Laptop slowing and can't uninstall NowUSeeIt Player

[gin_jammer]

When I re-ran Malwarebytes, I got a screen that showed 7 items, all of which were already selected for quarantine. I quarantined them. The Update/Admin "Program" that once appeared in my list of installed programs no longer appears.

Following is the Malwarebytes log:

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 3/15/2016
Scan Time: 7:25 AM
Logfile:
Administrator: Yes

Version: 2.2.0.1024
Malware Database: v2016.03.15.04
Rootkit Database: v2016.03.12.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x86
File System: NTFS
User: Ed

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 298244
Time Elapsed: 7 min, 8 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 4
PUP.Optional.UpdateAdmin, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{81F17B54-5D57-485E-88CC-F6D20D66B5E0}, Quarantined, [13fd91f7e3b60e289a39f33d4bb99b65],
Adware.NowUSeeIt, HKU\S-1-5-21-3659970256-991337627-2867597209-1001\SOFTWARE\NowUSeeItPlayer, Quarantined, [9b75f494c1d8e84e109a9dc591738e72],
Adware.NowUSeeIt, HKU\S-1-5-21-3659970256-991337627-2867597209-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\DOMSTORAGE\nowuseeitplayer.com, Quarantined, [10000d7bc1d86ec8cf3e0a5f2bd9649c],
Adware.NowUSeeIt, HKU\S-1-5-21-3659970256-991337627-2867597209-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\DOMSTORAGE\ui.nowuseeitplayer.com, Quarantined, [69a78404178216207e8f571245bfe917],

Registry Values: 1
PUP.Optional.UpdateAdmin, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{81F17B54-5D57-485E-88CC-F6D20D66B5E0}|Publisher, DownloadAdmin, Quarantined, [13fd91f7e3b60e289a39f33d4bb99b65]

Registry Data: 0
(No malicious items detected)

Folders: 1
PUP.Optional.UpdateAdmin, C:\Windows\Installer\{81F17B54-5D57-485E-88CC-F6D20D66B5E0}, Quarantined, [8d83bdcb7128ab8bc8659ed70202f30d],

Files: 1
PUP.Optional.UpdateAdmin, C:\Windows\Installer\{81F17B54-5D57-485E-88CC-F6D20D66B5E0}\icon.ico, Quarantined, [8d83bdcb7128ab8bc8659ed70202f30d],

Physical Sectors: 0
(No malicious items detected)


(end)

[Juliet]

When I re-ran Malwarebytes, I got a screen that showed 7 items, all of which were already selected for quarantine. I quarantined them. The Update/Admin "Program" that once appeared in my list of installed programs no longer appears.

That one entry was finally taken out by MBAM.

I think your good to go.

DelFix

• Please download DelFix or from Here and save the file to your Desktop.
  
• Double-click DelFix.exe to run the programme.
• Place a checkmark next to the following items:
  
• Activate UAC
• Remove disinfection tools
  
  
• Click the Run button.
• -- This will remove the specialised tools we used to disinfect your system. Any leftover logs, files, folders or tools remaining on your Desktop which were not removed can be deleted manually (right-click the file + delete).

~~~~~~~~~~~~~~~~~``

• Answers to common security questions - Best Practices by quietman7, MVP
• How Malware Spreads - How did I get infected? by quietman7, MVP
• Simple and easy ways to keep your computer safe and secure on the Internet by Lawrence Abrams, MVP
• How to Prevent Malware by miekiemoes, MVP
• How to backup and restore your data using Cobian Backup by YourHighness
• Slow Computer/browser? It May Not Be Malwareby quietman7, MVP
  

The following programmes come highly recommended in the security community.

• AdBlock is a browser add-on that blocks annoying banners, pop-ups and video ads.
• CryptoPrevent places policy restrictions on loading points for ransomware (eg.CryptoPrevent), preventing your files from being encrypted.
• Malwarebytes Anti-Exploit (MBAE) is designed to prevent zero-day malware from exploiting vulnerable software.
• Malwarebytes Anti-Malware Premium (MBAM) works in real-time along side your Anti-Virus to prevent malware execution.
• NoScript is a Firefox add-on that blocks the actions of malicious scripts by using whitelisting and other technology.
• Sandboxie isolates programmes of your choice, preventing files from being written to your HDD unless approved by you.
• Secuina PSI will scan your computer for vulnerable softwarethat is outdated, and automatically find the latest update for you.
• SpywareBlaster is a form of passive protection, designed to block the actions of malicious websites and tracking cookies.
• Web of Trust (WOT) is a browser add-on designed to alert you before interacting with a potentially malicious website.

Want to help others? Join the ClassRoom and learn how.

[gin_jammer]

Done. I haven't heard any strange audio, or seen any popup ads, for a couple of days now.

Do you need to see the DelFix log, and should the Malwarebytes executable file be uninstalled?

[Juliet]

Done. I haven't heard any strange audio, or seen any popup ads, for a couple of days now.

Do you need to see the DelFix log, and should the Malwarebytes executable file be uninstalled?

Music to my ears.

I don't need to see the Delfix log and you should keep and use Malwarebytes. Update definitions before using at least once a week.

[gin_jammer]

OK! Many thanks for your help, Juliet.

Ed

[Juliet]

We're glad to help.

[gin_jammer]

Before this item is closed out, a couple of things:

In cleaning up my Desktop, I found two Malwarebytes icons, one that I just put there and another evidently left over from a previous Spybot Forum session. Programs and Features on my Control Panel shows only the most recent instance of Malwarebytes. Should I merely delete the old icon from my Desktop?

Ctrl-Alt-Del lets me Start the Task Manager, but when it opens, it's just a frame with no Tabs. I can no longer maximize/minimize it, or get to the screens it usually displayed. Any suggestion?

[Juliet]

Deleting the old icon for MBAM should work.

About the Task Manager window try the below.
https://support.microsoft.com/en-us/kb/193050

[gin_jammer]

Task Manager is fixed!

Thanks,

Ed

[Juliet]

Ed, we're glad to help.