dbrisen
Malware Removalists
Posts: 3,688
|
Post by dbrisen on Nov 19, 2014 21:43:22 GMT -8
Ok, you need to try this once again. Right click on the Fixlist.txt link in my previous post and select either Save Target As or Save Link As (depends on the browser you are using). Please make sure that the file type is set as Text File. Then run the Fix scan once again. Thanks.
Please come back and ask if you don't understand any of this.
|
|
asch
New Helpee
Posts: 18
|
Post by asch on Nov 20, 2014 5:07:20 GMT -8
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 19-11-2014 Ran by Anna at 2014-11-20 06:55:55 Run:2 Running from C:\Users\Kim\Desktop Loaded Profiles: Anna & Kim (Available profiles: Anna & Kim) Boot Mode: Normal ==============================================
Content of fixlist: ***************** <!DOCTYPE HTML> <!--[if IE 7]><html class="ie7"><![endif]--><!--[if IE 8]><html class="ie8"><![endif]--><!--[if IE 9]><html class="ie9"><![endif]--><!--[if gt IE 9]><!--> <html> <!--<![endif]--> <head> <meta http-equiv="content-type" content="text/html; charset=UTF-8" /> <title>Oops, there was an error! | Malware Removal </title> <link rel="canonical" href="http://qmalwareremoval.freeforums.net/attachment/download/3163" /> <link rel="alternate" type="application/rss+xml" href="http://qmalwareremoval.freeforums.net/rss/public" /> <link rel="shortcut icon" type="image/x-icon" href="//images.proboards.com/v5/favicon.ico" /> <link rel="icon" type="image/x-icon" href="//images.proboards.com/v5/favicon.ico" /> <meta property="og:url" content="http://qmalwareremoval.freeforums.net/attachment/download/3163" /> <meta property="og:title" content="Oops, there was an error! | Malware Removal " /> <meta property="og:description" content="Visit our forum at: qmalwareremoval.freeforums.net" /> <meta name="twitter:card" content="summary" /> <meta name="twitter:site" content="@proboards" /> <meta name="twitter:app:id:iphone" content="307880732" /> <meta name="twitter:app:url:iphone" content="tapatalk://support.tapatalk.com/?user_id=169&location=index" /> <meta name="twitter:app:id:ipad" content="307880732" /> <meta name="twitter:app:url:ipad" content="tapatalk://support.tapatalk.com/?user_id=169&location=index" /> <meta name="twitter:app:id:googleplay" content="com.quoord.tapatalkpro.activity" /> <meta name="twitter:app:url:googleplay" content="tapatalk://support.tapatalk.com/?user_id=169&location=index" />
<link rel="stylesheet" type="text/css" media="screen" href="http://d.storage.proboards.com/f/Default/forum_204.css" id="forum_style"> <link rel="stylesheet" type="text/css" media="print" href="http://d.storage.proboards.com/f/print.css"> <script type="text/javascript" src="//ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js"></script> <script type="text/javascript" src="http://d.storage.proboards.com/f/forum_204.js"></script> <script type="text/javascript">proboards.data([['ad_free',0],['time_style',0],['military_time',0],['timezone',"guest"],['serverDate',1416487581000],['search-query-min',3],['search-query-max',50],['is_current_user_guest',"1"],['plugin_max_key_length',4000],['plugin_max_super_forum_key_length',32000],['login_url',"https://login.proboards.com/login/5448498/1"],['register_url',"https://login.proboards.com/register/5448498"]]);</script> <script type="text/javascript">proboards.plugin._plugins["pixeldepth_icon_to_name"] = { settings: {"images_users":[{"image_url":"","image_title":"","replace_name":"0","users":["1"]}],"images_groups":[{"image_url":"http://www.gettyicons.com/free-icons/141/ginux/png/24/antivirus_24.png","image_title":"","replace_name":"0","groups":["4"]}]} }; proboards.plugin._plugins["wormocodes_image_in_title"] = { settings: {"image_tags":[{"look_for":"#?","image_url":"http://storage.proboards.com/5448498/i/4BIqmtWkxUeWswvqmv_T.png","force_height":"23","force_width":"48","navigation_replace_text":"#?"},{"look_for":"[CLOSED]","image_url":"http://storage.proboards.com/5448498/i/sUOVZ3Gs6ICcCwf4r8tE.png","force_height":"23","force_width":"48","navigation_replace_text":""}]} };</script>
</head> <body> <div id="wrapper"> <header> <div id="banner-container" role="banner"> <h2 id="banner"> <a id="logo" href="/">Malware Removal </a> </h2> </div> <a id="navigation-skip" href="#content" accesskey="s" class="aria-hidden" title="Skip Navigation">Skip Navigation</a> <a href="#" accesskey="d" title="Open Menu" onclick="proboards.hotkeys.activate(Keys.d); return false;"></a> <div id="navigation-menu" class="ui-helper-clearfix"> <ul role="navigation"> <li> <a href="/"> Home </a> </li> <li> <a href="/help"> Help </a> </li> <li> <a href="/search"> Search </a> </li> </ul> <p id="welcome"> Welcome Guest. Please <a href="https://login.proboards.com/login/5448498/1">Login</a> or <a href="https://login.proboards.com/register/5448498">Register</a>. </p> </div> </header> <div id="navigation-tree"> <div class="nav-tree-wrapper"><ul id="nav-tree" class="ui-helper-clearfix" role="navigation"><li id="nav-tree-branch-0" class="nav-tree-branch ui-helper-clearfix"><div itemscope="itemscope" itemtype="http://data-vocabulary.org/Breadcrumb"><a href="/" itemprop="url"><span itemprop="title">Malware Removal </span></a></div><span class="menu_arrow"><span></span></span></li></ul></div><div class="popup_html"> <ul id="nav-tree-menu-0" role="navigation"> <li class="nav-tree-cat-2"><a href="/#category-2"><span class="item-text">System Security</span><div class="clear"></div></a> <ul role="navigation"> <li class="nav-tree-board-2"><a href="http://qmalwareremoval.freeforums.net/board/2/malware-removal-protected"><span class="item-text">Malware Removal (Protected)</span><div class="clear"></div></a></li> <li class="nav-tree-board-6"><a href="http://qmalwareremoval.freeforums.net/board/6/security-software"><span class="item-text">Security Software</span><div class="clear"></div></a></li> </ul> </li> <li class="nav-tree-cat-3"><a href="/#category-3"><span class="item-text">Windows and Software Problems (not due to infection)</span><div class="clear"></div></a> <ul role="navigation"> <li class="nav-tree-board-3"><a href="http://qmalwareremoval.freeforums.net/board/3/windows"><span class="item-text">Windows</span><div class="clear"></div></a></li> <li class="nav-tree-board-4"><a href="http://qmalwareremoval.freeforums.net/board/4/third-party-software"><span class="item-text">Third Party Software </span><div class="clear"></div></a></li> </ul> </li> <li class="nav-tree-cat-1"><a href="/#category-1"><span class="item-text">General</span><div class="clear"></div></a> <ul role="navigation"> <li class="nav-tree-board-1"><a href="http://qmalwareremoval.freeforums.net/board/1/general-board"><span class="item-text">General Board</span><div class="clear"></div></a></li> <li class="nav-tree-board-7"><a href="http://qmalwareremoval.freeforums.net/board/7/penthouse-play-pen"><span class="item-text">Penthouse Play Pen</span><div class="clear"></div></a></li> </ul> </li> </ul></div><script type="text/javascript"> var offset = ($.browser.msie && parseInt($.browser.version) == 8) ? '3 -1' : '3 0'; $('#nav-tree-menu-0') .addClass('nav-tree-menu') .menu({ position: { my: 'left top', at: 'left bottom', offset: offset, of: $('#nav-tree-branch-0'), collision: 'flipfit' }, button: $('#nav-tree-branch-0'), showDelay: 400, show: function() { var self = $(this); // Make sure all other menus are closed $('.popup_html > ul').not(self).menu('hide'); $(document).on('mousemove', function(e) { var elem = $(e.target); if(elem.parents('#nav-tree, .popup_html').length == 0 && !elem.is('#nav-tree, .popup_html') && !$('#nav-tree-menu-0').data('hotkey-open')) { self.menu('hide'); $(document).unbind('mousemove'); } }); } }); </script> </div> <div id="top-ad-banner" style="height: 90px; width: 728px; margin: 0 auto 10px; text-align: center;"> <script type="text/javascript"> oz_api = 'valuation'; oz_site = '7781/12408'; oz_zone = '135274'; oz_ad_slot_size = '728x90'; </script> <script type="text/javascript" src="http://tap-cdn.rubiconproject.com/partner/scripts/rubicon/dorothy.js?pc=7781/12408"></script> <script type="text/javascript"> $(document).ready(function() { $('#top-ad-banner').append('<iframe class="pb-ads" width="728" height="90" marginwidth="0" marginheight="0" frameborder="0" scrolling="no"></iframe>'); var f = $('#top-ad-banner iframe'); var u = 'http://ads.proboards.com/ad.pl?as=728x90&ap=ATF&f=5448498&s=0&fc=4&d=qmalwareremoval.freeforums.net&g=&a=&cb=0.173167491818059&uid=0'; if (typeof(rp_valuation) !== "undefined" && typeof(rp_valuation.estimate) !== "undefined" && typeof(rp_valuation.estimate.tier) !== "undefined") { u = u + '&rtp=' + rp_valuation.estimate.tier; } f.attr('src', u); }); </script> </div> <script type="text/javascript"> $(window).load(function() { var topAd = $('#top-ad-banner'); if (topAd.prop('scrollHeight') < 90) { topAd.css('height', 'auto').html( '<b>Please consider supporting this website by disabling your ad-blocker.<br />' + 'This website does not use audio ads, popups, or other annoyances. Thank you!</b>' ); $("head").append('<style type="text/css">#top-ad-banner { display: block !important; }</style>'); } }); </script><script type="text/javascript" src="http://storage.proboards.com/5448498/j/Dox5kMQpamIWhhKOo03B.js" data-plugin="2" data-component="3"></script><script type="text/javascript" src="http://storage.proboards.com/5448498/j/IcEbexbhe_w0Gho77dWK.js" data-plugin="7" data-component="10"></script> <div id="content" role="main"> <div class="container error"> <div class="title-bar"> <h2>Oops, there was an error!</h2> </div> <div class="content pad-all cap-bottom auto-overflow"> Guests do not have access to download attachments. Please log in and try again. </div> </div> </div> <script type="text/javascript" src="http://ads.pro-market.net/ads/scripts/site-131222.js"></script><script type="text/javascript"> (function() { var nstrack = document.createElement("script"), el_nstrack = document.getElementsByTagName("script")[0]; nstrack.async = true; nstrack.src = "http://track.netshelter.net/async/js/sites/proboards.com-async.js"; el_nstrack.parentNode.insertBefore(nstrack, el_nstrack); })(); </script><div style="margin-bottom: 2px; text-align: center;"><a href="https://www.proboards.com/store/add_cart/ad_free/50000/qmalwareremoval.freeforums.net/1">Click here to remove banner ads from this forum.</a></div> <div id="bottom-ad-banner" style="height: 90px; width: 728px; margin: 0 auto 10px; text-align: center;"> <script type="text/javascript"> oz_api = 'valuation'; oz_site = '7781/12408'; oz_zone = '135276'; oz_ad_slot_size = '728x90'; </script> <script type="text/javascript" src="http://tap-cdn.rubiconproject.com/partner/scripts/rubicon/dorothy.js?pc=7781/12408"></script> <script type="text/javascript"> $(document).ready(function() { $('#bottom-ad-banner').append('<iframe class="pb-ads" width="728" height="90" marginwidth="0" marginheight="0" frameborder="0" scrolling="no"></iframe>'); var f = $('#bottom-ad-banner iframe'); var u = 'http://ads.proboards.com/ad.pl?as=728x90&ap=BTF&f=5448498&s=0&fc=4&d=qmalwareremoval.freeforums.net&g=&a=&cb=0.740252935068447&uid=0'; if (typeof(rp_valuation) !== "undefined" && typeof(rp_valuation.estimate) !== "undefined" && typeof(rp_valuation.estimate.tier) !== "undefined") { u = u + '&rtp=' + rp_valuation.estimate.tier; } f.attr('src', u); }); </script> </div> <footer role="contentinfo"> <p class="footer-text"> This Forum Hosted For FREE By <a href="http://www.proboards.com/" target="_blank">ProBoards</a><br /> Get Your Own <a href="http://www.proboards.com/" target="_blank">Free Message Boards & Free Forums</a>! </p> <div class="footer-links"> <a href="http://www.proboards.com/tos" accesskey="8">Terms of Service</a> | <a href="http://www.proboards.com/privacy">Privacy Policy</a> | <a href="http://www.proboards.com/privacy#enhanced">Notice</a> | <a href="http://www.viglink.com/policies/ftc" target="_blank">FTC Disclosure</a> | <a href="http://www.proboards.com/report-abuse" accesskey="7">Report Abuse</a> | <a href="http://www.proboards.com/mobile-forum-app">Mobile</a> | <a href="http://www.proboards.com/ads"><b>Advertise Here</b></a> </div> </footer>
<!-- Google Analytics Start --> <script type="text/javascript"> (function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){ (i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o), m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m) })(window,document,'script','//www.google-analytics.com/analytics.js','ga'); ga('create', 'UA-3734504-3', 'auto'); ga('send', 'pageview'); </script> <!-- Google Analytics End --> <script type="text/javascript"> var vglnk; $(document).ready(function() { vglnk = { api_url: '//api.viglink.com/api', key: 'bbb516d91daee20498798694a42dd559' }; var vglnkSrc = ('https:' == document.location.protocol ? vglnk.api_url : '//cdn.viglink.com/api') + '/vglnk.js'; // VigLink ProBoards Convert Code (using above key) var s = document.createElement('script'); s.type = 'text/javascript'; s.async = true; s.src = vglnkSrc; document.body.appendChild(s); }); </script>
