Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

Windows 7 Laptop infected with SASA,OBRONA Ads etc

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

Re: Windows 7 Laptop infected with SASA,OBRONA Ads etc

Unread postby Knoxy » January 17th, 2015, 10:02 am

Hi,

These are the copy and pasted results, it still can't find the log though.

C:\Users\C850-13D\AppData\Local\Temp\NODBB5B.tmp Win32/Adware.ObronaAds.B application
C:\Users\C850-13D\Downloads\ccsetup404.exe Win32/Bundled.Toolbar.Google.D potentially unsafe application
C:\Users\C850-13D\Downloads\FreeSoundRecorder.exe Win32/OpenCandy potentially unsafe application
C:\Users\C850-13D\Downloads\stsetup.exe a variant of Win32/Bundled.Toolbar.Google.C potentially unsafe application
Knoxy
Regular Member
 
Posts: 21
Joined: January 13th, 2015, 12:46 pm
Advertisement
Register to Remove

Re: Windows 7 Laptop infected with SASA,OBRONA Ads etc

Unread postby Cypher » January 17th, 2015, 11:55 am

Hi,
We need to run another fix.
Once done please give me another update on how your computer is running.
If you're not having any problems i can give you final instructions.

  • Click Start
  • Type notepad.exe in the search programs and files box and click Enter.
  • A blank Notepad page should open.
    • Copy and Paste the following script into Notepad, Do not include the words Code: select all
    • (Click the select all button next to code to select the entire script).
    Code: Select all
    C:\Users\C850-13D\AppData\Local\Temp\NODBB5B.tmp 
    C:\Users\C850-13D\Downloads\ccsetup404.exe 
    C:\Users\C850-13D\Downloads\FreeSoundRecorder.exe
    C:\Users\C850-13D\Downloads\stsetup.exe 
    
    EmptyTemp:
    CMD: ipconfig /flushdns
    
  • Save it next to FRST.exe on your Desktop as filename fixlist.txt
  • NOTE: It's important that both files, FRST/FRST64 and fixlist.txt are saved in the same location or the fix will not work.
  • Right-click FRST.exe and select " Run as administrator " to run it.
  • Press the Fix button just once. Then wait.
  • When finished, it will create a Fixlog.txt log on your Desktop.
  • Please post the content of the Fixlog.txt in your next reply.
User avatar
Cypher
Admin/Teacher
Admin/Teacher
 
Posts: 14959
Joined: October 29th, 2008, 12:49 pm
Location: Land Of The Leprechauns

Re: Windows 7 Laptop infected with SASA,OBRONA Ads etc

Unread postby Knoxy » January 17th, 2015, 6:49 pm

Hi,

Computer is running well, no sign of ads or dubious links.

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 17-01-2015 01
Ran by C850-13D at 2015-01-17 22:40:04 Run:2
Running from C:\Users\C850-13D\Desktop
Loaded Profiles: C850-13D & Aiden (Available profiles: C850-13D & Aiden)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
C:\Users\C850-13D\AppData\Local\Temp\NODBB5B.tmp
C:\Users\C850-13D\Downloads\ccsetup404.exe
C:\Users\C850-13D\Downloads\FreeSoundRecorder.exe
C:\Users\C850-13D\Downloads\stsetup.exe

EmptyTemp:
CMD: ipconfig /flushdns
*****************

C:\Users\C850-13D\AppData\Local\Temp\NODBB5B.tmp => Moved successfully.
C:\Users\C850-13D\Downloads\ccsetup404.exe => Moved successfully.
C:\Users\C850-13D\Downloads\FreeSoundRecorder.exe => Moved successfully.
C:\Users\C850-13D\Downloads\stsetup.exe => Moved successfully.

========= ipconfig /flushdns =========


Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========= End of CMD: =========

EmptyTemp: => Removed 31.3 MB temporary data.


The system needed a reboot.

==== End of Fixlog 22:40:22 ====
Knoxy
Regular Member
 
Posts: 21
Joined: January 13th, 2015, 12:46 pm

Re: Windows 7 Laptop infected with SASA,OBRONA Ads etc

Unread postby Cypher » January 18th, 2015, 7:41 am

Hi,
Computer is running well, no sign of ads or dubious links.

Your latest logs appear to be clean so you should be good to go.
Lets tidy up and remove the tools we used to clean your computer.

Please download delfix and save it to your desktop.
  • Right-click on delfix.exe and select " Run as administrator " to run it.
  • Check the following boxes then click on Run.

    • Activate UAC
    • Remove disinfection tools
    • Create registry backup
    • Purge system restore
    • Reset system settings
  • All tools we used to clean your computer should be gone now.
  • You can now delete any tools/logs we used if they remain on your computer.

Protection Programs
Don't forget to re-enable any protection programs we disabled during your fix.

We removed outdated versions of Adobe Reader and Java, if you use them you can reinstall the latest versions.

Java SE Runtime Environment (JRE).

Please download from HERE

  • Find Java SE 8u25.
  • Click the Download JRE button to the right.
  • Choose the correct Platform and Multi-language. Next, check the box that says I agree to the Java SE Runtime Environment 6 License Agreement.
  • Click the Continue button.
  • Click on the filename under Windows Offline Installation and save it to your desktop.
  • Close all active windows.
  • Install the program.

Next.

Update Adobe Reader

  • You should Download and Install the newest version of Adobe Reader for reading pdf files.
  • Older versions may have vulnerabilities that malware can use to infect your system.
  • Go Here to download and install Adobe Reader X (11.0.09).
  • Note: Uncheck install McAfee Security Scan Plus


Please read the article below which will give you a few suggestions for how to minimise your chances of getting another infection.

I would be grateful if you could reply to this post so that I know you have read it and, if you've no other questions, the thread can be closed.

Safe surfing!
User avatar
Cypher
Admin/Teacher
Admin/Teacher
 
Posts: 14959
Joined: October 29th, 2008, 12:49 pm
Location: Land Of The Leprechauns

Re: Windows 7 Laptop infected with SASA,OBRONA Ads etc

Unread postby Knoxy » January 18th, 2015, 9:15 am

Hi Cypher,

Have removed all dowloads and fix logs and have re-installed Adobe reader and Java, everything is running smoothly.

Thankyou so much for your time and expertise. :cheers:
Knoxy
Knoxy
Regular Member
 
Posts: 21
Joined: January 13th, 2015, 12:46 pm

Re: Windows 7 Laptop infected with SASA,OBRONA Ads etc

Unread postby Cypher » January 18th, 2015, 9:32 am

Hi,
Knoxy wrote:Thankyou so much for your time and expertise. :cheers:

You're most welcome, glad we could help :)
Good luck and stay safe.

As your problems appear to have been resolved, this topic is now closed.

We are pleased we could help you resolve your computer's issues.

If you would like to make a comment or leave a compliment regarding the help you have received, please see Feedback for Our Helpers - Say "Thanks" Here.
User avatar
Cypher
Admin/Teacher
Admin/Teacher
 
Posts: 14959
Joined: October 29th, 2008, 12:49 pm
Location: Land Of The Leprechauns
Advertisement
Register to Remove

Previous

  • Similar Topics
    Replies
    Views
    Last post

Return to Infected? Virus, malware, adware, ransomware, oh my!



Who is online

Users browsing this forum: No registered users and 13 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware