jessbuffyfan

Brilliant, thanks very much for your help TwinHeadedEagle, really appreciate it.

Haven't noticed any problems. Firefox was a little slow when the problem first occured, but seems fine now. My main concern was whether it was safe to logon to secure sites!

Here it is: Fixlog.txt

Attached are the latest Farber files: Addition.txt FRST.txt

Thanks for your help so far TwinHeadedEagle. Here is the log from Adwcleaner: # AdwCleaner v6.010 - Logfile created 26/08/2016 at 16:57:30 # Updated on 12/08/2016 by ToolsLib # Database : 2016-08-25.1 [Server] # Operating System : Windows 7 Professional Service Pack 1 (X64) # Username : local_admin - SA-LT-W7-05771 # Running from : C:\Users\local_admin\Desktop\AdwCleaner.exe # Mode: Clean # Support : https://toolslib.net/forum ***** [ Services ] ***** ***** [ Folders ] ***** [-] Folder deleted: C:\ProgramData\Application Hosting [#] Folder deleted on reboot: C:\ProgramData\Application Data\Application Hosting ***** [ Files ] ***** ***** [ DLL ] ***** ***** [ WMI ] ***** ***** [ Shortcuts ] ***** ***** [ Scheduled Tasks ] ***** ***** [ Registry ] ***** [-] Key deleted: HKLM\SOFTWARE\Classes\OCComSDK.ComSDK [-] Key deleted: HKLM\SOFTWARE\Classes\OCComSDK.ComSDK.1 [-] Key deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{FA7B2795-C0C8-4A58-8672-3F8D80CC0270} [-] Key deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{47A1DF02-BCE4-40C3-AE47-E3EA09A65E4A} [-] Key deleted: HKLM\SOFTWARE\Classes\AppID\{9CB2CD61-FFA0-406C-9D2D-8FDE6F4A4D8A} [-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{B9D64D3B-BE75-4FA2-B94A-C4AE772A0146} [-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{47A1DF02-BCE4-40C3-AE47-E3EA09A65E4A} [-] Key deleted: HKLM\SOFTWARE\Classes\Interface\{FA7B2795-C0C8-4A58-8672-3F8D80CC0270} [-] Key deleted: HKLM\SOFTWARE\Classes\Interface\{47A1DF02-BCE4-40C3-AE47-E3EA09A65E4A} [-] Key deleted: HKLM\SOFTWARE\Classes\TypeLib\{1112F282-7099-4624-A439-DB29D6551552} [-] Key deleted: HKU\S-1-5-21-1261024929-239964125-1116534971-1000\Software\BRS [#] Key deleted on reboot: HKCU\Software\BRS [-] Key deleted: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467 [-] Data restored: HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [Default] [-] Key deleted: HKLM\SOFTWARE\Classes\Record\{425E7597-03A2-338D-B72A-0E51FFE77A7E} [-] Key deleted: HKLM\SOFTWARE\Classes\Record\{915BB7D5-082E-3B91-B1E0-45B5FDE01F24} [-] Key deleted: HKLM\SOFTWARE\Classes\Record\{2009AF2F-5786-3067-8799-B97F7832FDD6} [-] Key deleted: HKLM\SOFTWARE\Classes\Record\{FB2E65F4-5687-33EF-9BBF-4E3C9C98D3B9} ***** [ Web browsers ] ***** ************************* :: "Tracing" keys deleted :: Winsock settings cleared ************************* C:\AdwCleaner\AdwCleaner[C0].txt - [2416 Bytes] - [26/08/2016 16:57:30] C:\AdwCleaner\AdwCleaner[S0].txt - [2771 Bytes] - [26/08/2016 16:56:38] ########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [2562 Bytes] ##########

I can't get rid of it ... Is it safe to just restart my laptop while it's still there/end zoek in task manager?

Zoek is running but it has been stuck on 'Firefox extensions' for the last 7 hours! Zoek will pop back up whenever I try to close it and is not progressing....

Thanks for your reply. I am having trouble deactivating McAfee so will get back to this post when I've managed to do that. Thanks.

Hi, I received an alert on my computer yesterday that it had been infected with a trojan - it didn't give any more details but I think the alert was from my antivirus program McAfee. I scanned my computer with mcafee and Malware Bytes - Malware Bytes showed up several infected files, mostly with 'scando' and 'linkury' viruses. I quarantined and then deleted the files through Malware Bytes. Scans since have come up clean. However, I have read that scando viruses can hide from antivirus programs and can be potentially devastating for computers, so I wanted to ensure that I have done all I can and that my computer is clean and safe. Any help would be appreciated, thanks Addition.txt FRST.txt