Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!
This topic is locked
Member
whatever I have is redirecting all my browsers, firefox, iE and chrome.
I have run my antivirus, malware bytes, cc cleaner, and superanti spyware as well as adware.
t then seems to run well for about an hour and then whammo back to being messed up.
any help would be appreciated.
thank you.
Trusted Helper
Hi. My name is Brian, and I would be happy to look into your issue.
I am currently in training and my posts will need to be reviewed by an expert, so expect a slight delay between posts.
- General Instructions -
- Save ALL Tools to your Desktop-
All tools that I have you download should be placed on the desktop unless otherwise stated. If you are familiar with how to save files to the desktop then you can skip this step.
Since you are continuing with this step then I assume you are unfamiliar with saving files to your desktop. As a result it's easiest if you configure your browser(s) to download any tools to the desktop by default. Please use the appropriate instructions below depending on the browser you are using.
Google Chrome - Click the "Customize and control Google Chrome" button in the upper right-corner of the browser.
Choose Settings. at the bottom of the screen click the
"Show advanced settings..." link. Scroll down to find the Downloads section and click the Change... button. Select your desktop and click OK.
Mozilla Firefox - Click the "Open Menu" button in the upper right-corner of the browser. 
Choose Options. In the downloads section, click the Browse button, click on the Desktop folder
and the click the "Select Folder" button. Click OK to get out of the Options menu.
Internet Explorer - Click the Tools menu in the upper right-corner of the browser. 
Select View downloads. Select the Options link in the lower left of the window. Click Browse and
select the Desktop and then choose the Select Folder button. Click OK to get out of the download options screen and then click Close to get out of the View Downloads screen.
NOTE: IE8 Does not support changing download locations in this manner. You will need to download the tool(s) to the default folder, usually Downloads, then copy them to the desktop.
- Finally Before We Start-
Removing malware is a complicated multiple step process, Please stay with me until I have declared your system clean. I strongly recommend you backup your personal files and folders. Although rare, attempting to remove malware can render your machine unbootable or cause data loss. Having backups of your data is your responsibility. Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.
OK, let's get started. Please provide the following logs below.
Fresh Set of Logs Needed
Let's begin. Please follow the steps below.
1. Please download Farbar Recovery Scan Tool and save it to your Desktop.
Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them.
Only one of them will run on your system, that will be the right version.
2. Right click on the file and select Run as administrator (If you don't have this option simply double-click the file to open). When the tool opens click Yes to disclaimer.
3. Press Scan button.
4. It will produce a log called FRST.txt in the same directory the tool is run from (which should be the desktop)
5. Please copy and paste log back here.
6. The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe). Please also paste that along with the FRST.txt into your reply.
Note: Please do not attach any logs unless specifically requested. It's easier if you simply copy and paste them into your reply. It's OK if you have to use more than one post to do so.
Trusted Helper
No problem. Please also attach the Addition.txt file which should be located in the same directory.
Trusted Helper
couple questions for you as well.
1. I noticed that your account (Brian) may not have administrative permissions on the machine. Many of our tools will require administrative permissions in order to do their job. Are you able to use an Admin account on the machine?
2. Also it appears that your machine is configured to use an internet proxy of 127.0.0.1:9880. Are you aware of this?
Thank you.
Member
Hi. Yes, I was using my husbands account because mine disappeared.
I remade one for myself and am now once again the admin.
No, I did not know my computer was using an internet proxy.
Is that part of my problem?
Do I need to run the scan from the admin screen now?
Edited by nonosma, 25 November 2014 - 12:42 PM.
Trusted Helper
Thanks for the info. The proxy is likely part of the infection. Don't do anything yet. I'll prepare instructions for you now that you are the admin.
Trusted Helper
Please follow the instructions below.
Step#1 - Warnings
Low on Disk Space
Your C:\ drive is very low on space. This can adversely affect the performance of your computer. It's recommended to have at least 15% free disk space so that tools such as the automated defragger can keep your drive optimized.
CCleaner
I see that you have CCleaner installed. This is indeed a good product but I wanted to caution you on running the registry cleaning functionality of the tool. Please avoid this as it can do more harm than good.
Step#2 - Uninstalls
Please uninstall the following programs one at a time. Instructions for doing so are here.
If any of the programs give you an error during the uninstall, notate it and move on to the next one. Just let me know which ones had issues. If you are asked to reboot, answer No until all the programs have been uninstalled and then you can reboot. All of these programs are either outdated, malware/adware, have a bad reputation or are not recommended. If you absolutely must have one of them I suggest that you wait until you are declared clean before reinstalling.
-FrostWire 5.6.3
-Frostwire Toolbar
-Pando Media Booster
Step#3 - Disable Windows Defender
We need to disable Windows Defender to avoid conflicts with your Avast Premier AV. Having both enabled at the same time can cause undesirable effects. Please do the following to disable.
1. Open Windows Defender by clicking the Start button. In the search box, type Defender, and then, in the list of results, click Windows Defender.
2.Click Tools, and then click Options.
3.Click Administrator, clear the Use this program check box, and then click Save. If you're prompted for an administrator password or confirmation, type the password or provide confirmation.
Step#4 - JRT
Note: Please disable your Antivirus Software before doing Step#1. You can right-click the Avast shield in your taskbar down by your time and temporarily disable.
1. Download Junkware Removal Tool to your desktop.
2. Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
3, The tool will open and start scanning your system.
4. Please be patient as this can take a while to complete depending on your system's specifications.
5. On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
6. Close the text file and reboot your machine.
7. After your machine is rebooted, please re-enable your antivirus.
8. Post the contents of JRT.txt into your next message.
Step#5 - AdWCleaner
1. Please download AdwCleaner by Xplode onto your desktop.
2. Close all open programs and internet browsers.
3. Right-click on AdwCleaner.exe and select Run as administrator to run the tool.
4. Click on Scan.
5. After the scan is complete click on "Clean"
6. Confirm each time with Ok.
7. Your computer will be rebooted automatically. A text file will open after the restart.
8. Please post the content of that logfile with your next answer.
9. If need be, you can also find the logfile at C:\AdwCleaner\AdwCleaner[S0].txt as well.
Step#6 - FRST Scan
1. Please download Farbar Recovery Scan Tool and save it to your Desktop.
Note: You need to run the 64-bit Version so please ensure you download that one.
2. Right click to run as administrator. When the tool opens click Yes to disclaimer.
3. Please ensure you place a check mark in the Addition.txt check box at the bottom of the form before running (if not already).
4. Press Scan button.
5. It will produce a log called FRST.txt in the same directory the tool is run from (which should now be the desktop)
6. Please copy and paste log back here.
7. Another log (Addition.txt - also located in the same directory as FRST64.exe) will be generated Please also paste that along with the FRST.txt into your reply.
Items for your next post
1. JRT log
2. AdwCleaner log
3. FRST and Addition logs
Member
frostwire tool bar would not unintstall. I kept getting a close IE notice,IE isn't even being used right now.
as to defragging the drive, I did so 2 days ago, it was right after that I started having issues.
Trusted Helper
No problem. Thanks for letting me know. Go ahead and continue with the instructions.
Member
Member
Member
0 members, 0 guests, 0 anonymous users
Community Forum Software by IP.Board
Licensed to: Geeks to Go, Inc.
Sign In
Create Account
