Low\9JJZ2OQ4.txt [ /imrworldwide.com ]
   C:\Users\harry\AppData\Roaming\Microsoft\Windows\Cookies\Low\LXG0SH3F.txt [ /adformdsp.net ]
   C:\Users\harry\AppData\Roaming\Microsoft\Windows\Cookies\Low\M6WVEWKR.txt [ /imrworldwide.com ]
   C:\Users\harry\AppData\Roaming\Microsoft\Windows\Cookies\Low\TZ5FOEPG.txt [ /adtech.de ]
   C:\Users\harry\AppData\Roaming\Microsoft\Windows\Cookies\Low\AB2232RU.txt [ /adtechus.com ]
   C:\Users\harry\AppData\Roaming\Microsoft\Windows\Cookies\Low\5NRKOZS0.txt [ /accounts.google.com ]
   C:\Users\harry\AppData\Roaming\Microsoft\Windows\Cookies\Low\X5RMBXN6.txt [ /ads.yahoo.com ]
   .flagcounter.com [ C:\USERS\HARRY\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .doubleclick.net [ C:\USERS\HARRY\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .flagcounter.com [ C:\USERS\HARRY\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   accounts.google.com [ C:\USERS\HARRY\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

harry 48

    Topic Starter


    Egghead

  • lay back , relax and chill out
  • Thanked: 129
    • Yes
    • Yes
    • Yes
    • Dribbling Pensioner
  • Certifications: List
  • Experience: Familiar
  • OS: Windows 7
Re: Problem back again with PC, something stopping me going on the web.
« Reply #4 on: March 11, 2014, 04:31:57 PM »
That was quick  ;D

Farbar Service Scanner Version: 25-02-2014
Ran by harry (administrator) on 11-03-2014 at 22:31:30
Running from "C:\Users\harry\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FH448W8O"
Microsoft Windows 7 Ultimate  Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.


Other Services:
==============


File Check:
========
C:\Windows\System32\nsisvc.dll => MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
C:\Windows\System32\dhcpcore.dll => MD5 is legit
C:\Windows\System32\drivers\afd.sys => MD5 is legit
C:\Windows\System32\drivers\tdx.sys => MD5 is legit
C:\Windows\System32\Drivers\tcpip.sys => MD5 is legit
C:\Windows\System32\dnsrslvr.dll => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit


**** End of log ****

harry 48

    Topic Starter


    Egghead

  • lay back , relax and chill out
  • Thanked: 129
    • Yes
    • Yes
    • Yes
    • Dribbling Pensioner
  • Certifications: List
  • Experience: Familiar
  • OS: Windows 7
Re: Problem back again with PC, something stopping me going on the web.
« Reply #5 on: March 11, 2014, 04:35:28 PM »
My search page has just been changed to MSN instead of Yahoo. and chrome does not work at all.

SuperDave

  • Malware Removal Specialist


  • Genius
  • Thanked: 1020
  • Certifications: List
  • Experience: Expert
  • OS: Windows 10
Re: Problem back again with PC, something stopping me going on the web.
« Reply #6 on: March 11, 2014, 08:01:42 PM »
Quote
My search page has just been changed to MSN instead of Yahoo. and chrome does not work at all.
Can you change your home page? Uninstall and re-install Chrome. All the connections seems ok. Can you get on any sites at all?
Windows 8 and Windows 10 dual boot with two SSD's

harry 48

    Topic Starter


    Egghead

  • lay back , relax and chill out
  • Thanked: 129
    • Yes
    • Yes
    • Yes
    • Dribbling Pensioner
  • Certifications: List
  • Experience: Familiar
  • OS: Windows 7
Re: Problem back again with PC, something stopping me going on the web.
« Reply #7 on: March 12, 2014, 02:40:48 PM »
# AdwCleaner v3.021 - Report created 12/03/2014 at 20:37:23
# Updated 10/03/2014 by Xplode
# Operating System : Windows 7 Ultimate Service Pack 1 (64 bits)
# Username : harry - HARRY-PC
# Running from : C:\Users\harry\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FH448W8O\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\Users\harry\AppData\Local\Temp\Smartbar

***** [ Shortcuts ] *****

Shortcut Disinfected : C:\Users\harry\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Search.lnk

***** [ Registry ] *****

Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Browser Infrastructure Helper]
Key Deleted : HKLM\SOFTWARE\Classes\iesmartbar.bandobjectattribute
Key Deleted : HKLM\SOFTWARE\Classes\iesmartbar.bho
Key Deleted : HKLM\SOFTWARE\Classes\iesmartbar.dockingpanel
Key Deleted : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbar
Key Deleted : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbarbandobject
Key Deleted : HKLM\SOFTWARE\Classes\iesmartbar.smartbardisplaystate
Key Deleted : HKLM\SOFTWARE\Classes\iesmartbar.smartbarmenuform
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\mypc backup
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Value Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Key Deleted : HKCU\Software\PC Health Kit
Key Deleted : HKCU\Software\SmartBar
Key Deleted : HKCU\Software\smartbarbackup
Key Deleted : HKCU\Software\smartbarlog

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16518

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Search Page]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Search Bar]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Search [Default_Search_URL]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Search [SearchAssistant]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [Default]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [Default]

-\\ Google Chrome v33.0.1750.149

[ File : C:\Users\harry\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [2312 octets] - [15/09/2013 15:33:29]
AdwCleaner[R1].txt - [1789 octets] - [21/09/2013 12:18:17]
AdwCleaner[R2].txt - [4100 octets] - [15/12/2013 16:11:28]
AdwCleaner[R3].txt - [4642 octets] - [28/12/2013 23:27:39]
AdwCleaner[R4].txt - [1583 octets] - [01/03/2014 21:47:22]
AdwCleaner[R5].txt - [1442 octets] - [02/03/2014 16:03:47]
AdwCleaner[R6].txt - [1626 octets] - [11/03/2014 21:29:17]
AdwCleaner[R7].txt - [8211 octets] - [12/03/2014 20:13:56]
AdwCleaner[R8].txt - [7115 octets] - [12/03/2014 20:35:25]
AdwCleaner[S0].txt - [2427 octets] - [15/09/2013 15:34:34]
AdwCleaner[S1].txt - [1719 octets] - [21/09/2013 12:18:54]
AdwCleaner[S2].txt - [4143 octets] - [15/12/2013 16:13:26]
AdwCleaner[S3].txt - [4061 octets] - [28/12/2013 23:28:52]
AdwCleaner[S4].txt - [1572 octets] - [01/03/2014 21:48:04]
AdwCleaner[S5].txt - [1467 octets] - [02/03/2014 16:11:44]
AdwCleaner[S6].txt - [1651 octets] - [11/03/2014 21:30:02]
AdwCleaner[S7].txt - [1325 octets] - [12/03/2014 20:14:43]
AdwCleaner[S8].txt - [5635 octets] - [12/03/2014 20:37:23]

########## EOF - C:\AdwCleaner\AdwCleaner[S8].txt - [5695 octets] ##########

harry 48

    Topic Starter


    Egghead

  • lay back , relax and chill out
  • Thanked: 129
    • Yes
    • Yes
    • Yes
    • Dribbling Pensioner
  • Certifications: List
  • Experience: Familiar
  • OS: Windows 7
Re: Problem back again with PC, something stopping me going on the web.
« Reply #8 on: March 12, 2014, 02:45:01 PM »
There are two things in my program files which I did not put there.

GUMDA3F.tmp

GUTDA40.tmp

harry 48

    Topic Starter


    Egghead

  • lay back , relax and chill out
  • Thanked: 129
    • Yes
    • Yes
    • Yes
    • Dribbling Pensioner
  • Certifications: List
  • Experience: Familiar
  • OS: Windows 7
Re: Problem back again with PC, something stopping me going on the web.
« Reply #9 on: March 12, 2014, 03:28:26 PM »
Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Database version: v2014.03.12.10

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16518
harry :: HARRY-PC [administrator]

12/03/2014 20:57:48
mbam-log-2014-03-12 (20-57-48).txt

Scan type: Full scan (C:\|D:\|)
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 354112
Time elapsed: 27 minute(s), 49 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 3
C:\AdwCleaner\Quarantine\C\Users\harry\AppData\Local\Smartbar\Application\SmartbarVersionsHelper.exe.vir (PUP.Optional.SmartBar.A) -> Quarantined and deleted successfully.
C:\Users\harry\AppData\Local\Temp\air9A95.exe (PUP.Optional.Linkury.A) -> Quarantined and deleted successfully.
C:\Windows\Installer\e131a.msi (PUP.Optional.SmartBar.A) -> Quarantined and deleted successfully.

