|
Post by stinkbugz on Nov 13, 2015 22:20:33 GMT -8
Trying to remove pixel.adsafeprotected... tried Norton, Malwarebytes and Bitdefender. None worked. While Norton Power Eraser didn't find it, it did flag a file called dplol.sys, but couldn't remove it. Symptoms: bogging down/brief freezing. Occasional pop-up which notified me that Pixel.adsafeprotected was running a script (don't have the actual verbiage, sorry) and should I let it continue? Running Firefox for my browser. Any help will be greatly appreciated. Thank you! wikisend.com/download/498080/FRST.txtwikisend.com/download/644848/Addition.txt
|
|
dbrisen
Malware Removalists
Posts: 3,688
|
Post by dbrisen on Nov 14, 2015 13:39:30 GMT -8
FIRST >>>>Open notepad by pressing the Windows Key + R key, typing notepad in the Run box and pressing Enter. Please copy the contents of the quote box below. To do this highlight the contents of the box and right click on it and select copy. Paste this into the open notepad. Save it to your desktop as fixlist.txtNOTE. It's important that both files, FRST64 and fixlist.txt are in the same location or the fix will not work. NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating systemStart FRST that is on the desktop by right clicking on file and selecting "Run as Administrator..." and press the Fix button just once and wait. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run. When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply. SECOND >>>>AdwCleaner by XplodeDownload AdwCleaner from here or from here. Save the file to the desktop. NOTE: If you are using IE 8 or above you may get a warning that stops the program from downloading. Just click on the warning and allow the download to complete. Close all open windows and browsers.[/b][/font] Right click the AdwCleaner icon on the desktop, click Run as administrator and accept the UAC prompt to run AdwCleaner. You will see the following console: Click the Scan button and wait for the scan to finish. After the Scan has finished the window may or may not show what it found and above, in the progress bar, you will see: Waiting for action. Please uncheck elements you don't want to remove.Click the Clean button. Everything checked will be deleted. When the program has finished cleaning a report appears. Once done it will ask to reboot, allow this On reboot a log will be produced please copy / paste that in your next reply. This report is also saved to C:\AdwCleaner\AdwCleaner[C0].txt[/ul] Optional: NOTE: If you see AVG Secure Search being targeted for deletion, Here's Why and Here. You can always Reinstall it. LAST >>>>How is your system running now?
|
|
|
Post by stinkbugz on Nov 15, 2015 20:42:40 GMT -8
Did everything you suggested. Here is the log: # AdwCleaner v5.021 - Logfile created 15/11/2015 at 22:28:03 # Updated 14/11/2015 by Xplode # Database : 2015-11-13.3 [Server] # Operating system : Windows 8.1 (x64) # Username : Stinkbug - TIMEWASTER2013 # Running from : C:\Users\Stinkbug\Desktop\AdwCleaner.exe # Option : Cleaning # Support : toolslib.net/forum***** [ Services ] ***** ***** [ Folders ] ***** ***** [ Files ] ***** ***** [ DLLs ] ***** ***** [ Shortcuts ] ***** ***** [ Scheduled tasks ] ***** ***** [ Registry ] ***** [-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{7D86A08B-0A8F-4BE0-B693-F05E6947E780} [-] Key Deleted : HKCU\Software\Softonic ***** [ Web browsers ] ***** ************************* :: "Tracing" keys removed :: Winsock settings cleared ########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [793 bytes] ########## I'm going to see how it performs and then get back to you.
|
|
|
Post by stinkbugz on Nov 16, 2015 11:32:55 GMT -8
Ok- the problem seems to be solved. Thank you!
|
|
dbrisen
Malware Removalists
Posts: 3,688
|
Post by dbrisen on Nov 16, 2015 22:33:19 GMT -8
Can you post the Fixlog.txt file? I like to keep records of what is removed in case others need the same removal. Thanks.
|
|