Anythicago, other malware pop ups

system · 2015-06-26T20:14:10.000Z

Anythicago, bestdriverstar.net, and a few other malware notifications pop up at once, every few hours or so. Usually 10-18 notifications at a time. I’ve followed the sticky messages and created the logs, which are attached. The malware is still here despite the scans and quarantines. Thanks for your help.

TwinHeadedEagle · 2015-06-26T20:16:24.000Z

Monitoring

TwinHeadedEagle · 2015-06-26T20:33:05.000Z

https://sites.google.com/site/cannedfixes/home/hosted-images-tools/51a612a8b27e2-Zoek.png
Scan with ZOEK

Please download ZOEK by Smeenk and save it to your desktop (preferred version is the *.exe one)
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.

[*]Right-click on
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/51a612a8b27e2-Zoek.png
icon and select
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg
Run as Administrator to start the tool.
[]Wait patiently until the main console will appear, it may take a minute or two.
[]In the main box please paste in the following script:

createsrpoint;
autoclean;
emptyalltemp;
ipconfig /flushdns;b

[*]Make sure that Scan All Users option is checked.
[*]Push Run Script and wait patiently. The scan may take a couple of minutes.
[*]When the scan completes, a zoek-results logfile should open in notepad.
[*]If a reboot is needed, it will be opened after it. You may also find it at your main drive (usually C:\ drive)

Post its content into your next reply.

system · 2015-06-26T21:17:48.000Z

Zoek log attached. Thanks.

TwinHeadedEagle · 2015-06-26T21:38:51.000Z

https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
Scan with Farbar Recovery Scan Tool

Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.

[*]Right-click on
https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
icon and select
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg
Run as Administrator to start the tool.
(XP users click run after receipt of Windows Security Warning - Open File).
[*]Make sure that Addition option is checked.
[*]Press Scan button and wait.
[*]The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.

Please include their content into your next reply.

system · 2015-06-26T22:13:45.000Z

Farbar logs attached.

TwinHeadedEagle · 2015-06-27T07:55:56.000Z

How is your PC behaving now?

system · 2015-06-27T11:10:57.000Z

I had the same problem. I killed it using : restauration system.

system · 2015-06-30T12:22:41.000Z

Seems to be malware free, thank you for your help.

TwinHeadedEagle · 2015-06-30T13:35:23.000Z

Cheers

Announcements