Unable to delete some viruses

Avast Free Antivirus / Premium Security
1

I downloaded the free version of Avast because my computer got infected with Malware and so I did a full system scan and there were 15 total infected file and it managed to delete 12 of them but for the other 3 it said “Error: The system cannot find the file specified (2)”, how can I fix this and delete those viruses? (because they are still affecting me).

2

more info … location of files detetec?
screenshot of detection result … you may need to open up the coulumn so we can see full file path

3
[b]The system cannot find the file specified[/b] (2)",
it usually means the files are not there anymore ...... and a reboot and new scan often comes up clean
how can I fix this and delete those viruses? ([b]because they are still affecting me[/b]).
how .... what are your symptoms?
4

File name Severity Status Result
b:\program files.…\suprasavingsservice.exe High Threat:Win32:BullSave-D[Adw] Error: The system cannot find the file . specified (2)
b:\program files.…\suprasavingsservice.exe High Threat:Win32:BullSave-D[Adw] Error: The system cannot find the file . specified (2)
b:\program files.…\suprasavingsservice.exe High Threat:Win32:BullSave-D[Adw] Error: The system cannot find the file . specified (2)

They all seem to be identical but they were detected separately and cannot be remove/deleted.

Symptoms:
Random words on website if you scroll over them it come up with an ad from supra savings
Some videos on website aren’t displayed because it says I need to download the newest version of Codec (a Malware Virus - I looked it up on the internet).
Sometime (even on secure site) a pop up appears.

5

and what are those that where detected and removed?

6

follow instructions here https://forum.avast.com/index.php?topic=53253.0
attach (not copy and paste) Malwarebytes and OTL logs …

make sure you save OTL as ANSI and not Unicoding

7

Okay this may take me a little while but so far Anti-Malware has dected 27 infections…

8

First Log

9

yea, your comp is full of crap files … and also a trojan detection
PUP = not virus / Possible Unwanted Program … usually crap that comes bundled with free downloads

did you take any action on them? … the log dont say http://blog.malwarebytes.org/news/2013/09/selecting-all-pups/

malware experts are notified and will check logs when they arrive

10

I have deleted most of the unwanted software and here are some more logs (Anti-Malware ones again)

11

here are the OTL.Txt and Extras.Txt

12

Sorry but I have school tomorrow and it’s late where I live so I will do the last bit tomorrow (as soon as I can) Thanks for the help!

13

Could you open the OTL log on your desktop and click File > Save as… and ensure that the coding is set to ANSI, then save and re-attach please

Details in this thread https://forum.avast.com/index.php?topic=53253.0

14

Oh ok sorry (the other one too? Or not?)

15

when I try to download aswMBR.exe Avast keeps blocking it as a virus

16

Ignore AswMBR for now, Avast is being a bit silly. I will upload as a Flase Positive

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL

[*]Under the Custom Scans/Fixes box at the bottom, paste in the following

https://dl.dropbox.com/u/73555776/OTL_Fix.GIF


:Commands
[CREATERESTOREPOINT]

:OTL
IE - HKLM\..\SearchScopes,DefaultScope = {006ee092-9658-4fd6-bd8e-a21a348e59f5}
IE - HKLM\..\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}: "URL" = http://feed.snapdo.com/?publisher=TightropeYB&dpid=TightropeYB&co=GB&userid=59408f15-680d-4189-adf1-1220c2dc9755&searchtype=ds&q={searchTerms}&installDate=29/06/2013
IE - HKU\S-1-5-21-3244003697-3728270123-4111173487-1001\..\SearchScopes,DefaultScope = {006ee092-9658-4fd6-bd8e-a21a348e59f5}
IE - HKU\S-1-5-21-3244003697-3728270123-4111173487-1001\..\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}: "URL" = http://feed.snapdo.com/?publisher=TightropeYB&dpid=TightropeYB&co=GB&userid=59408f15-680d-4189-adf1-1220c2dc9755&searchtype=ds&q={searchTerms}&installDate=29/06/2013
O3 - HKLM\..\Toolbar: (no name) - {ae07101b-46d4-4a98-af68-0333ea26e113} - No CLSID value found.
[2014/06/26 20:22:28 | 000,000,000 | ---D | C] -- B:\Program Files\898DEBAE-54F2-4102-AE1C-A02B2223833C
[2014/06/22 11:05:57 | 000,000,000 | ---D | C] -- B:\Program Files\003
[2014/06/22 11:05:16 | 000,000,000 | ---D | C] -- B:\Program Files\Browsersafeguard
[2014/06/12 20:05:34 | 000,031,744 | ---- | C] (NetFilterSDK.com) -- C:\Windows\System32\drivers\netfilter.sys

:Commands
[resethosts]
[emptytemp]
[Reboot]

[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
[*]Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

THEN

Please download AdwCleaner by Xplode onto your desktop.

[*]Close all open programs and internet browsers.
[*]Double click on AdwCleaner.exe to run the tool.
[*]Click on Scan.
[*]After the scan is complete click on “Clean”
[*]Confirm each time with Ok.
[*]Your computer will be rebooted automatically. A text file will open after the restart.
[*]Please post the content of that logfile with your next answer.
[*]You can find the logfile at C:\AdwCleaner[S1].txt as well.

17

Here is the next log (I wasn’t sure if ANSI or Unicode so I have done both)

18

Once AdwCleaner has finished could you let me know what problems remain

19

here is the AdwCleaner log (tell me if there’s anything I should know)
If there are still problems I will reply and tell you what they were
If not Thanks So much for helping me (both of you two that have replied)

20

I think all the problems are gone :smiley: