[jbcteacher]

[so] log

# AdwCleaner v4.201 - Logfile created 19/04/2015 at 13:21:31
# Updated 08/04/2015 by Xplode
# Database : 2015-04-19.3 [Server]
# Operating system : Windows 8.1  (x64)
# Username : Justin - JGAMINGCOMPUTER
# Running from : C:\Users\Justin\Desktop\adwcleaner_4.201.exe
# Option : Scan

***** [ Services ] *****

***** [ Files / Folders ] *****

Folder Found : C:\Users\Justin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gngfnjclpjflgomhidfecidndbfaniak

***** [ Scheduled tasks ] *****

***** [ Shortcuts ] *****

***** [ Registry ] *****

***** [ Web browsers ] *****

-\\ Internet Explorer v11.0.9600.17416

-\\ Google Chrome v

[C:\Users\Justin\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [Search Provider] : hxxp://search.aol.com/aol/search?q={searchTerms}
[C:\Users\Justin\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [Search Provider] : hxxp://search.conduit.com/Results.aspx?gd=&ctid=CT3326235&octid=EB_ORIGINAL_CTID&ISID=M827513AD-36FB-4E0E-B612-8033715FA33A&SearchSource=58&CUI=&UM=5&UP=SP75EBC046-5559-455F-B819-4C60170D0E36&q={searchTerms}&SSPV=
[C:\Users\Justin\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [Search Provider] : hxxp://www.ask.com/web?q={searchTerms}
[C:\Users\Justin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Found [Extension] : gngfnjclpjflgomhidfecidndbfaniak
[C:\Users\Justin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Found [Homepage] : hxxp://search.conduit.com/?gd=&ctid=CT3326235&octid=EB_ORIGINAL_CTID&ISID=M827513AD-36FB-4E0E-B612-8033715FA33A&SearchSource=55&CUI=&UM=5&UP=SP75EBC046-5559-455F-B819-4C60170D0E36&SSPV=
[C:\Users\Justin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Found [Startup_URLs] : hxxp://search.conduit.com/?gd=&ctid=CT3326235&octid=EB_ORIGINAL_CTID&ISID=M827513AD-36FB-4E0E-B612-8033715FA33A&SearchSource=55&CUI=&UM=5&UP=SP75EBC046-5559-455F-B819-4C60170D0E36&SSPV=

*************************

AdwCleaner[R0].txt - [2042 bytes] - [19/04/2015 13:21:31]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [2101 bytes] ##########

[Advertisements]

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 4/19/2015
Scan Time: 2:51:31 PM
Logfile:
Administrator: Yes

Version: 2.01.4.1018
Malware Database: v2015.04.19.04
Rootkit Database: v2015.03.31.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 8.1
CPU: x64
File System: NTFS
User: Justin

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 341403
Time Elapsed: 11 min, 4 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 3
PUP.Optional.CrossRider.A, C:\Users\Justin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgacjdfplhakjfljpbbagagjcbccpmnl, Quarantined, [dc94581694f651e598eb7221d62d14ec],
PUP.Optional.CrossRider.A, C:\Users\Justin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgacjdfplhakjfljpbbagagjcbccpmnl\0.1_0, Quarantined, [dc94581694f651e598eb7221d62d14ec],
PUP.Optional.CrossRider.A, C:\Users\Justin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgacjdfplhakjfljpbbagagjcbccpmnl\0.1_0\_metadata, Quarantined, [dc94581694f651e598eb7221d62d14ec],