(end)

harry 48

    Topic Starter


    Egghead

  • lay back , relax and chill out
  • Thanked: 129
    • Yes
    • Yes
    • Yes
    • Dribbling Pensioner
  • Certifications: List
  • Experience: Familiar
  • OS: Windows 7
Re: Problem back again with PC, something stopping me going on the web.
« Reply #10 on: March 12, 2014, 05:19:33 PM »
I have my yahoo home page back, chrome will not download for me, I can get on all web pages except my two wordpress sites or anything to do with wordpress, I can't even get into the forum.


harry 48

    Topic Starter


    Egghead

  • lay back , relax and chill out
  • Thanked: 129
    • Yes
    • Yes
    • Yes
    • Dribbling Pensioner
  • Certifications: List
  • Experience: Familiar
  • OS: Windows 7
Re: Problem back again with PC, something stopping me going on the web.
« Reply #11 on: March 13, 2014, 12:36:41 PM »
These items have been cleared just posting the pre-cleaning log.

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Database version: v2014.03.12.10

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16521
harry :: HARRY-PC [administrator]

13/03/2014 17:14:04
mbam-log-2014-03-13 (17-14-04).txt

Scan type: Full scan (C:\|D:\|)
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 357949
Time elapsed: 31 minute(s), 15 second(s)

Memory Processes Detected: 2
C:\ProgramData\Websteroids\Websteroids.exe (PUP.Optional.Websteroids.A) -> 3872 -> Delete on reboot.
C:\ProgramData\Websteroids\WebsteroidsService.exe (PUP.Optional.Websteroids.A) -> 1776 -> Delete on reboot.

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 6
HKLM\SYSTEM\CurrentControlSet\Services\CltMngSvc (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
HKCR\CLSID\{051E9166-B275-4683-907B-372FAE22BC7C} (PUP.Optional.WebSteroids.A) -> Quarantined and deleted successfully.
HKCR\CLSID\{E5A7A645-8318-4895-B85C-EDC606B80DB6} (PUP.Optional.DynConIE.A) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Websteroids (PUP.Optional.Websteroids.A) -> Quarantined and deleted successfully.
HKLM\SYSTEM\CurrentControlSet\Services\Websteroids (PUP.Optional.Websteroids.A) -> Quarantined and deleted successfully.

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 1
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows|AppInit_DLLs (PUP.Optional.Conduit.A) -> Bad: (C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll) Good: () -> Quarantined and repaired successfully.

Folders Detected: 21
C:\ProgramData\Websteroids (PUP.Optional.Websteroids.A) -> Delete on reboot.
C:\Program Files (x86)\SearchProtect (PUP.Optional.SearchProtect.A) -> Delete on reboot.
C:\Program Files (x86)\SearchProtect\Main (PUP.Optional.SearchProtect.A) -> Delete on reboot.
C:\Program Files (x86)\SearchProtect\Main\bin (PUP.Optional.SearchProtect.A) -> Delete on reboot.
C:\Program Files (x86)\SearchProtect\Main\Logs (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\Main\rep (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\SearchProtect (PUP.Optional.SearchProtect.A) -> Delete on reboot.
C:\Program Files (x86)\SearchProtect\SearchProtect\bin (PUP.Optional.SearchProtect.A) -> Delete on reboot.
C:\Program Files (x86)\SearchProtect\SearchProtect\rep (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI (PUP.Optional.SearchProtect.A) -> Delete on reboot.
C:\Program Files (x86)\SearchProtect\UI\bin (PUP.Optional.SearchProtect.A) -> Delete on reboot.
C:\Program Files (x86)\SearchProtect\UI\dialogs (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\bubble (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\libs (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\protection (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\protectionDS (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\settings (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\rep (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Users\harry\AppData\Local\Temp\CT3319613 (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.

