found by HerdProtect.
icclibdll_x64.dll
ffmpegsumo.dll
bubble_compiled.js
popus.js
locales.js
index.js
comctl32.dll [ van MS]
common.js
gdiplus.dll [van MS] Note at 2 different locations found.
OS Windows 8.1
How to proceed further. Thanks for help and advice!
Best regards, Herman
i assume you mean avast detect?
what does avast say … malware name given
what is the location of those files … full file path, or maybe a screenshot that will show
for assistanse
follow instructions here https://forum.avast.com/index.php?topic=53253.0
we need Malwarebytes and Farbar Recovery Scan Tool logs, attach the logs, 3 logs total
see below the box you write in … Attachments and other options
a malware expert will then assist you when online
Thanks Pondus for your reply.
Smart scan by Avast detected outdated software programs.
MBAM scan nothing detected.
How to make a screen shot from HerdProtect scan results?
Best regards, Herman
We do not ask for a screenshot, but for the log files.
Hi Eddy, please find enclosed the log attachments.
Best regards, Herman
What are the file names/locations as I can see nothing untoward
CAUTION : This fix is only valid for this specific machine, using it on another may break your computer
Open notepad and copy/paste the text in the quotebox below into it:
CreateRestorePoint: 2014-02-15 16:22 - 2014-02-15 16:22 - 0000037 ___SH () C:\Users\Gebruiker\AppData\Local\70149b02515b3bb20dd492.47983420 RemoveProxy: EmptyTemp: CMD: bitsadmin /reset /allusers
Save this as fixlist.txt, in the same location as FRST.exe
https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG
Run FRST and press Fix
On completion a log will be generated please post that
Hi essexboy. thanks for your reply.
Q1] Where can I open notepad {path}
Q2] I have removed FRST64 from my pc. Do I have to reinstall and run it again.
Logs are saved in a folder on my desktop.
Best, Herman
Q1] Where can I open notepad {path}
down in left corner of your computer screen is a magnifying glass, click it … write notepad … click the icon when you see it (works on Win10)
Q2] I have removed FRST64 from my pc. Do I have to reinstall and run it again.
you cant run the fix unless you have FRST
Thanks for your reply.
Q1 I got W8.1, is notepad standard aboard? Download as app maybe?
Q2 I got to download FRST, right? Not need to run?
I do look forward hearing from you, thanks in advance.
Kind regards, Herman
Notepad is standard for all versions of windows, and you will need FRST on the desktop to run the fix
Windows 8.1 - Two ways to open Notepad https://www.youtube.com/watch?v=cxEXFhKRx2I
I have downloaded FRST again.
I’m unable to execute the program, Windows Smart screen blocks start of scan.
Best, Herman
Hi, thanks very much for your help and advice to get this issue solved.
Please find enclosed three new files.
What to do next.
Best, Herman
Have you run this fix ?
What are the file names/locations as I can see nothing untoward
CAUTION : This fix is only valid for this specific machine, using it on another may break your computer
Open notepad and copy/paste the text in the quotebox below into it:
CreateRestorePoint: 2014-02-15 16:22 - 2014-02-15 16:22 - 0000037 ___SH () C:\Users\Gebruiker\AppData\Local\70149b02515b3bb20dd492.47983420 RemoveProxy: EmptyTemp: CMD: bitsadmin /reset /allusers
Save this as fixlist.txt, in the same location as FRST.exe
https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG
Run FRST and press Fix
On completion a log will be generated please post that
Thanks essexboy for your help.
Please find fixlog enclosed.
Kind regards, Herman
I can see no other malware, how is the computer behaving
Hi essexboy, acc. to me computer behaves “normal”,as usual that is.
Do I have to start a new HerdProtect scan again?
Best, Herman
Most of the files that were detected appeared to me to be false positives, but, yes scan again and attach the log if it generates one