Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

GooSaVe and SaleePlus extensions in Chrome.. [Solved]

GooSaVe SaleePlus

  • This topic is locked This topic is locked

#16
Bruce1270

Bruce1270

    Trusted Helper

  • Malware Removal
  • 1,714 posts
Hi tbwilkes

Step1 - Run FRST fix

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system.

Open notepad and copy/paste the text in the quotebox below into it:

DeleteQuarantine:

  • Save this as fixlist.txt, in the same location as FRST.exe on your desktop.
    FRSTfix.JPG
  • Run FRST by right clicking on it and selecting Run as Administrator and press Fix
  • On completion a log (fixlog.txt) will be generated.
  • Please select all text in this fix, copy (CTRL + C) and then Paste (CTRL + V) in your next reply.



    Good News! - Your system now appears to be clean. :)
    Now for some clean up and "housekeeping" procedures.

    The following will implement some cleanup procedures as well as reset System Restore points:
  • Download Delfix from here
  • Locate the file and right click on it. Click on Run as Administrator.
  • Ensure Remove disinfection tools is ticked
    Also tick:
  • Create registry backup
  • Purge system restore

    delfix.jpg
  • Click Run

    The program will run for a few moments and then notepad will open with a log. Please paste the log in your next reply

    Staying Updated

    Check Windows Updates is set to automatic
    • Click Start, click Run, type sysdm.cpl, and then press ENTER.
    • Click the Automatic Updates tab.
    • Ensure it is set to Automatic (recommended) Automatically download recommended updates for my computer and install them option.
    Malwarebytes - Update and run weekly to help keep your system clean.

    Crypto Warning!!!! - Complete Data Loss can occur!

    There are particularly nasty infections out there at the moment that encrypt your data and hold it for ransom. You may read more about this here
  • Download CryptoPrevent free for home use here following the instructions below.
  • Save the file to your desktop from the link above and then open the program by clicking Run when prompted from your browser or by going to the desktop where the file was saved and double-clicking.
  • Accept all the defaults during the install. The last screen of the install has a checkmark in "Launch CryptoPrevent". This is good and will launch the program once you click Finish.
  • You will get a prompt asking if you purchased a Product Key for Automatic Updates. You can answer No.
  • You will then be prompted to learn more about automatic updates or if you want to purchase a key. This is up to you but you don't have to.
  • You will be prompted to click OK to continue and select your protection level. Go ahead and click OK.
  • Click the Apply button to set Default protection.
  • You may get a message stating that Windows Sidebar and Desktop Gadgets are a major security vulnerability and asking you if you want to disable them. If you don't use these features, answer Yes.
    That's it. The protection is in place.

    Note: The free version doesn't provide automatic updates. Periodically, you should open up the program (there is a shortcut on your desktop now) and select the Updates! menu....and select Check for Updates to see if there are any as this infection has serious consequences.
    UpdatesV7.4.11.JPG



    Recommend Programs


    Unchecky is a small service that runs in the background to help keep those "extra toolbars" and tag along search engines from automatically installing. By automatically directing you to a custom install with all the options unchecked, only what you manually choose and confirm gets installed.
  • Download Unchecky to your desktop
  • Right click on the Unchecky_setup and choose to Run as Administrator
  • Once open click the Install button.
  • Then click on Finish
  • Unchecky is now installed and will help you keep unwanted check boxes unchecked

    General Advice
  • Watch what you open in your emails. If you get an email from an unknown source with any attached files, do not open it.
  • Install and keep only one anti-virus on your machine. Update it and scan your machine with it at least once a week.
  • Be careful of the websites you visit.
  • When browsing the internet, look closely at the links you click on. Some aren't always what they seem.
  • Avoid Peer to Peer file sharing utilities, these are a minefield of malware infections.
  • Pay attention when installing a program to your computer, particularly to any check boxes that may appear during installation, it is common for unwanted software to be installed in this way.

    To learn more about how to protect yourself while on the internet read this little guide Best security practices.

    Go here for some good advice about how to prevent infection.

    Happy safe surfing!! :)

  • 0

Advertisements


#17
tbwilkes

tbwilkes

    Member

  • Topic Starter
  • Member
  • PipPip
  • 41 posts

All done.

 

Remarkable results mate. Not only have the nefarious infections been fixed, the system is running faster and more smoothly than it has for quite some time.

 

Bloody brilliant. Very many thanks.

 

Requested logs below:

 

==================================================================================

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 27-04-2015 01
Ran by Timothy at 2015-04-28 10:55:08 Run:3
Running from C:\Users\Timothy\Desktop
Loaded Profiles: Timothy (Available profiles: Timothy & UpdatusUser & Georgia)
Boot Mode: Normal
==============================================
 
Content of fixlist:
*****************
DeleteQuarantine:
*****************
 
"C:\FRST\Quarantine" => Removed successfully.
 
==== End of Fixlog 10:55:10 ====
 
====================================================================================
 
# DelFix v1.010 - Logfile created 28/04/2015 at 10:57:39
# Updated 26/04/2015 by Xplode
# Username : Timothy - TIMOTHY-PC
# Operating System : Windows 7 Professional Service Pack 1 (64 bits)
 
~ Removing disinfection tools ...
 
Deleted : C:\FRST
Deleted : C:\AdwCleaner
Deleted : C:\RegBackup
Deleted : C:\Users\Timothy\Desktop\FRST-OlderVersion
Deleted : C:\Users\Timothy\Desktop\Addition.txt
Deleted : C:\Users\Timothy\Desktop\adwcleaner_4.202.exe
Deleted : C:\Users\Timothy\Desktop\Fixlog.txt
Deleted : C:\Users\Timothy\Desktop\FRST.txt
Deleted : C:\Users\Timothy\Desktop\FRST64.exe
Deleted : C:\Users\Timothy\Desktop\JRT.exe
Deleted : C:\Users\Timothy\Desktop\JRT.txt
Deleted : C:\Users\Timothy\Desktop\JRT_NEW.exe
Deleted : C:\Users\Timothy\Downloads\TFC (1).exe
Deleted : C:\Users\Timothy\Downloads\TFC (2).exe
Deleted : HKLM\SOFTWARE\OldTimer Tools
Deleted : HKLM\SOFTWARE\AdwCleaner
 
~ Creating registry backup ... OK
 
~ Cleaning system restore ...
 
Deleted : RP #429 [Windows Update | 04/15/2015 17:00:31]
Deleted : RP #430 [Windows Update | 04/19/2015 09:52:38]
Deleted : RP #431 [Windows Update | 04/22/2015 09:58:30]
Deleted : RP #432 [Windows Update | 04/25/2015 11:12:28]
 
New restore point created !
 
########## - EOF - ##########
 

  • 0

#18
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
Since this issue appears to be resolved ... this Topic has been closed. Glad we could help. :)

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP