Infected Computer

Hello

I need some help. My daughter seems to have downloaded unknown bad things to my computer. Something called dregol opens in chromium as soon as the computer is started up. Then something called 360 total security seems to be running all the time and blocking me from doing almost anything. I tried to follow the instructions in the read before you post, but it blocked the downloads and I was afraid to click on the message when it wanted me to say allow or deny. It has restarted my computer twice since I turned it on tonight. Also I am getting constant popups, one even pretending to be spybot.

I was able to complete the download and the registry backup. It will not let me Farbar Recovery or aswMBR to download without 360 total security from blocking it.

Please let me know what I can do to get my computer back!

Thanks

The 360 program you talk about, is it one of these?
Qihoo 360 Internet Security
Norton 360 Internet Security

Instructions on how to backup your Favourites/Bookmarks and other data can be found below.

• 
  Backup Internet Explorer Favourites
• 
  Backup Firefox Bookmarks
• 
  Backup Chrome Bookmarks
  

Proceed with the reset once done.

• 
  Internet Explorer: How to reset Internet Explorer settings
• 
  Firefox: Reset Firefox
• [font=helvetica, arial, sans-serif]
  
  [/font]Chrome: Chrome - Reset browser settings

~~~~~~~~~`

Now, let's try to run a couple tools.

If you can download and run the tool good. If not, please reboot the computer into safe mode with networking and try to download and run the tools from there,
tutorial below
http://www.bleepingcomputer.com/tutorials/how-to-start-windows-in-safe-mode/


Please download Malwarebytes Anti-Malware and save it to your desktop.

• Double-click on the setup file (mbam-setup.exe), then click on Run to install.
• Malwarebytes will automatically open to it's Dashboard. If you have never run this version, you should see a red note at the top indicating "A scan has never been run on your system"
• Click on Update Now to download the current database definitions, then click the Scan Now >> button.
• If you have run this version before, you should see a green note at the top indicating "Your system is fully protected".
• You will be prompted to update Malwarebytes...click on the Update Now button.
• The THREAT SCAN will automatically begin.
• When the scan has completed, the results will be displayed. Click on Quarantine All, then click on Apply Actions.
• To complete any actions taken you will be prompted to restart your computer...click on Yes. Failure to reboot normally will prevent Malwarebytes from removing all the malware.
• After rebooting the computer, copy and paste the mbam.log in your next reply.

To retrieve the Malwarebytes Anti-Malware 2.0 scan log information (Method 1)

• Open Malwarebytes Anti-Malware.
• Click the History Tab at the top and select Application Logs.
• Select (check) the box next to Scan Log. Choose the most current scan.
• Click the View button.
• Click Copy to Clipboard at the bottom...come back to this thread, click Add Reply, then right-click and choose Paste.
• Alternatively, you can click Export and save the log as a .txt file on your Desktop or another location.
• Be sure to post the complete log to include the top portion which shows MBAM's database version and your operating system.

To retrieve the Malwarebytes Anti-Malware 2.0 scan log information (Method 2)

• Open Malwarebytes Anti-Malware.
• Click the Scan Tab at the top.
• Click the View detailed log link on the right.
• Click Copy to Clipboard at the bottom...come back to this thread, click Add Reply, then right-click and choose Paste.
• Alternatively, you can click Export and save the log as a .txt file on your Desktop or another location.
• Be sure to post the complete log to include the top portion which shows MBAM's database version and your operating system.

Logs are named by the date of scan in the following format: mbam-log-yyyy-mm-dd and automatically saved to the following locations:
-- XP: C:\Documents and Settings\<Username>\Application Data\Malwarebytes\Malwarebytes Anti-Malware\Logs\mbam-log-yyyy-mm-dd
-- Vista, Windows 7/8: C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\Logs\mbam-log-yyyy-mm-dd

~~~~~~~~~~~~~~~~

AdwCleaner

• Please download AdwCleaner and save the file to your Desktop.
• Right-Click AdwCleaner.exe and select
  
  Run as administrator to run the programme.
• Follow the prompts.
• Click Scan.
• Upon completion, click Report. A log (AdwCleaner[R0].txt) will open. Briefly check the log for anything you know to be legitimate.
• Ensure anything you know to be legitimate does not have a checkmark, and click Clean.
• Follow the prompts and allow your computer to reboot.
• After rebooting, a log (AdwCleaner[S0].txt) will open. Copy the contents of the log and paste in your next reply.

-- File and registry key backups are made for anything removed using this tool. Should a legitimate entry be removed (otherwise known as a 'false-positive'), simple steps can be taken to restore the entry. Please do not overly concern yourself with the contents of AdwCleaner[R0].txt.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~



Please download Junkware Removal Tool to your desktop.

• Shut down your protection software now to avoid potential conflicts.
• Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
• The tool will open and start scanning your system.
• Please be patient as this can take a while to complete depending on your system's specifications.
• On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
• Post the contents of JRT.txt into your next message.

~~~
please post
Malwarebytes Anti-Malware\Log
C:\AdwCleaner.txt
JRT.txt

Due to the lack of feedback this Topic is closed.