[Beatriceswiss]

Here is the AdwCleaner log.  AdwCleanerS1.txt   2.18KB   195 downloads

[Advertisements]

# AdwCleaner v4.200 - Logfile created 29/03/2015 at 22:46:34
# Updated 29/03/2015 by Xplode
# Database : 2015-03-29.1 [Server]
# Operating system : Windows 8.1 (x64)
# Username : Beatrice - BEATRICE
# Running from : C:\Users\Beatrice\Downloads\AdwCleaner (2).exe
# Option : Cleaning

***** [ Services ] *****


***** [ Files / Folders ] *****

File Deleted : C:\Users\Public\Desktop\eBay.lnk
File Deleted : C:\Users\Beatrice\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_plarium.com_0.localstorage
File Deleted : C:\Users\Beatrice\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_plarium.com_0.localstorage-journal
File Deleted : C:\Users\Beatrice\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage
File Deleted : C:\Users\Beatrice\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage-journal
File Deleted : C:\Users\Beatrice\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.veoh.com_0.localstorage
File Deleted : C:\Users\Beatrice\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.veoh.com_0.localstorage-journal
File Deleted : C:\Users\Beatrice\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.yourtango.com_0.localstorage
File Deleted : C:\Users\Beatrice\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.yourtango.com_0.localstorage-journal

***** [ Scheduled tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [WebInternetSecurity]
Data Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <-loopback>

***** [ Web browsers ] *****

-\\ Internet Explorer v11.0.9600.17416


-\\ Google Chrome v41.0.2272.101


*************************

AdwCleaner[R0].txt - [2450 bytes] - [07/04/2014 19:24:34]
AdwCleaner[R1].txt - [2143 bytes] - [29/03/2015 22:43:35]
AdwCleaner[S0].txt - [2203 bytes] - [07/04/2014 19:27:14]
AdwCleaner[S1].txt - [2090 bytes] - [29/03/2015 22:46:34]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [2149 bytes] ##########


OK,

I'm looking into the notepad issue for you.

[zep516]

# AdwCleaner v4.200 - Logfile created 29/03/2015 at 22:46:34
# Updated 29/03/2015 by Xplode
# Database : 2015-03-29.1 [Server]
# Operating system : Windows 8.1 (x64)
# Username : Beatrice - BEATRICE
# Running from : C:\Users\Beatrice\Downloads\AdwCleaner (2).exe
# Option : Cleaning

***** [ Services ] *****


***** [ Files / Folders ] *****

File Deleted : C:\Users\Public\Desktop\eBay.lnk
File Deleted : C:\Users\Beatrice\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_plarium.com_0.localstorage
File Deleted : C:\Users\Beatrice\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_plarium.com_0.localstorage-journal
File Deleted : C:\Users\Beatrice\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage
File Deleted : C:\Users\Beatrice\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage-journal
File Deleted : C:\Users\Beatrice\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.veoh.com_0.localstorage
File Deleted : C:\Users\Beatrice\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.veoh.com_0.localstorage-journal
File Deleted : C:\Users\Beatrice\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.yourtango.com_0.localstorage
File Deleted : C:\Users\Beatrice\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.yourtango.com_0.localstorage-journal

***** [ Scheduled tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [WebInternetSecurity]
Data Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <-loopback>

***** [ Web browsers ] *****

-\\ Internet Explorer v11.0.9600.17416


-\\ Google Chrome v41.0.2272.101


*************************

AdwCleaner[R0].txt - [2450 bytes] - [07/04/2014 19:24:34]
AdwCleaner[R1].txt - [2143 bytes] - [29/03/2015 22:43:35]
AdwCleaner[S0].txt - [2203 bytes] - [07/04/2014 19:27:14]
AdwCleaner[S1].txt - [2090 bytes] - [29/03/2015 22:46:34]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [2149 bytes] ##########


OK,

I'm looking into the notepad issue for you.

[zep516]

See if this helps for color issue;

Hello

To change background color you just need to follow these simple steps...

===>Right click on the Desktop screen.
===>Now click on Personalize.
===>After clicking you will get the Personalize window.
===>Under that window click on windows color.
===>Now select the color that you want to set as a background color.
===>To set color intensity set intensity meter.
===>To set color transparency check the Enable Transparency.
===>Now click on Save change button to confirm change.
===>After doing so background color will set.

Try this i hope this will help you...

[Beatriceswiss]

Your instructions above worked.  All the white letters on black background are now proper: black letters on white background, including the tool logs from before.  Was this caused by maleware?

 

One more thing, that may be related: AVG will not start.  I have Windows Defender running instead, but I prefer AVG.

 

Thank you very much for your help.  You are awesome!

[zep516]

You might try reinstalling AVG 2015 64Bit from Here. Scroll down to the 64Bit version.

If you encounter any issue remove AVG from the programs an features menu, start, control panel, programs an features, uninstall AVG.

Then

Use the special AVG Uninstall tool located Here. See 2015 64Bit. Download the tool to desktop and run it, it will make sure all of AVG is gone.

Then reinstall AVG from the link above.

Let me know how that goes. I'll be signing off for the nite but will check in Tomorrow. We have a bit of clean up to do in regards to the tools we downloaded.

[zep516]

How are we doing ?

Joe

[Beatriceswiss]

Hi Joe,  I just finished uninstalling AVG and will install as per post #20.  

 

Problems with colour have not returned!  Will there be a final check to ensure all malware is gone?

 

Thank you.

[zep516]

OK,

Tell me AVG is installed and up to date and running.

Then we can do some final checks,

Joe

[Beatriceswiss]

AVG is up and running.  Ready for next instructions.

[zep516]

Download Security Check by screen317 from Here or Here
Save it to your Desktop.
Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
A Notepad document should open automatically called checkup.txt; please post the contents of that document.

NOTE: If SecurityCheck aborts and you get the following message: UNSUPPORTED OPERATING SYSTEM! ABORTED! try rebooting the system and then run SecurityCheck again.

[Beatriceswiss]

Here is the log.

 

Results of screen317's Security Check version 0.99.99  

   x64 (UAC is enabled)  

 Internet Explorer 11  

``````````````Antivirus/Firewall Check:`````````````` 

 Windows Firewall Enabled!  

Windows Defender                  

AVG AntiVirus Free Edition 2015   

 Antivirus up to date!   

`````````Anti-malware/Other Utilities Check:````````` 

 Google Chrome (41.0.2272.101) 

 Google Chrome (41.0.2272.89) 

````````Process Check: objlist.exe by Laurent````````  

 AVG avgwdsvc.exe 

`````````````````System Health check````````````````` 

 Total Fragmentation on Drive C:  % 

````````````````````End of Log`````````````````````` 

[zep516]

Hello,

We are sufficient,

Time to remove the tools we downloaded and log files on desktop, clear all restore points and create a new one. You can do that by following the exercise below;

Download DelFix by Xplode and save it to your desktop.

• Run the tool by right click on the icon and Run as administrator option.
• Make sure that these ones are checked:
  • Remove disinfection tools
  • Purge system restore
  • Reset system settings
• Push Run.
• The program will run for a few seconds and display a notepad report.
  Paste it for my review.

[Beatriceswiss]

Here is the DelFix log.

 

# DelFix v10.9 - Logfile created 31/03/2015 at 18:24:07

# Updated 27/02/2015 by Xplode

# Username : Beatrice - BEATRICE

# Operating System : Windows 8.1  (64 bits)

 

~ Removing disinfection tools ...

 

Deleted : C:\FRST

Deleted : C:\AdwCleaner

Deleted : C:\Users\Beatrice\Desktop\Addition.txt

Deleted : C:\Users\Beatrice\Desktop\AdwCleaner[S1].txt

Deleted : C:\Users\Beatrice\Desktop\Fixlog.txt

Deleted : C:\Users\Beatrice\Desktop\FRST.txt

Deleted : C:\Users\Beatrice\Desktop\FRST64.exe

Deleted : C:\Users\Beatrice\Desktop\SecurityCheck.exe

Deleted : C:\Users\Beatrice\Downloads\Fixlog.txt

Deleted : C:\Users\Beatrice\Downloads\FRST (1).txt

Deleted : C:\Users\Beatrice\Downloads\FRST (2).txt

Deleted : C:\Users\Beatrice\Downloads\FRST.txt

Deleted : C:\Users\Beatrice\Downloads\FRST64.exe

Deleted : HKLM\SOFTWARE\AdwCleaner

 

~ Cleaning system restore ...

 

Deleted : RP #51 [Windows Update | 03/15/2015 22:13:23]

Deleted : RP #52 [Restore Operation | 03/30/2015 03:33:59]

Deleted : RP #54 [Restore Point Created by FRST | 03/31/2015 01:27:43]

Deleted : RP #55 [Installed AVG 2015 | 03/31/2015 20:45:38]

Deleted : RP #56 [Installed AVG 2015 | 03/31/2015 20:46:23]

Deleted : RP #57 [Removed DriverUpdate | 03/31/2015 22:00:58]

 

New restore point created !

 

~ Resetting system settings ... OK

 

########## - EOF - ##########

[zep516]

Thanks for stopping in, the ticket will be closed now..

You usually get infected because your security settings are too low.

Here are a number of recommendations that will help tighten them, and which will contribute to making you a less likely victim:

Safe Computing Practices please read Here


Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.

Thanks
Joe

[zep516]

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.