A number of odd issues

[Luciel]

yeah it's running good. the issues may not have even been from turbo or the spoon thing, i just assumed they were because they showed up after the bsod and such. i live in a house with other people, but we all keep to ourselves. if im not here this and my other main computer are always locked and i dont share passwords. im hoping someone didnt somehow hack into it and try to put something on it, i just dont know. i would hope they werent those kinds of people, they seem cool.

i tried reading about the c++ things. it was beyond me. i read somewhere that i could just uninstall the past versions or the ones not in use. but, i have no idea which exactly are past ones other than the date listed and which are and are not still in use so, ill just leave them be. just odd that there are so many of them.

anyway, thank you for your help and if i have any other issues can i come back or is this a one time help thing?

[Juliet]

yeah it's running good. the issues may not have even been from turbo or the spoon thing, i just assumed they were because they showed up after the bsod and such. i live in a house with other people, but we all keep to ourselves. if im not here this and my other main computer are always locked and i dont share passwords. im hoping someone didnt somehow hack into it and try to put something on it, i just dont know. i would hope they werent those kinds of people, they seem cool.

i tried reading about the c++ things. it was beyond me. i read somewhere that i could just uninstall the past versions or the ones not in use. but, i have no idea which exactly are past ones other than the date listed and which are and are not still in use so, ill just leave them be. just odd that there are so many of them.

anyway, thank you for your help and if i have any other issues can i come back or is this a one time help thing?

Glad it's running better.
A couple of things came to mind about downloads.
check temp files for last urls used
http://www.thewindowsclub.com/tempor...older-location
Managing the Internet Cache

check your downloads folder. From here you can see what was downloaded last, and other useful info.

If your computer is password protected thats your first line of good defense. If your computers are turned off while your not using them, if I'm correct, nothing can come in or go out.

10 ways to protect against hackers
https://blog.malwarebytes.com/101/20...ainst-hackers/

~~

We hope you don't run into problems in the future but, if it does we understand.
If it's malware related we will help and this is not a one time thing....

**

Let's remove tools and quarantine folders.

DelFix

• Please download DelFix or from Here and save the file to your Desktop.
• Double-click DelFix.exe to run the programme.
• Place a checkmark next to the following items:
• Activate UAC
• Remove disinfection tools
• Click the Run button.
• -- This will remove the specialized tools we used to disinfect your system.
  Any leftover logs, files, folders or tools remaining on your Desktop which were not removed can be deleted manually (right-click the file + delete).

************************************

• Answers to common security questions - Best Practices by quietman7, MVP
• How Malware Spreads - How did I get infected? by quietman7, MVP
• Simple and easy ways to keep your computer safe and secure on the Internet by Lawrence Abrams, MVP
• How to Prevent Malware by miekiemoes, MVP
• How to backup and restore your data using Cobian Backup by YourHighness
• Slow Computer/browser? It May Not Be Malwareby quietman7, MVP

• AdBlock is a browser add-on that blocks annoying banners, pop-ups and video ads.
• CryptoPrevent places policy restrictions on loading points for ransomware (eg. CryptoWall), helping prevent the execution of malware.
• Malwarebytes Anti-Exploit (MBAE) is designed to prevent zero-day malware from exploiting vulnerable software.
• Malwarebytes Anti-Malware Premium (MBAM) works in real-time along side your Anti-Virus to prevent malware execution.
• NoScript is a Firefox add-on that blocks the actions of malicious scripts by using whitelisting and other technology.
• Sandboxie isolates programmes of your choice, preventing files from being written to your HDD unless approved by you.
• Secunia PSI will scan your computer for vulnerable softwarethat is outdated, and automatically find the latest update for you.
• SpywareBlaster is a form of passive protection, designed to block the actions of malicious websites and tracking cookies.
• Unchecky automatically removes checkmarks for bunlded software in programme installers; helping you avoid adware and PUPs.

Want to help others? Join the ClassRoom and learn how.

