Yes please, once done could you run a fresh FRST scan please
ok system restore running now. I should note that I turned the internet back on and no pop ups now, but figured it be better safe then sorry. so system restore being done what should I do next? also should I leave my internet connection on when doing these scans?
Once completed could you run a fresh FRST scan and let me know if the alerts still appear
well system restore failed to work but so far no pop ups with a scan with the internet connected. am I in the clear you think?
Possibly, as I have seen that even a failed restore manages to clear the problem
Monitor for a day or so and if all is well I will tidy up
ok now I no longer am getting the previous infection come up. now its a sindelclick site popping up every 10 minutes or so.
Could you attach a screenshot of the popup please
Please RIGHT-CLICK HERE and Save As (in IE it’s “Save Target As”, in FF it’s “Save Link As”) to download Silent Runners.
[*]Save it to the desktop.
[*]Run Silent Runner’s by doubleclicking the “Silent Runners” icon on your desktop.
[*]You will receive a prompt:
Do you want to skip supplementary searches?
click NO
[*]If you receive an error just click OK and double-click it to run it again - sometimes it won’t run as it’s supposed to the first time but will in subsequent runs.
[*]You will see a text file appear on the desktop - it’s not done, let it run (it won’t appear to be doing anything!)
[*]Once you receive the prompt All Done!, open the text file on the desktop, copy that entire log, and paste it here.
NOTE If you receive any warning message about scripts, please choose to allow the script to run.
http://i663.photobucket.com/albums/uu352/squall280/Mobile%20Uploads/2014-11/IMAG1709_zpsfvqeizt5.jpg
http://i663.photobucket.com/albums/uu352/squall280/Mobile%20Uploads/IMAG1707_zpskq7vioqv.jpg
Could you open the silent runners log please and go File > Save As…
At the bottom where it states encoding could you change the dropbox to ANSI and then click save
Please attach that log
i believe I this is it.
Could you uninstall this cracked programme please and then let me know if the alerts cease
C:\Users\Voltron\Downloads[b]iSkysoft Video Converter Ultimate v4.6.0.0[/b] Incl Crack - [MUMBAI]
ok there wasn’t a program to uninstall so I deleted all files associated with it.
OK can you let me know if this stops the alerts
CAUTION : This fix is only valid for this specific machine, using it on another may break your computer
Open notepad and copy/paste the text in the quotebox below into it:
HKU\S-1-5-21-3975405500-1909171286-513800362-1000\...\MountPoints2: {fb67d09e-4c10-11e2-8e14-60eb69d4394d} - E:\windows\Autorun.exe {D2D77DC2-8299-11D1-8949-444553540000} 5.2066.1.A10B02 PID_0083 2014-10-12 17:21 - 2014-10-12 17:23 - 00000000 ____D () C:\Users\Voltron\Documents\iSkysoft Video Converter Ultimate 2014-10-12 17:21 - 2014-10-12 17:21 - 00000000 ____D () C:\Users\Voltron\AppData\Roaming\{950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A} 2014-10-12 17:13 - 2014-10-12 20:01 - 00000000 ____D () C:\Program Files (x86)\iSkysoft 2014-10-12 17:13 - 2014-10-12 17:34 - 00000000 ____D () C:\ProgramData\iSkysoft Video Converter Ultimate 2014-10-12 17:13 - 2013-08-23 13:36 - 00721263 _____ () C:\windows\SysWOW64\ISCM64.dll 2014-10-12 15:19 - 2014-10-30 16:59 - 00000000 ____D () C:\Users\Voltron\Downloads\iSkysoft Video Converter Ultimate v4.6.0.0 Incl Crack - [MUMBAI] 2014-10-12 15:14 - 2014-10-12 17:11 - 00000000 ____D () C:\Users\Voltron\Documents\iSkysoft DVD Creator 2014-10-12 15:14 - 2014-10-12 15:14 - 00000000 ____D () C:\Users\Voltron\AppData\Local\iSkysoft EmptyTemp: CMD: bitsadmin /reset /allusers
Save this as fixlist.txt, in the same location as FRST.exe
Run FRST and press Fix
On completion a log will be generated please post that
here is the fixlog
Have the alerts ceased ?
the pop ups have slowed down to a few times a day rather then every 10 seconds. its a new warning. also my computer performace is really slow.
OK big hammer
Download and Install Combofix
Download ComboFix from one of the following locations:
Link 1
Link 2
VERY IMPORTANT !!! Save ComboFix.exe to your Desktop
- IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here
[*]Double click on ComboFix.exe & follow the prompts.
[*]Accept the disclaimer and allow to update if it asks
http://img.photobucket.com/albums/v706/ried7/NSIS_disclaimer_ENG.png
http://img.photobucket.com/albums/v706/ried7/NSIS_extraction.png
[*]When finished, it shall produce a log for you.
[*]Please include the C:\ComboFix.txt in your next reply.
Notes:
- Do not mouse-click Combofix’s window while it is running. That may cause it to stall.
- Do not “re-run” Combofix. If you have a problem, reply back for further instructions.
- If after the reboot you get errors about programmes being marked for deletion then reboot, that will cure it.
Please make sure you include the combo fix log in your next reply as well as describe how your computer is running now
i accidentaly ran it twice. my computer froze up but here is the log it made first.
Could I have a screen shot of the latest alerts please
the computer is running decent now and I am alarted still but not at the amount I was previously. I will snap a pic when it pops up again.