please help me again...

[Juliet]

You did good.

Please open Notepad *Do Not Use Wordpad!* or use any other text editor than Notepad or the script will fail. (Start -> Run -> type notepad in the Open field -> OK) and copy and paste the text present inside the quote box below:
To do this highlight the contents of the box and right click on it and select copy.
Paste this into the open notepad. save it to the Desktop as fixlist.txt
NOTE. It's important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work.
It needs to be saved Next to the "Farbar Recovery Scan Tool" (If asked to overwrite existing one please allow)

start
CreateRestorePoint:
CloseProcesses:
C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\finliu9g.default-1430149019775\extensions\{6a73aad1-9e46-4caf-881c-d86eda32b7be}.xpi
C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\finliu9g.default-1430149019775\extensions\{8e53fbee-7428-4787-9707-c45ae91d9a20}.xpi
C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\h46m51x5.default-1342635577168\extensions\{6a73aad1-9e46-4caf-881c-d86eda32b7be}.xpi
C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\h46m51x5.default-1342635577168\extensions\{8e53fbee-7428-4787-9707-c45ae91d9a20}.xpi
C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\liblsxs9.default-1433184469752\extensions\{6a73aad1-9e46-4caf-881c-d86eda32b7be}.xpi
C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\liblsxs9.default-1433184469752\extensions\{8e53fbee-7428-4787-9707-c45ae91d9a20}.xpi
EmptyTemp:
End

Open FRST/FRST64 and press the > Fix < button just once and wait.
If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.

Computer still good?

[rcb56]

it seems to still be running very good and fast. i have used msn as my homepage and has always been a little sticky. i think it's normal for some pages that have so much movement with ads and video and all. facebook links have become just terrible, loaded with ads? i guess is what makes them so unusable. i've clicked on links for news stories of some sort and it's like that website just tries to take over. i stay off those and as best i can tell i am running far, far better than when i got here!

Fix result of Farbar Recovery Scan Tool (x64) Version:05-12-2015
Ran by Dad (2015-12-09 08:55:24) Run:3
Running from C:\Users\Dad\Desktop
Loaded Profiles: Dad (Available Profiles: Dad)
Boot Mode: Normal
==============================================

fixlist content:
*****************
start
CreateRestorePoint:
CloseProcesses:
C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\finliu9g.default-1430149019775\extensions\{6a73aad1-9e46-4caf-881c-d86eda32b7be}.xpi
C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\finliu9g.default-1430149019775\extensions\{8e53fbee-7428-4787-9707-c45ae91d9a20}.xpi
C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\h46m51x5.default-1342635577168\extensions\{6a73aad1-9e46-4caf-881c-d86eda32b7be}.xpi
C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\h46m51x5.default-1342635577168\extensions\{8e53fbee-7428-4787-9707-c45ae91d9a20}.xpi
C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\liblsxs9.default-1433184469752\extensions\{6a73aad1-9e46-4caf-881c-d86eda32b7be}.xpi
C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\liblsxs9.default-1433184469752\extensions\{8e53fbee-7428-4787-9707-c45ae91d9a20}.xpi
EmptyTemp:
End
*****************

Restore point was successfully created.
Processes closed successfully.
C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\finliu9g.default-1430149019775\extensions\{6a73aad1-9e46-4caf-881c-d86eda32b7be}.xpi => moved successfully
C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\finliu9g.default-1430149019775\extensions\{8e53fbee-7428-4787-9707-c45ae91d9a20}.xpi => moved successfully
C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\h46m51x5.default-1342635577168\extensions\{6a73aad1-9e46-4caf-881c-d86eda32b7be}.xpi => moved successfully
C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\h46m51x5.default-1342635577168\extensions\{8e53fbee-7428-4787-9707-c45ae91d9a20}.xpi => moved successfully
C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\liblsxs9.default-1433184469752\extensions\{6a73aad1-9e46-4caf-881c-d86eda32b7be}.xpi => moved successfully
C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\liblsxs9.default-1433184469752\extensions\{8e53fbee-7428-4787-9707-c45ae91d9a20}.xpi => moved successfully
EmptyTemp: => 397.7 MB temporary data Removed.


The system needed a reboot.

==== End of Fixlog 08:56:07 ====

[Juliet]

For all those unwanted Ads banners, pop-ups and video ads - even on Facebook and YouTube, and other items that come pre-loaded on different web pages try ADBlock.
It's compatible for all web browsers and you will be surprise what it blocks out and it's free.

https://adblockplus.org/

**************************

Let's remove tools and quarantine folders now, you should be good to go.

DelFix

• Please download DelFix or from Here and save the file to your Desktop.
  
• Double-click DelFix.exe to run the programme.
• Place a checkmark next to the following items:
  
• Activate UAC
• Remove disinfection tools
  
• Click the Run button.
• -- This will remove the specialised tools we used to disinfect your system. Any leftover logs, files, folders or tools remaining on your Desktop which were not removed can be deleted manually (right-click the file + delete).

~~~~~~~~~~~~~~~~~~~~~`

• Answers to common security questions - Best Practices by quietman7, MVP
• How Malware Spreads - How did I get infected? by quietman7, MVP
• Simple and easy ways to keep your computer safe and secure on the Internet by Lawrence Abrams, MVP
• How to Prevent Malware by miekiemoes, MVP
• How to backup and restore your data using Cobian Backup by YourHighness
• Slow Computer/browser? It May Not Be Malwareby quietman7, MVP
  

The following programmes come highly recommended in the security community.

• AdBlock is a browser add-on that blocks annoying banners, pop-ups and video ads.
• CryptoPrevent places policy restrictions on loading points for ransomware (eg.CryptoPrevent), preventing your files from being encrypted.
• Malwarebytes Anti-Exploit (MBAE) is designed to prevent zero-day malware from exploiting vulnerable software.
• Malwarebytes Anti-Malware Premium (MBAM) works in real-time along side your Anti-Virus to prevent malware execution.
• NoScript is a Firefox add-on that blocks the actions of malicious scripts by using whitelisting and other technology.
• Sandboxie isolates programmes of your choice, preventing files from being written to your HDD unless approved by you.
• Secuina PSI will scan your computer for vulnerable softwarethat is outdated, and automatically find the latest update for you.
• SpywareBlaster is a form of passive protection, designed to block the actions of malicious websites and tracking cookies.
• Web of Trust (WOT) is a browser add-on designed to alert you before interacting with a potentially malicious website.

Want to help others? Join the ClassRoom and learn how.

[rcb56]

well ms. juliet i thank you very much! again! that's simply not enough for all you and safer-networking have done for me and all these others. it does seem that all is working normal and fine now. i ran delfix as told and am d'loading adblock as suggested, i guess this is my last post concerning this. thanks again and have a Merry Christmas and Happy New Year!

[Juliet]

You have a Merry Christmas and Happy New Year too!

We're glad to help

[Juliet]

Glad we could help.

Since this issue appears resolved ... this Topic is closed.