24 replies to this topic

[VWTDI]

Please help. I can thank Cnet for this

Attached Files

•  avz_log.txt   154.95K   21 downloads

[MrCharlie]

Welcome to the forum, please start at the link below:

http://forums.malwar...?showtopic=9573

Post back the 2 logs here.....DDS.txt and Attach.txt

<====><====><====><====><====><====><====><====>

Next.......

Please remove any usb or external drives from the computer before you run this scan!

Quit all running programs.

Please download and run RogueKiller to your desktop.

For Windows XP, double-click to start.
For Vista or Windows 7, do a right-click on the program, select Run as Administrator to start, & when prompted Allow to run.

Click Scan to scan the system.
When the scan completes > Close out the program > Don't Fix anything!

Don't run any other options, they're not all bad!!!!!!!

Post back the report which should be located on your desktop.

MrC

------->Your topic will be closed if you haven't replied within 3 days!<--------

(If I don't respond within 48 hours, please send me a PM)

[VWTDI]

Here is the right log sorry.

Attached Files

•  attach.txt   11.72K   9 downloads

[VWTDI]

Here is the other.

Attached Files

•  dds.txt   19.51K   10 downloads

[MrCharlie]

That's only one log.

I need DDS.txt and the log from RogueKiller.

MrC

[VWTDI]

Here you go sorry.

Attached Files

•  dds.txt   19.51K   8 downloads

[MrCharlie]

I need to see the log from RogueKiller........

Please read the directions carefully so you don't end up deleting something that is good!!

Please note that TDSSKiller can be run in safe mode if needed.

Here's a video that explains how to run it if needed:
How To Run TDSSKiller

Please download the latest version of TDSSKiller from here and save it to your Desktop.

• Doubleclick on TDSSKiller.exe to run the application, then click on Change parameters.
  
  
  
• Put a checkmark beside loaded modules.
  
  
  
• A reboot will be needed to apply the changes. Do it.
  
• TDSSKiller will launch automatically after the reboot. Also your computer may seem very slow and unusable. This is normal. Give it enough time to load your background programs.
  
• Then click on Change parameters in TDSSKiller.
  
• Check all boxes then click OK.
  
  
  
• Click the Start Scan button.
  
  
  
• The scan should take no longer than 2 minutes.
  
• If a suspicious object is detected, the default action will be Skip, click on Continue.
  
  
  
  Any entries like this: \Device\Harddisk0\DR0 ( TDSS File System ) - please choose Skip.
  
• If malicious objects are found, they will show in the Scan results - Select action for found objects and offer three options.
  Ensure Cure (default) is selected, then click Continue > Reboot now to finish the cleaning process.
  
  
  
  Note: If Cure is not available, please choose Skip instead, do not choose Delete unless instructed.
  
• A report will be created in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here. There may be 3 logs > so post or attach all of them.
  
• Sometimes these logs can be very large, in that case please attach it or zip it up and attach it.

Here's a summary of what to do if you would like to print it out:

If a suspicious object is detected, the default action will be Skip, click on Continue
If you get the warning about a file UnsignedFile.Multi.Generic or LockedFile.Multi.Generic please choose
Skip and click on Continue

Any entries like this: \Device\Harddisk0\DR0 ( TDSS File System ) - please choose Skip.

If malicious objects are found, they will show in the Scan results and offer three (3) options.

Ensure Cure is selected, then click Continue => Reboot now to finish the cleaning process.
Note: If Cure is not available, please choose Skip instead, do not choose Delete unless instructed.

~~~~~~~~~~~~~~~~~~~~

You can attach the logs if they're too long:

Bottom right corner of this page.


New window that comes up.



MrC

[VWTDI]

I hope this helps.

Attached Files

•  TDSSKiller.2.8.15.0_03.01.2013_12.44.45_log.txt   3.66K   7 downloads
•  TDSSKiller.2.8.15.0_03.01.2013_12.48.29_log.txt   2.58MB   7 downloads
•  TDSSKiller.2.8.15.0_03.01.2013_12.43.10_log.txt   3.66K   6 downloads

[MrCharlie]

OK, I just wanted to check for any rootkits you may have had. The logs look OK.

Next............

Please download AdwCleaner from here and save it on your Desktop.

Quote

AdwCleaner is a reliable removal tool for adware, toolbar and potentially unwanted programs.

AdwCleaner is a tool that deletes :
· Adwares (software ads)
· PUP/LPI (Potentially Undesirable Program)
· Toolbars
· Hijacker (Hijack of the browser's homepage)

It works with a Search and Deletion methode. It can be easily uninstalled using the "Uninstall" mode.

• Right-click on adwcleaner.exe and select Run As Administrator (for XP just double click) to launch the application.
  
• Now click on the Search tab.
  
• Please post the contents of the log-file created in your next post.

Note: The log can also be located at C:\ >> AdwCleaner[XX].txt >> XX <-- Denotes the number of times the application has been ran, so in this should be something like R1.

Please look over what was found, we're going to delete it all in the next step....if there's something you may want to keep...please let me know and I'll explain to why it shouldn't be on your system.

MrC

[VWTDI]

Here you go.

Attached Files

•  AdwCleanerR1.txt   7.31K   8 downloads

[MrCharlie]

Lots of adware found....lets clear it out.....

• Please re-run AdwCleaner
  
• Click on Delete button.
  
• Confirm each time with OK if asked.
  
• Your computer will be rebooted automatically. A text file will open after the restart. Please post the content of that logfile in your reply.

Note: You can find the logfile at C:\AdwCleaner[Sn].txt as well - n is the order number.

MrC

[VWTDI]

I hope this is right one.

Attached Files

•  AdwCleanerS1.txt   6.88K   6 downloads

[MrCharlie]

Yes that's right, now run this one.............

Please download Junkware Removal Tool to your desktop.

• Shut down your protection software now to avoid potential conflicts.
  
• Run the tool by double-clicking it. If you are using Windows Vista or Seven, right-mouse click it and select Run as Administrator.
  
• The tool will open and start scanning your system.
  
• Please be patient as this can take a while to complete depending on your system's specifications.
  
• On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  
• Post the contents of JRT.txt into your next message.

MrC

[VWTDI]

Just to let you know the Coupon Companion plug in 215 Apps is still there

[MrCharlie]

I know, I want to get rid of any and all adware on the system. MrC

[MrCharlie]

If you run the programs we could finish this up very quickly instead of dragging it out for days!! MrC

[VWTDI]

The junkware tool remover seems to stuck on explorer.Also zone alarm web protection is turn off.

[MrCharlie]

OK, please do this instead................

Please download OTL from one of the links below:
http://oldtimer.geekstogo.com/OTL.exe
http://www.itxassoci...T-Tools/OTL.exe
http://oldtimer.geekstogo.com/OTL.com (<---renamed version)

Save it to your desktop.
Double click on the icon on your desktop.
Click the Scan All Users checkbox.
Push the Quick Scan button.

The scan will take about 10 minutes...depends on your hard drive size.

Two reports will open, copy and paste them in a reply here: (or attach them as .txt files)
OTL.txt <-- Will be opened
Extra.txt <-- Will be minimized

MrC

[VWTDI]

Here you go.

Attached Files

•  OTL.Txt   99.1K   6 downloads

[MrCharlie]

Please do this:
Run OTL
[*]Under the Custom Scans/Fixes box at the bottom, paste in bold:

:OTL
PRC - [2012/12/19 10:03:28 | 000,945,152 | ---- | M] (215 Apps) -- C:\Program Files\Coupon Companion Plugin\Coupon Companion Plugin-bg.exe
O2 - BHO: (Coupon Companion Plugin) - {11111111-1111-1111-1111-110211181104} - C:\Program Files\Coupon Companion Plugin\Coupon Companion Plugin.dll (215 Apps)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [ISW] File not found
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O22 - SharedTaskScheduler: {73526E5A-FD53-4BE7-B5E2-D3C89D7413DC} - Ave's FolderBg - No CLSID value found.
[2012/12/19 10:03:43 | 000,000,000 | ---D | C] -- C:\Users\Tommy\AppData\Local\Coupon Companion Plugin
[2012/12/19 10:03:35 | 000,000,000 | ---D | C] -- C:\Program Files\Coupon Companion Plugin

:Commands
[EMPTYJAVA]
[emptytemp]
[EMPTYFLASH]

[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, when done it will say "Fix Complete press ok to open the log"
[*]Please post that log in your next reply. Note: If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes. In this case, after the reboot, open Notepad (Start->All Programs->Accessories->Notepad), click File->Open, in the File Name box enter *.log and press the Enter key, navigate to the C:\_OTL\MovedFiles folder, and open the newest .log file present, and copy/paste the contents of that document back here in your next post.

MrC