Persistent Warning

Status
Not open for further replies.
Activate UAC
Means User Action Control, the little box that pops up when you click on something to run....in a sense it involves administrator rights.

I think you should had clicked on that because I use mine. :)
 
Thread re-opened

This is the message that was sent:
***************
During this past December and January, I downloaded and ran a number of tools that you suggested in the thread "Persistent Warning." The "popup" that had led me to seek help has never occurred since we concluded. At the end of our thread, you suggested that I employ Adblock, which I did, Since then, my laptop has been freezing very often, especially when I enter Facebook. Several times, I have seen a banner at the top of my screen saying that a Script, or a Website, was slowing my browser and asking what to do. It offers a couple of options: one says "Wait" and the other says "Stop It." Neither has been any help. My laptop is freezing up far too often, and I need help.

Should I start a new thread, or do you want to reopen the "Persistent Warning" thread?

~~~~~~~~~~~~~~~~~~~~~~~~~~~

If you can, read over this link with suggestions and see if it applies here

https://support.mozilla.org/en-US/questions/1089615
 
After reading a WHILE, I chose to run "Restore Firefox." I am currently trying the browser to find out if there's any difference. Will let you know.
 
I barely got started trying out the refreshed browser when the old popup/audio warning came back up!!!

It warns not to shut down the computer. Task Manager says it's Firefox, but I turned it OFF using Task Manager, and then used Firefox to get back online and send this message.

Suggestion?
 
zcMPezJ.png
AdwCleaner
  • Download AdwCleaner and move it to your Desktop
  • Right-click on AdwCleaner.exe and select
    Spcusrh.png
    Run as Administrator (for Windows Vista, 7, 8, 8.1 and 10 users)
  • Accept the EULA (I accept), then click on Scan
  • Let the scan complete. Once it's done, make sure that every item listed in the different tabs is checked and click on the Clean button. This will kill all active processes
    V7SD4El.png
  • Once the cleaning process is complete, AdwCleaner will ask to restart your computer, do it
  • After the restart, a log will open when logging in. Please copy/paste the content of that log in your next reply
~~~~~~~~~~~~~~~~~~~~~~``

j1Bynr2.png
Malwarebytes
  • Download and install the free version of Malwarebytes
    Note: If you have Malwarebytes already installed, you don't need to install it again. Simply start from the next bullet point
  • Once Malwarebytes is installed, launch it and let it update his database. You might have to click on the little arrow by Scan Status in the middle right pane for it to do so
  • Once the database update is complete, click on the Scan tab, then select the Threat Scan button and click on Start Scan
    Tu39lqJ.png
  • Let the scan run, the time required to complete the scan depends of your system and computer specs
    Qqbh4g8.png
  • Once the scan is complete, make sure that the first checkbox at the top is checked (which will automatically check every detected item), then click on the Quarantine Selected button
    • If it asks you to restart your computer to complete the removal, do so
  • Click on Export Summary after the deletion (in the bottom-left corner) and select Copy to Clipboard.
    1CtdZ26.png
  • Paste the content in your next reply
~~~~~~~~~~~~~~~~~~~~~~~~~~~~`

RQKuhw1.png
RogueKiller
  • Download the right version of RogueKiller for your Windows version (32 or 64-bit)
  • Once done, move the executable file to your Desktop, right-click on it and select
    Spcusrh.png
    Run as Administrator (for Windows Vista, 7, 8, 8.1 and 10 users)
  • Click on the Start Scan button in the right panel, which will bring you to another tab, and click on it again (this time it'll be in the bottom right corner)
  • Wait for the scan to complete
  • On completion, the results will be displayed
  • Check every single entry (threat found), and click on the Remove Selected button
  • On completion, the results will be displayed. Click on the Open Report button in the bottom left corner, followed by the Open TXT button (also in the bottom left corner)
  • This will open the report in Notepad. Copy/paste its content in your next reply


created by Aura
~~~

Please post
AdwCleaner log
Malwarebytes log
RogueKiller log
 
# AdwCleaner 7.0.7.0 - Logfile created on Sat Jan 27 03:54:37 2018
# Updated on 2018/18/01 by Malwarebytes
# Database: 01-16-2018.1
# Running on Windows 7 Home Premium (X86)
# Mode: scan
# Support: https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

No malicious folders found.

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

No malicious registry entries found.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries.

*************************

C:/AdwCleaner/AdwCleaner[S0].txt - [952 B] - [2018/1/27 3:47:49]


########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt ##########

RogueKiller V12.12.1.0 [Jan 22 2018] (Free) by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : https://forum.adlice.com
Website : http://www.adlice.com/download/roguekiller/
Blog : http://www.adlice.com

Operating System : Windows 7 (6.1.7601 Service Pack 1) 32 bits version
Started in : Normal mode
User : Ed [Administrator]
Started from : C:\Users\Ed\Desktop\RogueKiller_portable32.exe
Mode : Delete -- Date : 01/26/2018 23:27:05 (Duration : 00:41:49)

¤¤¤ Processes : 0 ¤¤¤

¤¤¤ Registry : 0 ¤¤¤

¤¤¤ Tasks : 0 ¤¤¤

¤¤¤ Files : 0 ¤¤¤

¤¤¤ WMI : 0 ¤¤¤

¤¤¤ Hosts File : 0 ¤¤¤

¤¤¤ Antirootkit : 0 (Driver: Loaded) ¤¤¤

¤¤¤ Web browsers : 1 ¤¤¤
[PUM.HomePage][Firefox:Config] vduktc57.default-1479757157401-1516982433966 : user_pref("browser.startup.homepage", "https://www.toast.net/start/"); -> Replaced (about:home)

¤¤¤ MBR Check : ¤¤¤
+++++ PhysicalDrive0: ST320LT007-9ZV142 +++++
--- User ---
[MBR] 0ca11b9123e05cfef88bb9f1d87d8255
[BSP] 7aadc9b130d3831ed8795562e918dbf1 : Windows Vista/7/8|VT.Unknown MBR Code
Partition table:
0 - [ACTIVE] ACER (0x27) [VISIBLE] Offset (sectors): 2048 | Size: 3450 MB
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 7067648 | Size: 301793 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
User = LL1 ... OK
User = LL2 ... OK

+++++ PhysicalDrive1: SanDisk Ultra USB Device +++++
--- User ---
[MBR] b2a5207711aaeee8437ff9e9e721809e
[BSP] df4f83c1f72e36823a12b0dfc7617313 : Empty MBR Code
Partition table:
0 - [XXXXXX] FAT32-LBA (0xc) [VISIBLE] Offset (sectors): 21952 | Size: 59285 MB
User = LL1 ... OK
Error reading LL2 MBR! ([32] The request is not supported. )

+++++ PhysicalDrive2: TOSHIBA TransMemory USB Device +++++
--- User ---
[MBR] fef81fdee75be3af8bc5addbeae9d54b
[BSP] 33a07a59d299ab4ea9f4ab0156f9d86f : Windows XP MBR Code
Partition table:
0 - [ACTIVE] FAT32-LBA (0xc) [VISIBLE] Offset (sectors): 8064 | Size: 7624 MB
User = LL1 ... OK
Error reading LL2 MBR! ([32] The request is not supported. )
 
It's possible it's updating windows updates.

Let's see if there are any startup items we can disable to improve performance.

Go here to download HJT
http://www.bleepingcomputer.com/download/hijackthis/
  • Save HJTsetup.exe to your desktop.
  • Doubleclick on the HJTsetup.exe icon on your desktop.
  • By default it will install to C:\Program Files\Hijack This.
  • Continue to click Next in the setup dialogue boxes until you get to the Select Addition Tasks dialogue.
  • Put a check by Create a desktop icon then click Next again.
  • Continue to follow the rest of the prompts from there.
  • At the final dialogue box click Finish and it will launch Hijack This.
  • Click on the Do a system scan and save a logfile button. It will scan and the log should open in notepad.
  • Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
 
It's been some time since I attached a file, but I think I've attached the screenshot showing the message I got from HijackThis. Please have a look at it and tell me how to proceed.
 

Attachments

  • Screenshot 27JAN2018.jpg
    Screenshot 27JAN2018.jpg
    100.4 KB · Views: 6
Status
Not open for further replies.
Back
Top