Page 5 of 5 FirstFirst 12345
Results 41 to 50 of 50

Thread: DNS Unlocker

  1. #41
    Member
    Join Date
    Apr 2014
    Posts
    43

    Default MyEstScan

    C:\Program Files\AdwCleaner\FileQuarantine\C\Program Files\WajaNetEn\77310314c9eb42d2253850b8ed32ea8f.exe.vir a variant of Win32/Wajam.AE potentially unwanted application
    C:\Users\joanne\AppData\Local\Setup Wizard\20bc480e-894e-4437-b6d2-22b00cccbc29\setup.exe a variant of Win32/DealPly.CA potentially unwanted application
    C:\Windows\Installer\5fe5e90.msi a variant of Win32/Verti.R potentially unwanted application

  2. #42
    Security Expert Juliet's Avatar
    Join Date
    Feb 2007
    Location
    Deep South
    Posts
    3,859

    Default

    When we remove the tools used using Delfix it will remove the bad file found by C:\Program Files\AdwCleaner\FileQuarantine, so don't worry about that one.

    Please open Notepad *Do Not Use Wordpad!* or use any other text editor than Notepad or the script will fail. (Start -> Run -> type notepad in the Open field -> OK) and copy and paste the text present inside the quote box below:
    To do this highlight the contents of the box and right click on it and select copy.
    Paste this into the open notepad. save it to the Desktop as fixlist.txt
    NOTE. It's important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work.
    It needs to be saved Next to the "Farbar Recovery Scan Tool" (If asked to overwrite existing one please allow)





    start
    CreateRestorePoint:
    CloseProcesses:
    C:\Users\joanne\AppData\Local\Setup Wizard\20bc480e-894e-4437-b6d2-22b00cccbc29\setup.exe
    C:\Windows\Installer\5fe5e90.msi
    EmptyTemp:
    End
    Open FRST/FRST64 and press the > Fix < button just once and wait.
    If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
    When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.

    Tell me how the computer is now?
    Windows Insider MVP Consumer Security 2009 - 2017
    Please do not PM me for Malware help, we all benefit from posting on the open board.

  3. #43
    Member
    Join Date
    Apr 2014
    Posts
    43

    Default Fixlog

    Looks like the Spybot web was down for a few this morning.


    Fix result of Farbar Recovery Scan Tool (x86) Version:05-03-2016 01
    Ran by joanne (2016-03-10 08:25:44) Run:2
    Running from C:\Users\joanne\Desktop
    Loaded Profiles: joanne (Available Profiles: & joanne)
    Boot Mode: Normal

    ==============================================

    fixlist content:
    *****************
    start
    CreateRestorePoint:
    CloseProcesses:
    C:\Users\joanne\AppData\Local\Setup Wizard\20bc480e-894e-4437-b6d2-22b00cccbc29\setup.exe
    C:\Windows\Installer\5fe5e90.msi
    EmptyTemp:
    End
    *****************

    Error: (0) Failed to create a restore point.
    Processes closed successfully.
    C:\Users\joanne\AppData\Local\Setup Wizard\20bc480e-894e-4437-b6d2-22b00cccbc29\setup.exe => moved successfully
    C:\Windows\Installer\5fe5e90.msi => moved successfully
    EmptyTemp: => 9.6 MB temporary data Removed.


    The system needed a reboot.

    ==== End of Fixlog 08:25:47 ====

  4. #44
    Security Expert Juliet's Avatar
    Join Date
    Feb 2007
    Location
    Deep South
    Posts
    3,859

    Default

    How's this computer now?
    Windows Insider MVP Consumer Security 2009 - 2017
    Please do not PM me for Malware help, we all benefit from posting on the open board.

  5. #45
    Member
    Join Date
    Apr 2014
    Posts
    43

    Default Looks Good

    It looks good after surfing a bit.
    What's the best protection to get, mini computer, not a lot of harddrive. I can use McAfee or download Spybot, etc?

    Anything else to check?

    Thanks.

  6. #46
    Member
    Join Date
    Apr 2014
    Posts
    43

    Default Ulead Autodetector

    Is Ulead Autodetector a bad file? Just noticed it on the first computer. Thanks

  7. #47
    Security Expert Juliet's Avatar
    Join Date
    Feb 2007
    Location
    Deep South
    Posts
    3,859

    Default

    photo editing program called Ulead PhotoImpactm it's a user choice option


    I think, and I can be wrong, Microsoft Security Essentials uses less resources.
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    Let's run Delfix to remove the tools and quarantine folders

    DelFix
    • Please download DelFix or from Here and save the file to your Desktop.
    • Double-click DelFix.exe to run the programme.
    • Place a checkmark next to the following items:
    • Activate UAC
    • Remove disinfection tools
    • Click the Run button.
    • -- This will remove the specialised tools we used to disinfect your system. Any leftover logs, files, folders or tools remaining on your Desktop which were not removed can be deleted manually (right-click the file + delete).



    Is there another computer you wanted to work on?
    Windows Insider MVP Consumer Security 2009 - 2017
    Please do not PM me for Malware help, we all benefit from posting on the open board.

  8. #48
    Member
    Join Date
    Apr 2014
    Posts
    43

    Default Looks Good

    Looks good, Thanks so muc. Sorry I was a bit slow. A few final questions...

    1. If something comes back not right, should I reply here, or start a new thread? Earlier, I think I saw a windowsfixittool(name?) window pop by, but I clicked it to fast. Might have been on for awhile, older.

    2. Do these bad flles come from visiting web pages, or get installed when installing other files? I thought I got a bad one last year or so after installing a file from download.com. They had to know it did it. Should be illegal.

    3. Found mjy Twitter issue.
    I had a list of names, friends, family, alumni. I was sending tweets about a fundraiser. If I send non-fundraise tweets, it works fine, leaving notifications. Once I send a tweet about the fundraiser, my tweets send, but stop leaving notifications for about 24 hours. I get no warning, it just stops leaving notifications. I noticed this about 3 weeks ago, but just figured out the cause. I even made a new account, same issue. I sent it to my 2nd account, I didnít ban myself.
    There is a link in it, but I get no warning, comment, notice, etc. It sends it, just stops leaving notifications for 24 hours. If it thought it was spam, I would think it would just not send it.

    Oh Well, Thanks Again, Very Much.

  9. #49
    Security Expert Juliet's Avatar
    Join Date
    Feb 2007
    Location
    Deep South
    Posts
    3,859

    Default

    Quote Originally Posted by gregw123 View Post
    Looks good, Thanks so muc. Sorry I was a bit slow. A few final questions...

    1. If something comes back not right, should I reply here, or start a new thread? Earlier, I think I saw a windowsfixittool(name?) window pop by, but I clicked it to fast. Might have been on for awhile, older.

    2. Do these bad flles come from visiting web pages, or get installed when installing other files? I thought I got a bad one last year or so after installing a file from download.com. They had to know it did it. Should be illegal.

    3. Found mjy Twitter issue.
    I had a list of names, friends, family, alumni. I was sending tweets about a fundraiser. If I send non-fundraise tweets, it works fine, leaving notifications. Once I send a tweet about the fundraiser, my tweets send, but stop leaving notifications for about 24 hours. I get no warning, it just stops leaving notifications. I noticed this about 3 weeks ago, but just figured out the cause. I even made a new account, same issue. I sent it to my 2nd account, I didnít ban myself.
    There is a link in it, but I get no warning, comment, notice, etc. It sends it, just stops leaving notifications for 24 hours. If it thought it was spam, I would think it would just not send it.

    Oh Well, Thanks Again, Very Much.
    I don't Tweet, have never used it but do wish they had a help support forum

    If something should come back I think it's best after this topic is closed, to start a new topic.

    Malware enters many ways but the worse, comes bundled or out of date applications.
    Java, browsers, Adobe Flash, clicking on links in emails or through instant messengers, a compromised web site........very long list of potentials

    If doing a custom install is available through something you want to download thats the best route to try. download.com is just one of many where this happens.


    Please download Security Analysis by Rocket Grannie from here
    • Save it to your Desktop.
    • Close your security software to avoid potential conflicts.
    • Double click RGSA.exe
    • Click OK on the copyright-disclaimer
    • It will produce a log named SA Log.txt on the Desktop or in the same folder from where the tool is run if installed elsewhere.
    • Please copy and paste the contents of that log in this topic.
    Last edited by Juliet; 2016-03-11 at 19:11.
    Windows Insider MVP Consumer Security 2009 - 2017
    Please do not PM me for Malware help, we all benefit from posting on the open board.

  10. #50
    Security Expert Juliet's Avatar
    Join Date
    Feb 2007
    Location
    Deep South
    Posts
    3,859

    Default

    Glad we could help.

    Since this issue appears resolved ... this Topic is closed.
    Windows Insider MVP Consumer Security 2009 - 2017
    Please do not PM me for Malware help, we all benefit from posting on the open board.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •