Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!
This topic is locked
Trusted Helper
Before we clean up, I’d like to check your computer’s security.
Run Security Check
Download Security Check by screen317 from here or here.
Satchfan
Member
Prior to this last step I ran Microsoft Security Essentials both a Quick and Full scan and each time the color indicator stays yellow indicating an issue and it says that I have not ran a scan recently even though the time of the34 last scan shows as just a few minutes ago.
Results of screen317's Security Check version 0.99.93
Windows 7 Service Pack 1 x64 (UAC is disabled!)
Internet Explorer 11
``````````````Antivirus/Firewall Check:``````````````
Windows Firewall Enabled!
Microsoft Security Essentials
Antivirus up to date!
`````````Anti-malware/Other Utilities Check:`````````
Spyder2express
A1PCCleaner
Java 7 Update 9
Java version 32-bit out of Date!
Adobe Flash Player 16.0.0.257
Adobe Reader 9
Adobe Reader XI
Mozilla Firefox 27.0.1 Firefox out of Date!
Google Chrome (39.0.2171.95)
Google Chrome (39.0.2171.99)
````````Process Check: objlist.exe by Laurent````````
Microsoft Security Essentials MSMpEng.exe
Microsoft Security Essentials msseces.exe
Malwarebytes Anti-Malware mbamservice.exe
Malwarebytes Anti-Malware mbam.exe
Malwarebytes Anti-Malware mbamscheduler.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: 1%
````````````````````End of Log``````````````````````
Trusted Helper
Prior to this last step I ran Microsoft Security Essentials both a Quick and Full scan and each time the color indicator stays yellow indicating an issue and it says that I have not ran a scan recently even though the time of the34 last scan shows as just a few minutes ago.
Apparently this is a common glitch with Microsoft Security Essentials, (MSE). See this.
Personally, I'd choose to run a different antivirus as over the years it has slid down in the test results and at one point even Microsoft was advising Windows users to use a third-party antivirus instead.
If you choose to use a different one, I've included instructions below.
===================================================
Your computer appears to be clean.
Now that you’re free from malware, as long as your computer seems to be running well, please follow these simple steps to tidy up you computer and decrease the likelihood of getting infected again:
Uninstall AdwCleaner
===================================================
Download & run Delfix
Also place a checkmark next to:
o Create registry backup
o Purge system restore
You can delete all other logs and programs we’ve used that are on your desktop. Just click on them and press Delete.
===================================================
Antivirus
Should you choose to use a different antivirus, do the following:
Download and install one of these free antivirus programs:
Free Avast Home Edition
Avira AntiVir® Personal Edition Classic
===================================================
Uninstall/update Programs
Your version of Java is out-of-date and need to be removed and updated.
If you are prompted for an administrator password or confirmation, type the password or provide confirmation.
Install the latest version of Java:
Java
NOTE – when you install Java, before clicking on Install, be sure to Uncheck “Install the Ask Toolbar and make Ask my default search provider”
Even though I just had you get the latest version of Java, there is a vulnerability with regards to Java and web browsers. Therefore, we recommend to disable java in web browsers.
More information can be found here.
===================================================
Recommended programs
SpywareBlaster. SpywareBlaster protects against bad ActiveX, it immunizes your PC against them. It blocks over 11,000 bad sites and uses no resources of your computer.
===========================
Update and run Malwarebytes. This really is an excellent program that you should also update and run on a regular basis, probably weekly.
===========================
It’s important to keep programs up to date so that malware doesn't exploit any old security flaws.
FileHippo Update Checker is an extremely helpful program that will tell you which of your programs need to be updated.
===========================
MVPS Hosts file replaces your current HOSTS file with one containing well known ad sites and other bad sites. Basically, this prevents your computer from connecting to those sites by redirecting them to 127.0.0.1 which is your local computer, meaning it will be difficult to infect yourself in the future.
A couple of links with information here and here which can answer any questions you might have about installing/using it.
===========================
Unchecky
Be careful when downloading free software. Many free programs come bundled with adware, many of which cause redirects/popups and verge on being malware. There is a program that automatically “unckecks” the boxes you may not notice when downloading programs.
Download and install Unchecky .
===================================================
I also recommend that you read the following:
How to prevent malware by miekiemoes
Help! My computer is slow! by miekiemoes
Simple and easy ways to keep your computer safe and secure on the Internet by Lawrence Abrams
I will keep this open for 24 hours in case you have any problems, after which I’ll close the topic.
Safe computing
Satchfan
Member
Member
So I am going to hold off on doing anything else until you get a chance to look at this..
Trusted Helper
Is the popup from Microsoft Security Essentials? If you intend keeping MSE then you can disable the security alert via Control Panel > Security Center. On the left hand side of the security center window, click on "Change the way Security Center alerts me" and uncheck the bottom one.
Let me know if that stopped the problem.
Satchfan
Member
The popup remains in place in the middle of this page..no program is associated nwith it. It now shows on all screens. this is the text from that popup
.Warning
Your PC may be at Risk
Check for Malware and Registry Issues
You need to fix your PC problem immeadiately. Your data
is on 94% risk.
That is what the popup says. When I hit Control Panel I do not have a
Security option/icon.
Edited by ethermac56, 20 January 2015 - 03:09 PM.
Trusted Helper
Not sure what could be happening here because all logs appeared to be fine.
Run RogueKiller
IMPORTANT: Please remove any usb or external drives from the computer before you run this scan!
Close all running programs.
Download RogueKiller to your desktop
If the program is blocked, continue to try it several times. If it still doesn’t work, (it could happen), rename it to winlogon.exe.
Please post the contents of the RKreport.txt in your next reply.
Satchfan
Member
Trusted Helper
Nothing sinister there. We’ll reset your browsers and see if AdwCleaner finds anything with a new scan.
Registry cleaners
In an earlier post I asked you to remove a registry cleaner, (Tuneup computer A1PCCleaner) but not sure that you did.
It's not a good idea to use registry cleaners/boosters. The usefulness of cleaning the registry is highly overrated and can be dangerous. In most cases, using a cleaner to remove obsolete, invalid and erroneous entries does not affect system performance but it can result in "unpredictable results". Unless you have a particular problem that requires a registry edit to correct it, (and you are expert in the registry), I would suggest you leave the registry alone.
I strongly advise you to get rid of Tuneup computer A1PCCleaner and any other cleaner/optimizer/booster/tuneup/tweak type utilities that you have on this or any other computer.
If you are prompted for an administrator password or confirmation, type the password or provide confirmation.
One of the malware experts, miekiemoes, has an excellent write-up here
Another excellent article by Bill Castner is located here
Another from quietman7 here
===================================================
Download zoek.exe to your Desktop:
Important: Disable your AntiVirus and AntiSpyware programs, so they do not interfere with the running of Zoek.exe. You can find instructions how to disable your security applications here
autoclean; emptyalltemp; emptyclsid; FFdefaults; iedefaults; chrdefaults;
===================================================
Uninstall AdwCleaner
Download AdwCleaner again from here and save it to your desktop.
Any change?
Satchfan
Member
Member
Trusted Helper
So all now OK?
Member
Trusted Helper
Good. 
I'll leave this open for a further 24 hours after which I'll close it assuming that all is still well.
Regards
Satchfan
0 members, 0 guests, 0 anonymous users
Community Forum Software by IP.Board
Licensed to: Geeks to Go, Inc.
Sign In
Create Account
