Malware Removal Assistance

[h4v0c]

After reviewing the information in AdwCleaner[C1].txt and noticing the three "Key Not Deleted" ...

[!] Key Not Deleted : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
...
...
[!] Key Not Deleted : [x64] HKCU\Software\Softonic
[!] Key Not Deleted : [x64] HKCU\Software\StartSearch

I thought I may have missed something. I ran another scan from AdwCleaner but according to the results in AdwCleaner[S3].txt ... nothing was found:


# AdwCleaner v5.007 - Logfile created 10/09/2015 at 00:10:59
# Updated 08/09/2015 by Xplode
# Database : 2015-09-08.2 [Server]
# Operating system : Windows 7 Ultimate Service Pack 1 (x64)
# Username : havoc - BEAST
# Running from : C:\Users\havoc\Desktop\AdwCleaner.exe
# Option : Scan
# Support : http://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****


***** [ Files ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****


***** [ Web browsers ] *****


########## EOF - C:\AdwCleaner\AdwCleaner[S3].txt - [550 bytes] ##########

[Juliet]

I believe it was cleaned when the machine rebooted.

How's your computer now?

What we can do now is run an online scan with Eset, for the time being it is our most trusted scanner.
Most reliable and thorough.
The settings I suggest will show us items located in quarantine folders so don't be alarmed with this, also, in case of a false positive I ask that you not allow it to delete what it does find.
This scanner can take quite a bit of time to run, depending of course how full your computer is.



Note: This scan may take a long time to complete. Please do not browse the Internet whilst your Anti-Virus is disabled.

ESET Online Scan
Note: This scan may take a long time to complete. Please do not browse the Internet whilst your Anti-Virus is disabled.

• Please download ESET Online Scan and save the file to your Desktop.
• Temporarily disable your anti-virus software. For instructions, please refer to the following link.
• Double-click esetsmartinstaller_enu.exe to run the programme.
• Agree to the EULA by placing a checkmark next to Yes, I accept the Terms of Use. Then click Start.
• Agree to the Terms of Use once more and click Start. Allow components to download.
• Place a checkmark next to Enable detection of potentially unwanted applications.
• Click Advanced settings. Place a checkmark next to:
  
  • Scan archives
  • Scan for potentially unsafe applications
  • Enable Anti-Stealth technology
  
  
• Ensure Remove found threats is unchecked.
• Click Start.
• Wait for the scan to finish. Please be patient as this can take some time.
• Upon completion, click . If no threats were found, skip the next two bullet points.
• Click and save the file to your Desktop, naming it something such as "MyEsetScan".
• Push the Back button.
• Place a checkmark next to and click .
• Re-enable your anti-virus software.
• Copy the contents of the log and paste in your next reply.

[h4v0c]

I will try to kick this off either tonight or tomorrow night before I go to bed. That way, it can have all night to run without me needing my computer for anything. As soon as it finishes, I will post the results for you.

Otherwise, everything "seems" okay so far, but I haven't really tested extensively.

[Juliet]

everything "seems" okay so far

good to hear.

[Juliet]

h4v0c, still need help?

[h4v0c]

I apologize for the delay, I had family show up unexpectedly this weekend and did not get a chance to run the scan. I will run it tonight and let you know the results.

[Juliet]

good to hear from you and that will work.

[Juliet]

still need help?

[Juliet]

Glad we could help.

Since this issue appears resolved ... this Topic is closed.