Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Something trying to install and Avast finding malware.


  • This topic is locked This topic is locked

#16
zep516

zep516

    Trusted Helper

  • Malware Removal
  • 6,791 posts
Yes try running it again. See what happens.
  • 0

Advertisements


#17
Faithsa

Faithsa

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 190 posts

I'll post the results in the morning.


  • 0

#18
Faithsa

Faithsa

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 190 posts

I found this from the 27th (I don't see a new one from the most recent scan):

 

[email protected] as CAB hook log:
OnlineScanner64.ocx - registred OK
OnlineScanner.ocx - registred OK
 
 
 
And this is the c/p from the report from eset this morning before I closed it:
 
C:\AdwCleaner\Quarantine\C\Users\Sabrina\AppData\Roaming\Speedial\UpdateProc\UpdateTask.exe.vir a variant of Win32/DealPly.S potentially unwanted application
C:\AdwCleaner\Quarantine\C\Users\Sabrina\AppData\Roaming\VOPackage\Uninstall.exe.vir Win32/VOPackage.J potentially unwanted application
C:\AdwCleaner\Quarantine\C\Users\Sabrina\AppData\Roaming\VOPackage\VOPackage.exe.vir Win32/VOPackage.J potentially unwanted application
C:\Users\Sabrina\Downloads\Setup (1).exe a variant of Win32/AdWare.iBryte.AK application
C:\Users\Sabrina\Downloads\Setup.exe a variant of Win32/AdWare.iBryte.AK application
 

  • 0

#19
zep516

zep516

    Trusted Helper

  • Malware Removal
  • 6,791 posts
Hello,

C:\AdwCleaner\Quarantine\C\Users\Sabrina\AppData\Roaming\Speedial\UpdateProc\UpdateTask.exe.vir a variant of Win32/DealPly.S potentially unwanted application
C:\AdwCleaner\Quarantine\C\Users\Sabrina\AppData\Roaming\VOPackage\Uninstall.exe.vir Win32/VOPackage.J potentially unwanted application
C:\AdwCleaner\Quarantine\C\Users\Sabrina\AppData\Roaming\VOPackage\VOPackage.exe.vir Win32/VOPackage.J potentially unwanted application

Those are already Quarantined by AdwCleaner, those will go away in the next few steps for clean up.

C:\Users\Sabrina\Downloads\Setup (1).exe a variant of Win32/AdWare.iBryte.AK application
C:\Users\Sabrina\Downloads\Setup.exe a variant of Win32/AdWare.iBryte.AK application


Those files are in your downloads folder, clear out your downloads folder and delete them:

So

You need to navigate here--> C:\Users\Sabrina\Downloads\ Then delete the contents of the downloads folder. Any trouble with that let me know.

Next

Since your log reports are clean and free of malware, lets clean up after ourselves.


OTL Clean-Up

Right click on the OTLicon.jpg icon on your desktop and choose Run as administrator to open the main window.

Next click on the CleanUpButtonOTL.jpg button.

Once clean up is complete you will be prompted to reboot your computer. Please do so.

This will remove most of the programs we have used including itself.


Next

Double-click on AdwCleaner.exe to run the tool again.
  • Click on the Uninstall button.
  • Click Yes when asked are you sure you want to uninstall.
  • Both AdwCleaner.exe, its folder and all logs will be removed.
Right click on the JRT Icon and select delete.
If there are any left over tools or logs on your computer please delete them now.

Next

Clear Restore Points

Go Start > All Programmes > Accessories > System tools
Right click Disc Cleanup and select run as administrator
When it pops up at the first prompt select OK after it has done some calculations the tabs will appear
Select More Options tab
Press Sytem Restore and Shadow Copies Cleanup button
disc%20clean.JPG

You usually get infected because your security settings are too low.

Here are a number of recommendations that will help tighten them, and which will contribute to making you a less likely victim:

Safe Computing Practices please read Here

Thanks
Joe :)
  • 0

#20
Faithsa

Faithsa

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 190 posts

What's the best way to remove JRT?


  • 0

#21
zep516

zep516

    Trusted Helper

  • Malware Removal
  • 6,791 posts
Right click on the JRT Icon and select delete. The program runs from the desktop, so it never actually installs to program folder.

Thanks
Joe :)
  • 0

#22
Faithsa

Faithsa

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 190 posts

I'm going down the list of things to do/install etc to secure my system more and I have a question or two, should I ask you or a different forum??  I am currently using an administrator acct.  I'd like to switch ot a standard acct for each person in the family but I don't know how to do that without starting over for myself ? (I have several tabs that stay open in my browser for example.)  So, I'm not sure how to do this?


  • 0

#23
Faithsa

Faithsa

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 190 posts

I also have questions about my internet browser (using Chrome and its not mentioned) and the spyware/malware blocking options.


  • 0

#24
zep516

zep516

    Trusted Helper

  • Malware Removal
  • 6,791 posts
Hello,

You're going to want / need an administrator account on the computer so just keep what you have there now, and create another account (standard) account for everyday use that you can use for yourself.

These links may be helpful to you Here and Here

I am not sure about Chrome.

Thanks
Joe :)
  • 0

#25
zep516

zep516

    Trusted Helper

  • Malware Removal
  • 6,791 posts
Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.
  • 0

Advertisements







Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP