please help mal from anythincago and a bunch of other websites

system · 2015-06-10T11:31:11.000Z

oh thats ok thanks anyway my computer has been running fine since the odd lag here and there but thats probably cuz i have a few extra anti virus stuff i need to delete thanks again

system · 2015-06-10T18:57:56.000Z

Hi there, I have exactly the same issue with the same blocked links e.g. anythincago etc. Will the same process work for me? Any help will be gratefully received.

TwinHeadedEagle · 2015-06-10T18:58:33.000Z

Hello,

https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
Scan with Farbar Recovery Scan Tool

Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them.
Only one of them will run on your system, that will be the right version.

[*]Double-click to run it. When the tool opens click Yes to disclaimer.
[*]Press Scan button.
[*]It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
[*]The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

system · 2015-06-11T10:47:37.000Z

Thanks so much for your help. Files are attached.

TwinHeadedEagle · 2015-06-11T13:34:11.000Z

https://sites.google.com/site/cannedfixes/home/hosted-images-tools/51a612a8b27e2-Zoek.png
Scan with ZOEK

Please download ZOEK by Smeenk and save it to your desktop (preferred version is the *.exe one)
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.

[*]Right-click on
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/51a612a8b27e2-Zoek.png
icon and select
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg
Run as Administrator to start the tool.
[]Wait patiently until the main console will appear, it may take a minute or two.
[]In the main box please paste in the following script:

createsrpoint;
chrdefaults;
bitsadmin /reset /allusers;b
C:\Users\Alison\AppData\Local\Google\Chrome\User Data\Default\Preferences;f
autoclean;
emptyalltemp;
ipconfig /flushdns;b

[*]Make sure that Scan All Users option is checked.
[*]Push Run Script and wait patiently. The scan may take a couple of minutes.
[*]When the scan completes, a zoek-results logfile should open in notepad.
[*]If a reboot is needed, it will be opened after it. You may also find it at your main drive (usually C:\ drive)

Post its content into your next reply.

system · 2015-06-13T12:33:46.000Z

I am unsure why but Zoek doesn’t seem to be completing the scan. It has not moved beyond “— Chrome Look 23:20:06.33” for hours. I am not sure whether to switch off and start again or leave it alone.

TwinHeadedEagle · 2015-06-13T15:38:01.000Z

Abort and try again. If this happens again, let me know.

system · 2015-06-13T19:04:25.000Z

I tried running the scan again. I’ve just returned to the laptop at 8pm and it has not completed again; it got to the same spot (Chrome Look) at 4.30pm with no further progress.

I should mention that it still seems to be running (it tells me this when I try to quit Zoek).

TwinHeadedEagle · 2015-06-13T20:41:58.000Z

Abort it completely.

https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
Scan with Farbar Recovery Scan Tool

Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.

[*]Right-click on
https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
icon and select
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg
Run as Administrator to start the tool.
(XP users click run after receipt of Windows Security Warning - Open File).
[*]Make sure that Addition option is checked.
[*]Press Scan button and wait.
[*]The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.

Please include their content into your next reply.

system · 2015-06-13T20:56:13.000Z

Thanks. Files attached.

TwinHeadedEagle · 2015-06-13T20:58:12.000Z

https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
Fix with Farbar Recovery Scan Tool

https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
[B] This fix was created for this user for use on that particular machine.
https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif

https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
Running it on another one may cause damage and render the system unstable.
https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
[/B]

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

[*]Right-click on
https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
icon and select
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg
Run as Administrator to start the tool.
(XP users click run after receipt of Windows Security Warning - Open File).
[*]Press the Fix button just once and wait.
[*]If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
[*]When finished FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.

https://sites.google.com/site/cannedfixes/adwcleaner/adwcleaner_new.png
Fix with AdwCleaner

Please download AdwCleaner by Xplode and save the file to your Desktop.

[*]Right-click on
https://sites.google.com/site/cannedfixes/adwcleaner/adwcleaner_new.png
icon and select
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg
Run as Administrator to start the tool.
[*]Wait until the database is updated.
[*]Accept the Terms of use and click Scan.
[*]When finished, please click Clean.
[*]Upon completion, click Report. A log (AdwCleaner[S*].txt) will open.

Please include the contents of that file in your reply.

Note: Reports will be saved in your system partition, usually at C:\Adwcleaner

system · 2015-06-13T21:10:47.000Z

Hi, I can’t see the link to the fixlist.txt file I need to download.

DavidR · 2015-06-13T22:03:20.000Z

alicomps post:27:

Hi, I can’t see the link to the fixlist.txt file I need to download.

You shouldn’t need to see the link as such (it is an attachment in the post), clicking the fixlist.txt attachment should offer to open/save (depending on browser) the file. See attached image on Firefox 38.0.5 (click to expand).

system · 2015-06-14T12:17:28.000Z

Many thanks, I can see the attachment now.

I have attached the requested files.

DavidR · 2015-06-14T14:43:53.000Z

You’re welcome, hopefully TwinHeadedEagle will be able to get back to the topic soon.

TwinHeadedEagle · 2015-06-14T14:58:08.000Z

How is your PC behaving now?

system · 2015-06-14T15:02:50.000Z

No warnings from Avast are popping up soooo so far, so good!

Thanks for all your help (and DavidR also), I really appreciate it.

TwinHeadedEagle · 2015-06-14T15:03:35.000Z

Cheers

• The following will implement some post-cleanup procedures:

=> Please download DelFix by Xplode to your Desktop.

Run the tool and check the following boxes below;
[i]
http://www.mcshield.net/personal/magna86/Images/checkmark.png
Remove disinfection tools

http://www.mcshield.net/personal/magna86/Images/checkmark.png
Create registry backup

http://www.mcshield.net/personal/magna86/Images/checkmark.png
Purge System Restore [/i]
Click Run button and wait a few seconds for the programme completes his work.
At this point all the tools we used here should be gone. Tool will create an report for you (C:[b]DelFix.txt[/b])

The tool will also record healthy state of registry and make a backup using ERUNT program in %windir%\ERUNT\DelFix
Tool deletes old system restore points and create a fresh system restore point after cleaning.

system · 2015-06-14T23:04:50.000Z

I’ve been receiving the “dingdingding” about these viruses and we’ve tried everything to remove it but it doesn’t work! I use google chrome and I thought it came from Internet Explorer, so we’ve deleted it from the computer and the problem is still here. Am I really infected? Here are the messages:

hxxx://opticguardzip.net/4242/SectionDouble_142669629429948.dll]HXXX://opticguardzip.net/4242/SectionDouble_142669629429948.dll
Infection: URL:Mal
Process: C:\Windows\System32\svchost.exe

hxxx://alwaysisobar.com/4242/RelayDouble_142669497325058.dll]hxxx://alwaysisobar.com/4242/RelayDouble_142669497325058.dll
Infection: URL:Mal
Process: C:\Windows\System32\svchost.exe

hxxx://anythicago.com/4242/TerminusTurbo_142669035158119.dll]hxxx://anythicago.com/4242/TerminusTurbo_142669035158119.dll[/url]
Infection: URL:Mal
Process: C:\Windows\System32\svchost.exe

hxxx://simplesitescan.net/4242/IndepthEngine_142667058575913.dll]hxxx://simplesitescan.net/4242/IndepthEngine_142667058575913.dll
Infection: URL:Mal
Process: C:\Windows\System32\svchost.exe

If anyone can help me, I’d thank a lot!

TwinHeadedEagle · 2015-06-15T05:11:47.000Z

Hello,

Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them.
Only one of them will run on your system, that will be the right version.

[*]Double-click to run it. When the tool opens click Yes to disclaimer.
[*]Press Scan button.
[*]It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
[*]The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

Announcements