Need help to make sure this computer has no viruses or malware please

system · 2014-01-16T02:58:53.000Z

HI I was wondering if I could get some resurance that this windows 7 computer home premium is free of malware and viruses please. This computer has been freezing up some and acting weired so I would like to make sure their are no viruses or malware on this computer at all

logs are as follows

system · 2014-01-16T03:29:29.000Z

HI I did an otl log and extras and malwarebytes free did not find anything after removing some toolbars. I also did the adwcleaner and it did clean the toolbars from this computer I will put both adwcleaner logs on this.

thanks

system · 2014-01-16T04:00:31.000Z

hI just thought I would do a fresh adwcleaner log

Pondus · 2014-01-16T06:48:30.000Z

run AdwCleaner again…this time click clean after scan …

then run quick scan with Malwarebytes, make sure it is updated and that evrything detected is selected for removal … then click remove selected

system · 2014-01-16T07:09:37.000Z

HI Pondus I did do that I just wanted someone to check these logs to make sure things are good I did also do a quick scan with Malewarebytes and I did tick everything that was detected and I did let Malwarebytes remove the stuff it did find. Thanks helping Pondus.

essexboy · 2014-01-16T14:39:27.000Z

This should cure it

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL

[*]Under the Custom Scans/Fixes box at the bottom, paste in the following

https://dl.dropbox.com/u/73555776/OTL_Fix.GIF


:Commands
[CREATERESTOREPOINT]

:OTL
O2:64bit: - BHO: (Norton Identity Protection) - {AB4C7833-A6EC-433f-B9FE-6B14B1A2F836} - C:\Program Files (x86)\Norton Identity Safe\Engine64\2014.6.0.27\CoIEPlg.dll (Symantec Corporation)
O2 - BHO: (Norton Identity Protection) - {AB4C7833-A6EC-433f-B9FE-6B14B1A2F836} - C:\Program Files (x86)\Norton Identity Safe\Engine\2014.6.0.27\CoIEPlg.dll (Symantec Corporation)
O3:64bit: - HKLM\..\Toolbar: (no name) - !{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found.
O3:64bit: - HKLM\..\Toolbar: (Norton Identity Safe Toolbar) - {A13C2648-91D4-4bf3-BC6D-0079707C4389} - C:\Program Files (x86)\Norton Identity Safe\Engine64\2014.6.0.27\CoIEPlg.dll (Symantec Corporation)
O3:64bit: - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - !{22dfbf5b-a7cd-4b25-9471-3dc68c71855f} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - !{3bbd3c14-4c16-4989-8366-95bc9179779d} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - !{6E7E9522-3C14-4120-B7E0-95993A262D03} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - !{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - !{82E1477C-B154-48D3-9891-33D83C26BCD3} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - !{93a07461-14fc-4b06-bb42-e87aba32df39} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - !{95B7759C-8C7F-4BF1-B163-73684A933233} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - !{A531D99C-5A22-449b-83DA-872725C6D0ED} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - !{c98d5b61-b0ea-4d48-9839-1079d352d880} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - !{ebd898f8-fcf6-4694-bc3b-eabc7271eeb1} - No CLSID value found.
O3 - HKLM\..\Toolbar: (Norton Identity Safe Toolbar) - {A13C2648-91D4-4bf3-BC6D-0079707C4389} - C:\Program Files (x86)\Norton Identity Safe\Engine\2014.6.0.27\CoIEPlg.dll (Symantec Corporation)
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {00000000-0000-0000-0000-000000000000} - No CLSID value found.
O3:64bit: - HKCU\..\Toolbar\WebBrowser: (Norton Identity Safe Toolbar) - {A13C2648-91D4-4BF3-BC6D-0079707C4389} - C:\Program Files (x86)\Norton Identity Safe\Engine64\2014.6.0.27\CoIEPlg.dll (Symantec Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (Norton Identity Safe Toolbar) - {A13C2648-91D4-4BF3-BC6D-0079707C4389} - C:\Program Files (x86)\Norton Identity Safe\Engine\2014.6.0.27\CoIEPlg.dll (Symantec Corporation)
O4 - HKCU..\Run: [prefs] C:\ProgramData\nsmD412.exe ()
O20 - AppInit_DLLs: (C:\PROGRA~3\Wincert\WIN32C~1.DLL) - File not found
[2014/01/15 19:37:50 | 000,000,384 | -H-- | M] () -- C:\Windows\tasks\schedule!481551474.job
[2013/10/24 23:05:51 | 000,000,000 | ---- | C] () -- C:\ProgramData\bzj8w2j.fvv
[2013/10/24 23:05:50 | 095,025,368 | ---- | C] () -- C:\ProgramData\bzj8w2j.bxx

:Files
C:\PROGRA~3\Wincert

:Commands
[resethosts]
[emptytemp]
[Reboot]

[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
[*]Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

THEN

Please download Malwarebytes AntiRootkit and save it to your desktop.