</div> </body> </html> *****************
<!DOCTYPE HTML> => Error: No automatic fix found for this entry. <!--[if IE 7]><html class="ie7"><![endif]--><!--[if IE 8]><html class="ie8"><![endif]--><!--[if IE 9]><html class="ie9"><![endif]--><!--[if gt IE 9]><!--> <html> <!--<![endif]--> => Error: No automatic fix found for this entry. <head> => Error: No automatic fix found for this entry. <meta http-equiv="content-type" content="text/html; charset=UTF-8" /> => Error: No automatic fix found for this entry. <title>Oops, there was an error! | Malware Removal </title> => Error: No automatic fix found for this entry. <link rel="canonical" href="http://qmalwareremoval.freeforums.net/attachment/download/3163" /> => Error: No automatic fix found for this entry. <link rel="alternate" type="application/rss+xml" href="http://qmalwareremoval.freeforums.net/rss/public" /> => Error: No automatic fix found for this entry. <link rel="shortcut icon" type="image/x-icon" href="//images.proboards.com/v5/favicon.ico" /> => Error: No automatic fix found for this entry. <link rel="icon" type="image/x-icon" href="//images.proboards.com/v5/favicon.ico" /> => Error: No automatic fix found for this entry. <meta property="og:url" content="http://qmalwareremoval.freeforums.net/attachment/download/3163" /> => Error: No automatic fix found for this entry. <meta property="og:title" content="Oops, there was an error! | Malware Removal " /> => Error: No automatic fix found for this entry. <meta property="og:description" content="Visit our forum at: qmalwareremoval.freeforums.net" /> => Error: No automatic fix found for this entry. <meta name="twitter:card" content="summary" /> => Error: No automatic fix found for this entry. <meta name="twitter:site" content="@proboards" /> => Error: No automatic fix found for this entry. <meta name="twitter:app:id:iphone" content="307880732" /> => Error: No automatic fix found for this entry. <meta name="twitter:app:url:iphone" content="tapatalk://support.tapatalk.com/?user_id=169&location=index" /> => Error: No automatic fix found for this entry. <meta name="twitter:app:id:ipad" content="307880732" /> => Error: No automatic fix found for this entry. <meta name="twitter:app:url:ipad" content="tapatalk://support.tapatalk.com/?user_id=169&location=index" /> => Error: No automatic fix found for this entry. <meta name="twitter:app:id:googleplay" content="com.quoord.tapatalkpro.activity" /> => Error: No automatic fix found for this entry. <meta name="twitter:app:url:googleplay" content="tapatalk://support.tapatalk.com/?user_id=169&location=index" /> => Error: No automatic fix found for this entry. <link rel="stylesheet" type="text/css" media="screen" href="http://d.storage.proboards.com/f/Default/forum_204.css" id="forum_style"> => Error: No automatic fix found for this entry. <link rel="stylesheet" type="text/css" media="print" href="http://d.storage.proboards.com/f/print.css"> => Error: No automatic fix found for this entry. <script type="text/javascript" src="//ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js"></script> => Error: No automatic fix found for this entry. <script type="text/javascript" src="http://d.storage.proboards.com/f/forum_204.js"></script> => Error: No automatic fix found for this entry. <script type="text/javascript">proboards.data([['ad_free',0],['time_style',0],['military_time',0],['timezone',"guest"],['serverDate',1416487581000],['search-query-min',3],['search-query-max',50],['is_current_user_guest',"1"],['plugin_max_key_length',4000],['plugin_max_super_forum_key_length',32000],['login_url',"https://login.proboards.com/login/5448498/1"],['register_url',"https://login.proboards.com/register/5448498"]]);</script> => Error: No automatic fix found for this entry. <script type="text/javascript">proboards.plugin._plugins["pixeldepth_icon_to_name"] = { => Error: No automatic fix found for this entry. settings: {"images_users":[{"image_url":"","image_title":"","replace_name":"0","users":["1"]}],"images_groups":[{"image_url":"http://www.gettyicons.com/free-icons/141/ginux/png/24/antivirus_24.png","image_title":"","replace_name":"0","groups":["4"]}]} => Error: No automatic fix found for this entry. }; => Error: No automatic fix found for this entry. proboards.plugin._plugins["wormocodes_image_in_title"] = { => Error: No automatic fix found for this entry. settings: {"image_tags":[{"look_for":"#?","image_url":"http://storage.proboards.com/5448498/i/4BIqmtWkxUeWswvqmv_T.png","force_height":"23","force_width":"48","navigation_replace_text":"#?"},{"look_for":"[CLOSED]","image_url":"http://storage.proboards.com/5448498/i/sUOVZ3Gs6ICcCwf4r8tE.png","force_height":"23","force_width":"48","navigation_replace_text":""}]} => Error: No automatic fix found for this entry. };</script> => Error: No automatic fix found for this entry. </head> => Error: No automatic fix found for this entry. <body> => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. <div id="wrapper"> => Error: No automatic fix found for this entry. <header> => Error: No automatic fix found for this entry. <div id="banner-container" role="banner"> => Error: No automatic fix found for this entry. <h2 id="banner"> => Error: No automatic fix found for this entry. <a id="logo" href="/">Malware Removal </a> => Error: No automatic fix found for this entry. </h2> => Error: No automatic fix found for this entry. </div> => Error: No automatic fix found for this entry. <a id="navigation-skip" href="#content" accesskey="s" class="aria-hidden" title="Skip Navigation">Skip Navigation</a> => Error: No automatic fix found for this entry. <a href="#" accesskey="d" title="Open Menu" onclick="proboards.hotkeys.activate(Keys.d); return false;"></a> => Error: No automatic fix found for this entry. <div id="navigation-menu" class="ui-helper-clearfix"> => Error: No automatic fix found for this entry. <ul role="navigation"> => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. <li> => Error: No automatic fix found for this entry. <a href="/"> => Error: No automatic fix found for this entry. Home => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. </a> => Error: No automatic fix found for this entry. </li> => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. <li> => Error: No automatic fix found for this entry. <a href="/help"> => Error: No automatic fix found for this entry. Help => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. </a> => Error: No automatic fix found for this entry. </li> => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. <li> => Error: No automatic fix found for this entry. <a href="/search"> => Error: No automatic fix found for this entry. Search => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. </a> => Error: No automatic fix found for this entry. </li> => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. </ul> => Error: No automatic fix found for this entry. <p id="welcome"> => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. Welcome Guest. => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. Please <a href="https://login.proboards.com/login/5448498/1">Login</a> or <a href="https://login.proboards.com/register/5448498">Register</a>. => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. </p> => Error: No automatic fix found for this entry. </div> => Error: No automatic fix found for this entry. </header> => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. <div id="navigation-tree"> => Error: No automatic fix found for this entry. <div class="nav-tree-wrapper"><ul id="nav-tree" class="ui-helper-clearfix" role="navigation"><li id="nav-tree-branch-0" class="nav-tree-branch ui-helper-clearfix"><div itemscope="itemscope" itemtype="http://data-vocabulary.org/Breadcrumb"><a href="/" itemprop="url"><span itemprop="title">Malware Removal </span></a></div><span class="menu_arrow"><span></span></span></li></ul></div><div class="popup_html"> => Error: No automatic fix found for this entry. <ul id="nav-tree-menu-0" role="navigation"> => Error: No automatic fix found for this entry. <li class="nav-tree-cat-2"><a href="/#category-2"><span class="item-text">System Security</span><div class="clear"></div></a> => Error: No automatic fix found for this entry. <ul role="navigation"> => Error: No automatic fix found for this entry. <li class="nav-tree-board-2"><a href="http://qmalwareremoval.freeforums.net/board/2/malware-removal-protected"><span class="item-text">Malware Removal (Protected)</span><div class="clear"></div></a></li> => Error: No automatic fix found for this entry. <li class="nav-tree-board-6"><a href="http://qmalwareremoval.freeforums.net/board/6/security-software"><span class="item-text">Security Software</span><div class="clear"></div></a></li> => Error: No automatic fix found for this entry. </ul> => Error: No automatic fix found for this entry. </li> => Error: No automatic fix found for this entry. <li class="nav-tree-cat-3"><a href="/#category-3"><span class="item-text">Windows and Software Problems (not due to infection)</span><div class="clear"></div></a> => Error: No automatic fix found for this entry. <ul role="navigation"> => Error: No automatic fix found for this entry. <li class="nav-tree-board-3"><a href="http://qmalwareremoval.freeforums.net/board/3/windows"><span class="item-text">Windows</span><div class="clear"></div></a></li> => Error: No automatic fix found for this entry. <li class="nav-tree-board-4"><a href="http://qmalwareremoval.freeforums.net/board/4/third-party-software"><span class="item-text">Third Party Software </span><div class="clear"></div></a></li> => Error: No automatic fix found for this entry. </ul> => Error: No automatic fix found for this entry. </li> => Error: No automatic fix found for this entry. <li class="nav-tree-cat-1"><a href="/#category-1"><span class="item-text">General</span><div class="clear"></div></a> => Error: No automatic fix found for this entry. <ul role="navigation"> => Error: No automatic fix found for this entry. <li class="nav-tree-board-1"><a href="http://qmalwareremoval.freeforums.net/board/1/general-board"><span class="item-text">General Board</span><div class="clear"></div></a></li> => Error: No automatic fix found for this entry. <li class="nav-tree-board-7"><a href="http://qmalwareremoval.freeforums.net/board/7/penthouse-play-pen"><span class="item-text">Penthouse Play Pen</span><div class="clear"></div></a></li> => Error: No automatic fix found for this entry. </ul> => Error: No automatic fix found for this entry. </li> => Error: No automatic fix found for this entry. </ul></div><script type="text/javascript"> => Error: No automatic fix found for this entry. var offset = ($.browser.msie && parseInt($.browser.version) == 8) ? '3 -1' : '3 0'; => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. $('#nav-tree-menu-0') => Error: No automatic fix found for this entry. .addClass('nav-tree-menu') => Error: No automatic fix found for this entry. .menu({ => Error: No automatic fix found for this entry. position: { => Error: No automatic fix found for this entry. my: 'left top', => Error: No automatic fix found for this entry. at: 'left bottom', => Error: No automatic fix found for this entry. offset: offset, => Error: No automatic fix found for this entry. of: $('#nav-tree-branch-0'), => Error: No automatic fix found for this entry. collision: 'flipfit' => Error: No automatic fix found for this entry. }, => Error: No automatic fix found for this entry. button: $('#nav-tree-branch-0'), => Error: No automatic fix found for this entry. showDelay: 400, => Error: No automatic fix found for this entry. show: function() { => Error: No automatic fix found for this entry. var self = $(this); => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. // Make sure all other menus are closed => Error: No automatic fix found for this entry. $('.popup_html > ul').not(self).menu('hide'); => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. $(document).on('mousemove', function(e) { => Error: No automatic fix found for this entry. var elem = $(e.target); => Error: No automatic fix found for this entry. if(elem.parents('#nav-tree, .popup_html').length == 0 && !elem.is('#nav-tree, .popup_html') && !