Keep getting pop-ups about installing a Windows Vista Driver

[debby]

I have been having some weird things going on with my computer, and have posted here and gotten help.  But I am frequently getting a pop-up that tells me I need to download Windows Vista Driver Optimizer.  It says it is a Microsoft Gold Certified Partner. Tells me it will help a lot of things, one of them crashes and I was told that my hard drive might be getting ready to crash, faster windows performance, increased computer stability and performance, etc.  Should I download this and see if it helps any of my problems?  I have an older computer, running Vista, AMD Athlon 64 Pro 3500+, 2.21 GHz, 2:00 GB,
32-bit operating system. My computer has gotten slower.  I have Microsoft Essentials anti-virus and ad-aware malware.  Also, I have been trying to do backups to an external hard drive (Seagate) and it tells me my backups fail.  Any insight is much appreciated as I know squat about computers, other than email and surf the web.  I don't understand a lot of the techie stuff. I have run virus scan and malware, shows up clean.

[Allan]

You have a malware infection.

Please follow the instructions in the following link and post your logs in the thread you create (NOT in this thread):
http://www.computerhope.com/forum/index.php/topic,46313.0.html

[debby]

Thanks Allan, I will do that shortly.  But one thing, and I told you I wasn't techie, what do you mean you said post it but not in this thread?  And then when I went to the directions, it says not to bump your thread.  What does that mean? Not post it here? I told you I was computer stupid, but obviously I am stupid.  Thanks again for your help.

[debby]

Allan, I think I understand now after reading through more of the instructions. I have Slim Cleaner Plus on my computer, should I use that, uninstall it and do CClean Slim, or are they the same thing?

[Allan]

Just follow all of the instructions in the link I posted. I'll make life easier for you and move this thread to the malware forum - you can post the results of the scans in this thread. If the instructions say to use ccleaner, please use ccleaner. Don't worry about uninstalling anything right now.

From this point forward any questions you have will be answered only by our malware specialist.

[debby]

# AdwCleaner v5.010 - Logfile created 05/10/2015 at 19:35:52
# Updated 04/10/2015 by Xplode
# Database : 2015-10-05.3 [Server]
# Operating system : Windows Vista (TM) Home Basic Service Pack 2 (x86)
# Username : debby - ATHLN64
# Running from : C:\Users\debby\Downloads\adwcleaner_5.010.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****

[-] Service Deleted : swdumon

***** [ Folders ] *****

[-] Folder Deleted : C:\Program Files\globalUpdate
[-] Folder Deleted : C:\Program Files\slimcleaner plus
[-] Folder Deleted : C:\Program Files\slimservice
[-] Folder Deleted : C:\ProgramData\slimware utilities inc
[-] Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\slimcleaner plus
[-] Folder Deleted : C:\Users\debby\AppData\Local\globalUpdate
[-] Folder Deleted : C:\Users\debby\AppData\Local\slimware utilities inc

***** [ Files ] *****

[-] File Deleted : C:\Users\Public\Desktop\slimcleaner plus.lnk
[-] File Deleted : C:\Windows\system32\drivers\swdumon.sys

***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****

[-] Task Deleted : LaunchSignup

***** [ Registry ] *****

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A07E5BFF-B16C-4ABA-A30F-514213A945E6}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
[-] Key Deleted : HKCU\Software\GlobalUpdate
[-] Key Deleted : HKCU\Software\SlimWare Utilities Inc
[-] Key Deleted : HKLM\SOFTWARE\GlobalUpdate
[-] Key Deleted : HKLM\SOFTWARE\SlimWare Utilities Inc
[-] Key Deleted : HKLM\SOFTWARE\SLIMWARE UTILITIES, INC.
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90120000-00B0-0409-0000-0000000FF1CE}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\MyPC Backup
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{90120000-00B0-0409-0000-0000000FF1CE}

***** [ Web browsers ] *****


*************************

:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [2433 bytes] ##########

[debby]