Files Detected: 84
C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe (PUP.Optional.Conduit.A) -> Delete on reboot.
C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe (PUP.Optional.Conduit.A) -> Delete on reboot.
C:\Program Files (x86)\SearchProtect\UI\bin\cltmngui.exe (PUP.Optional.Conduit.A) -> Delete on reboot.
C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC32.dll (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC32Loader.dll (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\Main\bin\SPTool.dll (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\Main\bin\uninstall.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPTool64.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC64.dll (PUP.Optional.Conduit.A) -> Delete on reboot.
C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC64Loader.dll (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\Users\harry\AppData\Local\Temp\nsbFE83.exe (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Users\harry\AppData\Local\Temp\nsd1D19.exe (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Users\harry\AppData\Local\Temp\nsxB67C\SpSetup.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\ProgramData\Websteroids\app.dat (PUP.Optional.Websteroids.A) -> Quarantined and deleted successfully.
C:\ProgramData\Websteroids\data.dat (PUP.Optional.Websteroids.A) -> Quarantined and deleted successfully.
C:\ProgramData\Websteroids\Uninstall.exe (PUP.Optional.Websteroids.A) -> Quarantined and deleted successfully.
C:\ProgramData\Websteroids\Websteroids.exe (PUP.Optional.Websteroids.A) -> Delete on reboot.
C:\ProgramData\Websteroids\Websteroids.exe.config (PUP.Optional.Websteroids.A) -> Quarantined and deleted successfully.
C:\ProgramData\Websteroids\Websteroids.ico (PUP.Optional.Websteroids.A) -> Quarantined and deleted successfully.
C:\ProgramData\Websteroids\WebsteroidsService.exe (PUP.Optional.Websteroids.A) -> Delete on reboot.
C:\ProgramData\Websteroids\WebsteroidsService.exe.config (PUP.Optional.Websteroids.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\EULA.txt (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\Main\rep\SystemRepository.dat (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\settings.html (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\style.css (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\bubble\bubble.css (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\bubble\bubble.html (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\bubble\bubble.js (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\bubble\defaults.js (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\Apply-default.png (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\Apply-onclick.png (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\Apply-Rollover.png (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bg-with-logo.png (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bg.png (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bgNotif.png (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bgSettings.png (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\bgUninstall.png (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\btnBlue.png (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\btnClose.png (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\btnSilver.png (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\checkbox.png (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\checkbox_checked.png (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\checkbox_def.png (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\close-win-def.png (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\close-win-over-click.png (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\gray-bg.png (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\hez-def.png (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\hez-selected.png (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\hez.png (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\icon-win.png (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\info-icon.png (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\menu-rollover.png (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\menu-selected.png (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\radio-button-def.png (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\radio-button-selected.png (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\radio-button.png (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\radio-button2.png (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\Settings-icon.png (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\text-field.png (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\v.png (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\Images\x.png (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\defaults.js (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\dialogUtils.js (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\jquery.1.7.1.min.js (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\json2.min.js (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\main.js (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\libs\SPDialogAPI.js (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\protection\defaults.js (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\protection\protection.css (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\protection\protection.html (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\protection\protection.js (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\protectionDS\defaults.js (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\protectionDS\protectionDS.css (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\protectionDS\protectionDS.html (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\protectionDS\protectionDS.js (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\settings\defaults.js (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\settings\settings.css (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\settings\settings.html (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\settings\settings.js (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall\defaults.js (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall\uninstall.css (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall\uninstall.html (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\SearchProtect\UI\dialogs\uninstall\uninstall.js (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Users\harry\AppData\Local\Temp\CT3319613\ddt.csf (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.

(end)

SuperDave

  • Malware Removal Specialist


  • Genius
  • Thanked: 1020
  • Certifications: List
  • Experience: Expert
  • OS: Windows 10
Re: Problem back again with PC, something stopping me going on the web.
« Reply #12 on: March 13, 2014, 12:42:57 PM »
Harry, you can delete those two files. Is it possible that those sites are being blocked by your AV or Firewall?
Windows 8 and Windows 10 dual boot with two SSD's

harry 48

    Topic Starter


    Egghead

  • lay back , relax and chill out
  • Thanked: 129
    • Yes
    • Yes
    • Yes
    • Dribbling Pensioner
  • Certifications: List
  • Experience: Familiar
  • OS: Windows 7
Re: Problem back again with PC, something stopping me going on the web.
« Reply #13 on: March 13, 2014, 01:08:15 PM »
Harry, you can delete those two files. Is it possible that those sites are being blocked by your AV or Firewall?

