Facebook naughty video started problem.

[JustLouise]

First post by me, hope I'm in the correct area! Do I need to post a computer log here to clear this up? If so, what program do people use?

I have Windows 7 & mobile internet on laptop. I’ve installed paid Spybot 2 Home version 2.4.40 as I have/had a malware problem after clicking on a porn video on someone’s Facebook page (idiot I know, once burned etc). It sent out the same video to my groups on Facebook but not individuals, well not to the friend I asked anyway. Also my ‘live’ email is still getting rude emails, I can’t change password in ‘live’ for 30 days and now have set up a gmail to use instead. I did the free version of Spybot at first with nothing picked up. I did a Restore Point & deleted Google Chrome that I had been using, will now use Firefox which I already had installed. Did malwarebytes free version with no result. Then downloaded paid version of Spybot Home yesterday, Sep 20th. Message at top right says “Live protection: on, Internet protection: full, This software is being updated...” The 3 have ticks beside them. BUT is this update message correct when it isn’t in the process of updating? Even when disconnected from internet.
When I tried to CLOSE Spybot yesterday (Sep 20th) because updating didn’t work and updating took all night and didn’t work past a fraction of it, once when update worked a little in the list a lot was ‘missing’ and scan was ‘unresponsibe’. I got this message “Access violation at address 3060B743 in module ‘SDWelcome.exe’ Write of address 00000080” I saw a post on your forum (by someone who knows more than me) and your answer was to Right click taskbar & go to Process tab to end process of SDWelcome.exe (which I did) to close Spybot.
I installed ccleaner today and run (including registry). There were lots of things in registry and cleaner (no idea how bad they were). Spybot seems to be working now but I don’t know if there is anything missing or if all updates are done. BTW It didn’t pick up anything bad, just minor things. No nasties with the free version of Spybot before I did Restore Point or anything else and various attempts and 2 ?successes with paid version.
Even though seems to be working now, but not sure if anything is wrong. Do I need to uninstall Spybot and reinstall? I still have email with link to download the paid version.
Any other tips to find out was this Facebook thing is named to try and make sure it is gone or not?
Phew, thankyou, thankyou! (I'm obviously a moron by clicking on the Facebook thing and muddling my way through)

[tashi]

Hello JustLouise

To request malware removal assistance the FAQ includes forum guidelines in post #1 and instructions in post #2 on how to provide the preliminary FRST and aswMBR logs used for analysis.

http://forums.spybot.info/showthread.php?t=288

Once you provide the logs in this topic I will remove my post and merge yours. :)

Best regards.

[JustLouise]

Thank you Tashi,
Your help is appreciated.

I had a look at the link and there is quite a lot for me to go through. I'll try to get it done tomorrow as I think it will take me a while.

I'm a few days late after initial post as I got a bit fed up with it all :confused::confused

[ken545]

:snwelcome:

Lets see if we can make it easier for you to post

I am providing a program for you to run that will create two logs, the main FRST log and an Additions log. After you create the logs go here and start a new thread and post both logs please and we can go from there
https://forums.spybot.info/forumdisplay.php?22-Malware-Removal


Please download Farbar Recovery Scan Tool (http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/) and save it to your DESKTOP


Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.


How to determine whether a computer is running a 32-bit version or 64-bit version of the Windows operating system
A simple way to check your system: Start --> Computer (right click) --> Properties


http://i24.photobucket.com/albums/c30/ken545/FRST_zps5d956a1a.jpg (http://s24.photobucket.com/user/ken545/media/FRST_zps5d956a1a.jpg.html)






Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
Please make sure All Users is checked
Just keep the defaults as in the picture checkmarked
Press Scan button.
It will produce a log called FRST.txt in the same directory the tool is run from.
Please copy and paste log back here.
The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.