Malwarebytes Anti-Malware 2.1.8.1057

Improvements:
•   License key is now displayed on the My Account screen
•   Remaining subscription duration now displayed on My Account screen
•   Implemented other licensing improvements to clarify license status
•   Enhanced protection capabilities of Malwarebytes Anti-Malware Web Protection
•   Numerous enhancements to prepare for full compatibility with Windows 10
•   Enhanced Malwarebytes Chameleon's ability to fully restore Malwarebytes functionality when affected by a malware infection
•   Updated data collection techniques to improve malware research and analysis
•   Removed "Exclude" button on Website Blocked notification to reduce inadvertent allowing of malicious sites
•   Updated button text on Malware Detected and Non-Malware Detected notifications to clarify meaning
•   Added enhanced support for High DPI displays
•   Enabled the Malwarebytes Anti-Malware Free version to receive incremental database updates
•   Added appropriate copyright notices and license statements for all third-party open source software
•   Corrected translation errors for core non-English languages (German, French, Spanish, Italian, Dutch, Portuguese, Brazilian Portuguese, Russian and Polish)
•   Added support for Chinese Traditional, which is provided as a convenience for our users by a community volunteer and is not an officially supported language
•   Several improvements to malware detection and remediation capabilities

Issues Fixed:
•   Reverted the temporary change in v.2.1.6 that disabled checking for updates prior to scheduled scans
•   Fixed SDK Database load errors for error code 2 and 1812
•   Removed obsolete "Terminate program when no threats are found" setting since scans now run from the tray application
•   Fixed several crashes that could occur during scan and quarantine operations
•   Fixed crash that occurred when clicking the Clear Policies link on Access Policies screen
•   Fixed issue where "Show notification after successful update" setting was not properly retained during upgrade from v.2.1.4 to v.2.1.6
•   Fixed issue where "Close notification" setting was not retained during upgrade from v. 2.1.4 to v.2.1.6 if the user had changed that setting back to 7 seconds after installing v.2.1.4
•   Fixed issue on the Quarantine screen where unselecting a quarantined item disabled the Delete and Restore buttons
•   Fixed issue where incorrect program version was listed in the scan logs
•   Disabled option to specify rootkit scanning as part of a Hyper scan
•   Fixed issue in Windows 10 Tech Preview and Windows 8.1 where Malwarebytes Anti-Malware was unable to start in certain cases after self-protection was turned on
•   Fixed issue where Malwarebytes Chameleon did not load properly on Windows XP SP3 in certain conditions
•   Fixed issue which prevented Malwarebytes Anti-Malware v.2.1.4 (and higher) from upgrading over certain Malwarebytes Anti-Malware v.1.75 consumer builds

[debby]

 Results of screen317's Security Check version 1.009 
 Windows Vista Service Pack 2 x86 (UAC is enabled) 
 Internet Explorer 9 
 Internet Explorer 8 
``````````````Antivirus/Firewall Check:``````````````[/u]
 Windows Firewall Enabled! 
Microsoft Security Essentials   
 Antivirus up to date! 
`````````Anti-malware/Other Utilities Check:`````````[/u]
 CCleaner     
 SlimCleaner Plus   
 Java 8 Update 60 
 Adobe Reader 10.1.15 Adobe Reader out of Date! 
````````Process Check: objlist.exe by Laurent````````[/u] 
 Microsoft Security Essentials MSMpEng.exe
 Microsoft Security Essentials msseces.exe
`````````````````System Health check`````````````````[/u]
 Total Fragmentation on Drive C: 0 %
````````````````````End of Log``````````````````````[/u]

[Allan]

I told you I moved the thread for you but you started a new thread anyway. Okay, I've merged the two threads. Please don't do anything further until our malware specialist responds.

[SuperDave]

Hello and welcome to Computer Hope Forum. My name is Dave. I will be helping you out with your particular problem on your computer.

1. I will be working on your Malware issues. This may or may not solve other issues you have with your machine.
2. The fixes are specific to your problem and should only be used for this issue on this machine.
3. If you don't know or understand something, please don't hesitate to ask.
4. Please DO NOT run any other tools or scans while I am helping you.
5. It is important that you reply to this thread. Do not start a new topic.
6. Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.
7. Absence of symptoms does not mean that everything is clear.

If you can't access the internet with your infected computer you will have to download and transfer any programs to the computer you're using now and transfer them to the infected computer with a CD-RW or a USB storage device. I prefer a CD because a storage device can get infected. If you use a storage device hold the shift key down while inserting the USB storage device for about 10 secs. You will also have to transfer the logs you receive back to the good computer using the same method until we can get the computer back on-line.
*************************************************************************
You should uninstall IE 8.
*********************************************
Please run the MBAM scan and post the log.
*************************************************
Please download Junkware Removal Tool to your desktop.

•Warning! Once the scan is complete JRT will shut down your browser with NO warning.

•Shut down your protection software now to avoid potential conflicts.

•Temporarily disable your Antivirus and any Antispyware real time protection before performing a scan. Click this link to see a list of security programs that should be disabled and how to disable them.

•Run the tool by double-clicking it. If you are using Windows Vista or Windows 7, right-click JRT and select Run as Administrator

•The tool will open and start scanning your system.

•Please be patient as this can take a while to complete depending on your system's specifications.

•On completion, a log (JRT.txt) is saved to your desktop and will automatically open.

•Copy and Paste the JRT.txt log into your next message.

[debby]

If I uninstall IE8, then how do I use the web to download the Junkware Removal Tool?  Also, how do I give you the MBAM log? I ran it, thought I posted it, but evidently not.  I followed the instructions of where to find it on my computer, and every time a window came up telling me not found, try a different path, or something like that.  I tried two ways to pull up the MBAM log, not able to do it.  Oh, and by the way, SuperDave, you have helped me many times in the past.  You've gotten me back together and I think SuperDave is a great name for you!  Also, I can access the internet, no problem.

[debby]

Wait a minute, I have IE9.  Do I uninstall that?

[SuperDave]

You currently have IE 8 and IE 9 on your computer. There is no need to keep IE8 because it is replaced by IE9
You can run MBAM again and see if you can find the log or you can do a search for *.txt. Make sure you use the wildcard star dot.

[debby]

Dave, Please don't give up on me yet! I'm sorry I haven't gotten back to you yet as I've been sick.  I'm in remission from pancreatic cancer and the surgery I had leaves your body unpredictable.  I am feeling a little better and will try to work on this tomorrow.  But first of all, where do I go to find IE 8 to uninstall it?  What's wildcard star dot.?  (Again, I told you I know nothing about the workings of a computer!)  Thanks - hopefully I'll be back with you shortly.

[debby]

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 7.6.4 (09.28.2015:1)
OS: Windows Vista (TM) Home Basic x86
Ran by debby on Fri 10/09/2015 at 17:19:28.56
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services

Successfully deleted: [Service] slimservice [Reboot required]



~~~ Tasks

Successfully deleted: [Task] C:\Windows\System32\tasks\SlimCleaner Plus (Scheduled Scan - debby)
Successfully deleted: [Task] C:\Windows\Tasks\SlimCleaner Plus (Scheduled Scan - debby).job



~~~ Registry Values

Successfully deleted: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\slimcleaner plus



~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Folder] C:\Users\debby\Appdata\Local\crashrpt
Successfully deleted: [Folder] C:\users\Public\Documents\downloaded installers





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Fri 10/09/2015 at 17:21:34.32
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

[debby]

Malwarebytes' Anti-Malware 1.44
Database version: 3677
Windows 6.0.6002 Service Pack 2
Internet Explorer 7.0.6002.18005

2/2/2010 10:08:40 AM
mbam-log-2010-02-02 (10-08-40).txt

Scan type: Quick Scan
Objects scanned: 99045
Time elapsed: 4 minute(s), 18 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

[debby]

I hope this is what you need Dave.  I have looked at EVERYTHING I can figure out how to look for IE 8 and I do not see it.  I did see IE 9, but no 8.  Also, on the Junkware Removal Tool, you click on where it tells you what you need to disable and how to do it.  Well, it didn't work...both pages I tried to open, for Malware and Microsoft Essentials, came up with blank page on the address bar at the top.  Just thought you'd like to know that.  Again, Thank you, Thank you, Thank you,

Debby

[SuperDave]

I'm sorry to hear about your illness.
You can uninstall IE8 by going to Control Panel, Programs and Features.

I'd like to scan your machine with ESET OnlineScan

•Hold down Control and click on the following link to open ESET OnlineScan in a new window.
ESET OnlineScan

•Click the button.
•For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)

• Click on to download the ESET Smart Installer. Save it to your desktop.
  
• Double click on the icon on your desktop.
  

•Check
•Click the button.
•Accept any security warnings from your browser.

• Leave the check mark next to Remove found threats.
  

•Check
•Push the Start button.
•ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
•When the scan completes, push
•Push , and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
•Push the button.
•Push
A log file will be saved here: C:\Program Files\ESET\ESET Online Scanner\log.txt

[debby]

Okay, Dave, did the ESET scan.  When it finished, it came up no threats found.

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=de21705e003aea4caf11185893fa12ce
# end=init
# utc_time=2015-10-10 04:35:42
# local_time=2015-10-10 12:35:42 (-0500, Eastern Daylight Time)
# country="United States"
# osver=6.0.6002 NT Service Pack 2
Update Init
Update Download
Update Finalize
Updated modules version: 26174
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=de21705e003aea4caf11185893fa12ce
# end=updated
# utc_time=2015-10-10 04:38:51
# local_time=2015-10-10 12:38:51 (-0500, Eastern Daylight Time)
# country="United States"
# osver=6.0.6002 NT Service Pack 2
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=de21705e003aea4caf11185893fa12ce
# engine=26174
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-10-10 06:28:00
# local_time=2015-10-10 02:28:00 (-0500, Eastern Daylight Time)
# country="United States"
# lang=1033
# osver=6.0.6002 NT Service Pack 2
# compatibility_mode_1='Microsoft Security Essentials'
# compatibility_mode=5895 16777213 100 100 11039987 115683702 0 0
# scanned=248703
# found=0
# cleaned=0
# scan_time=6548

I did go onto Programs and Features, no IE 8.  However, my husband was talking to a friend and told him I was trying to get my computer straightened out and described to him kinda (he's less techie smart than me) what's going on.  He told my husband that sometimes when you update a Service Pack, it will hide IE 8 in there.  He didn't tell him what to do after that as he is a computer guy but he gets "annoyed" when people ask questions about a computer, so he left it at that.  I don't know if that's why I don't see IE 8, but thought I'd tell you that.  Should I leave ESET on my computer or uninstall it?  Am I all cleaned up now? 

I tell you, you are GOOD SuperDave!  I do so much appreciate the help and the free time you've given me and gave me in the past.  Thank you so very much!  I'd be lost without you.  Hopefully, I will get a new computer after Christmas.  This one is certainly old and tired and way out of date!

[SuperDave]

The IE 8 is not a biggie. Don't worry about it. Let's do some clean up.

Click Start> Computer> right click the C Drive and choose Properties> enter
Click Disk Cleanup from there.



Click OK on the Disk Cleanup Screen.
Click Yes on the Confirmation screen.



This runs the Disk Cleanup utility along with other selections if you have chosen any. (if you had a lot System Restore points, you will see a significant change in the free space in C drive)
************************************************
This step will remove all cleaning tools we used, it'll reset restore points (so you won't get reinfected by accidentally using some older restore point) and it'll make some other minor adjustments...
This is a very crucial step so make sure you don't skip it.
Download DelFix by Xplode to your desktop. Delfix will delete all the used tools and logfiles.

Double-click Delfix.exe to start the tool.
Make sure the following items are checked:

• Activate UAC (optional; some users prefer to keep it off)
• Remove disinfection tools
• Create Registry backup
• Purge System Restore Points
• Re-set system settings

Now click "Run" and wait patiently.
Once finished a logfile will be created. You don't have to attach it to your next reply.
**********************************************
I suggest using WOT - Web of Trust. WOT is a free Internet security addon for your browser. It will keep you safe from online scams, identity theft, spyware, spam, viruses and unreliable shopping sites. WOT warns you before you interact with a risky website. It's easy and it's free.

Check out Keeping Yourself Safe On The Web for tips and free tools to help keep you safe in the future.