[Luciel]

before i do the last bit, i think i made a mistake. i was playing a steam game earlier and accidentally deleted my game. i was reading online how i could maybe go about recovering the save file. it'd been suggested to attempt a system restore. so, i did a system restore. it restored this machine to the 29th of june a bit after 10:30 pm...and I can't recall what fixes or cleaning we did that might have been affected. i know i shouldnt have done, but i wasnt thinking and wanted my save file back. sadly, the restore didnt bring it back either so it was pointless but...now the computer is lagging some and i am not sure why.

[Juliet]

no idea why it would be lagging, could be updates related to antivirus or windows or some other apps on the machine.

Open Malwarebytes Anti-Malware

On the Dashboard click on Update Now

• Under SETTINGS.....APPLICATIONS leave everything at default

• Under SETTINGS.....PROTECTION make sure AUTOMATIC QUARANTINE is on.

• Then go to the Dashboard and click on SCAN NOW

• When the scan is finished click on EXPORT SUMMARY......COPY TO CLIPBOARD

• Then come back to this thread and and under REPLY TO THIS TOPIC, right click in the reply and select Paste

• Then click on POST

• Exit Malwarebytes

[Luciel]

So something weird happened when I was trying to do this step. malwarebytes was on the desktop at one point in time, but i couldn't find the shortcut/icon so i went to search for it. i found it fine, and when i went to open it, it acted like it opened but nothing showed up. i went to my task manager to see what was going on. apparently in my task manager it was running, but there was nothing showing as far as the program goes. i did this a few times with the same result. i went to uninstall it to reinstall it thinking that would fix it, and i got some error that the .dat file could not be found? i included screenshots of all of this. it was weird. so i just went to the mwb website and redownloaded it. while it was installing, that same uninstall error came up (the one in the screenshot attached) but it reinstalled just fine? it was strange. i dont remember removing the program from the machine.

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 7/2/17
Scan Time: 9:18 PM
Log File:
Administrator: Yes

-Software Information-
Version: 3.1.2.1733
Components Version: 1.0.160
Update Package Version: 1.0.2280
License: Trial

-System Information-
OS: Windows 8
CPU: x64
File System: NTFS
User: 7360BE7\Owner

-Scan Summary-
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 363667
Threats Detected: 35
Threats Quarantined: 0
(No malicious items detected)
Time Elapsed: 19 min, 12 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 3
PUP.Optional.Trovi, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\LAYERS\VC32Ldr, No Action By User, [5571], [244209],1.0.2280
PUP.Optional.SearchProtect.AppFlsh, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\INSTALLEDSDB\{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}, No Action By User, [2296], [253643],1.0.2280
PUP.Optional.SearchProtect.AppFlsh, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\INSTALLEDSDB\{cf2797aa-b7ec-e311-8ed9-005056c00008}, No Action By User, [2296], [253644],1.0.2280

Registry Value: 8
PUP.Optional.Groovorio, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY|APPPATH, No Action By User, [12336], [238916],1.0.2280
PUP.Optional.Trovi, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\LAYERS\VC32Ldr|{8A4D5A43-C64A-45AB-BDF4-804FE18CEAFD}.SDB, No Action By User, [5571], [244209],1.0.2280
PUP.Optional.Trovi, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\chrome.exe|{8A4D5A43-C64A-45AB-BDF4-804FE18CEAFD}.SDB, No Action By User, [5571], [244208],1.0.2280
PUP.Optional.Trovi, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\explorer.xxx|{8A4D5A43-C64A-45AB-BDF4-804FE18CEAFD}.SDB, No Action By User, [5571], [244208],1.0.2280
PUP.Optional.Trovi, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\firefox.exe|{8A4D5A43-C64A-45AB-BDF4-804FE18CEAFD}.SDB, No Action By User, [5571], [244208],1.0.2280
PUP.Optional.Trovi, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\iexplore.exe|{8A4D5A43-C64A-45AB-BDF4-804FE18CEAFD}.SDB, No Action By User, [5571], [244208],1.0.2280
PUP.Optional.SearchProtect.AppFlsh, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINDOWS|APPINIT_DLLS, No Action By User, [2296], [-1],0.0.0
PUP.Optional.SearchProtect.AppFlsh, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINDOWS|APPINIT_DLLS, No Action By User, [2296], [-1],0.0.0

