Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Gorilla Price [Closed]


  • This topic is locked This topic is locked

#16
ruggie_uk

ruggie_uk

    Trusted Helper

  • Malware Removal
  • 2,083 posts
No. You are only downloading the files on that machine.
  • 0

Advertisements


#17
redbchtrvlr

redbchtrvlr

    Member

  • Topic Starter
  • Member
  • PipPip
  • 38 posts

The junkware removal tool is running a process check on my 8.1.  It didn't give me the option to save to the flash drive


  • 0

#18
ruggie_uk

ruggie_uk

    Trusted Helper

  • Malware Removal
  • 2,083 posts
Try right clicking the download link and select save target as....
  • 0

#19
redbchtrvlr

redbchtrvlr

    Member

  • Topic Starter
  • Member
  • PipPip
  • 38 posts

junkware run on my daughter's computer, now lets see about adwcleaner


  • 0

#20
ruggie_uk

ruggie_uk

    Trusted Helper

  • Malware Removal
  • 2,083 posts
Excellent. Adwcleaner is only set to scan and not clean. So when it has scanned, save the log along with the other logs on to the flash drive and paste back here please.
We need to make sure adwcleaner only removes what it needs to.
  • 0

#21
redbchtrvlr

redbchtrvlr

    Member

  • Topic Starter
  • Member
  • PipPip
  • 38 posts

Here you go :spoton:

Attached Files


  • 0

#22
ruggie_uk

ruggie_uk

    Trusted Helper

  • Malware Removal
  • 2,083 posts

Hi, this is being a little stubborn so we might need to attack it again. First we will complete adwcleaner and then check with FRST again to see what is going on. Then bring out the big guns if that doesn't work.

Re-run AdwCleaner

Close all open windows and browsers.

  • Double click the adwcleaner.pngAdwCleaner icon to run AdwCleaner. (Vista and 7 users) Right click the adwcleaner.pngAdwCleaner icon, click Run as administrator and accept the UAC prompt to run AdwCleaner.
  • Click the Scan button and wait for the scan to complete.
  • When the Scan has finished the Scan button will be grayed out and the Clean button will be activated.
  • Click the Clean button.
  • Everything checked will be deleted.
  • When the program has finished cleaning a report appears.
  • Once done it will ask to reboot, allow this

    adwcleaner_delete_restart.jpg
  • On reboot a log will be produced please copy / paste that in your next reply. This report is also saved to C:\AdwCleaner\AdwCleaner[S0].txt

After reboot...
Please run FRST64 again from your Desktop. If you do not currently have it on your system, download it from here and save it to your desktop.

  • Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to the disclaimer.
  • Press Scan button.
  • It will produce a log called FRST.txt in the same directory the tool is run from.
  • Please copy and paste log back here.

  • 0

#23
redbchtrvlr

redbchtrvlr

    Member

  • Topic Starter
  • Member
  • PipPip
  • 38 posts

Good Morning, from Sunny California!   Here are the logs.  Please recall the computer is still unable to access the internet :upset:

Attached Files


  • 0

#24
ruggie_uk

ruggie_uk

    Trusted Helper

  • Malware Removal
  • 2,083 posts


The logs look good but there is obviously something lurking that keeps changing the proxy. You will of course have to transfer it over again like you have been doing.


Please download Download RogueKiller by Tigzy to your desktop.

  • Quit all programs
  • Right click roguekiller.pngroguekiller.exe and select Run as Administrator.
  • Wait until Prescan has finished ...
  • Click on Scan.
    Once the scan has completed, click on the registry tab and locate the entries that relate to proxy server. Check the boxes next to them and press delete. ( have attached a screenshot so you know what to look for)

  • Once finished, click on Report

Please post the contents of the RKreport.txt in your next Reply.


  • 0

#25
redbchtrvlr

redbchtrvlr

    Member

  • Topic Starter
  • Member
  • PipPip
  • 38 posts

I appreciate the clarity of your directions :D Here you go.

Attached Files


  • 0

Advertisements


#26
ruggie_uk

ruggie_uk

    Trusted Helper

  • Malware Removal
  • 2,083 posts
That says it has removed the proxy. Can you reboot and try it again please
  • 0

#27
redbchtrvlr

redbchtrvlr

    Member

  • Topic Starter
  • Member
  • PipPip
  • 38 posts

I tried to reboot right after I sent you the report and I still get the Proxy Server error :headscratch:


  • 0

#28
ruggie_uk

ruggie_uk

    Trusted Helper

  • Malware Removal
  • 2,083 posts

This one really is persistent....Lets get out the cannon :D

Combofix by sUBs

Please download Combofix from here

  • Note: Please read through these instructions before running ComboFix.
  • Please download ComboFix and save the file to your Desktop. << Important!
  • Temporarily disable your anti-virus software. For instructions, please refer to the following link.
  • Right-Click ComboFix.exe and select Run as administrator to run the program.
  • Follow the prompts.
  • Allow ComboFix to complete it's removal routine (please refer to Important Notes)
  • Upon completion, a log (ComboFix.txt) will be opened and also a copy created in the root directory (C:\). Copy the contents of the log and paste in your next reply.
  • Re-enable your anti-virus software.

Important Notes:

  • Do NOT mouse click ComboFix's window whilst it is running. This may cause it to stall.
  • Do NOT use your computer whilst ComboFix is running.
  • Your Desktop/taskbar may disappear whilst ComboFix is running; this is normal.
  • If you get the message Illegal operation attempted on registry key that has been marked for deletion please reboot your computer.
  • ComboFix will disconnect your machine from the Internet as soon as it starts.
  • Please do not attempt to re-connect your machine back to the Internet until ComboFix has completely finished.
  • If you are unable to access the Internet after running ComboFix, please reboot your computer.

  • 1

#29
redbchtrvlr

redbchtrvlr

    Member

  • Topic Starter
  • Member
  • PipPip
  • 38 posts

Wow that took an hour!  But the computer boots up, no garbage adware popped up---that bugger was imbedded!  Let me know if all looks good, and thank you so much!

Attached Files


  • 0

#30
ruggie_uk

ruggie_uk

    Trusted Helper

  • Malware Removal
  • 2,083 posts

So no proxy server error now? Internet acting as expected?


  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP