Suspicious activity

Viruses and worms
1

Avast is picking this up every half hour or so…
hxxp://cdnrep.reimage.com/protector/ProtectorPackage2004x64.exe

How do I wipe this out?

2

We need some logs
Follow instructions https://forum.avast.com/index.php?topic=53253.0

3

REQUESTED FILES ATTACHED…1 MORE COMING

4

1 MORE

5

malware expert is notified … may take some time before he is online

6

Let me know if this stops it

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

FF SelectedSearchEngine: Conduit Search 2014-08-11 15:04 - 2014-08-11 15:04 - 00000000 ____D () C:\ProgramData\Reimage Protector Task: {F764E783-82B4-422E-B2A7-6E1EBA05D8D0} - System32\Tasks\Reimage Reminder => C:\Program Files\Reimage\Reimage Repair\ReimageReminder.exe C:\Program Files\Reimage AlternateDataStreams: C:\Users\John Stagg\Documents\frame inv.jpeg:3or4kl4x13tuuug3Byamue2s4b AlternateDataStreams: C:\Users\John Stagg\Documents\frame inv.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} EmptyTemp: CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe
Run FRST and press Fix
On completion a log will be generated please post that

THEN

Please download AdwCleaner by Xplode onto your desktop.

[*]Close all open programs and internet browsers.
[*]Double click on AdwCleaner.exe to run the tool.
[*]Click on Scan.
[*]After the scan is complete click on “Clean”
[*]Confirm each time with Ok.
[*]Your computer will be rebooted automatically. A text file will open after the restart.
[*]Please post the content of that logfile with your next answer.
[*]You can find the logfile at C:\AdwCleaner[S1].txt as well.

7

Just so I have this straight… the FRST program is saved on my deskop so you want me to save the above info on the desktop as well…run FRST and just click “fix”???

8

Yup as FRST will look for the fix on the desktop

9

fix log

10

OK…so adware was installed and run…it picked up the reimage file and cleaned

Attached is report

11

Any further alerts ?

12

I hope not but we shall see…do I have any additional need for all these text files? The programs I guess I will keep until we know the alert is gone. Thanks for your help…much appreciated. :slight_smile:

13
do I have any additional need for all these text files?
you may delete the logs now ..... and Essexboy will remove the programs used when all is OK
14

Let me know when you are happy and I will tidy up