Please go to control panel > programs and features find and remove/uninstall ASK Toolbar
Then …
Step #1
Please downloadThe Avenger2 by Swandog46 to your Desktop.
[*]Right click on the Avenger.zip folder and select “Extract All…”
[*] Follow the prompts and extract the avenger folder to your desktop
Copy all the text contained in the code box below to your Clipboard by highlighting it and pressing (Ctrl+C):
Folders to delete:
C:\windows\Installer\{96641afd-b410-b0ea-012d-f17a2b427bfc}
C:\Users\Church Family PC\AppData\Local\{96641afd-b410-b0ea-012d-f17a2b427bfc}
Files to move:
C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.exe|C:\windows\SysNative\services.exe
Note: the above code was created specifically for this user. If you are not this user, do NOT follow these directions as they could damage the workings of your system.
Now, open the avenger folder and start The Avenger program by clicking on its icon.
[*] Right click on the window under Input script here:, and select Paste.
[*] You can also Paste the text copied to the clipboard into this window by pressing (Ctrl+V), or click on the third button under the menu to paste it from the clipboard.
[*] Click on Execute
[*] Answer “Yes” twice when prompted.
The Avenger will automatically do the following:
[*]It will Restart your computer. ( In some cases twice)
[*]On reboot, it will briefly open a black command window on your desktop, this is normal.
[*]After the restart, it creates a log file that should open with the results of Avenger’s actions. This log file will be located at C:\avenger.txt
Please copy/paste the content of c:\avenger.txt into your reply
Step #2
Run OTL.exe.
[*]Copy and paste the following text written inside of the quote box into the Custom Scans/Fixes box.
[*]Then click the Run Fix button at the top.
[*]Let the program run unhindered; it will reboot when it is done. If it does not, please reboot your system. OTL will open notepad with logreport. Copy-paste here logreport…
Step #3
Re-run aswMBR and Malwarebytes. Attach here fresh mbam log report and tell me how is your computer running now?
Thank you very much for the lighting reply. I was looking for the “Ask Toolbar” to be uninstalled and it is not listed. Is it o.k. to proceed to step one?
Here are the logs after re running aswMBR, OTL and Malwarebyte. I noticed a little difference in the speed, but my avast still detects a Trojan which it moves to the chest every five minutes. Let me know if I am doing something wrong. Thank you in advance for taking the time to help.
Hmm … judging by the Malwarebytes logs malware is still active. :-
For some reason my script did not do their job.
Please do not upload your logs on rapidshare! Attach them here. ( Attachments and other options )
Download ComboFixfrom here and save it to your Desktop.
If you are unsure how ComboFix works please read this guide carefully. note: ComboFix must be downloaded to your Desktop.
Temporarily disable your AntiVirus program.
If you are unsure how to do this please read this Instruction.
Run ComboFix. Click on I Agree!
ComboFix will check if there is a newer version of ComboFix available.
Click Yes if prompted to download.
ComboFix will display DISCLAIMER OF WARRANTY ON SOFTWARE.
Click Yes to allow ComboFix to continue.
If Recovery Console is not installed, ComboFix will offer download & installation.
Click Yes to allow ComboFix to install Recovery Console.
When the tool is finished, it will produce a log report for you. (typical location: C:[b]ComboFix.txt[/b] )
Attach log reports ( ComboFix.txt) back to topic.
I do not know if I am doing something wrong, but it seems that I can not find the log. I copied and paste the info into the search and it still do not produce a log. This is the same with the Avenger tool. It only took about three minutes for the program to run and it was done. I will kepp looking to see if I can find that log, but if you have any suggestions of where and how to locate it I would greatly appreciate it.
Close all browser windows and refering to the picture above.
Referring to the screenshot above, drag CFScript.txt into ComboFix.exe.
ComboFix will will re-run. When finished, it will produce a log for you.
Attach the contents of the log in your next reply. (typical location: C:[b]ComboFix.txt[/b] )
Close all browser windows and refering to the picture above.
Referring to the screenshot above, drag CFScript.txt into ComboFix.exe.
ComboFix will will re-run. When finished, it will produce a log for you.
Attach the contents of the log in your next reply. (typical location: C:[b]ComboFix.txt[/b] )
Close all browser windows and refering to the picture above.
Referring to the screenshot above, drag CFScript.txt into ComboFix.exe.
ComboFix will will re-run. When finished, it will produce a log for you.
Attach the contents of the log in your next reply. (typical location: C:[b]ComboFix.txt[/b] )
