[RickMath]

I am not sure if I am posting in the right forum. My computer seems to be infected with consumer-notice.com

 

I have run my Norton Security and NPE and they do not see it. I tried to download FRST and it was rejected by Norton Security. Your site pops this up too.

 

Thanks for your help.

 

Rick

[Advertisements]

Hi there, temporarily disable Norton when you download FRST. The file is safe

Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

• Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
• Select additions at the bottom
• Press Scan button.
  
• It will produce a log called FRST.txt in the same directory the tool is run from.
• Please attach both logs generated.

[Essexboy]

Hi there, temporarily disable Norton when you download FRST. The file is safe

Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

• Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
• Select additions at the bottom
• Press Scan button.
  
• It will produce a log called FRST.txt in the same directory the tool is run from.
• Please attach both logs generated.

[RickMath]

Here are the logs

 

Thanks for your help.

Attached Files

•  FRST.txt   54.78KB   194 downloads
•  Addition.txt   31.54KB   212 downloads

[Essexboy]

Which browser do the ads appear in ?

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

CreateRestorePoint:
FF user.js: detected! => C:\Users\DrRick\AppData\Roaming\Mozilla\Firefox\Profiles\kswybtaf.default\user.js [2015-05-04]
Task: {47E1F29F-4B94-4CE9-8FAD-BA2F74DAF73C} - \ProPCCleaner_Popup No Task File <==== ATTENTION
Task: {9EB40AF0-AC12-4D4E-AE94-DFE39283FFF5} - \ProPCCleaner_Start No Task File <==== ATTENTION
Task: {DB3BECDE-C9A3-4BE5-9593-872239177AE4} - \ASP No Task File <==== ATTENTION
AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`26hfm

Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
RemoveProxy:
EmptyTemp:
CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe

Run FRST and press Fix
On completion a log will be generated please post that

THEN

Please download AdwCleaner by Xplode onto your desktop.

• Close all open programs and internet browsers.
• Double click on AdwCleaner.exe to run the tool.
• Click on Scan.
• After the scan is complete click on "Clean"
• Confirm each time with Ok.
• Your computer will be rebooted automatically. A text file will open after the restart.
• Please post the content of that logfile with your next answer.
• You can find the logfile at C:\AdwCleaner[S0].txt as well.

[RickMath]

Here is the fixlog

 

Boy does Norton not like FRST

Attached Files

•  Fixlog.txt   4.01KB   210 downloads

[Essexboy]

Once AdwCleaner has run could you let me know if consumer-notice.com still appears

[RickMath]

Here is the ADW log. I will have to check and see if consumer notice still opens.

 

Give me  some time today to check it. I actually had two adw files produced. I am attaching them.

 

Thanks!!!!

Attached Files

•  AdwCleanerR0.txt   9.81KB   199 downloads
•  AdwCleanerS0.txt   10.19KB   212 downloads

[Essexboy]

OK whenever you are happy

[RickMath]

I am getting script errors on several sites. This also was going on with the consumer-notice issue. Is this related to the other problem or do I need to post elsewhere.

 

Thanks for you help.

[Essexboy]

What browser are the script errors in ?

[RickMath]

They are in Firefox

[Essexboy]

Thanks back in a bit

[Essexboy]

Could you run Firefox in safe mode and let me know if the errors still occur https://support.mozi...using-safe-mode

[RickMath]

I will try it today. I need to leave for a bit.

 

Thanks for your prompt attention

[Essexboy]