Dave I have tried 5 /6 times and they will not delete.
I'm running an SAS scan and still finding rubbish but thing's seem to be getting better.
Is there anything else I can run, I can get into my two web sites now  :)

SuperDave

  • Malware Removal Specialist


  • Genius
  • Thanked: 1020
  • Certifications: List
  • Experience: Expert
  • OS: Windows 10
Re: Problem back again with PC, something stopping me going on the web.
« Reply #14 on: March 13, 2014, 07:57:22 PM »
You can use Unlocker below.

You can download and install Unlocker .Make sure you decline each of those free offers so they won't get loaded on your computer.
****************************************
Quote
I'm running an SAS scan and still finding rubbish but thing's seem to be getting better.
SAS will keep find tracking cookies as long as you're connected to the internet.

Quote
Is there anything else I can run, I can get into my two web sites now 
We can run a bunch of other scans but I doubt they will find anything. You could try ESET below.

I'd like to scan your machine with ESET OnlineScan

•Hold down Control and click on the following link to open ESET OnlineScan in a new window.
ESET OnlineScan

•Click the button.
•For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
  • Click on to download the ESET Smart Installer. Save it to your desktop.
  • Double click on the icon on your desktop.
•Check
•Click the button.
•Accept any security warnings from your browser.
  • Leave the check mark next to Remove found threats.
•Check
•Push the Start button.
•ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
•When the scan completes, push
•Push , and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
•Push the button.
•Push
A log file will be saved here: C:\Program Files\ESET\ESET Online Scanner\log.txt
Windows 8 and Windows 10 dual boot with two SSD's

harry 48

    Topic Starter


    Egghead

  • lay back , relax and chill out
  • Thanked: 129
    • Yes
    • Yes
    • Yes
    • Dribbling Pensioner
  • Certifications: List
  • Experience: Familiar
  • OS: Windows 7
Re: Problem back again with PC, something stopping me going on the web.
« Reply #15 on: March 14, 2014, 01:45:58 PM »
Thanks Dave unlocker was great they are away, I have used it years ago but forgot the name.

I tried eset from your link, on my monitor and on the web, I opens and the page is blank, not working.

SuperDave

  • Malware Removal Specialist


  • Genius
  • Thanked: 1020
  • Certifications: List
  • Experience: Expert
  • OS: Windows 10
Re: Problem back again with PC, something stopping me going on the web.
« Reply #16 on: March 14, 2014, 03:51:29 PM »
What browser?
Windows 8 and Windows 10 dual boot with two SSD's

harry 48

    Topic Starter


    Egghead

  • lay back , relax and chill out
  • Thanked: 129
    • Yes
    • Yes
    • Yes
    • Dribbling Pensioner
  • Certifications: List
  • Experience: Familiar
  • OS: Windows 7
Re: Problem back again with PC, something stopping me going on the web.
« Reply #17 on: March 14, 2014, 04:48:33 PM »
What browser?

IE , I know  :) but it worked with IE all the time.

harry 48

    Topic Starter


    Egghead

  • lay back , relax and chill out
  • Thanked: 129
    • Yes
    • Yes
    • Yes
    • Dribbling Pensioner
  • Certifications: List
  • Experience: Familiar
  • OS: Windows 7
Re: Problem back again with PC, something stopping me going on the web.
« Reply #18 on: March 14, 2014, 05:02:01 PM »
It will not work with chrome either.

SuperDave

  • Malware Removal Specialist


  • Genius
  • Thanked: 1020
  • Certifications: List
  • Experience: Expert
  • OS: Windows 10
Re: Problem back again with PC, something stopping me going on the web.
« Reply #19 on: March 15, 2014, 11:46:51 AM »
There are different instructions for other browsers.
Windows 8 and Windows 10 dual boot with two SSD's

harry 48

    Topic Starter


    Egghead

  • lay back , relax and chill out
  • Thanked: 129
    • Yes
    • Yes
    • Yes
    • Dribbling Pensioner
  • Certifications: List
  • Experience: Familiar
  • OS: Windows 7
Re: Problem back again with PC, something stopping me going on the web.
« Reply #20 on: March 16, 2014, 02:31:12 PM »
I managed it, yesterday CH would not open for me.


