Quilcine21

Thanks Eagle. Are we done here?

So I disconnected and reconnected my external drives a couple times to let MCShield have a few looks at them. As expected, they're clean. I installed a Lacie thumb drive I've had for a couple years but haven't really used. MCShield said it was infected and cleaned up a couple things. Here's the log. Does any of this look familiar or make sense to you? MCShield ::Anti-Malware Tool:: http://www.mcshield.net/ >>> v 3.0.5.28 / DB: 2015.12.6.1 / Windows 8.1 <<< 12/7/2015 9:18:10 PM > Drive H: - scan started (LaCie ~3846 MB, FAT32 flash drive )... >>> H:\autorun.inf > Suspicious > Renamed. (MD5: 07d76f3b74c4e88646c09bfad8a4254d) >>> H:\DGCipher.exe - Malware > Deleted. (15.12.07. 21.18 DGCipher.exe.326229; MD5: 98651fa2070cf20db4ea8cd3ea740c93) >>> H:\Lacie Programs\DGCipher.exe - Malware > Deleted. (15.12.07. 21.18 DGCipher.exe.722664; MD5: 98651fa2070cf20db4ea8cd3ea740c93) => Malicious files : 2/2 deleted.=> Suspicious files : 1/1 renamed. ____________________________________________ ::::: Scan duration: 39sec :::::::::::::::::____________________________________________

Ran DelFix and cleaned up. Confirmed the new restore point too. Read the Security and Maint tips in step 2 Installed your suggested Software in step 2 Any other suggestions?

Ok, I'm back. I take care of a small apartment building and had a little problem with one of the dryers....Working through your instructions now...

Donation Complete. Thanks again...

Thanks again TwinHeadedEagle. Donating now. How can I buy you that beer? You have my email address....

Done. Here is the MCShield AllScans log result. It ran very quickly and said all drives were clean.... What do you think? >>> MCShield AllScans.txt <<< ----------------------------- MCShield ::Anti-Malware Tool:: http://www.mcshield.net/ >>> v 3.0.5.28 / DB: 2015.12.6.1 / Windows 8.1 <<< 12/7/2015 5:48:37 PM > Drive C: - scan started (no label ~365 GB, NTFS HDD )... => The drive is clean. 12/7/2015 5:48:37 PM > Drive D: - scan started (no label ~545 GB, NTFS HDD )... => The drive is clean. MCShield ::Anti-Malware Tool:: http://www.mcshield.net/ >>> v 3.0.5.28 / DB: 2015.12.6.1 / Windows 8.1 <<< 12/7/2015 5:50:18 PM > Drive G: - scan started (Elements ~1863 GB, NTFS HDD )... >>> G:\autorun.inf > Legitimate file. => The drive is clean. MCShield ::Anti-Malware Tool:: http://www.mcshield.net/ >>> v 3.0.5.28 / DB: 2015.12.6.1 / Windows 8.1 <<< 12/7/2015 5:51:02 PM > Drive F: - scan started (LACIE ~233 GB, FAT32 HDD )... => The drive is clean.

Looks like that resolved my problem. Thank you for your precious time and expertise. I WILL donate via PayPal. You can count on that. How can I buy you a beer? You're my new best friend. Question: Is there a way to scan my external HD G: ? I believe that's where all this started. It's a drive I haven't connected for a couple years and would like to make sure it's clean before i move it's contents to a newer networked drive.

Fresh runs. Thank you... FRST.txt Addition.txt

Same problem. I open chrome and it goes to my normal google page and then 1-2 seconds later it flips to this yahoo search page. https search.yahoo.com/?fr=hp-ddc-bd-tab&type=dc-bcr-sw-rhb-49__alt__ddc_dsssyctab_bd_com

I see what I did wrong. Sorry. Didn't mean to waste your time. I pressed scan rather than fix. Here are the correct results. Fixlog.txt

FRST generated a file named FRST.txt. I don't see the file called Fixlog.txt. FRST.txt

Sorry about the options thing....I'll run the fix now....

Is it possible to run these scans on my external drive G:?

Hello TwinHeadedEagle, here are my fresh FRST scans... FRST.txt Addition.txt Shortcut.txt