Welcome to MalwareRemoval.com, What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.
MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.
I'm not happy that e-set didn't run to completion, so what I'd like to do is take care of what it has found so far, and then try a different scan to ensure we haven't missed anything.
So, first ...
Click Start
Type notepad.exe in the search programs and files box and click Enter.
A blank Notepad page should open.
Copy/Paste the contents of the code box below into Notepad (don't include Code: Select all).
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 08-02-2015 Ran by paula at 2015-02-09 17:30:32 Run:2 Running from C:\Users\paula\Documents\New folder Loaded Profiles: paula (Available profiles: paula) Boot Mode: Normal ==============================================
C:\Users\paula\AppData\Local\Google\Chrome\User Data\Default\Extensions\olgjplbbinpopmepmlnmhakgenlgjgbi\213\lsdb.js => Moved successfully. C:\Users\paula\AppData\Local\Google\Chrome\User Data\Default\Extensions\olgjplbbinpopmepmlnmhakgenlgjgbi\213\qSgSVJBq.js => Moved successfully. C:\Users\paula\AppData\Local\Google\Chrome\User Data\Guest Profile\Extensions\olgjplbbinpopmepmlnmhakgenlgjgbi\213\lsdb.js => Moved successfully. C:\Users\paula\AppData\Local\Google\Chrome\User Data\Guest Profile\Extensions\olgjplbbinpopmepmlnmhakgenlgjgbi\213\qSgSVJBq.js => Moved successfully. C:\Users\paula\AppData\Local\Temp\3D4f52D50CB.exe => Moved successfully. C:\Users\paula\AppData\Local\Temp\57377.exe => Moved successfully. C:\Users\paula\AppData\Local\Temp\AB166CB1E83.exe => Moved successfully. C:\Users\paula\AppData\Local\Temp\cecabficcdg.exe => Moved successfully. C:\Users\paula\AppData\Local\Temp\910F\temp\Download (1).exe => Moved successfully. C:\Users\paula\AppData\Local\Temp\b290933802B\temp\Download (2).exe => Moved successfully. C:\Users\paula\AppData\Local\Temp\b290933802B\temp\putfu.xyz => Moved successfully. C:\Users\paula\AppData\Local\Temp\DA027A\temp\Download (1).exe => Moved successfully. C:\Users\paula\AppData\Local\Temp\DA027A\temp\putfu.xyz => Moved successfully. C:\Users\paula\Downloads\openofficesuite-setup.exe => Moved successfully. C:\Windows\System32\Drivers\etc\hosts => Moved successfully. Hosts was reset successfully.
I ran the quick scan - said no viruses, etc. found. Ran the full scan and received the same message. No report was generated for either scan. Please advise.
Well unless you're suffering with some problems that I'm not aware of yet, I'd say that it looks like your computer is now clean of infection, so it's time to remove the programs that we've been using to clean your machine.
Please download delfix and save it to your desktop.
Right-click on delfix.exe and select " Run as administrator " to run it.
Check all the boxes then click on Run.
Once it has finished, a notepad file named DelFix.txt will open. Post the contents of this notepad in your next reply.
The log can also be located at the root of the system drive, C:\DelFix.txt.
As far as I can see, your computer looks clear of infection now.
Are you still noticing any problems ?
If you are let me know about them.
If not it's time to make your computer more secure.
Please read the article below which will give you a few suggestions for how to minimise your chances of getting another infection.
# DelFix v10.8 - Logfile created 10/02/2015 at 07:41:31 # Updated 29/07/2014 by Xplode # Username : paula - MININT-8L86P5C # Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
Computer seems to be back to normal. I am getting a message each time I start up - AirNCFG.exe (located "C:\Programfiles (x86) D-Link-140 revB\ARNCFG.exe. asking me if I want to allow changes to my computer. I have not allowed it so far - should I? Just want to make sure it is not a potential problem.
Users browsing this forum: No registered users and 170 guests
Contact us:
Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.