DNS Unlocker

[Juliet]

Good deal.

What we can do now is run an online scan with Eset, for the time being it is our most trusted scanner.
Most reliable and thorough.
The settings I suggest will show us items located in quarantine folders so don't be alarmed with this, also, in case of a false positive I ask that you not allow it to delete what it does find.
This scanner can take quite a bit of time to run, depending of course how full your computer is.



Note: This scan may take a long time to complete. Please do not browse the Internet whilst your Anti-Virus is disabled.

ESET Online Scan
Note: This scan may take a long time to complete. Please do not browse the Internet whilst your Anti-Virus is disabled.

• Please download ESET Online Scan and save the file to your Desktop.
• Temporarily disable your anti-virus software. For instructions, please refer to the following link.
• Double-click esetsmartinstaller_enu.exe to run the programme.
• Agree to the EULA by placing a checkmark next to Yes, I accept the Terms of Use. Then click Start.
• Agree to the Terms of Use once more and click Start. Allow components to download.
• Place a checkmark next to Enable detection of potentially unwanted applications.
• Click Advanced settings. Place a checkmark next to:
  
  • Scan archives
  • Scan for potentially unsafe applications
  • Enable Anti-Stealth technology
  
  
• Ensure Remove found threats is unchecked.
• Click Start.
• Wait for the scan to finish. Please be patient as this can take some time.
• Upon completion, click . If no threats were found, skip the next two bullet points.
• Click and save the file to your Desktop, naming it something such as "MyEsetScan".
• Push the Back button.
• Place a checkmark next to and click .
• Re-enable your anti-virus software.
• Copy the contents of the log and paste in your next reply.

Please tell me how the computer is now.

Also, calling it a night here will check back in the morning

[gregw123]

Is this last one corret? not much there. Thanks

[Juliet]

Were you able to run the Eset scan?, it didn't find anything?

How is your computer now?

[gregw123]

Sorry I didn't see it go to a new page. I am paralyzed from shoulders down, type with a stick, so I'm slow at this.

I hit the back button, but don't see anything to check. I see"
Click to see found threts,
finish,
and a box unistall application on close

Thanks so much, if foun 2 thigs but runs good...

C:\Users\gregsw\Documents\my notes and stuff\CouponPrinter.exe a variant of Win32/Adware.Coupons.AA application
C:\Windows\Installer\MSI9F57.tmp a variant of Win32/Bundled.Toolbar.Ask.M potentially unsafe application

[Juliet]

Sorry I didn't see it go to a new page. I am paralyzed from shoulders down, type with a stick, so I'm slow at this.

Do not worry, it is not a problem

Please open Notepad *Do Not Use Wordpad!* or use any other text editor than Notepad or the script will fail. (Start -> Run -> type notepad in the Open field -> OK) and copy and paste the text present inside the quote box below:
To do this highlight the contents of the box and right click on it and select copy.
Paste this into the open notepad. save it to the Desktop as fixlist.txt
NOTE. It's important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work.
It needs to be saved Next to the "Farbar Recovery Scan Tool" (If asked to overwrite existing one please allow)

start
CreateRestorePoint:
CloseProcesses:
C:\Users\gregsw\Documents\my notes and stuff\CouponPrinter.exe
C:\Windows\Installer\MSI9F57.tmp
EmptyTemp:
End

Open FRST/FRST64 and press the > Fix < button just once and wait.
If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.


After you run this fix, also tell me how the computer is now.

[gregw123]

I hope I did it right...

Fix result of Farbar Recovery Scan Tool (x64) Version:05-03-2016 01
Ran by gregsw (2016-03-08 18:16:42) Run:2
Running from C:\Users\gregsw\Desktop
Loaded Profiles: gregsw (Available Profiles: gregsw & Administrator)
Boot Mode: Normal
==============================================

fixlist content:
*****************
start
CreateRestorePoint:
CloseProcesses:
C:\Users\gregsw\Documents\my notes and stuff\CouponPrinter.exe
C:\Windows\Installer\MSI9F57.tmp
EmptyTemp:
End
*****************

Restore point was successfully created.
Processes closed successfully.
C:\Users\gregsw\Documents\my notes and stuff\CouponPrinter.exe => moved successfully
C:\Windows\Installer\MSI9F57.tmp => moved successfully
EmptyTemp: => 561.3 MB temporary data Removed.


The system needed a reboot.

==== End of Fixlog 18:18:11 ====

[Juliet]

Good, how is the computer now?

[gregw123]

It's running great, thanks so much. A couple questions...

McAfee comes with my internet. Now I have McAfee, Spybot S&D Home, and Malwarebyes. What combo should I keep running? Is Malwarebytes just a fix, or does it run in background?

The other computer is a 10in mini. I'll clean out junk stuff for room for the files you had me use. Should I follow same thing Or start a new message in the forum and follow new directions?

Thanks so much, much worth the cost of Spybot and Malwarebytes. i must of tried it years ago because it said my trial was over so I bought it. Very kind of you.


I tried changing pw in Twitter, but still no go, only thing not working now. Worked for long time, but 3 weeks ago, no one gets notificatioms of my tweets. They scroll by, they just get notices of them. 3 accouts, 1 different comp. Web version, Chrome and IE, and on my Kindle. Can't just be me but no one else has this issue. Well, I'll keep trying. Thanks so much.

[Juliet]

It's running great, thanks so much. A couple questions...

McAfee comes with my internet. Now I have McAfee, Spybot S&D Home, and Malwarebyes. What combo should I keep running? Is Malwarebytes just a fix, or does it run in background?

The other computer is a 10in mini. I'll clean out junk stuff for room for the files you had me use. Should I follow same thing Or start a new message in the forum and follow new directions?

Thanks so much, much worth the cost of Spybot and Malwarebytes. i must of tried it years ago because it said my trial was over so I bought it. Very kind of you.


I tried changing pw in Twitter, but still no go, only thing not working now. Worked for long time, but 3 weeks ago, no one gets notificatioms of my tweets. They scroll by, they just get notices of them. 3 accouts, 1 different comp. Web version, Chrome and IE, and on my Kindle. Can't just be me but no one else has this issue. Well, I'll keep trying. Thanks so much.

Glad to hear it's running good now.

For the other computer, you can supply the logs here in this topic if you want.

If you have the paid for version of MBAM you will want to keep it. It's a good tool to have on board.

About Twitter, I did look on Google but had no idea what was what since I don't use this but did see where it mentioned you might have your account set up as private?.

Let's remove the tools and quarantine folders off your computer.

DelFix

• Please download DelFix or from Here and save the file to your Desktop.
  
• Double-click DelFix.exe to run the programme.
• Place a checkmark next to the following items:
  
• Activate UAC
• Remove disinfection tools
  
  
• Click the Run button.
• -- This will remove the specialised tools we used to disinfect your system. Any leftover logs, files, folders or tools remaining on your Desktop which were not removed can be deleted manually (right-click the file + delete).

[gregw123]

I'm starting the new mini computer. Malwarebytes says fiound nothing, but know DNS Unlocker is there ad maybe others. I can't get a computer fix ad sceen to clse.

--------

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 3/9/2016
Scan Time: 10:08 AM
Logfile:
Administrator: Yes

Version: 0.0.0.0000
Malware Database: v2016.03.09.04
Rootkit Database: v2016.02.27.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 8.1
CPU: x86
File System: NTFS
User: joanne

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 296359
Time Elapsed: 8 min, 11 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 0
(No malicious items detected)

Physical Sectors: 0
(No malicious items detected)


(end)