Hi there,
I keep getting this popup, it’s been a few days now.
Please find attached my logs and maybe you can find the magic commands for my laptop …
Many thanks
Stefan
NB the attached mbam was run without “scan for rootkits” (cleaned all the items it found) ; asecond run with the “rootkits” found nothing else (for some reason I cannot export that one)
Sorry the mbam didn’t go into the previous one - here it is
Hi a fairly clean system. Let me know if this stops it
Download and Install Combofix
Download ComboFix from one of the following locations:
Link 1
Link 2
VERY IMPORTANT !!! Save ComboFix.exe to your Desktop
[*]Double click on ComboFix.exe & follow the prompts.
[*]Accept the disclaimer and allow to update if it asks
http://img.photobucket.com/albums/v706/ried7/NSIS_disclaimer_ENG.png
http://img.photobucket.com/albums/v706/ried7/NSIS_extraction.png
[*]When finished, it shall produce a log for you.
[*]Please include the C:\ComboFix.txt in your next reply.
Notes:
Please make sure you include the combo fix log in your next reply as well as describe how your computer is running now
It took a while …
Here you have the log file
The pop-up seems to have gone away ! I’ll keep you updated later tonight or tomorrow morning to confirm
thank you a thousand times !
Stefan
OK looks good
I cried victory too soon, the ugly pop-up is still here
Does this appear in any specific browser now ?
For the following programme it will generate a avptool.sysinfo.zip folder could you upload that to a file sharing site… Google docs etc. and give me the sharing link so that I can download it
Download AVPTool from Here to your desktop
Run the programme you have just downloaded to your desktop ( it will be randomly named )
First we will run a virus scan
Select the cog to access scan areas
https://dl.dropboxusercontent.com/u/73555776/Kas%20front.JPG
On the first tab select all elements down to OS C and then select start scan
https://dl.dropboxusercontent.com/u/73555776/Kas%20Scan%20area.JPG
Once it has finished select reports and post the detected threats
.
Now an analysis scan
Select the Manual Disinfection tab
Press the Gather System Information button
https://dl.dropboxusercontent.com/u/73555776/kas%20manual.JPG
Once it has completed then click Step 2 Report sending
https://dl.dropboxusercontent.com/u/73555776/avp%20report.JPG
Click avptool.sysinfo.zip
And you will be taken to the zip file that needs to be uploaded
3 days after I’m still at only 60% of the first run …
I stopped it twice because I noticed it was pending infinite time (at about 9%) in analysing 2 iso of windows install - that I deleted - but still the progress is very slow
S
OK stop that and run an Avast boot scan please
Hi
Here it is
thanks
Are the alerts still happening ? If so could you run the analysis portion of AVP
Now an analysis scan
Select the Manual Disinfection tab
Press the Gather System Information button
https://dl.dropboxusercontent.com/u/73555776/kas%20manual.JPG
Once it has completed then click Step 2 Report sending
https://dl.dropboxusercontent.com/u/73555776/avp%20report.JPG
Click avptool.sysinfo.zip
And you will be taken to the zip file that needs to be attached
OK scrub that, we may now have the solution, so I would like you to be the guinea pig
CAUTION : This fix is only valid for this specific machine, using it on another may break your computer
Open notepad and copy/paste the text in the quotebox below into it:
CMD: bitsadmin /reset /allusers CMD: DEL %TEMP%\*.* /F /S /Q CMD: RD /S /Q %TEMP% REBOOT:
Save this as fixlist.txt, in the same location as FRST.exe
Run FRST and press Fix
On completion a log will be generated please post that
here we go
Have the alerts now ceased ?
I believe so, today I haven’t seen any
In case anything pops up, I’ll tell you - and in any case will post a report tomorrow to say how it goes
many many thanks
S
I believe we have now located the miscreant and the fix worked for you
Could you post the fix log please
sorry, I thought I did yesterday
no more pop-up ever since
Subject to no further problems 
I will remove my tools now and give some recommendations, but, I would like you to run for 24 hours or so and come back if you have any problems
Now the best part of the day ----- Your log now appears clean 
A good workman always cleans up after himself so…The following will implement some cleanup procedures as well as reset System Restore points:
Click Start then Run.
On Windows7 or Vista you may use Start Search field if Run is not available.
In the box copy/paste the following command:
ComboFix /Uninstall
Note that there is a space between " ComboFix " and " /Uninstall " .
Then click OK (or press Enter ).
Wait for the uninstall process to complete.
Download and run Delfix
https://dl.dropboxusercontent.com/u/73555776/delfix.JPG
: Keep Java Updated :
WARNING: Java is the #1 exploited program at this time. The Department of Homeland Security recommends that computer users disable Java
See this article
I would recommend that you completely uninstall Java unless you need it to run an important software.
In that instance I would recommend that you disable Java in your browsers until you need it for that software and then enable it. (See How to diasble Java in your web browser and How to unplug Java from the browser)
Now that you are clean, to help protect your computer in the future I recommend that you get the following free programmes:
CryptoPrevent install this programme to lock down and prevent crypto ransome ware
https://dl.dropboxusercontent.com/u/73555776/CryptoPrevent.JPG
Update and run weekly to keep your system clean
It is critical to have both a firewall and anti virus to protect your system and to keep them updated.
To learn more about how to protect yourself while on the internet read this little guide Best security practices Keep safe 
Hi
No more symptoms
executed all install instructions
thank you again !
My pleasure