Welcome to MalwareRemoval.com, What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 08-02-2015 Ran by paula at 2015-02-09 17:30:32 Run:2 Running from C:\Users\paula\Documents\New folder Loaded Profiles: paula (Available profiles: paula) Boot Mode: Normal ==============================================
C:\Users\paula\AppData\Local\Google\Chrome\User Data\Default\Extensions\olgjplbbinpopmepmlnmhakgenlgjgbi\213\lsdb.js => Moved successfully. C:\Users\paula\AppData\Local\Google\Chrome\User Data\Default\Extensions\olgjplbbinpopmepmlnmhakgenlgjgbi\213\qSgSVJBq.js => Moved successfully. C:\Users\paula\AppData\Local\Google\Chrome\User Data\Guest Profile\Extensions\olgjplbbinpopmepmlnmhakgenlgjgbi\213\lsdb.js => Moved successfully. C:\Users\paula\AppData\Local\Google\Chrome\User Data\Guest Profile\Extensions\olgjplbbinpopmepmlnmhakgenlgjgbi\213\qSgSVJBq.js => Moved successfully. C:\Users\paula\AppData\Local\Temp\3D4f52D50CB.exe => Moved successfully. C:\Users\paula\AppData\Local\Temp\57377.exe => Moved successfully. C:\Users\paula\AppData\Local\Temp\AB166CB1E83.exe => Moved successfully. C:\Users\paula\AppData\Local\Temp\cecabficcdg.exe => Moved successfully. C:\Users\paula\AppData\Local\Temp\910F\temp\Download (1).exe => Moved successfully. C:\Users\paula\AppData\Local\Temp\b290933802B\temp\Download (2).exe => Moved successfully. C:\Users\paula\AppData\Local\Temp\b290933802B\temp\putfu.xyz => Moved successfully. C:\Users\paula\AppData\Local\Temp\DA027A\temp\Download (1).exe => Moved successfully. C:\Users\paula\AppData\Local\Temp\DA027A\temp\putfu.xyz => Moved successfully. C:\Users\paula\Downloads\openofficesuite-setup.exe => Moved successfully. C:\Windows\System32\Drivers\etc\hosts => Moved successfully. Hosts was reset successfully.
Well unless you're suffering with some problems that I'm not aware of yet, I'd say that it looks like your computer is now clean of infection, so it's time to remove the programs that we've been using to clean your machine.
Please download delfix and save it to your desktop.
Right-click on delfix.exe and select " Run as administrator " to run it.
Check all the boxes then click on Run.
Once it has finished, a notepad file named DelFix.txt will open. Post the contents of this notepad in your next reply.
The log can also be located at the root of the system drive, C:\DelFix.txt.
As far as I can see, your computer looks clear of infection now.
Are you still noticing any problems ?
If you are let me know about them.
If not it's time to make your computer more secure.
Please read the article below which will give you a few suggestions for how to minimise your chances of getting another infection.
Computer seems to be back to normal. I am getting a message each time I start up - AirNCFG.exe (located "C:\Programfiles (x86) D-Link-140 revB\ARNCFG.exe. asking me if I want to allow changes to my computer. I have not allowed it so far - should I? Just want to make sure it is not a potential problem.
Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.