Hi, A few days ago while browsing a pop up appeared it was similar except it was the Australian federal police that were the ones locking my pc, Now I am far from tech savvy I panicked and tried closing the page wouldn’t work so I went into task manager managed to close it then restarted my laptop and even even deleted google and everything lol, getting back on track after closing the page and then restarting my laptop was not locked so went to bed when I woke up I checked on google and found posts about FBI moneypak. I then followed a few steps said guides told me to implement, I did a system restore, went into safe mode and downloaded mbam and Hitman pro ran mbam then hitman pro which did pick up infections and supposedly removed them just to be safe I downloaded and scanned with numerous other programs like spybot and a few others and also installed avast free. nothing has been detected since but I am still unable to access change pc settings, I have windows 8.1 and when I try open the change pc settings it shows up on taskbar but only opens for a second and disappears its still in task bar but I cant see the settings menu at all.I read in another post the moderator suggested the poster download Farbar recovery scan tool I have done that also and attached the results. Thanx in advance for any assistance.
Have you tried this?
Hi I followed the link and tried the steps it showed , I am now able to access the pc settings Thanx , But what would cause that to happen, I was able to access the pc settings before the AFP popup appeared, now that its working does that mean im in the clear if managed to get it working or is that just a workaround. Is it possible for me to find out if Im 100% clear of the virus? Thanx for the prompt response.
Can you give me fresh FRST scan please?
Hi attached is a fresh FRST scan .
Hi Dhestroyer81,
Tell me about your PC condition after applying the fix. Referring to your earlier query, myriad of possibility may cause the PC Setting to break which includes but not limited to Malware removal process broke a legitimate chain, Malware corrupted a file/registry entry which is used by the PC setting and was removed by the anti-malware tool thus PC setting was broken et cetera.
[*]Step #1 Uninstall Programs
I want you to uninstall the following program(s) listed below due to poor reputation we receive about them. To uninstall a program, go to Start > Control Panel > Uninstall a program or Start > Control Panel > Programs and Features. Wait for the list to fill up and double-click on the items I have listed below and follow the on-screen instruction to remove/uninstall them.
[b][color=navy][]Spybot - Search & Destroy (You may re-install if you wish after I declare you clean.)
[]HitmanPro 3.7
[]WildTangent Games
[]WildTangent Games App (Toshiba Games)
[*]Step #2 Fix with FRST
Make sure that you still have FRST.exe on your Desktop. If you do not have it, download the suitable version from here to your Desktop.
[*]Open Notepad.exe. Do not use any other text editor software;
[*]Copy and Paste the contents inside the code-box to your Notepad –
Start
HKLM-x32\...\Run: [] => [X]
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {20A3ACB8-4D44-49E6-9E80-EABE7DFB9CC8} URL =
S1 A2DDA; \??\C:\EEK\RUN\a2ddax64.sys [X]
S3 cleanhlp; \??\C:\EEK\Run\cleanhlp64.sys [X]
2014-05-16 02:14 - 2014-05-16 02:14 - 81854464 _____ () C:\WINDOWS\system32\config\SOFTWARE.iobit
2014-05-16 02:14 - 2014-05-16 02:14 - 00311296 _____ () C:\WINDOWS\system32\config\DEFAULT.iobit
2014-05-16 02:14 - 2014-05-16 02:14 - 00032768 _____ () C:\WINDOWS\system32\config\SECURITY.iobit
2014-05-16 02:14 - 2014-05-16 02:14 - 00028672 _____ () C:\WINDOWS\system32\config\SAM.iobit
Reboot:
End
[*]Click on File > Save as…
[list][*]Inside the File Name box type fixlist.txt
[*]From the Save as type drop down list, choose All Files
[*]Save the file to your Desktop;
[*]Re-run FRST.exe and click Fix;
[*]Note: If FRST advises there is a new updated version to be downloaded, do so/allow this.[]After the completion, a log will be produced;
[]Attach the log in your next reply.[/list]
[*]Step #3 Scan with Malwarebytes’ Anti-Malware
[*]Download Malwarebytes’ Anti-Malware from the suitable link below –
[list][]Download Link #1
[]Download Link #2
[]Download Link #3
[*]Double-click mbam-setup.exe to install the application.
[*]Before clicking Finish perform the following actions –
[*]Un-check the box beside Enable free trial of Malwarebytes Anti-Malware Premium.
[*]Check the box beside Launch Malwarebytes Anti-Malware
[*]Once the program has loaded, The MBAM dashboard will appear with an alert to update - click the green button Update Now;
[*]Click on Setting–
[*]Navigate to the tab Detection and Protection and check all the boxes under Detection Options
[*]From the Dashboard click on Scan Now;
[*]If threats are detected click on Apply actions. If the program asks to reboot your PC, let it do so;
[*]On completion of the scan click on View Detailed Log after that click on Export Button, select Text File and save the log to your Desktop;
[]Attach the log in your next reply.[/list]
[*]Step #4 ESET Online Scanner
Disable your security programs which includes but not limited to anti-virus, anti-malware, anti-spyware et cetera. Peruse this for additional information.
[*]Download esetsmartinstaller_enu.exe by clicking here.
[*]Right-click on the program and choose Run as administrator.
[*]Accept their terms and condition and proceed.
[*]Install Add-On/Active X if prompted.
[*]From the Computer Scan Setting –
[list][*]Uncheck the box beside Remove Found Threats;
[*]Check the box beside Scan archives
[*]Click on Advanced Setting and check the following boxes–
[*]Scan for potentially unwanted applications
[*]Scan for potentially unsafe applications
[*]Enable Anti-Stealth Technology
[*]Click on Start and wait for the virus signature database to update.
[*]The online scan will begin automatically and can take several hours.
[*]Note: Do not touch either the Mouse or keyboard during the scan. Otherwise it may stall.
[*]After the Scan finishes –
[*]If no threats were found:
[list][*]Put a checkmark in Uninstall application on close.
[*]Close the program and report that nothing was found
[*]If threats were found:
[*]Open the file located in C:\Program Files\ESET\ESET Online Scanner\log.txt (32-bit) or C:\Program Files (x86)\ESET\ESET Online Scanner\log.txt (64-bit).
[*]Attach the log file in your next reply.[/list][/list]
Note: Enable your security programs afterwards.
[*]Required Log(s):
[]FRST Fix Log;
[]Malwarebytes’ Anti-Malware Log;
[*]ESET Scan Log
Regards,
Valinorum