$('#nav-tree-menu-0').data('hotkey-open')) { => Error: No automatic fix found for this entry. self.menu('hide'); => Error: No automatic fix found for this entry. $(document).unbind('mousemove'); => Error: No automatic fix found for this entry. } => Error: No automatic fix found for this entry. }); => Error: No automatic fix found for this entry. } => Error: No automatic fix found for this entry. }); => Error: No automatic fix found for this entry. </script> => Error: No automatic fix found for this entry. </div> => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. <div id="top-ad-banner" style="height: 90px; width: 728px; margin: 0 auto 10px; text-align: center;"> => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. <script type="text/javascript"> => Error: No automatic fix found for this entry. oz_api = 'valuation'; => Error: No automatic fix found for this entry. oz_site = '7781/12408'; => Error: No automatic fix found for this entry. oz_zone = '135274'; => Error: No automatic fix found for this entry. oz_ad_slot_size = '728x90'; => Error: No automatic fix found for this entry. </script> => Error: No automatic fix found for this entry. <script type="text/javascript" src="http://tap-cdn.rubiconproject.com/partner/scripts/rubicon/dorothy.js?pc=7781/12408"></script> => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. <script type="text/javascript"> => Error: No automatic fix found for this entry. $(document).ready(function() { => Error: No automatic fix found for this entry. $('#top-ad-banner').append('<iframe class="pb-ads" width="728" height="90" marginwidth="0" marginheight="0" frameborder="0" scrolling="no"></iframe>'); => Error: No automatic fix found for this entry. var f = $('#top-ad-banner iframe'); => Error: No automatic fix found for this entry. var u = 'http://ads.proboards.com/ad.pl?as=728x90&ap=ATF&f=5448498&s=0&fc=4&d=qmalwareremoval.freeforums.net&g=&a=&cb=0.173167491818059&uid=0'; => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. if (typeof(rp_valuation) !== "undefined" && typeof(rp_valuation.estimate) !== "undefined" && typeof(rp_valuation.estimate.tier) !== "undefined") { => Error: No automatic fix found for this entry. u = u + '&rtp=' + rp_valuation.estimate.tier; => Error: No automatic fix found for this entry. } => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. f.attr('src', u); => Error: No automatic fix found for this entry. }); => Error: No automatic fix found for this entry. </script> => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. </div> => Error: No automatic fix found for this entry. <script type="text/javascript"> => Error: No automatic fix found for this entry. $(window).load(function() { => Error: No automatic fix found for this entry. var topAd = $('#top-ad-banner'); => Error: No automatic fix found for this entry. if (topAd.prop('scrollHeight') < 90) { => Error: No automatic fix found for this entry. topAd.css('height', 'auto').html( => Error: No automatic fix found for this entry. '<b>Please consider supporting this website by disabling your ad-blocker.<br />' + => Error: No automatic fix found for this entry. 'This website does not use audio ads, popups, or other annoyances. Thank you!</b>' => Error: No automatic fix found for this entry. ); => Error: No automatic fix found for this entry. $("head").append('<style type="text/css">#top-ad-banner { display: block !important; }</style>'); => Error: No automatic fix found for this entry. } => Error: No automatic fix found for this entry. }); => Error: No automatic fix found for this entry. </script><script type="text/javascript" src="http://storage.proboards.com/5448498/j/Dox5kMQpamIWhhKOo03B.js" data-plugin="2" data-component="3"></script><script type="text/javascript" src="http://storage.proboards.com/5448498/j/IcEbexbhe_w0Gho77dWK.js" data-plugin="7" data-component="10"></script> => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. <div id="content" role="main"> => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. <div class="container error"> => Error: No automatic fix found for this entry. <div class="title-bar"> => Error: No automatic fix found for this entry. <h2>Oops, there was an error!</h2> => Error: No automatic fix found for this entry. </div> => Error: No automatic fix found for this entry. <div class="content pad-all cap-bottom auto-overflow"> => Error: No automatic fix found for this entry. Guests do not have access to download attachments. Please log in and try again. => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. </div> => Error: No automatic fix found for this entry. </div> => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. </div> => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. <script type="text/javascript" src="http://ads.pro-market.net/ads/scripts/site-131222.js"></script><script type="text/javascript"> => Error: No automatic fix found for this entry. (function() { => Error: No automatic fix found for this entry. var nstrack = document.createElement("script"), el_nstrack = document.getElementsByTagName("script")[0]; nstrack.async = true; => Error: No automatic fix found for this entry. nstrack.src = "http://track.netshelter.net/async/js/sites/proboards.com-async.js"; => Error: No automatic fix found for this entry. el_nstrack.parentNode.insertBefore(nstrack, el_nstrack); => Error: No automatic fix found for this entry. })(); => Error: No automatic fix found for this entry. </script><div style="margin-bottom: 2px; text-align: center;"><a href="https://www.proboards.com/store/add_cart/ad_free/50000/qmalwareremoval.freeforums.net/1">Click here to remove banner ads from this forum.</a></div> => Error: No automatic fix found for this entry. <div id="bottom-ad-banner" style="height: 90px; width: 728px; margin: 0 auto 10px; text-align: center;"> => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. <script type="text/javascript"> => Error: No automatic fix found for this entry. oz_api = 'valuation'; => Error: No automatic fix found for this entry. oz_site = '7781/12408'; => Error: No automatic fix found for this entry. oz_zone = '135276'; => Error: No automatic fix found for this entry. oz_ad_slot_size = '728x90'; => Error: No automatic fix found for this entry. </script> => Error: No automatic fix found for this entry. <script type="text/javascript" src="http://tap-cdn.rubiconproject.com/partner/scripts/rubicon/dorothy.js?pc=7781/12408"></script> => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. <script type="text/javascript"> => Error: No automatic fix found for this entry. $(document).ready(function() { => Error: No automatic fix found for this entry. $('#bottom-ad-banner').append('<iframe class="pb-ads" width="728" height="90" marginwidth="0" marginheight="0" frameborder="0" scrolling="no"></iframe>'); => Error: No automatic fix found for this entry. var f = $('#bottom-ad-banner iframe'); => Error: No automatic fix found for this entry. var u = 'http://ads.proboards.com/ad.pl?as=728x90&ap=BTF&f=5448498&s=0&fc=4&d=qmalwareremoval.freeforums.net&g=&a=&cb=0.740252935068447&uid=0'; => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. if (typeof(rp_valuation) !== "undefined" && typeof(rp_valuation.estimate) !== "undefined" && typeof(rp_valuation.estimate.tier) !== "undefined") { => Error: No automatic fix found for this entry. u = u + '&rtp=' + rp_valuation.estimate.tier; => Error: No automatic fix found for this entry. } => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. f.attr('src', u); => Error: No automatic fix found for this entry. }); => Error: No automatic fix found for this entry. </script> => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. </div> => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. <footer role="contentinfo"> => Error: No automatic fix found for this entry. <p class="footer-text"> => Error: No automatic fix found for this entry. This Forum Hosted For FREE By <a href="http://www.proboards.com/" target="_blank">ProBoards</a><br /> => Error: No automatic fix found for this entry. Get Your Own <a href="http://www.proboards.com/" target="_blank">Free Message Boards & Free Forums</a>! => Error: No automatic fix found for this entry. </p> => Error: No automatic fix found for this entry. <div class="footer-links"> => Error: No automatic fix found for this entry. <a href="http://www.proboards.com/tos" accesskey="8">Terms of Service</a> | => Error: No automatic fix found for this entry. <a href="http://www.proboards.com/privacy">Privacy Policy</a> | => Error: No automatic fix found for this entry. <a href="http://www.proboards.com/privacy#enhanced">Notice</a> | => Error: No automatic fix found for this entry. <a href="http://www.viglink.com/policies/ftc" target="_blank">FTC Disclosure</a> | => Error: No automatic fix found for this entry. <a href="http://www.proboards.com/report-abuse" accesskey="7">Report Abuse</a> | => Error: No automatic fix found for this entry. <a href="http://www.proboards.com/mobile-forum-app">Mobile</a> => Error: No automatic fix found for this entry. | <a href="http://www.proboards.com/ads"><b>Advertise Here</b></a> => Error: No automatic fix found for this entry. </div> => Error: No automatic fix found for this entry. </footer> => Error: No automatic fix found for this entry. <!-- Google Analytics Start --> => Error: No automatic fix found for this entry. <script type="text/javascript"> => Error: No automatic fix found for this entry. (function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){ => Error: No automatic fix found for this entry. (i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o), => Error: No automatic fix found for this entry. m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m) => Error: No automatic fix found for this entry. })(window,document,'script','//www.google-analytics.com/analytics.js','ga'); => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. ga('create', 'UA-3734504-3', 'auto'); => Error: No automatic fix found for this entry. ga('send', 'pageview'); => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. </script> => Error: No automatic fix found for this entry. <!-- Google Analytics End --> => Error: No automatic fix found for this entry. <script type="text/javascript"> => Error: No automatic fix found for this entry. var vglnk; => Error: No automatic fix found for this entry. $(document).ready(function() { => Error: No automatic fix found for this entry. vglnk = { => Error: No automatic fix found for this entry. api_url: '//api.viglink.com/api', key: 'bbb516d91daee20498798694a42dd559' => Error: No automatic fix found for this entry. }; => Error: No automatic fix found for this entry. var vglnkSrc = ('https:' == document.location.protocol ? vglnk.api_url : '//cdn.viglink.com/api') + '/vglnk.js'; => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. // VigLink ProBoards Convert Code (using above key) => Error: No automatic fix found for this entry. var s = document.createElement('script'); => Error: No automatic fix found for this entry. s.type = 'text/javascript'; s.async = true; s.src = vglnkSrc; => Error: No automatic fix found for this entry. document.body.appendChild(s); => Error: No automatic fix found for this entry. }); => Error: No automatic fix found for this entry. </script> => Error: No automatic fix found for this entry. </div> => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. </body> => Error: No automatic fix found for this entry. </html> => Error: No automatic fix found for this entry.
==== End of Fixlog ====
|
|
dbrisen
Malware Removalists
Posts: 3,688
|
Post by dbrisen on Nov 20, 2014 7:41:28 GMT -8
You may want to read carefully all of this message first before starting the steps.
NOTE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system
Download the script file that is attached by right clicking on it and selecting "Save Target As..." or "Save Link As ...." (depends on the browser you are using). Please make sure that the file type is set as Text File and the files name is Fixlist.txt , have it on the Desktop, so that fixlist.txt is next to FRST64.exe,
DO NOT DRAG AND DROP to download the script, it won't work properly for FRST.
The script tells FRST what to do.
Start FRST that is on the desktop by right clicking on file and selecting "Run as Administrator..."
When the tool opens click Yes to disclaimer. (if it still does)
Press the Fix button just once and wait. The script will be processed and your system restarted to complete the removal / breakage of the malware.
The tool will make a log on the Desktop (Fixlog.txt) please post it to your reply (attach or paste)
|
|
asch
New Helpee
Posts: 18
|
Post by asch on Nov 20, 2014 17:51:59 GMT -8
Hi,I ran frst64 (as admin) again (Fix button). It ran very fast, did not prompt to restart. I did it manually this time. Fixlog is pasted below. Thanks.
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 20-11-2014 Ran by Anna at 2014-11-20 19:42:40 Run:4 Running from C:\Users\Kim\Desktop Loaded Profiles: Anna & Kim (Available profiles: Anna & Kim) Boot Mode: Normal ==============================================
Content of fixlist: ***************** <!DOCTYPE HTML> <!--[if IE 7]><html class="ie7"><![endif]--><!--[if IE 8]><html class="ie8"><![endif]--><!--[if IE 9]><html class="ie9"><![endif]--><!--[if gt IE 9]><!--> <html> <!--<![endif]--> <head> <meta http-equiv="content-type" content="text/html; charset=UTF-8" /> <title>Oops, there was an error! | Malware Removal </title> <link rel="canonical" href="http://qmalwareremoval.freeforums.net/attachment/download/3187" /> <link rel="alternate" type="application/rss+xml" href="http://qmalwareremoval.freeforums.net/rss/public" /> <link rel="shortcut icon" type="image/x-icon" href="//images.proboards.com/v5/favicon.ico" /> <link rel="icon" type="image/x-icon" href="//images.proboards.com/v5/favicon.ico" /> <meta property="og:url" content="http://qmalwareremoval.freeforums.net/attachment/download/3187" /> <meta property="og:title" content="Oops, there was an error! | Malware Removal " /> <meta property="og:description" content="Visit our forum at: qmalwareremoval.freeforums.net" /> <meta name="twitter:card" content="summary" /> <meta name="twitter:site" content="@proboards" /> <meta name="twitter:app:id:iphone" content="307880732" /> <meta name="twitter:app:url:iphone" content="tapatalk://support.tapatalk.com/?user_id=169&location=index" /> <meta name="twitter:app:id:ipad" content="307880732" /> <meta name="twitter:app:url:ipad" content="tapatalk://support.tapatalk.com/?user_id=169&location=index" /> <meta name="twitter:app:id:googleplay" content="com.quoord.tapatalkpro.activity" /> <meta name="twitter:app:url:googleplay" content="tapatalk://support.tapatalk.com/?user_id=169&location=index" />
<link rel="stylesheet" type="text/css" media="screen" href="http://d.storage.proboards.com/f/Default/forum_208.css" id="forum_style"> <link rel="stylesheet" type="text/css" media="print" href="http://d.storage.proboards.com/f/print.css"> <script type="text/javascript" src="//ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js"></script> <script type="text/javascript" src="http://d.storage.proboards.com/f/forum_208.js"></script> <script type="text/javascript">proboards.data([['ad_free',0],['time_style',0],['military_time',0],['timezone',"guest"],['serverDate',1416534028000],['search-query-min',"3"],['search-query-max',50],['is_current_user_guest',"1"],['plugin_max_key_length',4000],['plugin_max_super_forum_key_length',32000],['login_url',"https://login.proboards.com/login/5448498/1"],['register_url',"https://login.proboards.com/register/5448498"]]);</script> <script type="text/javascript">proboards.plugin._plugins["pixeldepth_icon_to_name"] = { settings: {"images_users":[{"image_url":"","image_title":"","replace_name":"0","users":["1"]}],"images_groups":[{"image_url":"http://www.gettyicons.com/free-icons/141/ginux/png/24/antivirus_24.png","image_title":"","replace_name":"0","groups":["4"]}]} }; proboards.plugin._plugins["wormocodes_image_in_title"] = { settings: {"image_tags":[{"look_for":"#?","image_url":"http://storage.proboards.com/5448498/i/4BIqmtWkxUeWswvqmv_T.png","force_height":"23","force_width":"48","navigation_replace_text":"#?"},{"look_for":"[CLOSED]","image_url":"http://storage.proboards.com/5448498/i/sUOVZ3Gs6ICcCwf4r8tE.png","force_height":"23","force_width":"48","navigation_replace_text":""}]} };</script>
</head> <body> <div id="wrapper"> <header> <div id="banner-container" role="banner"> <h2 id="banner"> <a id="logo" href="/">Malware Removal </a> </h2> </div> <a id="navigation-skip" href="#content" accesskey="s" class="aria-hidden" title="Skip Navigation">Skip Navigation</a> <a href="#" accesskey="d" title="Open Menu" onclick="proboards.hotkeys.activate(Keys.d); return false;"></a> <div id="navigation-menu" class="ui-helper-clearfix"> <ul role="navigation"> <li> <a href="/"> Home </a> </li> <li> <a href="/help"> Help </a> </li> <li> <a href="/search"> Search </a> </li> </ul> <p id="welcome"> Welcome Guest. Please <a href="https://login.proboards.com/login/5448498/1">Login</a> or <a href="https://login.proboards.com/register/5448498">Register</a>. </p> </div> </header> <div id="navigation-tree"> <div class="nav-tree-wrapper"><ul id="nav-tree" class="ui-helper-clearfix" role="navigation"><li id="nav-tree-branch-0" class="nav-tree-branch ui-helper-clearfix"><div itemscope="itemscope" itemtype="http://data-vocabulary.org/Breadcrumb"><a href="/" itemprop="url"><span itemprop="title">Malware Removal </span></a></div><span class="menu_arrow"><span></span></span></li></ul></div><div class="popup_html"> <ul id="nav-tree-menu-0" role="navigation"> <li class="nav-tree-cat-2"><a href="/#category-2"><span class="item-text">System Security</span><div class="clear"></div></a> <ul role="navigation"> <li class="nav-tree-board-2"><a href="http://qmalwareremoval.freeforums.net/board/2/malware-removal-protected"><span class="item-text">Malware Removal (Protected)</span><div class="clear"></div></a></li> <li class="nav-tree-board-6"><a href="http://qmalwareremoval.freeforums.net/board/6/security-software"><span class="item-text">Security Software</span><div class="clear"></div></a></li> </ul> </li> <li class="nav-tree-cat-3"><a href="/#category-3"><span class="item-text">Windows and Software Problems (not due to infection)</span><div class="clear"></div></a> <ul role="navigation"> <li class="nav-tree-board-3"><a href="http://qmalwareremoval.freeforums.net/board/3/windows"><span class="item-text">Windows</span><div class="clear"></div></a></li> <li class="nav-tree-board-4"><a href="http://qmalwareremoval.freeforums.net/board/4/third-party-software"><span class="item-text">Third Party Software </span><div class="clear"></div></a></li> </ul> </li> <li class="nav-tree-cat-1"><a href="/#category-1"><span class="item-text">General</span><div class="clear"></div></a> <ul role="navigation"> <li class="nav-tree-board-1"><a href="http://qmalwareremoval.freeforums.net/board/1/general-board"><span class="item-text">General Board</span><div class="clear"></div></a></li> <li class="nav-tree-board-7"><a href="http://qmalwareremoval.freeforums.net/board/7/penthouse-play-pen"><span class="item-text">Penthouse Play Pen</span><div class="clear"></div></a></li> </ul> </li> </ul></div><script type="text/javascript"> var offset = ($.browser.msie && parseInt($.browser.version) == 8) ? '3 -1' : '3 0'; $('#nav-tree-menu-0') .addClass('nav-tree-menu') .menu({ position: { my: 'left top', at: 'left bottom', offset: offset, of: $('#nav-tree-branch-0'), collision: 'flipfit' }, button: $('#nav-tree-branch-0'), showDelay: 400, show: function() { var self = $(this); // Make sure all other menus are closed $('.popup_html > ul').not(self).menu('hide'); $(document).on('mousemove', function(e) { var elem = $(e.target); if(elem.parents('#nav-tree, .popup_html').length == 0 && !elem.is('#nav-tree, .popup_html') && !$('#nav-tree-menu-0').data('hotkey-open')) { self.menu('hide'); $(document).unbind('mousemove'); } }); } }); </script> </div> <div id="top-ad-banner" style="height: 90px; width: 728px; margin: 0 auto 10px; text-align: center;"> <script type="text/javascript"> oz_api = 'valuation'; oz_site = '7781/12408'; oz_zone = '135274'; oz_ad_slot_size = '728x90'; </script> <script type="text/javascript" src="http://tap-cdn.rubiconproject.com/partner/scripts/rubicon/dorothy.js?pc=7781/12408"></script> <script type="text/javascript"> $(document).ready(function() { $('#top-ad-banner').append('<iframe class="pb-ads" width="728" height="90" marginwidth="0" marginheight="0" frameborder="0" scrolling="no"></iframe>'); var f = $('#top-ad-banner iframe'); var u = 'http://ads.proboards.com/ad.pl?as=728x90&ap=ATF&f=5448498&s=0&fc=4&d=qmalwareremoval.freeforums.net&g=&a=&cb=0.74646614837112&uid=0'; if (typeof(rp_valuation) !== "undefined" && typeof(rp_valuation.estimate) !== "undefined" && typeof(rp_valuation.estimate.tier) !== "undefined") { u = u + '&rtp=' + rp_valuation.estimate.tier; } f.attr('src', u); }); </script> </div> <script type="text/javascript"> $(window).load(function() { var topAd = $('#top-ad-banner'); if (topAd.prop('scrollHeight') < 90) { topAd.css('height', 'auto').html( '<b>Please consider supporting this website by disabling your ad-blocker.<br />' + 'This website does not use audio ads, popups, or other annoyances. Thank you!</b>' ); $("head").append('<style type="text/css">#top-ad-banner { display: block !important; }</style>'); } }); </script><script type="text/javascript" src="http://storage.proboards.com/5448498/j/Dox5kMQpamIWhhKOo03B.js" data-plugin="2" data-component="3"></script><script type="text/javascript" src="http://storage.proboards.com/5448498/j/IcEbexbhe_w0Gho77dWK.js" data-plugin="7" data-component="10"></script> <div id="content" role="main"> <div class="container error"> <div class="title-bar"> <h2>Oops, there was an error!</h2> </div> <div class="content pad-all cap-bottom auto-overflow"> Guests do not have access to download attachments. Please log in and try again. </div> </div> </div> <script type="text/javascript" src="http://ads.pro-market.net/ads/scripts/site-131222.js"></script><script type="text/javascript"> (function() { var nstrack = document.createElement("script"), el_nstrack = document.getElementsByTagName("script")[0]; nstrack.async = true; nstrack.src = "http://track.netshelter.net/async/js/sites/proboards.com-async.js"; el_nstrack.parentNode.insertBefore(nstrack, el_nstrack); })(); </script><div style="margin-bottom: 2px; text-align: center;"><a href="https://www.proboards.com/store/add_cart/ad_free/50000/qmalwareremoval.freeforums.net/1">Click here to remove banner ads from this forum.</a></div> <div id="bottom-ad-banner" style="height: 90px; width: 728px; margin: 0 auto 10px; text-align: center;"> <script type="text/javascript"> oz_api = 'valuation'; oz_site = '7781/12408'; oz_zone = '135276'; oz_ad_slot_size = '728x90'; </script> <script type="text/javascript" src="http://tap-cdn.rubiconproject.com/partner/scripts/rubicon/dorothy.js?pc=7781/12408"></script> <script type="text/javascript"> $(document).ready(function() { $('#bottom-ad-banner').append('<iframe class="pb-ads" width="728" height="90" marginwidth="0" marginheight="0" frameborder="0" scrolling="no"></iframe>'); var f = $('#bottom-ad-banner iframe'); var u = 'http://ads.proboards.com/ad.pl?as=728x90&ap=BTF&f=5448498&s=0&fc=4&d=qmalwareremoval.freeforums.net&g=&a=&cb=0.470848953920754&uid=0'; if (typeof(rp_valuation) !== "undefined" && typeof(rp_valuation.estimate) !== "undefined" && typeof(rp_valuation.estimate.tier) !== "undefined") { u = u + '&rtp=' + rp_valuation.estimate.tier; } f.attr('src', u); }); </script> </div> <footer role="contentinfo"> <p class="footer-text"> This Forum Hosted For FREE By <a href="http://www.proboards.com/" target="_blank">ProBoards</a><br /> Get Your Own <a href="http://www.proboards.com/" target="_blank">Free Message Boards & Free Forums</a>! </p> <div class="footer-links"> <a href="http://www.proboards.com/tos" accesskey="8">Terms of Service</a> | <a href="http://www.proboards.com/privacy">Privacy Policy</a> | <a href="http://www.proboards.com/privacy#enhanced">Notice</a> | <a href="http://www.viglink.com/policies/ftc" target="_blank">FTC Disclosure</a> | <a href="http://www.proboards.com/report-abuse" accesskey="7">Report Abuse</a> | <a href="http://www.proboards.com/mobile-forum-app">Mobile</a> | <a href="http://www.proboards.com/ads"><b>Advertise Here</b></a> </div> </footer>
<!-- Google Analytics Start --> <script type="text/javascript"> (function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){ (i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o), m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m) })(window,document,'script','//www.google-analytics.com/analytics.js','ga');
ga('create', 'UA-3734504-3', 'auto'); ga('send', 'pageview'); </script> <!-- Google Analytics End --> <script type="text/javascript"> var vglnk; $(document).ready(function() { vglnk = { api_url: '//api.viglink.com/api', key: 'bbb516d91daee20498798694a42dd559' }; var vglnkSrc = ('https:' == document.location.protocol ? vglnk.api_url : '//cdn.viglink.com/api') + '/vglnk.js'; // VigLink ProBoards Convert Code (using above key) var s = document.createElement('script'); s.type = 'text/javascript'; s.async = true; s.src = vglnkSrc; document.body.appendChild(s); }); </script>
</div> </body> </html> *****************
