Ukele

Hi Kevin, Thank you for that. So, it seems the only way to get rid of PUP.Optional.Linkury is to get the premium version to keep it off my computer since it would be reintroduced by various means. It helps to know what is going on. Thank you again, Ukele

Hi Kevin, Thank you for responding. However the download from the link did not deal with the PUP.Optional.Linkury.A, as promised with the four steps on https://malwaretips.com/blogs/pup-optional-linkury-a-removal/ Thank you again, Ukele

JUNKWARE REMOVAL TOOL DOWNLOAD LINK it does not download, just saying 'pageok'

Thank you for all the useful information and links! Yes, I shall keep away from driver update programs. I removed the tools and logs we've used and have taken the tick out of the box for hiding the file endings. I got rid of the restoration points, and for good measure, I deleted all backups. After having started with a new system image and a new first backup, I thought I should have scanned for infections first. So I scanned the external hard drive after the backup. Norton found and treated 10 infections. But when I scanned the "C" drive, no infections were found or treated. I shall scan all USB sticks and CDs ... and make sure I follow your advice, only to connect these with the PC while saving or collecting files. I've bookmarked the instructive site for Prevention of Malware Infection. I shall save your post for future reference. With man thanks for your patience and your generous help, Ukele

Problem solved! Thank you for all your help. I solved the problem the easy way by getting rid of Tweakbit: uninstalled, deleted in regedit and in downloads after finding complaints that match and surpass mine. One site suggests that driver updaters are unnecessary, anyway. If I do feel the need for one in future I shall visit the review page (http://driver-update-software-review.toptenreviews.com/) first, which at the moment recommends Driver Detective. I am sorry it took me so long to recognize that I had a completely irrational fixation with Tweakbit. With many thanks, Ukele

Sorry, I just realized that I should have unticked the option "remove" in ESET. After rebooting and starting again, ESET did not find any issues. And MBAM found as ever the same "potentially unwanted programmes."

Thank you for the homework ! The Junkware Removal tool (JRT log file) did not find any problems. The AdwCleaner found stuff, mainly related to Tweakbit Driver Updater, which I believe I need. So I unticked everything. (AdwCleaner S3 file) The ESET Onlinescan found and dealt with 32 infected files (ESET 22-08) The Farbar Recovery Scan Tool is barred by Norton even with Firewall and Auto-Protection disabled. So I could not complete this task. In anticipation ... JRT.txt AdwCleanerS3.txt ESET 22-08.txt

OK, here it is: MBAM log2 21-08.txt

Ah! Thank you very much for that information. I've downloaded the free copy and updated. Here is today's log file: MBAM log 21-08.txt

Sorry, but that is not possible. Having got disenchanted I did not renew my subscription. I was willing to help with what might be of interest to you, but not willing to renew the subscription. I might return at some future date, but I have not quite got to that point yet.

OK, here it is: Attached Files MBAM application log.txt 1.04KB 0 downloads

OK, here it is: MBAM application log.txt

Here is the Scan result

Thank you for this useful response. Rkill seems to confirm that I can ignore the warning about potentially unwanted TweakBit programmes: Rkill 2.8.1 by Lawrence Abrams (Grinler)http://www.bleepingcomputer.com/Copyright 2008-2015 BleepingComputer.comMore Information about Rkill can be found at this link: http://www.bleepingcomputer.com/forums/topic308364.html Program started at: 08/19/2015 06:45:51 PM in x64 mode.Windows Version: Windows 7 Home Premium Service Pack 1 Checking for Windows services to stop: * No malware services found to stop. Checking for processes to terminate: * No malware processes found to kill. Checking Registry for malware related settings: * No issues found in the Registry. Resetting .EXE, .COM, & .BAT associations in the Windows Registry. Performing miscellaneous checks: * Windows Defender Disabled [HKLM\SOFTWARE\Microsoft\Windows Defender] "DisableAntiSpyware" = dword:00000001 Checking Windows Service Integrity: * Windows Defender (WinDefend) is not Running. Startup Type set to: Manual Searching for Missing Digital Signatures: * No issues found. Checking HOSTS File: * No issues found. Program finished at: 08/19/2015 06:46:50 PMExecution time: 0 hours(s), 0 minute(s), and 59 seconds(s)

Thank you, cjb! So the warning I get from Malwarebytes that two HKLM items may be threats or unwanted programmes can be ignored, it seems. I have deleted in regedit the HKEY paths. But they reappear every time I log on. I shall stop quarantining and deleting ! Thank you again, ukele