This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Malware Removal Forums

Infected with Allsorts !! (not licorice)

95 min read

This thread's last reply is from November 20, 2013, 10:10 PM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

Sorry, I didn't see that you'd already posted the E-Set log when you made your last post about AVG ...

Most of what was found were the encrypted quarantine files created by ADWCleaner and OTL, we'll remove them before we finish but for the moment we'll leave them in place, they can't re-infect your machine. There's just 3 files that need attending to.

  • Double click OTL.exe to launch the programme.
  • Copy/Paste the contents of the code box below into the Custom Scans/Fixes box.

:Files
C:\Program Files (x86)\Driver Pro\DPSmartScan.exe
C:\Users\Hayley\AppData\Local\Microsoft\Silverlight\OutOfBrowser\Speedchecker.PCSpeedUp\application.xap
C:\Users\Hayley\AppData\Local\Updater19962\Updater19962.exe

  • Click the Run Fix button.
  • OTL will now process the instructions.
  • When finished a box will open asking you to open the fix log, click OK.
  • The fix log will open.
  • Copy/Paste the log in your next reply please.


Note: If necessary, OTL may re-boot your computer, or request that you do so, if it does, re-boot your computer. A log will be produced upon re-boot.

If AVG is prompting you to allow a scan, then allow it to run it and tell me if it finds anything.

Also let me know how your computer is behaving now please.
Hi

Here is my new OTL log========== FILES ==========
C:\Program Files (x86)\Driver Pro\DPSmartScan.exe moved successfully.
C:\Users\Hayley\AppData\Local\Microsoft\Silverlight\OutOfBrowser\Speedchecker.PCSpeedUp\application.xap moved successfully.
C:\Users\Hayley\AppData\Local\Updater19962\Updater19962.exe moved successfully.

OTL by OldTimer - Version 3.2.69.0 log created on 11202013_080816


My ps is running a lot better with no pop ups or additional windows opening - am I clean now?

AVG didn't work properly - I suspect this was because of the previous infection so I uninstalled it and installed it again and it came up with no threats found.

Thank you for your help.

Do I need to do anything else now?

I was going to upgrade to Windows 8.1 as I had a prompt?
Looks like we got everything then, all we have to do now is tidy up a little after ourselves.

First ...

Let's clear out OTL and the files and folders it created. This should also remove SystemLook
  • Double click OTL.exe to launch the programme.
  • Click on the CleanUp! button.
  • OTL will download a list from the Internet, if your firewall or other defensive programmes alerts you, allow it access.
  • You will be prompted to allow the clean up procedure, click Yes
  • When finished exit out of OTL
  • Now delete OTL.exe (if still present).


Next ...

Let's clear out ADWCleaner and the files and folders it created.
  • Double click AdwCleaner.exe to run it.
  • Click Uninstall.
  • Click Yes to the prompt.
  • AdwCleaner will close and uninstall itself


Note: If AdwCleaner prompts you an update is available, click Cancel and continue to uninstall.

Next ...

Please go to Control Panel > Programs > Uninstall a program and Uninstall the following:

Tweaking.com Registry backup


As far as I can see, your computer looks clear of infection now.

Are you still noticing any problems ?
  • If you are let me know about them.
  • If not it's time to make your computer more secure.


Please read the article below which will give you a few suggestions for how to minimise your chances of getting another infection.
Thank you very much Gary R

I'm able to browse the internet without any problems and that dosearch thing is gone as well as the jscript thing.

my pc also seems to be faster than before.

I'm not sure how they all got on my pc but I've just read the short guide to staying safer online and intend to print it out for my friends.

Thank you again.

Hayley
You're welcome Hayley, I'm glad we could help you.

Keep safe,

Gary

As your problems now appear to have been resolved,