Hi, I’ve been getting a Win32:RmnDrp infection (Screenshot here: http://puu.sh/kWYjq/391b75e102.jpg), I managed to find the files that started it, and delete them thanks to the help of Avast, however I want to make sure my system is clean before I try to access any of my sensitive data (Paypal, Online Banking, Emails, etc.)
Thank you so very much for helping out.
A little adware otherwise it looks clean
CAUTION : This fix is only valid for this specific machine, using it on another may break your computer
Open notepad and copy/paste the text in the quotebox below into it:
CreateRestorePoint: BHO-x32: No Name -> {3C6301ED-0F78-4AF2-8150-D9C052361A8E} -> No File FF Extension: No Name - C:\Program Files (x86)\BetterSurf\BetterSurfPlus\ff [not found] FF Extension: No Name - C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha731\ff [not found] FF Extension: No Name - C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta865\ff [not found] FF Extension: No Name - C:\Program Files (x86)\MediaPlayerV1\MediaPlayerV1alpha351\ff [not found] 2015-09-27 23:49 - 2015-10-01 23:46 - 00000000 ____D C:\Users\Jagraj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\My.com C:\Program Files (x86)\BetterSurf\BetterSurfPlus C:\Program Files (x86)\WebexpEnhancedV1 C:\Program Files (x86)\MediaPlayerV1 C:\Program Files (x86)\VideoPlayerV3 Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f RemoveProxy: EmptyTemp: CMD: bitsadmin /reset /allusers
Save this as fixlist.txt, in the same location as FRST.exe
https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG
Run FRST and press Fix
On completion a log will be generated please post that
THEN
Please download AdwCleaner by Xplode onto your desktop.
[*]Close all open programs and internet browsers.
[*]Double click on AdwCleaner.exe to run the tool.
[*]Click on Scan.
[*]After the scan is complete click on “Clean”
[*]Confirm each time with Ok.
[*]Your computer will be rebooted automatically. A text file will open after the restart.
[*]Please post the content of that logfile with your next answer.
[*]You can find the logfile at C:\AdwCleaner[S0].txt as well.
Did you recive this after using a USB stick?