C:\Windows\SysWOW64\Websteroids.B324755F3F87.dll   MSIL/Adware.PullUpdate.C application   

C:\AdwCleaner\Quarantine\C\Program Files (x86)\PC Health Kit\PCHealthKit.exe.vir   a variant of Win32/SpeedingUpMyPC application   cleaned by deleting - quarantined

C:\Users\harry\AppData\Local\Temp\airAC04.exe   a variant of Win32/SpeedingUpMyPC application   cleaned by deleting - quarantined

C:\Windows\System32\Websteroids.B324755F3F87.dll   MSIL/Adware.PullUpdate.C application   cleaned by deleting - quarantined

SuperDave

  • Malware Removal Specialist


  • Genius
  • Thanked: 1020
  • Certifications: List
  • Experience: Expert
  • OS: Windows 10
Re: Problem back again with PC, something stopping me going on the web.
« Reply #21 on: March 16, 2014, 06:48:26 PM »
How's your computer running now?
Windows 8 and Windows 10 dual boot with two SSD's

harry 48

    Topic Starter


    Egghead

  • lay back , relax and chill out
  • Thanked: 129
    • Yes
    • Yes
    • Yes
    • Dribbling Pensioner
  • Certifications: List
  • Experience: Familiar
  • OS: Windows 7
Re: Problem back again with PC, something stopping me going on the web.
« Reply #22 on: March 17, 2014, 01:15:52 PM »
How's your computer running now?

I'm afraid to say but it seems ok now, back to normal.

SuperDave

  • Malware Removal Specialist


  • Genius
  • Thanked: 1020
  • Certifications: List
  • Experience: Expert
  • OS: Windows 10
Re: Problem back again with PC, something stopping me going on the web.
« Reply #23 on: March 18, 2014, 01:22:21 PM »
That's good to hear. I had a great time last night playing for a St Pat's dinner.
Windows 8 and Windows 10 dual boot with two SSD's

harry 48

    Topic Starter


    Egghead

  • lay back , relax and chill out
  • Thanked: 129
    • Yes
    • Yes
    • Yes
    • Dribbling Pensioner
  • Certifications: List
  • Experience: Familiar
  • OS: Windows 7
Re: Problem back again with PC, something stopping me going on the web.
« Reply #24 on: March 18, 2014, 01:24:25 PM »
That's good to hear. I had a great time last night playing for a St Pat's dinner.

What do you play ?

SuperDave

  • Malware Removal Specialist


  • Genius
  • Thanked: 1020
  • Certifications: List
  • Experience: Expert
  • OS: Windows 10
Re: Problem back again with PC, something stopping me going on the web.
« Reply #25 on: March 18, 2014, 04:12:18 PM »
What do you play ?
Guitar, mandolin and banjo.
Windows 8 and Windows 10 dual boot with two SSD's

harry 48

    Topic Starter


    Egghead

  • lay back , relax and chill out
  • Thanked: 129
    • Yes
    • Yes
    • Yes
    • Dribbling Pensioner
  • Certifications: List
  • Experience: Familiar
  • OS: Windows 7
Re: Problem back again with PC, something stopping me going on the web.
« Reply #26 on: March 18, 2014, 04:32:45 PM »
Guitar, mandolin and banjo.

Brilliant, I played the tenor horn and the euphonium in brass bands for years, played a lot of solos with the tenor horn.

SuperDave

  • Malware Removal Specialist


  • Genius
  • Thanked: 1020
  • Certifications: List
  • Experience: Expert
  • OS: Windows 10
Re: Problem back again with PC, something stopping me going on the web.
« Reply #27 on: March 19, 2014, 11:19:58 AM »
There shouldn't be an ed on play. I hope you had a good St Patty's day.
Windows 8 and Windows 10 dual boot with two SSD's

harry 48

    Topic Starter


    Egghead

  • lay back , relax and chill out
  • Thanked: 129
    • Yes
    • Yes
    • Yes
    • Dribbling Pensioner
  • Certifications: List
  • Experience: Familiar
  • OS: Windows 7
Re: Problem back again with PC, something stopping me going on the web.
« Reply #28 on: March 19, 2014, 01:51:59 PM »
There shouldn't be an ed on play. I hope you had a good St Patty's day.

Most of the brass bands have folded over the years, its sad.

Ah, now that's a different matter, when IRA politics and emblems come in to it, i and a lot of others will not attend it, when its for all the people of all religions of Northern Ireland I will.