Upadate-
The pop-ups showed up in IE- but not on all sites esp. not on my own site where FF & Chrome had shown pop-ups… but on a site where I visit frequently. I cleared all history form IE & FF (Chrome had none) rebooted browsers & IE still had pop-ups.
I then re-ran Adware and sprotector was back- but i coudl not see vaudix runing in task manager, and it had shown there before.
So, LOL… I know you will hate this… but I acted on my own (sort of my own… I manually repeated CFSfix- but deleted deeper)
… this “seems” to have worked and may be helpful to you & others
I performed the manual edits, so I could see that the items were removed
1- per the adware report I manually removed these registery entires
- HKCU\Software\AppDataLow\SProtector
- HKLM\Software\SProtector
2- I opened the CFSfix.txt and manually rechecked & completed the steps…and went a bit further,
The tasks were gone/had not reappeared
File::
- c:\windows\Tasks\VaudiXUpdaterTask{09AB07D1-EC8B-4C80-900A-C8B771AFDAB3}.job
- c:\windows\Tasks\VaudiXUpdaterTask{2387C944-C763-4B62-9B99-B14642804909}.job
Folder::
- I opened and explored each folder- where there was an ini file I opened the ini in notepad and deleted all content and saved
c:\documents and settings\All Users\Application Data\Premium
- I opend the folder, deleted each file & then the folder
c:\Program Files\VaudiX
- I deleted each file, then the folder- I think the ini file was in this folder
- there was an uninstall.exe- I just deleted it with all other files
C:\Documents and Settings\patti.potter\Application Data\Mozilla\Firefox\Profiles\jy3x0kxd.default\extensions\50a6f7bd80fe1@50a6f7bd81019.com
- I deleted the entire profile “jy3x0kxd.default”
The following key did not exit.
Registry:: HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
“AppInit_DLLs”=-
Then- I ran an Avast boot time scan
- on all drives (C & D-recovery)
- selecting to delete any threats detected during the scan.
After the reboot/boot scan
- Avast reported it deleted 2 Java based threats not picked up by daily quick or full scans
- I noticed that there were no logs of boot time scans when i thought I had run them (mid & late Dec), this is likely my bad memory
- PNG attached
- I thought I had seen & moved to virus chest these files before,
- but did not see them in the virus chest, maybe I deleted them, I did not recheck all logs to trace all details of threats found & removed
I re-ran Adware and sprotector enties were gone
- I have re-run it a few time after browsing & at least 1 reboot and it has remained clean.
- most recent copy attached
- I went back to folders & files that I deleted per CFSfix
- all were gone after reboot/boot scan
- I rechecked all now and they are still gone.
- I emptied recycle bin (should have done it before boot scan)
Since I deleted the FF profile, that prevented FF from running,
- so I uninstalled FF & all user history/data & reinstalled fresh.
- I now have a new FF profile with no extensions at this point.
Since then, no pop-ups in IE, FF or Chrome where seen before.
But I remain a bit paranoid, so any hiccup seems odd… but the PC is old and way under resouced for how I use it, so it is hard to tell without giving it more time to observe and see what normal is now and how that compares to what it was before.
I plan to run disk cleanup & defrag. I have 40GB free on 14GB C:
I do have a good backup & restore points prior to Vaudix if needed.
any comments… questions?
(other than to tell me I violated instructions of doing only as told). :-[
I apologize, but I felt it was important to me to step thorugh it manually to confirm what was actually happening and see for myself what was removed, and what does or does not reappear if pop-ups return.
Thank you for your help!! I am very grateful! 