<!DOCTYPE HTML> => Error: No automatic fix found for this entry. <!--[if IE 7]><html class="ie7"><![endif]--><!--[if IE 8]><html class="ie8"><![endif]--><!--[if IE 9]><html class="ie9"><![endif]--><!--[if gt IE 9]><!--> <html> <!--<![endif]--> => Error: No automatic fix found for this entry. <head> => Error: No automatic fix found for this entry. <meta http-equiv="content-type" content="text/html; charset=UTF-8" /> => Error: No automatic fix found for this entry. <title>Oops, there was an error! | Malware Removal </title> => Error: No automatic fix found for this entry. <link rel="canonical" href="http://qmalwareremoval.freeforums.net/attachment/download/3187" /> => Error: No automatic fix found for this entry. <link rel="alternate" type="application/rss+xml" href="http://qmalwareremoval.freeforums.net/rss/public" /> => Error: No automatic fix found for this entry. <link rel="shortcut icon" type="image/x-icon" href="//images.proboards.com/v5/favicon.ico" /> => Error: No automatic fix found for this entry. <link rel="icon" type="image/x-icon" href="//images.proboards.com/v5/favicon.ico" /> => Error: No automatic fix found for this entry. <meta property="og:url" content="http://qmalwareremoval.freeforums.net/attachment/download/3187" /> => Error: No automatic fix found for this entry. <meta property="og:title" content="Oops, there was an error! | Malware Removal " /> => Error: No automatic fix found for this entry. <meta property="og:description" content="Visit our forum at: qmalwareremoval.freeforums.net" /> => Error: No automatic fix found for this entry. <meta name="twitter:card" content="summary" /> => Error: No automatic fix found for this entry. <meta name="twitter:site" content="@proboards" /> => Error: No automatic fix found for this entry. <meta name="twitter:app:id:iphone" content="307880732" /> => Error: No automatic fix found for this entry. <meta name="twitter:app:url:iphone" content="tapatalk://support.tapatalk.com/?user_id=169&location=index" /> => Error: No automatic fix found for this entry. <meta name="twitter:app:id:ipad" content="307880732" /> => Error: No automatic fix found for this entry. <meta name="twitter:app:url:ipad" content="tapatalk://support.tapatalk.com/?user_id=169&location=index" /> => Error: No automatic fix found for this entry. <meta name="twitter:app:id:googleplay" content="com.quoord.tapatalkpro.activity" /> => Error: No automatic fix found for this entry. <meta name="twitter:app:url:googleplay" content="tapatalk://support.tapatalk.com/?user_id=169&location=index" /> => Error: No automatic fix found for this entry. <link rel="stylesheet" type="text/css" media="screen" href="http://d.storage.proboards.com/f/Default/forum_208.css" id="forum_style"> => Error: No automatic fix found for this entry. <link rel="stylesheet" type="text/css" media="print" href="http://d.storage.proboards.com/f/print.css"> => Error: No automatic fix found for this entry. <script type="text/javascript" src="//ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js"></script> => Error: No automatic fix found for this entry. <script type="text/javascript" src="http://d.storage.proboards.com/f/forum_208.js"></script> => Error: No automatic fix found for this entry. <script type="text/javascript">proboards.data([['ad_free',0],['time_style',0],['military_time',0],['timezone',"guest"],['serverDate',1416534028000],['search-query-min',"3"],['search-query-max',50],['is_current_user_guest',"1"],['plugin_max_key_length',4000],['plugin_max_super_forum_key_length',32000],['login_url',"https://login.proboards.com/login/5448498/1"],['register_url',"https://login.proboards.com/register/5448498"]]);</script> => Error: No automatic fix found for this entry. <script type="text/javascript">proboards.plugin._plugins["pixeldepth_icon_to_name"] = { => Error: No automatic fix found for this entry. settings: {"images_users":[{"image_url":"","image_title":"","replace_name":"0","users":["1"]}],"images_groups":[{"image_url":"http://www.gettyicons.com/free-icons/141/ginux/png/24/antivirus_24.png","image_title":"","replace_name":"0","groups":["4"]}]} => Error: No automatic fix found for this entry. }; => Error: No automatic fix found for this entry. proboards.plugin._plugins["wormocodes_image_in_title"] = { => Error: No automatic fix found for this entry. settings: {"image_tags":[{"look_for":"#?","image_url":"http://storage.proboards.com/5448498/i/4BIqmtWkxUeWswvqmv_T.png","force_height":"23","force_width":"48","navigation_replace_text":"#?"},{"look_for":"[CLOSED]","image_url":"http://storage.proboards.com/5448498/i/sUOVZ3Gs6ICcCwf4r8tE.png","force_height":"23","force_width":"48","navigation_replace_text":""}]} => Error: No automatic fix found for this entry. };</script> => Error: No automatic fix found for this entry. </head> => Error: No automatic fix found for this entry. <body> => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. <div id="wrapper"> => Error: No automatic fix found for this entry. <header> => Error: No automatic fix found for this entry. <div id="banner-container" role="banner"> => Error: No automatic fix found for this entry. <h2 id="banner"> => Error: No automatic fix found for this entry. <a id="logo" href="/">Malware Removal </a> => Error: No automatic fix found for this entry. </h2> => Error: No automatic fix found for this entry. </div> => Error: No automatic fix found for this entry. <a id="navigation-skip" href="#content" accesskey="s" class="aria-hidden" title="Skip Navigation">Skip Navigation</a> => Error: No automatic fix found for this entry. <a href="#" accesskey="d" title="Open Menu" onclick="proboards.hotkeys.activate(Keys.d); return false;"></a> => Error: No automatic fix found for this entry. <div id="navigation-menu" class="ui-helper-clearfix"> => Error: No automatic fix found for this entry. <ul role="navigation"> => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. <li> => Error: No automatic fix found for this entry. <a href="/"> => Error: No automatic fix found for this entry. Home => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. </a> => Error: No automatic fix found for this entry. </li> => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. <li> => Error: No automatic fix found for this entry. <a href="/help"> => Error: No automatic fix found for this entry. Help => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. </a> => Error: No automatic fix found for this entry. </li> => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. <li> => Error: No automatic fix found for this entry. <a href="/search"> => Error: No automatic fix found for this entry. Search => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. </a> => Error: No automatic fix found for this entry. </li> => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. </ul> => Error: No automatic fix found for this entry. <p id="welcome"> => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. Welcome Guest. => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. Please <a href="https://login.proboards.com/login/5448498/1">Login</a> or <a href="https://login.proboards.com/register/5448498">Register</a>. => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. </p> => Error: No automatic fix found for this entry. </div> => Error: No automatic fix found for this entry. </header> => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. <div id="navigation-tree"> => Error: No automatic fix found for this entry. <div class="nav-tree-wrapper"><ul id="nav-tree" class="ui-helper-clearfix" role="navigation"><li id="nav-tree-branch-0" class="nav-tree-branch ui-helper-clearfix"><div itemscope="itemscope" itemtype="http://data-vocabulary.org/Breadcrumb"><a href="/" itemprop="url"><span itemprop="title">Malware Removal </span></a></div><span class="menu_arrow"><span></span></span></li></ul></div><div class="popup_html"> => Error: No automatic fix found for this entry. <ul id="nav-tree-menu-0" role="navigation"> => Error: No automatic fix found for this entry. <li class="nav-tree-cat-2"><a href="/#category-2"><span class="item-text">System Security</span><div class="clear"></div></a> => Error: No automatic fix found for this entry. <ul role="navigation"> => Error: No automatic fix found for this entry. <li class="nav-tree-board-2"><a href="http://qmalwareremoval.freeforums.net/board/2/malware-removal-protected"><span class="item-text">Malware Removal (Protected)</span><div class="clear"></div></a></li> => Error: No automatic fix found for this entry. <li class="nav-tree-board-6"><a href="http://qmalwareremoval.freeforums.net/board/6/security-software"><span class="item-text">Security Software</span><div class="clear"></div></a></li> => Error: No automatic fix found for this entry. </ul> => Error: No automatic fix found for this entry. </li> => Error: No automatic fix found for this entry. <li class="nav-tree-cat-3"><a href="/#category-3"><span class="item-text">Windows and Software Problems (not due to infection)</span><div class="clear"></div></a> => Error: No automatic fix found for this entry. <ul role="navigation"> => Error: No automatic fix found for this entry. <li class="nav-tree-board-3"><a href="http://qmalwareremoval.freeforums.net/board/3/windows"><span class="item-text">Windows</span><div class="clear"></div></a></li> => Error: No automatic fix found for this entry. <li class="nav-tree-board-4"><a href="http://qmalwareremoval.freeforums.net/board/4/third-party-software"><span class="item-text">Third Party Software </span><div class="clear"></div></a></li> => Error: No automatic fix found for this entry. </ul> => Error: No automatic fix found for this entry. </li> => Error: No automatic fix found for this entry. <li class="nav-tree-cat-1"><a href="/#category-1"><span class="item-text">General</span><div class="clear"></div></a> => Error: No automatic fix found for this entry. <ul role="navigation"> => Error: No automatic fix found for this entry. <li class="nav-tree-board-1"><a href="http://qmalwareremoval.freeforums.net/board/1/general-board"><span class="item-text">General Board</span><div class="clear"></div></a></li> => Error: No automatic fix found for this entry. <li class="nav-tree-board-7"><a href="http://qmalwareremoval.freeforums.net/board/7/penthouse-play-pen"><span class="item-text">Penthouse Play Pen</span><div class="clear"></div></a></li> => Error: No automatic fix found for this entry. </ul> => Error: No automatic fix found for this entry. </li> => Error: No automatic fix found for this entry. </ul></div><script type="text/javascript"> => Error: No automatic fix found for this entry. var offset = ($.browser.msie && parseInt($.browser.version) == 8) ? '3 -1' : '3 0'; => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. $('#nav-tree-menu-0') => Error: No automatic fix found for this entry. .addClass('nav-tree-menu') => Error: No automatic fix found for this entry. .menu({ => Error: No automatic fix found for this entry. position: { => Error: No automatic fix found for this entry. my: 'left top', => Error: No automatic fix found for this entry. at: 'left bottom', => Error: No automatic fix found for this entry. offset: offset, => Error: No automatic fix found for this entry. of: $('#nav-tree-branch-0'), => Error: No automatic fix found for this entry. collision: 'flipfit' => Error: No automatic fix found for this entry. }, => Error: No automatic fix found for this entry. button: $('#nav-tree-branch-0'), => Error: No automatic fix found for this entry. showDelay: 400, => Error: No automatic fix found for this entry. show: function() { => Error: No automatic fix found for this entry. var self = $(this); => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. // Make sure all other menus are closed => Error: No automatic fix found for this entry. $('.popup_html > ul').not(self).menu('hide'); => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. $(document).on('mousemove', function(e) { => Error: No automatic fix found for this entry. var elem = $(e.target); => Error: No automatic fix found for this entry. if(elem.parents('#nav-tree, .popup_html').length == 0 && !elem.is('#nav-tree, .popup_html') && !$('#nav-tree-menu-0').data('hotkey-open')) { => Error: No automatic fix found for this entry. self.menu('hide'); => Error: No automatic fix found for this entry. $(document).unbind('mousemove'); => Error: No automatic fix found for this entry. } => Error: No automatic fix found for this entry. }); => Error: No automatic fix found for this entry. } => Error: No automatic fix found for this entry. }); => Error: No automatic fix found for this entry. </script> => Error: No automatic fix found for this entry. </div> => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. <div id="top-ad-banner" style="height: 90px; width: 728px; margin: 0 auto 10px; text-align: center;"> => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. <script type="text/javascript"> => Error: No automatic fix found for this entry. oz_api = 'valuation'; => Error: No automatic fix found for this entry. oz_site = '7781/12408'; => Error: No automatic fix found for this entry. oz_zone = '135274'; => Error: No automatic fix found for this entry. oz_ad_slot_size = '728x90'; => Error: No automatic fix found for this entry. </script> => Error: No automatic fix found for this entry. <script type="text/javascript" src="http://tap-cdn.rubiconproject.com/partner/scripts/rubicon/dorothy.js?pc=7781/12408"></script> => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. <script type="text/javascript"> => Error: No automatic fix found for this entry. $(document).ready(function() { => Error: No automatic fix found for this entry. $('#top-ad-banner').append('<iframe class="pb-ads" width="728" height="90" marginwidth="0" marginheight="0" frameborder="0" scrolling="no"></iframe>'); => Error: No automatic fix found for this entry. var f = $('#top-ad-banner iframe'); => Error: No automatic fix found for this entry. var u = 'http://ads.proboards.com/ad.pl?as=728x90&ap=ATF&f=5448498&s=0&fc=4&d=qmalwareremoval.freeforums.net&g=&a=&cb=0.74646614837112&uid=0'; => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. if (typeof(rp_valuation) !== "undefined" && typeof(rp_valuation.estimate) !== "undefined" && typeof(rp_valuation.estimate.tier) !== "undefined") { => Error: No automatic fix found for this entry. u = u + '&rtp=' + rp_valuation.estimate.tier; => Error: No automatic fix found for this entry. } => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. f.attr('src', u); => Error: No automatic fix found for this entry. }); => Error: No automatic fix found for this entry. </script> => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. </div> => Error: No automatic fix found for this entry. <script type="text/javascript"> => Error: No automatic fix found for this entry. $(window).load(function() { => Error: No automatic fix found for this entry. var topAd = $('#top-ad-banner'); => Error: No automatic fix found for this entry. if (topAd.prop('scrollHeight') < 90) { => Error: No automatic fix found for this entry. topAd.css('height', 'auto').html( => Error: No automatic fix found for this entry. '<b>Please consider supporting this website by disabling your ad-blocker.<br />' + => Error: No automatic fix found for this entry. 'This website does not use audio ads, popups, or other annoyances. Thank you!</b>' => Error: No automatic fix found for this entry. ); => Error: No automatic fix found for this entry. $("head").append('<style type="text/css">#top-ad-banner { display: block !important; }</style>'); => Error: No automatic fix found for this entry. } => Error: No automatic fix found for this entry. }); => Error: No automatic fix found for this entry. </script><script type="text/javascript" src="http://storage.proboards.com/5448498/j/Dox5kMQpamIWhhKOo03B.js" data-plugin="2" data-component="3"></script><script type="text/javascript" src="http://storage.proboards.com/5448498/j/IcEbexbhe_w0Gho77dWK.js" data-plugin="7" data-component="10"></script> => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. <div id="content" role="main"> => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. <div class="container error"> => Error: No automatic fix found for this entry. <div class="title-bar"> => Error: No automatic fix found for this entry. <h2>Oops, there was an error!</h2> => Error: No automatic fix found for this entry. </div> => Error: No automatic fix found for this entry. <div class="content pad-all cap-bottom auto-overflow"> => Error: No automatic fix found for this entry. Guests do not have access to download attachments. Please log in and try again. => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. </div> => Error: No automatic fix found for this entry. </div> => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. </div> => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. <script type="text/javascript" src="http://ads.pro-market.net/ads/scripts/site-131222.js"></script><script type="text/javascript"> => Error: No automatic fix found for this entry. (function() { => Error: No automatic fix found for this entry. var nstrack = document.createElement("script"), el_nstrack = document.getElementsByTagName("script")[0]; nstrack.async = true; => Error: No automatic fix found for this entry. nstrack.src = "http://track.netshelter.net/async/js/sites/proboards.com-async.js"; => Error: No automatic fix found for this entry. el_nstrack.parentNode.insertBefore(nstrack, el_nstrack); => Error: No automatic fix found for this entry. })(); => Error: No automatic fix found for this entry. </script><div style="margin-bottom: 2px; text-align: center;"><a href="https://www.proboards.com/store/add_cart/ad_free/50000/qmalwareremoval.freeforums.net/1">Click here to remove banner ads from this forum.</a></div> => Error: No automatic fix found for this entry. <div id="bottom-ad-banner" style="height: 90px; width: 728px; margin: 0 auto 10px; text-align: center;"> => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. <script type="text/javascript"> => Error: No automatic fix found for this entry. oz_api = 'valuation'; => Error: No automatic fix found for this entry. oz_site = '7781/12408'; => Error: No automatic fix found for this entry. oz_zone = '135276'; => Error: No automatic fix found for this entry. oz_ad_slot_size = '728x90'; => Error: No automatic fix found for this entry. </script> => Error: No automatic fix found for this entry. <script type="text/javascript" src="http://tap-cdn.rubiconproject.com/partner/scripts/rubicon/dorothy.js?pc=7781/12408"></script> => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. <script type="text/javascript"> => Error: No automatic fix found for this entry. $(document).ready(function() { => Error: No automatic fix found for this entry. $('#bottom-ad-banner').append('<iframe class="pb-ads" width="728" height="90" marginwidth="0" marginheight="0" frameborder="0" scrolling="no"></iframe>'); => Error: No automatic fix found for this entry. var f = $('#bottom-ad-banner iframe'); => Error: No automatic fix found for this entry. var u = 'http://ads.proboards.com/ad.pl?as=728x90&ap=BTF&f=5448498&s=0&fc=4&d=qmalwareremoval.freeforums.net&g=&a=&cb=0.470848953920754&uid=0'; => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. if (typeof(rp_valuation) !== "undefined" && typeof(rp_valuation.estimate) !== "undefined" && typeof(rp_valuation.estimate.tier) !== "undefined") { => Error: No automatic fix found for this entry. u = u + '&rtp=' + rp_valuation.estimate.tier; => Error: No automatic fix found for this entry. } => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. f.attr('src', u); => Error: No automatic fix found for this entry. }); => Error: No automatic fix found for this entry. </script> => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. </div> => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. <footer role="contentinfo"> => Error: No automatic fix found for this entry. <p class="footer-text"> => Error: No automatic fix found for this entry. This Forum Hosted For FREE By <a href="http://www.proboards.com/" target="_blank">ProBoards</a><br /> => Error: No automatic fix found for this entry. Get Your Own <a href="http://www.proboards.com/" target="_blank">Free Message Boards & Free Forums</a>! => Error: No automatic fix found for this entry. </p> => Error: No automatic fix found for this entry. <div class="footer-links"> => Error: No automatic fix found for this entry. <a href="http://www.proboards.com/tos" accesskey="8">Terms of Service</a> | => Error: No automatic fix found for this entry. <a href="http://www.proboards.com/privacy">Privacy Policy</a> | => Error: No automatic fix found for this entry. <a href="http://www.proboards.com/privacy#enhanced">Notice</a> | => Error: No automatic fix found for this entry. <a href="http://www.viglink.com/policies/ftc" target="_blank">FTC Disclosure</a> | => Error: No automatic fix found for this entry. <a href="http://www.proboards.com/report-abuse" accesskey="7">Report Abuse</a> | => Error: No automatic fix found for this entry. <a href="http://www.proboards.com/mobile-forum-app">Mobile</a> => Error: No automatic fix found for this entry. | <a href="http://www.proboards.com/ads"><b>Advertise Here</b></a> => Error: No automatic fix found for this entry. </div> => Error: No automatic fix found for this entry. </footer> => Error: No automatic fix found for this entry. <!-- Google Analytics Start --> => Error: No automatic fix found for this entry. <script type="text/javascript"> => Error: No automatic fix found for this entry. (function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){ => Error: No automatic fix found for this entry. (i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o), => Error: No automatic fix found for this entry. m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m) => Error: No automatic fix found for this entry. })(window,document,'script','//www.google-analytics.com/analytics.js','ga'); => Error: No automatic fix found for this entry. ga('create', 'UA-3734504-3', 'auto'); => Error: No automatic fix found for this entry. ga('send', 'pageview'); => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. </script> => Error: No automatic fix found for this entry. <!-- Google Analytics End --> => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. <script type="text/javascript"> => Error: No automatic fix found for this entry. var vglnk; => Error: No automatic fix found for this entry. $(document).ready(function() { => Error: No automatic fix found for this entry. vglnk = { => Error: No automatic fix found for this entry. api_url: '//api.viglink.com/api', key: 'bbb516d91daee20498798694a42dd559' => Error: No automatic fix found for this entry. }; => Error: No automatic fix found for this entry. var vglnkSrc = ('https:' == document.location.protocol ? vglnk.api_url : '//cdn.viglink.com/api') + '/vglnk.js'; => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. // VigLink ProBoards Convert Code (using above key) => Error: No automatic fix found for this entry. var s = document.createElement('script'); => Error: No automatic fix found for this entry. s.type = 'text/javascript'; s.async = true; s.src = vglnkSrc; => Error: No automatic fix found for this entry. document.body.appendChild(s); => Error: No automatic fix found for this entry. }); => Error: No automatic fix found for this entry. </script> => Error: No automatic fix found for this entry. </div> => Error: No automatic fix found for this entry. => Error: No automatic fix found for this entry. </body> => Error: No automatic fix found for this entry. </html> => Error: No automatic fix found for this entry.
==== End of Fixlog ====
|
|
dbrisen
Malware Removalists
Posts: 3,688
|
Post by dbrisen on Nov 20, 2014 21:10:05 GMT -8
We are having a serious problem here as the Fixlist.txt file is always getting saved as a html file and not a text file; FRST needs the text file. Let's try this way .....
Open notepad. Please copy the contents of the quote box below. To do this highlight the contents of the box and right click on it and select copy. Paste this into the open notepad. Save it to your desktop as fixlist.txt
NOTE. It's important that both files, FRST64 and fixlist.txt are in the same location or the fix will not work.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system
Run FRST64 and press the Fix button just once and wait. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run. When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.
|
|
asch
New Helpee
Posts: 18
|
Post by asch on Nov 21, 2014 6:06:36 GMT -8
Now it was different. FRST64 ran longer and prompted reboot. here is the log. (I was saving the list before "as txt" but this time the results are different.
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 20-11-2014 Ran by Anna at 2014-11-21 07:57:16 Run:5 Running from C:\Users\Kim\Desktop Loaded Profiles: Anna & Kim (Available profiles: Anna & Kim) Boot Mode: Normal ==============================================
Content of fixlist: ***************** start CloseProcesses: HKLM-x32\...\Run: [] => [X] HKLM\...\Policies\Explorer: [NoControlPanel] 0 HKU\S-1-5-21-2258900905-2473213280-1569786569-1001\...\MountPoints2: {ce8c212c-1dd7-11e2-a7b1-7845c41d2bef} - F:\LaunchU3.exe -a HKU\S-1-5-21-2258900905-2473213280-1569786569-1003\...\Run: [SearchProtect] => C:\Users\Kim\AppData\Roaming\SearchProtect\bin\cltmng.exe HKU\S-1-5-21-2258900905-2473213280-1569786569-1003\...\MountPoints2: {ce8c212c-1dd7-11e2-a7b1-7845c41d2bef} - F:\LaunchU3.exe -a C:\Users\Kim\AppData\Roaming\SearchProtect\bin\cltmng.exe C:\Users\Kim\AppData\Roaming\SearchProtect\bin C:\Users\Kim\AppData\Roaming\SearchProtect URLSearchHook: HKLM-x32 - uTorrentControl_v2 Toolbar - {7473b6bd-4691-4744-a82b-7854eb3d70b6} - C:\Program Files (x86)\uTorrentControl_v2\prxtbuTor.dll (Conduit Ltd.) C:\Program Files (x86)\uTorrentControl_v2 URLSearchHook: HKLM-x32 - InternetHelper1.5 Toolbar - {1930e38a-deef-4cf4-9bfb-9c4ea3689a9d} - C:\Program Files (x86)\InternetHelper1.5\prxtbInte.dll (Conduit Ltd.) C:\Program Files (x86)\InternetHelper1.5 SearchScopes: HKLM - DefaultScope {B7971660-A1CE-4FDD-B9E0-2C37D77AFB0B} URL = searchfunmoods.com/results.php?f=4&q={searchTerms}&a=download&chnl=download&cd=2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCyByEtB0AyD0DyB0A0EyBtN0D0Tzu0CtBzyyBtN1L2XzutBtFtBtFtDtFtAyEyE&cr=485647072 SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM - {B7971660-A1CE-4FDD-B9E0-2C37D77AFB0B} URL = searchfunmoods.com/results.php?f=4&q={searchTerms}&a=download&chnl=download&cd=2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCyByEtB0AyD0DyB0A0EyBtN0D0Tzu0CtBzyyBtN1L2XzutBtFtBtFtDtFtAyEyE&cr=485647072 SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = SearchScopes: HKCU - {B7971660-A1CE-4FDD-B9E0-2C37D77AFB0B} URL = BHO-x32: InternetHelper1.5 Toolbar -> {1930e38a-deef-4cf4-9bfb-9c4ea3689a9d} -> C:\Program Files (x86)\InternetHelper1.5\prxtbInte.dll (Conduit Ltd.) BHO-x32: uTorrentControl_v2 Toolbar -> {7473b6bd-4691-4744-a82b-7854eb3d70b6} -> C:\Program Files (x86)\uTorrentControl_v2\prxtbuTor.dll (Conduit Ltd.) BHO-x32: No Name -> {D5FEC983-01DB-414a-9456-AF95AC9ED7B5} -> No File Toolbar: HKLM-x32 - uTorrentControl_v2 Toolbar - {7473b6bd-4691-4744-a82b-7854eb3d70b6} - C:\Program Files (x86)\uTorrentControl_v2\prxtbuTor.dll (Conduit Ltd.) Toolbar: HKLM-x32 - InternetHelper1.5 Toolbar - {1930e38a-deef-4cf4-9bfb-9c4ea3689a9d} - C:\Program Files (x86)\InternetHelper1.5\prxtbInte.dll (Conduit Ltd.) Toolbar: HKU\S-1-5-21-2258900905-2473213280-1569786569-1001 -> No Name - {7473B6BD-4691-4744-A82B-7854EB3D70B6} - No File Toolbar: HKU\S-1-5-21-2258900905-2473213280-1569786569-1001 -> No Name - {1930E38A-DEEF-4CF4-9BFB-9C4EA3689A9D} - No File Toolbar: HKU\S-1-5-21-2258900905-2473213280-1569786569-1003 -> No Name - {1930E38A-DEEF-4CF4-9BFB-9C4EA3689A9D} - No File Toolbar: HKU\S-1-5-21-2258900905-2473213280-1569786569-1003 -> No Name - {7473B6BD-4691-4744-A82B-7854EB3D70B6} - No File FF DefaultSearchEngine: Conduit Search FF DefaultSearchUrl: hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3311875&CUI=UN20733067741790620&UM=2&SearchSource=3&q={searchTerms} FF SelectedSearchEngine: Conduit Search FF Plugin: @microsoft.com/GENUINE -> disabled No File FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\ddg.xml FF Extension: Flash Video Downloader - Full HD Download - C:\Users\Anna\AppData\Roaming\Mozilla\Firefox\Profiles\k1pnf96c.default\Extensions\artur.dubovoy@gmail.com [2014-11-12] C:\Program Files (x86)\mozilla firefox\browser\searchplugins\ddg.xml C:\Users\Anna\AppData\Roaming\Mozilla\Firefox\Profiles\k1pnf96c.default\Extensions\artur.dubovoy@gmail.com FF Extension: No Name - C:\Users\Anna\AppData\Roaming\Mozilla\Firefox\Profiles\k1pnf96c.default\Extensions\temp [2014-01-13] FF Extension: Easy YouTube Video Downloader - C:\Users\Anna\AppData\Roaming\Mozilla\Firefox\Profiles\k1pnf96c.default\Extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}.xpi [2013-08-11] C:\Users\Anna\AppData\Roaming\Mozilla\Firefox\Profiles\k1pnf96c.default\Extensions\temp C:\Users\Anna\AppData\Roaming\Mozilla\Firefox\Profiles\k1pnf96c.default\Extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}.xpi CHR Extension: (Funmoods) - C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbjciahceamgodcoidkjpchnokgfpphh [2014-04-19] CHR Extension: (SweetTunes) - C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\blklojfklgnogjaijkibhfjepakiocng [2014-04-19] C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbjciahceamgodcoidkjpchnokgfpphh C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\blklojfklgnogjaijkibhfjepakiocng CHR Extension: (uTorrentControl_v2) - C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejpbbhjlbipncjklfjjaedaieimbmdda [2012-10-13] CHR Extension: (InternetHelper1.5) - C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\fgkbmedckhcibhkdhaokebnllokeokek [2012-11-05] CHR Extension: (SearchGBY) - C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmijdhkcgeclpfjmibnginbbkfcbpep [2014-04-19] C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejpbbhjlbipncjklfjjaedaieimbmdda C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\fgkbmedckhcibhkdhaokebnllokeokek C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmijdhkcgeclpfjmibnginbbkfcbpep CHR Extension: (Coupon Companion) - C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbkdpahkifcigckmhiafindmaflfifgm [2014-04-19] C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbkdpahkifcigckmhiafindmaflfifgm CHR HKLM\...\Chrome\Extension: [bbjciahceamgodcoidkjpchnokgfpphh] - C:\Users\Anna\AppData\Local\funmoods.crx [2012-10-23] C:\Users\Anna\AppData\Local\funmoods.crx CHR HKLM-x32\...\Chrome\Extension: [bbjciahceamgodcoidkjpchnokgfpphh] - C:\Users\Anna\AppData\Local\funmoods.crx [2012-10-23] C:\Users\Anna\AppData\Local\funmoods.crx CHR HKLM-x32\...\Chrome\Extension: [blklojfklgnogjaijkibhfjepakiocng] - C:\Users\Anna\AppData\Local\CRE\blklojfklgnogjaijkibhfjepakiocng.crx [2013-11-03] C:\Users\Anna\AppData\Local\CRE CHR HKLM-x32\...\Chrome\Extension: [cgpimkfhjdaobobdomcikioipaenlhke] - C:\Users\Anna\AppData\Local\CRE\cgpimkfhjdaobobdomcikioipaenlhke.crx [2013-11-03] CHR HKLM-x32\...\Chrome\Extension: [ehfanjejklfmnldbbclpocdbceaeemkn] - C:\Program Files (x86)\Download Master\dm_chrome.crx [2012-12-31] C:\Program Files (x86)\Download Master CHR HKLM-x32\...\Chrome\Extension: [ejpbbhjlbipncjklfjjaedaieimbmdda] - C:\Users\Anna\AppData\Local\CRE\ejpbbhjlbipncjklfjjaedaieimbmdda.crx [2012-08-26] CHR HKLM-x32\...\Chrome\Extension: [fgkbmedckhcibhkdhaokebnllokeokek] - C:\Users\Anna\AppData\Local\CRE\fgkbmedckhcibhkdhaokebnllokeokek.crx [2012-09-19] CHR HKLM-x32\...\Chrome\Extension: [icmijdhkcgeclpfjmibnginbbkfcbpep] - C:\Program Files (x86)\SearchGBY\Extensions\Chrome\searchgby.chrome.crx [2013-04-04] C:\Program Files (x86)\SearchGBY\Extensions\Chrome\searchgby.chrome.crx CHR HKLM-x32\...\Chrome\Extension: [pbkdpahkifcigckmhiafindmaflfifgm] - C:\Users\Anna\AppData\Local\Coupon Companion\Chrome\Coupon Companion.crx [2012-10-01] C:\Users\Anna\AppData\Local\Coupon Companion CHR HKLM-x32\...\Chrome\Extension: [pjddgeceaihfihcecdgfdiepikfbflpn] - C:\Users\Anna\AppData\Local\CRE\pjddgeceaihfihcecdgfdiepikfbflpn.crx [2012-10-01] S3 cpuz134; \??\C:\Users\Anna\AppData\Local\Temp\cpuz134\cpuz134_x64.sys [X] C:\Users\Anna\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpyczcy4.dll AlternateDataStreams: C:\ProgramData\Temp:1493A0EF HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\sndappv2 => ""="service" HKU\S-1-5-21-2258900905-2473213280-1569786569-1003\...A8F59079A8D5}\localserver32: rundll32.exe javascript:"\..\mshtml,RunHTMLApplication ";eval("epdvnfou/xsjuf)(=tdsjqu!mbohvbhf>ktds (the data entry has 239 more characters). <==== Poweliks! CustomCLSID: HKU\S-1-5-21-2258900905-2473213280-1569786569-1003_Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\localserver32 -> rundll32.exe javascript:"\..\mshtml,RunHTMLApplication ";eval("epdvnfou/xsjuf)(=tdsjqu!mbohvbhf>ktds (the data entry has 247 more characters). <==== Poweliks? Reboot: end
*****************
Processes closed successfully. HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => value deleted successfully. HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoControlPanel => value deleted successfully. "HKU\S-1-5-21-2258900905-2473213280-1569786569-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ce8c212c-1dd7-11e2-a7b1-7845c41d2bef}" => Key deleted successfully. "HKCR\CLSID\{ce8c212c-1dd7-11e2-a7b1-7845c41d2bef}" => Key not found. HKU\S-1-5-21-2258900905-2473213280-1569786569-1003\Software\Microsoft\Windows\CurrentVersion\Run\\SearchProtect => value deleted successfully. "HKU\S-1-5-21-2258900905-2473213280-1569786569-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ce8c212c-1dd7-11e2-a7b1-7845c41d2bef}" => Key deleted successfully. "HKCR\CLSID\{ce8c212c-1dd7-11e2-a7b1-7845c41d2bef}" => Key not found. "C:\Users\Kim\AppData\Roaming\SearchProtect\bin\cltmng.exe" => File/Directory not found. "C:\Users\Kim\AppData\Roaming\SearchProtect\bin" => File/Directory not found. "C:\Users\Kim\AppData\Roaming\SearchProtect" => File/Directory not found. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\URLSearchHooks\\{7473b6bd-4691-4744-a82b-7854eb3d70b6} => value deleted successfully. "HKCR\Wow6432Node\CLSID\{7473b6bd-4691-4744-a82b-7854eb3d70b6}" => Key deleted successfully. C:\Program Files (x86)\uTorrentControl_v2 => Moved successfully. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\URLSearchHooks\\{1930e38a-deef-4cf4-9bfb-9c4ea3689a9d} => value deleted successfully. "HKCR\Wow6432Node\CLSID\{1930e38a-deef-4cf4-9bfb-9c4ea3689a9d}" => Key deleted successfully. C:\Program Files (x86)\InternetHelper1.5 => Moved successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\SearchScopes: HKLM - DefaultScope {B7971660-A1CE-4FDD-B9E0-2C37D77AFB0B} URL = searchfunmoods.com/results.php?f=4&q={searchTerms}&a=download&chnl=download&cd=2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCyByEtB0AyD0DyB0A0EyBtN0D0Tzu0CtBzyyBtN1L2XzutBtFtBtFtDtFtAyEyE&cr=485647072 => Value not found. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = => Value not found. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\SearchScopes: HKLM - {B7971660-A1CE-4FDD-B9E0-2C37D77AFB0B} URL = searchfunmoods.com/results.php?f=4&q={searchTerms}&a=download&chnl=download&cd=2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCyByEtB0AyD0DyB0A0EyBtN0D0Tzu0CtBzyyBtN1L2XzutBtFtBtFtDtFtAyEyE&cr=485647072 => Value not found. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = => Value not found. \\SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = => Value not found. \\SearchScopes: HKCU - {B7971660-A1CE-4FDD-B9E0-2C37D77AFB0B} URL = => Value not found. "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1930e38a-deef-4cf4-9bfb-9c4ea3689a9d}" => Key deleted successfully. "HKCR\Wow6432Node\CLSID\{1930e38a-deef-4cf4-9bfb-9c4ea3689a9d}" => Key not found. "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7473b6bd-4691-4744-a82b-7854eb3d70b6}" => Key deleted successfully. "HKCR\Wow6432Node\CLSID\{7473b6bd-4691-4744-a82b-7854eb3d70b6}" => Key not found. "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D5FEC983-01DB-414a-9456-AF95AC9ED7B5}" => Key deleted successfully. "HKCR\Wow6432Node\CLSID\{D5FEC983-01DB-414a-9456-AF95AC9ED7B5}" => Key not found. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{7473b6bd-4691-4744-a82b-7854eb3d70b6} => value deleted successfully. "HKCR\Wow6432Node\CLSID\{7473b6bd-4691-4744-a82b-7854eb3d70b6}" => Key not found. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{1930e38a-deef-4cf4-9bfb-9c4ea3689a9d} => value deleted successfully. "HKCR\Wow6432Node\CLSID\{1930e38a-deef-4cf4-9bfb-9c4ea3689a9d}" => Key not found. HKU\S-1-5-21-2258900905-2473213280-1569786569-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{7473B6BD-4691-4744-A82B-7854EB3D70B6} => value deleted successfully. "HKCR\CLSID\{7473B6BD-4691-4744-A82B-7854EB3D70B6}" => Key not found. HKU\S-1-5-21-2258900905-2473213280-1569786569-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{1930E38A-DEEF-4CF4-9BFB-9C4EA3689A9D} => value deleted successfully. "HKCR\CLSID\{1930E38A-DEEF-4CF4-9BFB-9C4EA3689A9D}" => Key not found. HKU\S-1-5-21-2258900905-2473213280-1569786569-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{1930E38A-DEEF-4CF4-9BFB-9C4EA3689A9D} => value deleted successfully. "HKCR\CLSID\{1930E38A-DEEF-4CF4-9BFB-9C4EA3689A9D}" => Key not found. HKU\S-1-5-21-2258900905-2473213280-1569786569-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{7473B6BD-4691-4744-A82B-7854EB3D70B6} => value deleted successfully. "HKCR\CLSID\{7473B6BD-4691-4744-A82B-7854EB3D70B6}" => Key not found. Firefox DefaultSearchEngine deleted successfully. Firefox DefaultSearchUrl deleted successfully. Firefox SelectedSearchEngine deleted successfully. "HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE" => Key deleted successfully. "HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE" => Key deleted successfully. C:\Program Files (x86)\mozilla firefox\browser\searchplugins\ddg.xml => Moved successfully. C:\Users\Anna\AppData\Roaming\Mozilla\Firefox\Profiles\k1pnf96c.default\Extensions\artur.dubovoy@gmail.com => Moved successfully. "C:\Program Files (x86)\mozilla firefox\browser\searchplugins\ddg.xml" => File/Directory not found. "C:\Users\Anna\AppData\Roaming\Mozilla\Firefox\Profiles\k1pnf96c.default\Extensions\artur.dubovoy@gmail.com" => File/Directory not found. C:\Users\Anna\AppData\Roaming\Mozilla\Firefox\Profiles\k1pnf96c.default\Extensions\temp => Moved successfully. C:\Users\Anna\AppData\Roaming\Mozilla\Firefox\Profiles\k1pnf96c.default\Extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}.xpi => Moved successfully. "C:\Users\Anna\AppData\Roaming\Mozilla\Firefox\Profiles\k1pnf96c.default\Extensions\temp" => File/Directory not found. "C:\Users\Anna\AppData\Roaming\Mozilla\Firefox\Profiles\k1pnf96c.default\Extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}.xpi" => File/Directory not found. C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbjciahceamgodcoidkjpchnokgfpphh => Moved successfully. C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\blklojfklgnogjaijkibhfjepakiocng => Moved successfully. "C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbjciahceamgodcoidkjpchnokgfpphh" => File/Directory not found. "C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\blklojfklgnogjaijkibhfjepakiocng" => File/Directory not found. C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejpbbhjlbipncjklfjjaedaieimbmdda => Moved successfully. C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\fgkbmedckhcibhkdhaokebnllokeokek => Moved successfully. C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmijdhkcgeclpfjmibnginbbkfcbpep => Moved successfully. "C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejpbbhjlbipncjklfjjaedaieimbmdda" => File/Directory not found. "C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\fgkbmedckhcibhkdhaokebnllokeokek" => File/Directory not found. "C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmijdhkcgeclpfjmibnginbbkfcbpep" => File/Directory not found. C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbkdpahkifcigckmhiafindmaflfifgm => Moved successfully. "C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbkdpahkifcigckmhiafindmaflfifgm" => File/Directory not found. "HKLM\SOFTWARE\Google\Chrome\Extensions\bbjciahceamgodcoidkjpchnokgfpphh" => Key deleted successfully. C:\Users\Anna\AppData\Local\funmoods.crx => Moved successfully. "C:\Users\Anna\AppData\Local\funmoods.crx" => File/Directory not found. "HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\bbjciahceamgodcoidkjpchnokgfpphh" => Key deleted successfully. "C:\Users\Anna\AppData\Local\funmoods.crx" => File/Directory not found. "C:\Users\Anna\AppData\Local\funmoods.crx" => File/Directory not found. "HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\blklojfklgnogjaijkibhfjepakiocng" => Key deleted successfully. C:\Users\Anna\AppData\Local\CRE\blklojfklgnogjaijkibhfjepakiocng.crx => Moved successfully. C:\Users\Anna\AppData\Local\CRE => Moved successfully. "HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\cgpimkfhjdaobobdomcikioipaenlhke" => Key deleted successfully. "C:\Users\Anna\AppData\Local\CRE\cgpimkfhjdaobobdomcikioipaenlhke.crx" => File/Directory not found. "HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\ehfanjejklfmnldbbclpocdbceaeemkn" => Key deleted successfully. C:\Program Files (x86)\Download Master\dm_chrome.crx => Moved successfully. C:\Program Files (x86)\Download Master => Moved successfully. "HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\ejpbbhjlbipncjklfjjaedaieimbmdda" => Key deleted successfully. "C:\Users\Anna\AppData\Local\CRE\ejpbbhjlbipncjklfjjaedaieimbmdda.crx" => File/Directory not found. "HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\fgkbmedckhcibhkdhaokebnllokeokek" => Key deleted successfully. "C:\Users\Anna\AppData\Local\CRE\fgkbmedckhcibhkdhaokebnllokeokek.crx" => File/Directory not found. "HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\icmijdhkcgeclpfjmibnginbbkfcbpep" => Key deleted successfully. C:\Program Files (x86)\SearchGBY\Extensions\Chrome\searchgby.chrome.crx => Moved successfully. "C:\Program Files (x86)\SearchGBY\Extensions\Chrome\searchgby.chrome.crx" => File/Directory not found. "HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\pbkdpahkifcigckmhiafindmaflfifgm" => Key deleted successfully. C:\Users\Anna\AppData\Local\Coupon Companion\Chrome\Coupon Companion.crx => Moved successfully. C:\Users\Anna\AppData\Local\Coupon Companion => Moved successfully. "HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\pjddgeceaihfihcecdgfdiepikfbflpn" => Key deleted successfully. "C:\Users\Anna\AppData\Local\CRE\pjddgeceaihfihcecdgfdiepikfbflpn.crx" => File/Directory not found. cpuz134 => Service deleted successfully. "C:\Users\Anna\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpyczcy4.dll" => File/Directory not found. C:\ProgramData\Temp => ":1493A0EF" ADS removed successfully. "HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc" => Key deleted successfully. "HKLM\System\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc" => Key deleted successfully. "HKLM\System\CurrentControlSet\Control\SafeBoot\Network\sndappv2" => Key deleted successfully. "HKU\S-1-5-21-2258900905-2473213280-1569786569-1003\Software\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\localserver32" => Key Deleted Successfully. "HKU\S-1-5-21-2258900905-2473213280-1569786569-1003\Software\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}" => Key deleted successfully. "HKU\S-1-5-21-2258900905-2473213280-1569786569-1003_Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}" => Key not found.
