|
|
Post by daspencer on Dec 19, 2017 17:06:02 GMT -8
I am using an old HP laptop running Windows 7 Home Premium andOffice 10 Home and Student. I have Norton360 and promptly install updates for it as well as Windows and Office.
A strange window appeared and for some unknown reason I was compelled toclick on it. Another DOS(?) windows opened and it appeared that the program was compressing files. I turned off the laptop with the power switch immediately. I rebooted in safe mood with no networking and tried to run a Norton scan. It looked likeit started but ultimately didn't appear it was doing anything. I contacted Norton and they directed me to you. I'd be grateful for you help, if I actually need it.
I have read the welcome threads, downloaded the recovery tools to my desktop, and ran the 64bit version. The logs and a screenshot showing the suspect window are included in the ZIP file uploaded to wikisend.com at:
wikisend.com/download/739828/FRST.zip |
|
dbrisen
Malware Removalists
Posts: 3,688 
|
Post by dbrisen on Dec 22, 2017 8:04:29 GMT -8
Hello and Welcome to the forum! Basically, your system looks clean. There are a few "loose ends" that can stand removing so we can start there. 1- Please double-click on FRST/FRST64 (whichever one you scanned your system with). 2- Press the Ctrl+y (Ctrl and y keys at the same time). 3- A fixlist.txt file opens up in notepad.exe. Please copy the contents of the quote box below. To do this highlight the contents of the box and right click on it and select copy. Paste this into the open notepad. 4- Press the Ctrl+s keys to save the file. Close the notepad / fixlist.txt file. 5- Press the Fix button just once. NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run. When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply. |
|
|
|
Post by daspencer on Dec 26, 2017 17:07:34 GMT -8
I have followed the instructions above. When I press Ctrl-Y, notepad opens but the file names are gobbledy-gook, e.g. lsjwtjjwgwaaymko.txt or ifjihxqfzispjnqq.txt. I've tried it a couple of times. Maybe I'm not waiting long enough? Or do I save one of those as fixlist.txt and proceed with the fix?
I'll exit FRST64 and wait for your reply.
|
|
dbrisen
Malware Removalists
Posts: 3,688
|
Post by dbrisen on Dec 26, 2017 19:18:44 GMT -8
Try saving the file as Fixlist.txt and proceed with the steps. If that does not help, come back and let me know and we will try uploading / downloading files.
By the way, Merry Christmas and Happy Holidays!
|
|
|
|
Post by daspencer on Dec 26, 2017 19:56:05 GMT -8
|
|
dbrisen
Malware Removalists
Posts: 3,688
|
Post by dbrisen on Dec 27, 2017 11:26:15 GMT -8
How is your system running now?
|
|
|
|
Post by daspencer on Dec 30, 2017 8:06:28 GMT -8
I haven't been using it, partly because of the holidays and partly because I was waiting to see if there is anything else that needed to be done. I will start again in the next few days.
Did you see the screenshot I sent along the first time. If that pops up again, what should I do, besides obviously not clicking on it again. Am I right that even trying to close it may actually start it again?
I'm in Nebraska and it is very cold here. It appears you are somewhere in Canada. If so, and depending on where, you must be even colder. Stay warm, and Happy New Year!
|
|
dbrisen
Malware Removalists
Posts: 3,688
|
Post by dbrisen on Jan 1, 2018 14:18:31 GMT -8
If the message pops-up again, be sure to click on the "Show program details" on the bottom of the window (see the screenshot you provided). This may help to pin down what program is running the data collection.
As to the temperature here, it is minus 8 at the moment but this is always relevant to what you are used to. ( -8 C = 17.6 F ) Been in colder places in the States before.
You have a great New Year and thanks for the thoughts!!
|
|
