DNS Unlocker

Status
Not open for further replies.
MyEstScan

C:\Program Files\AdwCleaner\FileQuarantine\C\Program Files\WajaNetEn\77310314c9eb42d2253850b8ed32ea8f.exe.vir a variant of Win32/Wajam.AE potentially unwanted application
C:\Users\joanne\AppData\Local\Setup Wizard\20bc480e-894e-4437-b6d2-22b00cccbc29\setup.exe a variant of Win32/DealPly.CA potentially unwanted application
C:\Windows\Installer\5fe5e90.msi a variant of Win32/Verti.R potentially unwanted application
 
When we remove the tools used using Delfix it will remove the bad file found by C:\Program Files\AdwCleaner\FileQuarantine, so don't worry about that one.

Please open Notepad *Do Not Use Wordpad!* or use any other text editor than Notepad or the script will fail. (Start -> Run -> type notepad in the Open field -> OK) and copy and paste the text present inside the quote box below:
To do this highlight the contents of the box and right click on it and select copy.
Paste this into the open notepad. save it to the Desktop as fixlist.txt
NOTE. It's important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work.
It needs to be saved Next to the "Farbar Recovery Scan Tool" (If asked to overwrite existing one please allow)


FRSTfix.JPG



start
CreateRestorePoint:
CloseProcesses:
C:\Users\joanne\AppData\Local\Setup Wizard\20bc480e-894e-4437-b6d2-22b00cccbc29\setup.exe
C:\Windows\Installer\5fe5e90.msi
EmptyTemp:
End
Click to expand...

Open FRST/FRST64 and press the > Fix < button just once and wait.
If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.

Tell me how the computer is now?
 
Fixlog

Looks like the Spybot web was down for a few this morning.


Fix result of Farbar Recovery Scan Tool (x86) Version:05-03-2016 01
Ran by joanne (2016-03-10 08:25:44) Run:2
Running from C:\Users\joanne\Desktop
Loaded Profiles: joanne (Available Profiles: & joanne)
Boot Mode: Normal

==============================================

fixlist content:
*****************
start
CreateRestorePoint:
CloseProcesses:
C:\Users\joanne\AppData\Local\Setup Wizard\20bc480e-894e-4437-b6d2-22b00cccbc29\setup.exe
C:\Windows\Installer\5fe5e90.msi
EmptyTemp:
End
*****************

Error: (0) Failed to create a restore point.
Processes closed successfully.
C:\Users\joanne\AppData\Local\Setup Wizard\20bc480e-894e-4437-b6d2-22b00cccbc29\setup.exe => moved successfully
C:\Windows\Installer\5fe5e90.msi => moved successfully
EmptyTemp: => 9.6 MB temporary data Removed.


The system needed a reboot.

==== End of Fixlog 08:25:47 ====
 
Looks Good

It looks good after surfing a bit.
What's the best protection to get, mini computer, not a lot of harddrive. I can use McAfee or download Spybot, etc?

Anything else to check?

Thanks.
 
photo editing program called Ulead PhotoImpactm it's a user choice option

I think, and I can be wrong, Microsoft Security Essentials uses less resources.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Let's run Delfix to remove the tools and quarantine folders

AFZxnZc.jpg
DelFix
  • Please download DelFix or from Here and save the file to your Desktop.
  • Double-click DelFix.exe to run the programme.
  • Place a checkmark next to the following items:
  • Activate UAC
  • Remove disinfection tools
  • Click the Run button.
  • -- This will remove the specialised tools we used to disinfect your system. Any leftover logs, files, folders or tools remaining on your Desktop which were not removed can be deleted manually (right-click the file + delete).


Is there another computer you wanted to work on?
 
Looks Good

Looks good, Thanks so muc. Sorry I was a bit slow. A few final questions...

1. If something comes back not right, should I reply here, or start a new thread? Earlier, I think I saw a windowsfixittool(name?) window pop by, but I clicked it to fast. Might have been on for awhile, older.

2. Do these bad flles come from visiting web pages, or get installed when installing other files? I thought I got a bad one last year or so after installing a file from download.com. They had to know it did it. Should be illegal.

3. Found mjy Twitter issue.
I had a list of names, friends, family, alumni. I was sending tweets about a fundraiser. If I send non-fundraise tweets, it works fine, leaving notifications. Once I send a tweet about the fundraiser, my tweets send, but stop leaving notifications for about 24 hours. I get no warning, it just stops leaving notifications. I noticed this about 3 weeks ago, but just figured out the cause. I even made a new account, same issue. I sent it to my 2nd account, I didn’t ban myself.
There is a link in it, but I get no warning, comment, notice, etc. It sends it, just stops leaving notifications for 24 hours. If it thought it was spam, I would think it would just not send it.

Oh Well, Thanks Again, Very Much.
 
gregw123 said:
Looks good, Thanks so muc. Sorry I was a bit slow. A few final questions...

1. If something comes back not right, should I reply here, or start a new thread? Earlier, I think I saw a windowsfixittool(name?) window pop by, but I clicked it to fast. Might have been on for awhile, older.

2. Do these bad flles come from visiting web pages, or get installed when installing other files? I thought I got a bad one last year or so after installing a file from download.com. They had to know it did it. Should be illegal.

3. Found mjy Twitter issue.
I had a list of names, friends, family, alumni. I was sending tweets about a fundraiser. If I send non-fundraise tweets, it works fine, leaving notifications. Once I send a tweet about the fundraiser, my tweets send, but stop leaving notifications for about 24 hours. I get no warning, it just stops leaving notifications. I noticed this about 3 weeks ago, but just figured out the cause. I even made a new account, same issue. I sent it to my 2nd account, I didn’t ban myself.
There is a link in it, but I get no warning, comment, notice, etc. It sends it, just stops leaving notifications for 24 hours. If it thought it was spam, I would think it would just not send it.

Oh Well, Thanks Again, Very Much.
Click to expand...
I don't Tweet, have never used it but do wish they had a help support forum :)

If something should come back I think it's best after this topic is closed, to start a new topic.

Malware enters many ways but the worse, comes bundled or out of date applications.
Java, browsers, Adobe Flash, clicking on links in emails or through instant messengers, a compromised web site........very long list of potentials

If doing a custom install is available through something you want to download thats the best route to try. download.com is just one of many where this happens.


Please download Security Analysis by Rocket Grannie from here
  • Save it to your Desktop.
  • Close your security software to avoid potential conflicts.
  • Double click RGSA.exe
  • Click OK on the copyright-disclaimer
  • It will produce a log named SA Log.txt on the Desktop or in the same folder from where the tool is run if installed elsewhere.
  • Please copy and paste the contents of that log in this topic.
 
Last edited:
Glad we could help. :)
sparkle.gif


Since this issue appears resolved ... this Topic is closed.
 
Status
Not open for further replies.
Back
Top