Have Incredibar and can't locate where it is to remove it - DAY 2

**Juliet** · 2014-12-04, 22:19

You did good with MalwareBytes

Open notepad. Please copy the contents of the quote box below. To do this highlight the contents of the box and right click on it and select copy.
Paste this into the open notepad. save it to the Desktop as fixlist.txt (Don't get this one confused with the one you already made, if need be find the one made previously and delete it so this one will run correctly)
NOTE. It's important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work.
It needs to be saved Next to the "Farbar Recovery Scan Tool" (If asked to overwrite existing one please allow)

start
CloseProcesses:
C:\Users\Kyle\Downloads\Desktop Theme Bambi and Friends.exe
C:\Users\Kyle\Downloads\Desktop Theme Thumper.exe
EmptyTemp:
End

Open FRST/FRST64 and press the Fix button just once and wait.
If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.

How's your computer now?

**flowerchild2311** · 2014-12-05, 16:49

Juliet -

It is certainly running so much faster, that's for SURE!!! I think we almost have it...and I am so excited!

Attached is the fixlog you just asked me to run:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 03-12-2014
Ran by Kyle at 2014-12-05 10:44:49 Run:2
Running from C:\Users\Kyle\Desktop
Loaded Profiles: Kyle & UpdatusUser (Available profiles: Kyle & UpdatusUser)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
start
CloseProcesses:
C:\Users\Kyle\Downloads\Desktop Theme Bambi and Friends.exe
C:\Users\Kyle\Downloads\Desktop Theme Thumper.exe
EmptyTemp:
End
*****************

Processes closed successfully.
C:\Users\Kyle\Downloads\Desktop Theme Bambi and Friends.exe => Moved successfully.
C:\Users\Kyle\Downloads\Desktop Theme Thumper.exe => Moved successfully.
EmptyTemp: => Removed 454.3 MB temporary data.

The system needed a reboot.

==== End of Fixlog ====

**Juliet** · 2014-12-05, 16:52

I think we almost have it

Whats happening now?

**flowerchild2311** · 2014-12-05, 17:45

I am running good - now, how to get rid of all those icons on my desktop? I have installed SO MUCH stuff - and now I have to remember to go back and not let everything download to my desktop.

I haven't run anything further...should I?

**Juliet** · 2014-12-05, 18:05

I think your good to go.

DelFix

Please download DelFix and save the file to your Desktop.
Double-click DelFix.exe to run the programme.
Place a checkmark next to the following items:
- Activate UAC
- Remove disinfection tools
- Create registry backup
- Purge system restore
Click the Run button.

-- This will remove the specialised tools we used to disinfect your system. Any leftover logs, files, folders or tools remaining on your Desktop which were not removed can be deleted manually (right-click the file + delete).

~~~~~~~~~~~~~~~~~~~~~

Please take the time to read over a few of my preventive tips.

Computer Security
http://malwareremoval.com/forum/view...557960#p557960
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Be prepared for CryptoLocker:

Cryptolocker Ransomware: What You Need To Know

CryptoLocker Ransomware Information Guide and FAQ

to help protect your computer in the future I recommend that you get the following free programmes:

CryptoPrevent install this programme to lock down and prevent crypto ransome ware

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Please navigate to Microsoft Windows Updates and download all the "Critical Updates" for Windows.

Firefox 3
The award-winning Web browser is now faster, more secure, and fully customizable to your online life. With Firefox 3, added powerful new features that make your online experience even better. It has more features and is a lot more secure than IE. It is a very easy and painless download and install, it will no way interfere with IE, you can use them both.
*NoScript - Addon for Firefox that stops all scripts from running on websites. Stops malicious software from invading via flash, java, javascript, and many other entry points.

AdblockPlus

AdblockPlus, Surf the web without annoying ads!
Blocks banners, pop-ups and video ads - even on Facebook and YouTube
Protects your online privacy
Two-click installation, It's free!
click the icon that corresponds to your browser and download.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
WOT Web of Trust, warns you about risky websites that try to scam visitors, deliver malware or send spam. Protect your computer against online threats by using WOT as your front-line layer of protection when browsing or searching in unfamiliar territory. WOT's color-coded icons show you ratings for 21 million websites - green to go, yellow for caution and red to stop, helping you avoid the dangerous sites. WOT has an addon available for both Firefox and IE.

Green should be good to go
Yellow for caution
Red to stop