Also see Slow Computer? It may not be Malware for free cleaning/maintenance tools to help keep your computer running smoothly.
Safe Surfing!

[debby]

Okay, I did all you told me to do.  I must have worse problems as everytime I try to do a backup, it tells me backup has failed.  I use a Seagate External Hard Drive.  Also, my Microsoft Essentials tells me my computer isn't protected, said I needed to scan it, I did, still the same thing.  When I clicked onto Slow Computer? It may not be Malware, the page would not open and a pop-up came up saying IE could not open as a problem with the program has occurred.  I also downloaded WOT and am going to print the Keeping Yourself Safe on the Web, just to have it handy.  Anything more you need from me or know why I can't run a backup?  Again, I so much appreciate and thank you for all your help.

[SuperDave]

What are you using for your backup?

[debby]

Seagate External Hard Drive for my backup.  Been using it for years, now all of a sudden it tells me my backups failed.  But the reason I said I might have to have it fixed is also because I use Windows Photo Gallery for my pictures and a few months ago, when I try to email a picture to someone, they get 13 of them and can't open any.  I don't really want to get rid of this yet, want to keep it running until after Christmas.  The family has just gotten so we exchange money, parents giving us more, mainly because they are quite elderly and can't get out and about much to shop.  Oh, and I ran a full scan with Microsoft Security Essentials and it is working fine now.  Oh yeah....I did look at my space on my computer, and sure enough I have more free space now!!!  That is so cool! How did that happen??? No, don't explain, I probably wouldn't understand it! We've been "talking" so much I thought I'd let you know I live in Virginia.  Finally getting cooler weather.  Don't know where you are but hope you're not in all that flood stuff.  Again, thank you so much for your time.  Wish I could pay you for as much as you've helped me.  Debby
 

[SuperDave]

....I did look at my space on my computer, and sure enough I have more free space now!!!  That is so cool! How did that happen???

Probably when you ran dishcleanup. I meant what program are you using to create your backup?

[debby]

Now I'm confused about what you are asking me.  I have a Seagate External Hard Drive, I plug it into my computer, it pops up and states it is Drive E, then says Run Backup, I click on what I want backed-up (like which files, folders, pictures, c, etc, and then I click Backup Now.  Then it tells me when it's finished.

[SuperDave]

Ok, that clears it up. Can you access the external hard drive?

[debby]

I've only accessed one time, a long time ago, to put some of my photos on my laptop, and some documents.  They didn't all go on there and I assumed it was because it was a different operating system.  I have Vista, laptop is Windows 7.  Back about six years ago, my computer guy (who no longer does computers) used it to do something with my computer.  Do you need me to get something off of it?

[SuperDave]

An external hard drive is exactly like a USB memory stick. Plug in your external hard drive and you should get a pop-up asking you what you want to do. If not, go to My Computer and look for the drive. If you can't see it there is something wrong with the drive or the USB ports.

[debby]

Okay.  When I went to My Computer, Drive E says Free-Agent Drive (E).  It tells me I have 190.0 GB Free Space.  Then Seagate has a Sync, where it syncs your files and folders, etc.  The last backup I did AFTER you helped me fix my computer did not fail, where it had been failing before that. To be perfectly honest, my computer guy at the time told me this was what I should get, but if my computer crashes, I wouldn't know what to do with the Seagate Manager other than plug it in and see what happens.  Told you, know extremely little about the workings of computers.  I've tried, but it's all too confusing to me.  Some people seem to "get it", some don't - that's me, the don't.  Although you have opened up a whole new world for me if I get an infection again.  I printed and saved all the info in a paper folder that I can pull it out and read what to do.  Thank you!  I'm loving that my computer is running better and also whatever we fixed, it also fixed my Windows Photo Gallery.  When I send an email picture from that program, it not longer sends 13 emails and my friends can actually open them now where they couldn''t before.
Debby

[SuperDave]

Ok, let's try something else. I'm not familiar with Seagate Manager. Try saving for example a bunch of your pictures to your external. Just select the pictures, right-click and select Save. Now right-click on your ext drive and select paste. Please let me know what happens. If you're able to save some to the ext. drive then we know that the drive is functioning properly.

[debby]

Sorry I haven't gotten back to you before now, lot of things going on here.  My Seagate Manager does not save things that way.  It will ask you what you want to save, i.e., files, folders, photos, music, videos, etc., and you just click on those things and it saves them all, doesn't pick out one in particular.  Now, I have plugged it into my husband's laptop to put the pictures on that and it doesn't do it. I'm thinking it's because he has Windows 7, mine is Vista, and I don't think he has Windows Photo Gallery, it's some other Photo thing.  I will look and see.  It did transfer some stuff to the laptop, don't remember what right now as it was a while ago.  I will try to look in the next few days and report to you what I find out.  I will try to put the photos on his machine again.  Thanks! 

[SuperDave]

I realize that the instructions that I gave you is not the same as the Seagate Manager but if you can't save files to the ext. drive using the method I've described it will mean that there is something not quite correct with the ext. drive.

[debby]

Solved the problem, Super Dave, I got a new computer!

[SuperDave]

well, that's one solution I hadn't thought about. Keep safe.