Full instructions how to use MBAR
Please note: This is a beta version so please be sure to read the disclaimer and note of it.

• Unzip/unrar MBAR in a folder to your Desktop and MBAM shall run …

• Click on Next > then on Update button to download fresh definitions.

https://dl.dropboxusercontent.com/u/73555776/mbar_update.JPG

• When database updates click Next

• In the following window ensure “Targets” scan for Drivers; Sectors; System are ticked. Then select “Scan button”

https://dl.dropboxusercontent.com/u/73555776/mbarscan.JPG

• If an infection/s are found ensure “Create Restore Point” is checked, then select the “Cleanup Button” to remove threats.
Or if you are sure any entries should not be kept, just untick them. A list of infected files will be listed.

• The Clean up procedure will be Scheduled for process.
• When complete pop-up will show you. Select the Yes button and the system should re-boot to complete the cleaning process.

Please attach the two following logs from the mbar folder:

system-log.txt
and
mbar-log-year-month-day (hour-minute-second).txt.

system · 2014-01-17T07:03:19.000Z

HI I was wondering can some educate me on how adwcleaner works and if the last adwcleaner log if I deleted anything important I must say that I am concerned that I hope I did not mess anything up like deleting important files like photos from the computer or anything that is important to the computer I would hate to have this person hate me because error messages are popping up on their screen in front of them. I just want to make sure that adwcleaner did a good job just getting rid of the toolbars and adware and leaves everything alone on the computer. Could you please check my last adwcleaner log for me please and make sure adwcleaner got rid of the tool bars and nothing else. Thanks very much.
Diddy

system · 2014-01-17T07:38:20.000Z

HI Essexboy I was wondering if I could ask a question when I use this Malwarebytes rootkit remover if it finds any infections at all is their away to generate a log file of what Malwarebytes rootkit remover found before I press the clean button. I just want to make sure that i delete nothing important to the computer like for example photos on the computer. I am never comfortable with beta software much just because their is no much unknowns and problems or issues to iron out if you now what mean.

Thanks Essexboy

Pondus · 2014-01-17T07:55:13.000Z

Diddy post:8:

HI Essexboy I was wondering if I could ask a question when I use this Malwarebytes rootkit remover if it finds any infections at all is their away to generate a log file of what Malwarebytes rootkit remover found before I press the clean button. I just want to make sure that i delete nothing important to the computer like for example photos on the computer. I am never comfortable with beta software much just because their is no much unknowns and problems or issues to iron out if you now what mean.

Thanks Essexboy

it is in the instructions essexboy gave

• If an infection/s are found ensure "Create Restore Point" is checked, then select the "Cleanup Button" to remove threats. [b]Or if you are sure any entries should not be kept, just untick them. A list of infected files will be listed.[/b]

Pondus · 2014-01-17T07:57:24.000Z

Diddy post:7:

HI I was wondering can some educate me on how adwcleaner works and if the last adwcleaner log if I deleted anything important I must say that I am concerned that I hope I did not mess anything up like deleting important files like photos from the computer or anything that is important to the computer I would hate to have this person hate me because error messages are popping up on their screen in front of them. I just want to make sure that adwcleaner did a good job just getting rid of the toolbars and adware and leaves everything alone on the computer. Could you please check my last adwcleaner log for me please and make sure adwcleaner got rid of the tool bars and nothing else. Thanks very much.
Diddy

AdwCleaner only removes browser crap …and it can be restored from quarantine if needed

instructions here http://www.bleepingcomputer.com/download/adwcleaner/

system · 2014-01-17T08:19:05.000Z

HI Pondus can you tell me where is the quarentine feature in adwcleaner located Pondus please explain.

Thanks

May I ask another question Pondus how do you now that adwcleaner only deletes browser crap and not other file folders on the computer.

Thanks

Pondus · 2014-01-17T08:32:57.000Z

top left corner > tools > quarantine manager

essexboy · 2014-01-17T13:30:49.000Z

Looking at the adw log it only shows pups

system · 2014-01-28T06:01:44.000Z

HI I was going to ask a question about Pups this lady’s computer that adwcleaner took all the pup’s off her computer has a printer on it and she said that she could not print to the printer on her desktop computer. So after I used adwcleaner a few days ago to get rid of the pup’s off the desktop she emailed me today to tell me that now she can print on her desktop without any problem at all. I was just wanting to now if having pup’s on your desktop can prevent you from printing on your desktop if it is hooked to a printer of course.

thanks

Ps: I have not put a resolved on this topic yet because I have not been back to this lady’s house to otl to clean off all the toolbars as of yet from her desktop computer.

Pondus · 2014-01-28T06:14:29.000Z

i guess that is difficult to answer without a log…

I have not been back to this lady's house to otl to clean off all the toolbars as of yet from her desktop computer.

also run MBAM

Announcements