~~~~~~~~~~~~~~~~~~~~~~~~~~~~
How to prevent Malware: Created by Miekiemoes

WARNING: Java is the #1 exploited program at this time. The Department of Homeland Security recommends that computer users disable Java
See this article (http://www.forbes.com/sites/eliseack...-disable-java/
and this article (http://www.nbcnews.com/technology/te...late-1B7938755

I would recommend that you completely uninstall Java unless you need it to run an important software.
In that instance I would recommend that you disable Java in your browsers until you need it for that software and then enable it. (See How to diasble Java in your web browser (http://www.geekstogo.com/2600/how-to...r-web-browser/) and How to unplug Java from the browser (http://krebsonsecurity.com/how-to-un...m-the-browser/))

Avoid P2P

P2P may be a great way to get lots of stuffs, but it is a great way to get infected as well. There's no way to tell if the file being shared is infected. Worse still, some worms spread via P2P networks, infecting you as well.

Please read these short reports on the dangers of peer-2-peer programs and file sharing.

FBI Cyber Education Letter
USAToday
infoworld

*********************************************
Please read the following safe computing articles..

Secure My Computer: A Layered Approach

Free Antivirus-AntiSpyware-Firewall Software[/*]

Keep a backup of your important files - Now, more than ever, it's especially important to protect your digital files and memories. This article is full of good information on alternatives for home backup solutions.

It is possible for other programs on your computer to have security vulnerability that can allow malware to infect you.
Therefore, it is also a good idea to check for the latest versions of commonly installed applications that are regularly patched to fix vulnerabilities.
You can check these by visiting Secunia Software Inspector or you can use the following application for this purpose PatchMyPC

**flowerchild2311** · 2014-12-05, 18:09

Juliet -

Could you please tell me where to change my Downloads to? We changed them to my Desktop, but I don't even know where they were before we changed them.

**Juliet** · 2014-12-05, 18:21

Before you had them directed to downloads folder
C:\Users\Kyle\Downloads
We can redo this setting if you wish

Google Chrome - Click the "Customize and control Google Chrome" button in the upper right-corner of the browser.

Choose Settings. at the bottom of the screen click the
"Show advanced settings..." link. Scroll down to find the Downloads section and click the Change... button. Select where you want your downloads to go from here, and click OK.

Mozilla Firefox - Click the "Open Menu" button in the upper right-corner of the browser.

Choose Options. In the downloads section, click the Browse button, select where to designate where they should go
and the click the "Select Folder" button. Click OK to get out of the Options menu.

Internet Explorer - Click the Tools menu in the upper right-corner of the browser.

Select View downloads. Select the Options link in the lower left of the window. Click Browse and
select select where to designate where they should go and then choose the Select Folder button. Click OK to get out of the download options screen and then click Close to get out of the View Downloads screen.
NOTE: IE8 Does not support changing download locations in this manner. You will need to download the tool(s) to the default folder, usually Downloads, then copy them to the desktop.

**flowerchild2311** · 2014-12-05, 19:11

Juliet -

OK, I have fixed so that the downloads go back into Downloads.

Now, I have read all that you attached...and I was running GREAT - UNTIL I DOWNLOADED Cryptolocker. When I did, my computer would just STALL out on pages, and not finish loading. I had to uninstall it just to send you this message. Any thoughts?

**Juliet** · 2014-12-05, 19:32

You mean CryptoPrevent?
Did you set it to default?

**flowerchild2311** · 2014-12-05, 22:06

Juliet -

Yes, I mean CryptoPrevent. Yes, it was also set on Default. Nothing was working - pages weren't loading all the way...even with refresh. It was crazy! Just stalled out every where I tried to go.

I had to uninstall it so I could send you this message. It all seems running fine now that it's out...QUICK loading of pages and going places.

Thread: Have Incredibar and can't locate where it is to remove it - DAY 2

Thread Tools

Display