The system needed a reboot.
==== End of Fixlog ====
|
|
dbrisen
Malware Removalists
Posts: 3,688
|
Post by dbrisen on Nov 21, 2014 7:37:08 GMT -8
How is your system running now? FIRSTDownload Junkware Removal Tool from here and run it on the desktop. Double click on the downloaded file on your desktop; it will open up a command window and run from there. When asked, press any key to let it run. This will create a log on the desktop; please attach or copy & paste the log in your next post (JRT.txt). SECONDRead carefullyDownload Adwcleaner from here to your desktop and run a scan. You may have to right click adwcleaner.exe and choose "Run as Administrator" from the menu. (Click the Scan button to start the scanning). It will create a log after it is finished scanning. If not (or if it just asks for you to uncheck what you don't wanted deleted), there is a Report button in the middle of the main window; click that and it will make the log file. Once the report file is made, you can leave AdwCleaner running (but don't delete anything yet) or you can close it down (we can always get a fresh scan done before the deletions). ONE SCAN ONLY, PLEASEAttach or paste the log back here for review and further instructions. Thanks.
|
|
asch
New Helpee
Posts: 18
|
Post by asch on Nov 21, 2014 17:22:34 GMT -8
Step 1, I ran JRT and this is the generated log. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.3.9 (11.15.2014:2) OS: Windows 7 Home Premium x64 Ran by Anna on Fri 11/21/2014 at 19:12:16.39 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\SMessaging [Strongvault] Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\anti-phishing domain advisor
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Toolbar.CT3220468 Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Toolbar.CT3247201 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Toolbar.CT3220468 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Toolbar.CT3247201 Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110011441193} Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110011441193} Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskInstallChecker-1_RASAPI32 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskInstallChecker-1_RASMANCS Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110011441193} Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\AskInstallChecker-1_RASAPI32 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\AskInstallChecker-1_RASMANCS Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
~~~ Files
Successfully deleted: [File] "C:\Users\Anna\appdata\local\google\chrome\user data\default\local storage\http_www.superfish.com_0.localstorage" Successfully deleted: [File] "C:\Users\Anna\appdata\local\google\chrome\user data\default\local storage\http_www.superfish.com_0.localstorage-journal" Successfully deleted: [File] "C:\Windows\reimage.ini"
~~~ Folders
Failed to delete: [Folder] "C:\ProgramData\anti-phishing domain advisor" Successfully deleted: [Folder] "C:\ProgramData\strongvault online backup" Successfully deleted: [Folder] "C:\ProgramData\tarma installer" Successfully deleted: [Folder] "C:\Users\Anna\AppData\Roaming\opencandy" Successfully deleted: [Folder] "C:\Users\Anna\AppData\Roaming\strongvault" Successfully deleted: [Folder] "C:\Users\Anna\appdata\local\stronghold_llc" Successfully deleted: [Folder] "C:\Users\Anna\appdata\local\strongvault online backup" Successfully deleted: [Folder] "C:\Users\Anna\appdata\locallow\funmoods" Successfully deleted: [Folder] "C:\Users\Anna\appdata\locallow\pricegong" Successfully deleted: [Folder] "C:\Users\Anna\appdata\locallow\utorrentcontrol_v2" Successfully deleted: [Folder] "C:\Program Files (x86)\coupon companion" Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin" Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{448BD572-5A78-4670-8555-D92449352280} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{6CFDDFAB-0077-4B29-896A-79193968F09E} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{6F84E20D-C027-44D0-AB01-B077906AB243} Successfully deleted: [Empty Folder] C:\Users\Anna\appdata\local\{EDE79133-3703-452B-AD97-6922A9939AC4}
~~~ FireFox
Successfully deleted the following from C:\Users\Anna\AppData\Roaming\mozilla\firefox\profiles\k1pnf96c.default\prefs.js
user_pref("CT3241284_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1365125001877,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0} user_pref("CT3287823_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1365125001824,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0} user_pref("CT3311875_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1384131314092,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0} user_pref("Smartbar.ConduitHomepagesList", ""); user_pref("Smartbar.ConduitSearchEngineList", ""); user_pref("Smartbar.ConduitSearchUrlList", ""); user_pref("Smartbar.SearchFromAddressBarSavedUrl", "hxxp://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=714647&p="); user_pref("Smartbar.keywordURLSelectedCTID", "CT3311875"); user_pref("browser.search.defaultthis.engineName", "SweetTunes Customized Web Search"); user_pref("extensions.fvd_single.surfcanyon.ramp.start_time", "1393989567229"); user_pref("extensions.searchgby.injurl", "//www.analytic-s.com/pop/ga/?subid=sgby&&icmp=sp130316"); user_pref("extensions.searchgby.updateVersion", "2.0.61"); user_pref("plugin.state.npconduitfirefoxplugin", 2); user_pref("smartbar.machineId", "ONOMXSBQE0XEIZNXSPBDCECQ1ETIVBFCBLHVFQUN+E3JGXZG8/HFUWMKC8IN2K6Y3P32A4A7RJXT69OKB+YQ5G"); Emptied folder: C:\Users\Anna\AppData\Roaming\mozilla\firefox\profiles\k1pnf96c.default\minidumps [832 files]
~~~ Chrome
Successfully deleted: [Folder] C:\Users\Anna\appdata\local\Google\Chrome\User Data\Default\Extensions\bopakagnckmlgajfccecajhnimjiiedh Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Google\Chrome\Extensions\bbjciahceamgodcoidkjpchnokgfpphh Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\bopakagnckmlgajfccecajhnimjiiedh Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Google\Chrome\Extensions\ejpbbhjlbipncjklfjjaedaieimbmdda
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on Fri 11/21/2014 at 19:16:19.85 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
asch
New Helpee
Posts: 18
|
Post by asch on Nov 21, 2014 17:41:20 GMT -8
Step 2 Report from AdwCleaner. It looks that the messages about poweliks are gone.
# AdwCleaner v4.101 - Report created 21/11/2014 at 19:31:52 # Updated 09/11/2014 by Xplode # Database : 2014-11-16.1 [Live] # Operating System : Windows 7 Home Premium Service Pack 1 (64 bits) # Username : Anna - ANNA-PC # Running from : C:\Users\Anna\Desktop\AdwCleaner.exe # Option : Clean
***** [ Services ] *****
***** [ Files / Folders ] *****
Folder Deleted : C:\SearchProtect Folder Deleted : C:\Users\Anna\Favorites\Tutorials Folder Deleted : C:\ProgramData\Anti-phishing Domain Advisor Folder Deleted : C:\Users\Anna\AppData\Local\NativeMessaging Folder Deleted : C:\Users\Anna\AppData\LocalLow\HPAppData Folder Deleted : C:\Users\Kim\AppData\LocalLow\Conduit Folder Deleted : C:\Users\Kim\AppData\LocalLow\HPAppData Folder Deleted : C:\Users\Kim\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmijdhkcgeclpfjmibnginbbkfcbpep Folder Deleted : C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk Folder Deleted : C:\Users\Kim\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk File Deleted : C:\END File Deleted : C:\Users\Public\Desktop\eBay.lnk File Deleted : C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_toolbar.utorrent.com_0.localstorage-journal
***** [ Scheduled Tasks ] *****
***** [ Shortcuts ] *****
***** [ Registry ] *****
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk Key Deleted : [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk Key Deleted : HKCU\Software\MICROSOFT\INTERNET EXPLORER\DOMSTORAGE\superfish.com Key Deleted : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\www.superfish.com Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\superfish.com Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.superfish.com Key Deleted : HKLM\SOFTWARE\Classes\AppID\esrv.EXE Key Deleted : HKLM\SOFTWARE\Classes\AppID\{960DF771-CFCB-4E53-A5B5-6EF2BBE6E706} Key Deleted : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{02478D38-C3F9-4EFB-9B51-7695ECA05670} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{75A4D144-506D-4BE5-81DB-EC7DA1E7F840} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5} Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{960DF771-CFCB-4E53-A5B5-6EF2BBE6E706} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C1FB-11D2-892F-0090271D4F88} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{02478D38-C3F9-4EFB-9B51-7695ECA05670} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF99BD32-C1FB-11D2-892F-0090271D4F88} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88} Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C87FC351-A80D-43E9-9A86-CF1E29DC443A} Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{EF99BD32-C1FB-11D2-892F-0090271D4F88}] Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B7971660-A1CE-4FDD-B9E0-2C37D77AFB0B} Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B7971660-A1CE-4FDD-B9E0-2C37D77AFB0B} Key Deleted : HKCU\Software\Funmoods Key Deleted : HKCU\Software\IM Key Deleted : HKCU\Software\InstallCore Key Deleted : HKCU\Software\InstalledBrowserExtensions Key Deleted : HKCU\Software\Softonic Key Deleted : HKCU\Software\SweetIM Key Deleted : HKCU\Software\Reimage Key Deleted : HKCU\Software\AppDataLow\Toolbar Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider Key Deleted : HKCU\Software\AppDataLow\Software\PriceGong Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar Key Deleted : HKLM\SOFTWARE\SweetIM Key Deleted : HKLM\SOFTWARE\Video Converter Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Anti-phishing Domain Advisor Key Deleted : [x64] HKLM\SOFTWARE\Tarma Installer Key Deleted : [x64] HKLM\SOFTWARE\Reimage Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094
***** [ Browsers ] *****
-\\ Internet Explorer v11.0.9600.17420
-\\ Mozilla Firefox v33.1 (x86 en-US)
[k1pnf96c.default\prefs.js] - Line Deleted : user_pref("CT3241284_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1365125001877,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]"); [k1pnf96c.default\prefs.js] - Line Deleted : user_pref("CT3287823_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1365125001824,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]"); [k1pnf96c.default\prefs.js] - Line Deleted : user_pref("CT3311875_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1384131314092,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
-\\ Google Chrome v39.0.2171.65
[C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://search.aol.com/aol/search?q={searchTerms} [C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.ask.com/web?q={searchTerms} [C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\preferences] - Deleted [Extension] : bbjciahceamgodcoidkjpchnokgfpphh [C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\preferences] - Deleted [Extension] : bopakagnckmlgajfccecajhnimjiiedh [C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\preferences] - Deleted [Extension] : ejpbbhjlbipncjklfjjaedaieimbmdda [C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\preferences] - Deleted [Extension] : icmijdhkcgeclpfjmibnginbbkfcbpep [C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\preferences] - Deleted [Extension] : mkfokfffehpeedafpekjeddnmnjhmcmk [C:\Users\Kim\AppData\Local\Google\Chrome\User Data\Default\preferences] - Deleted [Extension] : bopakagnckmlgajfccecajhnimjiiedh [C:\Users\Kim\AppData\Local\Google\Chrome\User Data\Default\preferences] - Deleted [Extension] : icmijdhkcgeclpfjmibnginbbkfcbpep [C:\Users\Kim\AppData\Local\Google\Chrome\User Data\Default\preferences] - Deleted [Extension] : mkfokfffehpeedafpekjeddnmnjhmcmk
-\\ Chromium v
[C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://search.aol.com/aol/search?q={searchTerms} [C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.ask.com/web?q={searchTerms}
-\\ Opera v0.0.0.0
[C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://search.aol.com/aol/search?q={searchTerms} [C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.ask.com/web?q={searchTerms}
*************************
AdwCleaner[R0].txt - [7609 octets] - [21/11/2014 19:25:36] AdwCleaner[S0].txt - [7781 octets] - [21/11/2014 19:31:52]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [7841 octets] ##########
|
|
dbrisen
Malware Removalists
Posts: 3,688
|
Post by dbrisen on Nov 21, 2014 19:17:57 GMT -8
Malwarebytes' Anti-MalwarePlease download the latest version of Malwarebytes' Anti-Malware from HereDouble Click on the mbam-setup.exe file to install the application. Do not check on the Trial of Professional version. Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish. If an update is found, it will download and install the latest version. When the main screen opens, if the database is out of date, you can click on the Fix Now banner or the Update Now link Once the program has loaded and updated, select " Scan Now >>" to start the scan. The scan may take some time to finish, so please be patient. If any malware is found, you will be presented with a screen like the one below. Please click on the Export Log button and select the As text file from the dropdown list. I would suggest you save the file on your desktop (as we need the report attached here for review and it is easy to find on the desktop). After you have saved the report file, return to the Potential Threats Detected page and click on Cancel. You can close MBAM after that. Please attach the report file to a post here; I will review the file and script what needs to be removed.
|
|