|
Post by matangiii on Jun 15, 2015 15:45:55 GMT -8
Hi there! I somehow inadvertently have downloaded Pro PC Cleaner onto my system and can't seem to get rid of it. I am on Windows 8 and tried going into Safe Mode and uninstalling the program. However, I got a popup saying that my uninstaller wasn't installed correctly and that Window's couldn't remove it. That seemed fishy to me, so I tested that and successfully uninstalled two other small programs that I no longer need. I have not tried to uninstall the program outside of Safe Mode. My computer is currently functioning fine, but is starting to slow down. I am also concerned because I have read conflicting information about whether this program could have stolen passwords and personal information. How worried do I need to be about this? I'm a reasonably intelligent person, but I'm a bit of a n00b in this area. So please go slowly with me. I went through the instructions on "I think I am Infected. What do I do?" My scan results are below: Addition.txtFRST.txtThanks in advance for your help!!
|
|
dbrisen
Malware Removalists
Posts: 3,688
|
Post by dbrisen on Jun 15, 2015 22:40:03 GMT -8
Again, if you have any questions about these steps, stop and ask here before continuing on. Thank you. FIRST >>>>Open notepad by pressing the Windows Key + R key, typing notepad in the Run box and pressing Enter. Please copy the contents of the quote box below. To do this highlight the contents of the box and right click on it and select copy. Paste this into the open notepad. Save it to your desktop as fixlist.txtNOTE. It's important that both files, FRST64 and fixlist.txt are in the same location or the fix will not work. NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating systemStart FRST that is on the desktop by right clicking on file and selecting "Run as Administrator..." and press the Fix button just once and wait. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run. When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply. SECOND >>>>Please go to START (Windows Orb) >> Control Panel >> Uninstall a Program or Programs and Features and remove the following (if listed): Pro PC Cleaner Search App by AskTo do so, left clicking on the name once and then click Uninstall/Change at the bar above the list window. Follow the prompts of the uninstaller BUT please read carefully any questions it asks before answering; some uninstallers will try and deceive you into keeping the software. The uninstall may tell you that the application has been removed already and do you want to delete it from the Uninstall list. Please do this. Let me know how the uninstalls proceed.
|
|
|
Post by matangiii on Jun 16, 2015 3:12:54 GMT -8
Ok, I cut and paste the data you gave me into notepad and saved the file to the desktop. I then ran FRST64 which restarted my machine.
That's when the trouble started.
First, I got a blue screen stating "Automatic Repair couldn't repair your PC. Press "Advanced options" to try other options to repair your PC or "Shut down" to turn off your PC. Log file: C:\Windows\System32\Logfiles\Srt\SrtTrail.txt"
I wasn't sure about these Advanced Options, so I shut down and restarted.
I then got the following blue screen: "Your PC did not start correctly. Press "Restart" to restart your PC, which can sometimes fix the problem. You can also press "Advanced options" to try other options to repair your PC."
This time I did click Advanced Options, as I was hoping there was some way to get to my desktop and on to the forum. I tried clicking the first option "Continue. Exit and continue to Windows 8.1" but that brought me right around to the "Your PC did not start correctly" screen.
I stopped there and got on another computer to get on the forum.
I couldn't do screen shots, so I took a few pics with my phone. I'd be happy to share them if you feel like they'd be helpful, but there really wasn't much more than the text.
So, now what?? Thanks!!
|
|
dbrisen
Malware Removalists
Posts: 3,688
|
Post by dbrisen on Jun 16, 2015 16:28:31 GMT -8
Restart the affect PC and when you get to Advanced Options, select Safe Mode with Networking. If this will start and allow you to log onto the system, run a fresh set of FRST scans (see the steps below) and post those logs. If you can not get to Safe Mode at all (either with or without networking) let me know and we will attack from a different direction. How to Rescan with FRSTRead Slowly and all of it.If you still have a Addition.txt log file on your desktop, please delete it now. Start FRST64 that is on your Desktop by right clicking and selecting "Run as Administrator". The tool will start to run. When the tool opens click Yes to disclaimer. (if it does) Select Additional.txt in the Optional Scans section of FRST64. Press Scan button. It will make two logs ( FRST.txt and addition.txt) on your Desktop. Please attach the logs in your reply back. Or open the logs in notepad and copy the logs and paste back in a message as a reply. ( Ask if you don't know how to do either of these). Notes:
If your Security software blocks the running or download of FRST / FRST64, please disable the security software or make an exception for this file. FRST is updated very frequently and is safe to run but because of the frequent changes (to keep up with newest malware techniques) most Security Software does not approve of the unknown file. Right now the forum will not allow one to attach the Addition.txt file so please use wikisend.com or pastebin.com to upload the file and then post the download link here in your reply post.
|
|
|
Post by matangiii on Jun 16, 2015 18:24:51 GMT -8
That didn't work. I tried several times to run Safe Mode both with and without Networking and each time I get the same blue screens.
|
|
dbrisen
Malware Removalists
Posts: 3,688
|
Post by dbrisen on Jun 16, 2015 19:27:07 GMT -8
One of the first things that should have been done by FRST Fixlist is to make a System Restore point before changing anything.
You should be able to get to these by going to the Repair Your Computer > Troubleshoot > Advanced Options > System Restore. If you get there, close the one made by FRST at the date and time you ran the fixlist. This should put everything back to where it was before then and restart your system.
Let me know if that helped.
|
|
|
Post by matangiii on Jun 17, 2015 8:14:34 GMT -8
Whew! That worked! Okay, was able to get back in and to my desktop. I followed the directions to rescan from your prior post. Here are the results: FRST.txtAddition.txtThanks!
|
|
dbrisen
Malware Removalists
Posts: 3,688
|
Post by dbrisen on Jun 17, 2015 17:10:11 GMT -8
Let's try this one step at a time. For now >>>>
Please go to START (Windows Orb) >> Control Panel >> Uninstall a Program or Programs and Features and remove the following (if listed):
Pro PC Cleaner Search App by Ask
To do so, left clicking on the name once and then click Uninstall/Change at the bar above the list window.
Follow the prompts of the uninstaller BUT please read carefully any questions it asks before answering; some uninstallers will try and deceive you into keeping the software. The uninstall may tell you that the application has been removed already and do you want to delete it from the Uninstall list; that is fine to do. If the uninstalls try to direct you to web sites, download other products or state that the uninstall can not proceed, skip that uninstall and proceed to the next one on the list. Make a note of what was skipped and what uninstalled.
Let me know how the uninstalls proceed.
|
|
|
Post by matangiii on Jun 18, 2015 0:11:27 GMT -8
Okay, from Safemode with networking, I received the following after clicking Uninstall on each: "The Windows Installer Service could not be accessed. This can occur if the Windows installer is not correctly installed. Contact support personnel for assistance."
I find this questionable since I Uninstalled something not two days ago just fine.
|
|
dbrisen
Malware Removalists
Posts: 3,688
|
Post by dbrisen on Jun 18, 2015 0:19:32 GMT -8
This is standard for Safe Mode as the service does not run unless you modify the registry. You can see how here (http://www.thewindowsclub.com/make-windows-installer-work-in-safe-mode). If you are not comfortable doing this let me know and I will get you a script to do the work for you.
|
|