Constant popup started today.
Scans say everything is fine.
Attached logs but no threats were found so no fix or restart was done.
Hi there I have not yet found the launch point for this, if the fix should fail could you restore your system to the following check point 21-10-2014 06:35:08 Windows Update
CAUTION : This fix is only valid for this specific machine, using it on another may break your computer
Open notepad and copy/paste the text in the quotebox below into it:
BHO-x32: No Name -> {6c97a91e-4524-4019-86af-2aa2d567bf5c} -> No File Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File Toolbar: HKLM-x32 - No Name - {6c97a91e-4524-4019-86af-2aa2d567bf5c} - No File 2014-10-21 00:00 - 2014-10-24 17:27 - 00000000 ___HD () C:\ProgramData\{9A88E103-A20A-4EA5-8636-C73B709A5BF8} EmptyTemp: CMD: bitsadmin /reset /allusers
Save this as fixlist.txt, in the same location as FRST.exe
Run FRST and press Fix
On completion a log will be generated please post that
THEN
Please download AdwCleaner by Xplode onto your desktop.
[*]Close all open programs and internet browsers.
[*]Double click on AdwCleaner.exe to run the tool.
[*]Click on Scan.
[*]After the scan is complete click on “Clean”
[*]Confirm each time with Ok.
[*]Your computer will be rebooted automatically. A text file will open after the restart.
[*]Please post the content of that logfile with your next answer.
[*]You can find the logfile at C:\AdwCleaner[S1].txt as well.
When I try to run FRST it creates a folder called FRST-older and then creates a new
FRST64 icon.
Then when trying to run it does not run properly.
What should I do in this situation.
My system is 64 bit.
OK skip FRST for now and I will check that out
Should I go ahead with adwcleaner now or wait?
Go ahead with AdwCleaner please
Here is the file.
Could you restart in safe mode with networking and let me know if the alerts still appear when you use the net
Sorry but using a revodrive and starting in safe mode is hard.
been trying for a while now and have not been able to get into safe mode.
The revo is the boot drive and it has to load a driver first to see win7 operating system.
f8 after the drive starts to load just brings up drive selection window.
Anyway the popup is still coming up about every 40 seconds. Just letting you know.
Thanks for the help so far.
Could you restore the computer to the following system restore point 19-10-2014 06:00:05 Windows Backup and let me know if that stops the alerts
So far any system restore point fails and reports no system files were changed.
I tried 2 different points.
The popup still happens every 40 seconds but have avast in gaming mode to stop it from poping up.
Any more ideas?
Could you run a fresh FRST scan for me please
here it is.
Try this and let me know the result
CAUTION : This fix is only valid for this specific machine, using it on another may break your computer
Open notepad and copy/paste the text in the quotebox below into it:
BHO-x32: No Name -> {6c97a91e-4524-4019-86af-2aa2d567bf5c} -> No File Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File Toolbar: HKLM-x32 - No Name - {6c97a91e-4524-4019-86af-2aa2d567bf5c} - No File 2014-10-21 00:00 - 2014-10-25 20:03 - 00000000 ___HD () C:\ProgramData\{9A88E103-A20A-4EA5-8636-C73B709A5BF8} EmptyTemp: CMD: bitsadmin /reset /allusers
Save this as fixlist.txt, in the same location as FRST.exe
Run FRST and press Fix
On completion a log will be generated please post that
here.
Are the popups still occurring ?
Download to your desktop process explorer from here http://technet.microsoft.com/en-gb/sysinternals/bb896653.aspx
Open process explorer and from the menu bar select View > Lower Pane
Select Explorer.exe
A Lower window will open
Then on the menu bar go to File > Save as…
Then select the desktop and click save
On the desktop will then be a text file called explorer please attach that
You may need to edit the file name from explorer.exe.txt to explorer.txt to allow it to be attached
So far no. Been watching for a while now.
I think this file should be named properly.
OK monitor it for a bit longer and if all is well I will tidy up
Great.
I may not be able to get back to you for a while though.
I noticed that the files that might have been the problem were in wow64.
Was this in the game files or internet files?
It would be good for me to know so the problem does not return.
I know the internet sites that I went to for game info and would like to know so it does not happen again.
Thanks for the help.