getting slammed by hxxps://188.165.198.52 url: mal

Viruses and worms
41


http://i663.photobucket.com/albums/uu352/squall280/Mobile%20Uploads/2014-11/IMAG1714_zps30cfwisw.jpg


http://i663.photobucket.com/albums/uu352/squall280/Mobile%20Uploads/2014-11/IMAG1726_zpsmgvboitn.jpg

42

Could you reset IE

Go to Control Panel > Internet Options > Advanced tab
Press the Resest IE button at the bottm right
Apply then OK out

Now try IE again

43

I did that and lost my internet favorites. so far so good. still running a little slow when it come to streaming. ill see if the alerts stop. anyway to recover my favorites?

44

You can import them from Chrome and Firefox

45

chrome and firefox never copied over the favorites so unless there is another way I guess I lost them, but that’s the least of the problem. i am still getting random popups not as bad as it originally was. here is some pics of the popups.

46

Hmm that indicates poweliks still

Download the latest version of TDSSKiller from here and save it to your Desktop.

[*]Doubleclick on TDSSKiller.exe to run the application

https://dl.dropbox.com/u/73555776/tdss%20start.JPG

[*]Then click on Change parameters.

https://dl.dropbox.com/u/73555776/tdss%20Change%20param.JPG

[*]Check the boxes beside Verify Driver Digital Signature, Detect TDLFS file system and Use KSN to scan objects , then click OK.

[*]Click the Start Scan button.

[*]If a suspicious object is detected, the default action will be Skip, click on Continue.

https://dl.dropbox.com/u/73555776/tdss%20threat.JPG

[*]If malicious objects are found, they will show in the Scan results and offer three (3) options.
[*]Ensure Cure is selected, then click Continue => Reboot now to finish the cleaning process.

[*]Get the report by selecting Reports

https://dl.dropbox.com/u/73555776/tdss%20report.JPG

[*]Note: If Cure is not available, please choose Skip instead, do not choose Delete unless instructed.

Please attach its contents on your next reply.

THEN

Could you run a fresh FRST scan

47

here are the results

48

Well it had to happen it is changing slightly

Did TDSSKiller find anything ?

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKU\S-1-5-21-3975405500-1909171286-513800362-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION FF user.js: detected! => C:\Users\Voltron\AppData\Roaming\Mozilla\Firefox\Profiles\ea0eyjvl.default\user.js 2014-10-21 22:35 - 2014-11-09 07:41 - 00000000 ___HD () C:\ProgramData\{9A88E103-A20A-4EA5-8636-C73B709A5BF8} CustomCLSID: HKU\S-1-5-21-3975405500-1909171286-513800362-1000_Classes\CLSID\{F6BF8414-962C-40FE-90F1-B80A7E72DB9A}\InprocServer32 -> C:\ProgramData\{9A88E103-A20A-4EA5-8636-C73B709A5BF8}\fwcfg.dll (Microsoft Corporation) EmptyTemp: CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe
Run FRST and press Fix
On completion a log will be generated please post that

49

ok internet is working a little smoother although some sites take abit to load.
when preforming the fixlist the computer locked up but still produced a fixlog

50

What other problems are you experiencing ?