Files: 8
PUP.Optional.CrossRider.A, C:\Users\Justin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgacjdfplhakjfljpbbagagjcbccpmnl\0.1_0\background.js, Quarantined, [dc94581694f651e598eb7221d62d14ec],
PUP.Optional.CrossRider.A, C:\Users\Justin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgacjdfplhakjfljpbbagagjcbccpmnl\0.1_0\icon-128.png, Quarantined, [dc94581694f651e598eb7221d62d14ec],
PUP.Optional.CrossRider.A, C:\Users\Justin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgacjdfplhakjfljpbbagagjcbccpmnl\0.1_0\icon-16.png, Quarantined, [dc94581694f651e598eb7221d62d14ec],
PUP.Optional.CrossRider.A, C:\Users\Justin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgacjdfplhakjfljpbbagagjcbccpmnl\0.1_0\icon-48.png, Quarantined, [dc94581694f651e598eb7221d62d14ec],
PUP.Optional.CrossRider.A, C:\Users\Justin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgacjdfplhakjfljpbbagagjcbccpmnl\0.1_0\manifest.json, Quarantined, [dc94581694f651e598eb7221d62d14ec],
PUP.Optional.CrossRider.A, C:\Users\Justin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgacjdfplhakjfljpbbagagjcbccpmnl\0.1_0\script.js, Quarantined, [dc94581694f651e598eb7221d62d14ec],
PUP.Optional.CrossRider.A, C:\Users\Justin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgacjdfplhakjfljpbbagagjcbccpmnl\0.1_0\_metadata\computed_hashes.json, Quarantined, [dc94581694f651e598eb7221d62d14ec],
PUP.Optional.CrossRider.A, C:\Users\Justin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgacjdfplhakjfljpbbagagjcbccpmnl\0.1_0\_metadata\verified_contents.json, Quarantined, [dc94581694f651e598eb7221d62d14ec],

Physical Sectors: 0
(No malicious items detected)

(end)

[jbcteacher]

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 4/19/2015
Scan Time: 2:51:31 PM
Logfile:
Administrator: Yes

Version: 2.01.4.1018
Malware Database: v2015.04.19.04
Rootkit Database: v2015.03.31.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 8.1
CPU: x64
File System: NTFS
User: Justin

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 341403
Time Elapsed: 11 min, 4 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 3
PUP.Optional.CrossRider.A, C:\Users\Justin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgacjdfplhakjfljpbbagagjcbccpmnl, Quarantined, [dc94581694f651e598eb7221d62d14ec],
PUP.Optional.CrossRider.A, C:\Users\Justin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgacjdfplhakjfljpbbagagjcbccpmnl\0.1_0, Quarantined, [dc94581694f651e598eb7221d62d14ec],
PUP.Optional.CrossRider.A, C:\Users\Justin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgacjdfplhakjfljpbbagagjcbccpmnl\0.1_0\_metadata, Quarantined, [dc94581694f651e598eb7221d62d14ec],

Files: 8
PUP.Optional.CrossRider.A, C:\Users\Justin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgacjdfplhakjfljpbbagagjcbccpmnl\0.1_0\background.js, Quarantined, [dc94581694f651e598eb7221d62d14ec],
PUP.Optional.CrossRider.A, C:\Users\Justin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgacjdfplhakjfljpbbagagjcbccpmnl\0.1_0\icon-128.png, Quarantined, [dc94581694f651e598eb7221d62d14ec],
PUP.Optional.CrossRider.A, C:\Users\Justin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgacjdfplhakjfljpbbagagjcbccpmnl\0.1_0\icon-16.png, Quarantined, [dc94581694f651e598eb7221d62d14ec],
PUP.Optional.CrossRider.A, C:\Users\Justin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgacjdfplhakjfljpbbagagjcbccpmnl\0.1_0\icon-48.png, Quarantined, [dc94581694f651e598eb7221d62d14ec],
PUP.Optional.CrossRider.A, C:\Users\Justin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgacjdfplhakjfljpbbagagjcbccpmnl\0.1_0\manifest.json, Quarantined, [dc94581694f651e598eb7221d62d14ec],
PUP.Optional.CrossRider.A, C:\Users\Justin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgacjdfplhakjfljpbbagagjcbccpmnl\0.1_0\script.js, Quarantined, [dc94581694f651e598eb7221d62d14ec],
PUP.Optional.CrossRider.A, C:\Users\Justin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgacjdfplhakjfljpbbagagjcbccpmnl\0.1_0\_metadata\computed_hashes.json, Quarantined, [dc94581694f651e598eb7221d62d14ec],
PUP.Optional.CrossRider.A, C:\Users\Justin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgacjdfplhakjfljpbbagagjcbccpmnl\0.1_0\_metadata\verified_contents.json, Quarantined, [dc94581694f651e598eb7221d62d14ec],

Physical Sectors: 0
(No malicious items detected)

(end)

[jbcteacher]

Display adapters:

 

Intel ® HD Graphics Family

NVIDIA GeForce 840M

[BrianDrab]

Perfect. What's the make and model of the computer?

[jbcteacher]

HP Envy

[BrianDrab]

Do you know the model#? If you don't know you can open up a command-prompt and type the following (or copy/paste) and hit enter.

 

wmic computersystem get model

[jbcteacher]

HP Envy 15 Notebook PC

[jbcteacher]

Any ideas?  Was it malware?

[BrianDrab]

You had some adware that we removed but I don't think it is the cause of your issue. Can you provide the Product Number of your laptop? You have switchable graphics and I wonder if that's the issue. I'd like to try before having the hardware guys look at this.

 

1. Hit the fn + esc keys to bring up the System Information window and let me know what the Product Number is.

[jbcteacher]

is there another way to do that.  function key and escape key not doing anything.

[BrianDrab]

Try to right-click on the start button and choose Run. Type msinfo32 and click OK.

 

Does it show under System Model?

[jbcteacher]

 

if I click on HP support info it brings me to the page for HP ENVY 15t-k000 CTO Notebook PC (ENERGY STAR)...

[jbcteacher]

OS Name Microsoft Windows 8.1
Version 6.3.9600 Build 9600
Other OS Description  Not Available
OS Manufacturer Microsoft Corporation
System Name JGAMINGCOMPUTER
System Manufacturer Hewlett-Packard
System Model HP ENVY 15 Notebook PC
System Type x64-based PC
System SKU G7Z03AV
Processor Intel® Core™ i7-4510U CPU @ 2.00GHz, 2594 Mhz, 2 Core(s), 4 Logical Processor(s)
BIOS Version/Date Insyde F.11, 8/7/2014
SMBIOS Version 2.8
Embedded Controller Version 77.37
BIOS Mode UEFI
BaseBoard Manufacturer Hewlett-Packard
BaseBoard Model Not Available
BaseBoard Name Base Board
Platform Role Mobile
Secure Boot State On
PCR7 Configuration Binding Not Possible
Windows Directory C:\Windows
System Directory C:\Windows\system32
Boot Device \Device\HarddiskVolume2
Locale United States
Hardware Abstraction Layer Version = "6.3.9600.17196"
User Name JGamingcomputer\JGAMINGCOMPUTER\Justin
Time Zone Eastern Daylight Time
Installed Physical Memory (RAM) 16.0 GB
Total Physical Memory 15.9 GB
Available Physical Memory 14.5 GB
Total Virtual Memory 31.9 GB
Available Virtual Memory 30.6 GB
Page File Space 16.0 GB
Page File C:\pagefile.sys
Hyper-V - VM Monitor Mode Extensions Yes
Hyper-V - Second Level Address Translation Extensions Yes
Hyper-V - Virtualization Enabled in Firmware No
Hyper-V - Data Execution Protection Yes
 

[jbcteacher]

Under device manager under monitors there is a yellow exclamation triangle warning for generic pnp monitor...  just sayin incase it is something...

[BrianDrab]

Perfect. That will do. OK, let's go back to Device Manager. (Right-click on your Start button and choose Device Manager).

 

Under Display Adapters, can you right-click on the NVIDIA one and choose Disable?