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 2
PUP.Optional.Groovorio, C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\zy6ct8pm.default-1408609993675\nspdlgrvrio\fav_thumbs, No Action By User, [12336], [177519],1.0.2280
PUP.Optional.Groovorio, C:\USERS\OWNER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZY6CT8PM.DEFAULT-1408609993675\NSPDLGRVRIO, No Action By User, [12336], [177519],1.0.2280

File: 22
PUP.Optional.Spigot, C:\USERS\OWNER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8VZLBXQ.DEFAULT\PREFS.JS, No Action By User, [669], [301667],1.0.2280
PUP.Optional.Groovorio, C:\USERS\OWNER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8VZLBXQ.DEFAULT\PREFS.JS, No Action By User, [12336], [303136],1.0.2280
PUP.Optional.Groovorio, C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\zy6ct8pm.default-1408609993675\nspdlgrvrio\fav_thumbs\00feb9f2abfd1abacab0292e418401b1, No Action By User, [12336], [177519],1.0.2280
PUP.Optional.Groovorio, C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\zy6ct8pm.default-1408609993675\nspdlgrvrio\fav_thumbs\0920e41053b90fe3421d9ad43de83d55, No Action By User, [12336], [177519],1.0.2280
PUP.Optional.Groovorio, C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\zy6ct8pm.default-1408609993675\nspdlgrvrio\fav_thumbs\0d9ed45691e3498827b0068294a216bd, No Action By User, [12336], [177519],1.0.2280
PUP.Optional.Groovorio, C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\zy6ct8pm.default-1408609993675\nspdlgrvrio\fav_thumbs\1890567c4cd95516e278d5645028ec05, No Action By User, [12336], [177519],1.0.2280
PUP.Optional.Groovorio, C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\zy6ct8pm.default-1408609993675\nspdlgrvrio\fav_thumbs\3476b288e6d957058f8532b66524d8fb, No Action By User, [12336], [177519],1.0.2280
PUP.Optional.Groovorio, C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\zy6ct8pm.default-1408609993675\nspdlgrvrio\fav_thumbs\54ad8eeb67aa132c7d22ba3ef0708589, No Action By User, [12336], [177519],1.0.2280
PUP.Optional.Groovorio, C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\zy6ct8pm.default-1408609993675\nspdlgrvrio\fav_thumbs\6159fe41cd9a9896238469bbd92d80f2, No Action By User, [12336], [177519],1.0.2280
PUP.Optional.Groovorio, C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\zy6ct8pm.default-1408609993675\nspdlgrvrio\fav_thumbs\6a64e2ef7c7beb0bad6b0c3fa0538b7e, No Action By User, [12336], [177519],1.0.2280
PUP.Optional.Groovorio, C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\zy6ct8pm.default-1408609993675\nspdlgrvrio\fav_thumbs\7e43b451715caf8b3011e99ce7562bfb, No Action By User, [12336], [177519],1.0.2280
PUP.Optional.Groovorio, C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\zy6ct8pm.default-1408609993675\nspdlgrvrio\fav_thumbs\8ecba8f64c4f1ef3378cc86087b16d20, No Action By User, [12336], [177519],1.0.2280
PUP.Optional.Groovorio, C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\zy6ct8pm.default-1408609993675\nspdlgrvrio\fav_thumbs\a26a6b96a7c0d4649fa284f4449bb379, No Action By User, [12336], [177519],1.0.2280
PUP.Optional.Groovorio, C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\zy6ct8pm.default-1408609993675\nspdlgrvrio\fav_thumbs\b0a0c1eb6b43f112ab1c602844ac6b1f, No Action By User, [12336], [177519],1.0.2280
PUP.Optional.Groovorio, C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\zy6ct8pm.default-1408609993675\nspdlgrvrio\fav_thumbs\c1ce54b43977bd2375d18771135bee4c, No Action By User, [12336], [177519],1.0.2280
PUP.Optional.Groovorio, C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\zy6ct8pm.default-1408609993675\nspdlgrvrio\fav_thumbs\e0203a02e8f7e79846c9b2759ee68e49, No Action By User, [12336], [177519],1.0.2280
PUP.Optional.Groovorio, C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\zy6ct8pm.default-1408609993675\nspdlgrvrio\fav_thumbs\f4bcef45ff381dec64d71729a7dcc9a1, No Action By User, [12336], [177519],1.0.2280
PUP.Optional.Groovorio, C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\zy6ct8pm.default-1408609993675\nspdlgrvrio\fav-groups, No Action By User, [12336], [177519],1.0.2280
PUP.Optional.Groovorio, C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\zy6ct8pm.default-1408609993675\nspdlgrvrio\favs##25da263315d8d5d72d63fb230b8f4523, No Action By User, [12336], [177519],1.0.2280
PUP.Optional.Groovorio, C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\zy6ct8pm.default-1408609993675\nspdlgrvrio\redirects, No Action By User, [12336], [177519],1.0.2280
PUP.Optional.Groovorio, C:\USERS\OWNER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8VZLBXQ.DEFAULT\SEARCHPLUGINS\GROOVORIO.XML, No Action By User, [12336], [238904],1.0.2280
PUP.Optional.Spigot, C:\USERS\OWNER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8VZLBXQ.DEFAULT\SEARCHPLUGINS\YAHOO_FF.XML, No Action By User, [669], [243427],1.0.2280

Physical Sector: 0
(No malicious items detected)


(end)

[Juliet]

Don't know what went after the uninstall string for the tool, did you run the Delfix tool?, and I think you did very well to get it re-downloaded.

Computers are a strange thing....

It seemed to show that it was running in task manager?, in one of the pictures.
I leave my task manager open all the while I'm on my computer, if your trying to use a tool, always check there first to see if it loaded, if it did and not working end task on it first.

Let me supply you with a couple of links they suggest a MBAM removal tool to help with the installation of it again.

https://forums.malwarebytes.com/topi...moval-process/
https://support.malwarebytes.com/cus...are-?b_id=6438
****

The computer still acting up?

[Luciel]

Not really acting up no. im also a little confused, am i supposed to uninstall/remove malwarebytes now or?

[Juliet]

Not really acting up no. im also a little confused, am i supposed to uninstall/remove malwarebytes now or?

post #15 you spoke of issues MBAM was having but that it finally reinstalled.
I was providing a link of a removal tool to use in case you still had the problem.

I would keep malwarebytes, update and scan with it often.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~``

• Download Emsisoft Emergency Kit and save it to your desktop.
• Double-click icon then click Install
• A Window should open highlighting Start Emergency Kit Scanner
• Right click on the icon and select Run as administrator
• Click 1. Update now!
• Once the update is completed select Settings under Scan
• Uncheck Join the Emsisoft Anti-Malware Network
• Click Scan at the top
• Click On scan completion
• Click Quarantine detected objects, then click OK
• Click Malware Scan
• Once completed click View Report
• Save the file to your Desktop using the default file name
• Copy and paste the report in your reply

===============

[Luciel]

• Click Scan at the top
• Click On scan completion

Im sorry my response took so long. work and all. im having issues completeing this request as i cannot find one of the steps you suggest. there is nothing that says "on scan completion" or "scan completion". there is only "online scan" "malware scan" "custom scan" "scanner settings" and "manage exclusions"
there's been a few times in your directions in past posts where youre directions werent entirely thorough and clean, but i could still figure it out. this time im a bit lost in the left field. i would assume i just use one of the scan options, but, i dont want to select the wrong one and post the logs and have to do it all over again

[Juliet]

I'm sorry, I didn't stay on top of it being changed slightly.

After you have downloaded

• After extraction please double-click on the new Start Emsisoft Emergency Kit icon on your desktop.
• The first time you launch it, Emsisoft Emergency Kit will recommend that you allow it to download updates. Please click Yes so that it downloads the latest database updates.
• When update is complete, click Malware Scan. When asked if you want the scanner to scan for Potentially Unwanted Programs, click Yes. Emsisoft Emergency Kit will start scanning.
• When the scan is completed click Quarantine selected objects. Note, this option is only available if malicious objects were detected during the scan.
• When the threats have been quarantined, click the View report button in the lower-right corner, and the scan log will be opened in Notepad.
• Please save the log in Notepad on your desktop and post the contents in your next reply.
• When you close Emsisoft Emergency Kit, it will give you an option to sign up for a newsletter. This is optional, and is not necessary for the malware removal process.