Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Virus browser warning & noise [Solved]

virus slow computer noisy computer

  • This topic is locked This topic is locked

#31
pystryker

pystryker

    Trusted Helper

  • Malware Removal
  • 3,886 posts

Hi Ok I'm back.  Thanks for the info in your last reply, glad all is well.  thanks for keeping this open.  I'll do what I can today.  Overall it is less noisy than it was which is good. Sometimes I still get error message (stop script messages) in facebook.  I'll monitor after this next scan.
 
I'm busy most of tomorrow so may not get much done then if needed.
 
Just wanted to give you an update.


Welcome back and you're quite welcome. :) Malware wise, you machine is clean. I'd like to let the Hardware Techs take a look at it and they can run some diagnostics on it to test the hardware. How is the machine running now that you've completed the CBS scan?

Let's go ahead and remove my tools, and create a clean restore point. :thumbsup:


Step 1: Tool Removal with Delfix and Creation of a clean restore point
  • Download Delfix from here
  • Ensure Remove disinfection tools is ticked
    Also tick:
    • Create registry backup
    • Purge system restore
    • Reset System Settings
    delfix.jpg
  • Click Run
The program will run for a few moments and then notepad will open with a log. Please paste the log in your next reply.
  • You can uninstall ESET Online Scanner at this time.
  • I recommend keeping Malwarebytes Anti-Malware installed. Make sure to update it and run it at least once a week. If it finds things such as PUP's (Potentially Unwanted Programs) you can delete those with no worries. However, if it finds something like a trojan, come see us.
Step 2: Tips, Information, and Optional Installation of Unchecky
  • Watch what you open in your emails. If you get an email from an unknown source with any attached files, do not open it.
  • Install and keep only one anti-virus on your machine. Update it and scan your machine with it at least once a week.
  • Be careful of the websites you visit.
  • When installing new programs, don't be "click happy" and click through the screens. Many programs come with adware in them and are set to install them by default. Several programs require that you uncheck or select no to prevent the installation. Take your time and read each screen as you go. :)
To help protect yourself while on the web, I recommend you read How did I get infected in the first place?


Installation of Unchecky

This is a very good little program that will automatically uncheck any boxes during a software installation. This helps prevent the software from installing any malware that is by default checked while the program is being installed.
  • Click here to be taken to Unchecky.com
  • Click the very large Download button.
  • Click Save
  • Once downloaded, double click the program (Vista, Win 7, and 8, right click and Run as Administrator)
  • Once open, click the Install button.
unchecky1_zps667e512d.jpg


Then click Finish

unchecky2_zpsca4e7d0d.jpg


Unchecky is now installed and will help you keep unwanted check boxes unchecked. :thumbsup:


Step 3: Protection Against CryptoLocker


CryptoLocker is a ransomware program that was released around the beginning of September 2013 that targets all versions of Windows including Windows XP, Windows Vista, Windows 7, and Windows 8. This ransomware will encrypt certain files using a mixture of RSA & AES encryption. When it has finished encrypting your files, it will display a CryptoLocker payment program that prompts you to send a ransom of either $100 or $300 in order to decrypt the files. This screen will also display a timer stating that you have 72 hours, or 4 days, to pay the ransom or it will delete your encryption key and you will not have any way to decrypt your files. This ransom must be paid using MoneyPak vouchers or Bitcoins. Once you send the payment and it is verified, the program will decrypt the files that it encrypted.

Please download and install CryptoPrevent to lock your machine down from this infection.

CryptoPrevent_zps1a3866db.jpg


Things I need to see in your next post

Delfix Log

  • 0

Advertisements


#32
Feather24

Feather24

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 251 posts

Hi, here is the log you requested.  I really appreciate all the clean up advice and programs, I think this is the best I've received on this site, so thanks for all your help and support.

 

# DelFix v10.8 - Logfile created 10/07/2015 at 20:29:17
# Updated 29/07/2014 by Xplode
# Username : Frances - FRANCES-PC
# Operating System : Windows 7 Home Premium Service Pack 1 (32 bits)

~ Removing disinfection tools ...

Deleted : C:\Qoobox
Deleted : C:\_OTL
Deleted : C:\FRST
Deleted : C:\AdwCleaner
Deleted : C:\Users\Frances\Desktop\FRST-OlderVersion
Deleted : C:\AdwCleaner[R1].txt
Deleted : C:\AdwCleaner[R2].txt
Deleted : C:\AdwCleaner[R3].txt
Deleted : C:\ComboFix.txt
Deleted : C:\TDSSKiller.3.0.0.44_22.06.2015_12.47.33_log.txt
Deleted : C:\Users\Frances\Desktop\Addition.txt
Deleted : C:\Users\Frances\Desktop\AdwCleaner.exe
Deleted : C:\Users\Frances\Desktop\adwcleaner_4.000.exe
Deleted : C:\Users\Frances\Desktop\aswmbr
Deleted : C:\Users\Frances\Desktop\aswmbr.exe
Deleted : C:\Users\Frances\Desktop\aswMBR.txt
Deleted : C:\Users\Frances\Desktop\ComboFix.exe
Deleted : C:\Users\Frances\Desktop\esetsmartinstaller_enu.exe
Deleted : C:\Users\Frances\Desktop\Extras.Txt
Deleted : C:\Users\Frances\Desktop\Fixlog.txt
Deleted : C:\Users\Frances\Desktop\FRST.exe
Deleted : C:\Users\Frances\Desktop\FRST.txt
Deleted : C:\Users\Frances\Desktop\JRT.exe
Deleted : C:\Users\Frances\Desktop\JRT.txt
Deleted : C:\Users\Frances\Desktop\MBR.dat
Deleted : C:\Users\Frances\Desktop\OTL.Txt
Deleted : C:\Users\Frances\Desktop\OTL (1).exe
Deleted : C:\Users\Frances\Desktop\OTL.exe
Deleted : C:\Users\Frances\Desktop\SecurityCheck(1).exe
Deleted : C:\Users\Frances\Desktop\SecurityCheck.exe
Deleted : C:\Users\Frances\Desktop\tdsskiller.exe
Deleted : C:\Users\Frances\Desktop\TFC.exe
Deleted : C:\Users\Frances\Downloads\Addition.txt
Deleted : C:\Users\Frances\Downloads\esetsmartinstaller_enu (1).exe
Deleted : C:\Users\Frances\Downloads\esetsmartinstaller_enu (2).exe
Deleted : C:\Users\Frances\Downloads\esetsmartinstaller_enu (3).exe
Deleted : C:\Users\Frances\Downloads\esetsmartinstaller_enu.exe
Deleted : C:\Users\Frances\Downloads\JRT.exe
Deleted : C:\Users\Frances\Downloads\MiniToolBox.exe
Deleted : C:\Users\Frances\Downloads\Result.txt
Deleted : C:\Users\Frances\Downloads\TFC.exe
Deleted : C:\Windows\grep.exe
Deleted : C:\Windows\PEV.exe
Deleted : C:\Windows\NIRCMD.exe
Deleted : C:\Windows\MBR.exe
Deleted : C:\Windows\SED.exe
Deleted : C:\Windows\SWREG.exe
Deleted : C:\Windows\SWSC.exe
Deleted : C:\Windows\SWXCACLS.exe
Deleted : C:\Windows\Zip.exe
Deleted : HKLM\SOFTWARE\OldTimer Tools
Deleted : HKLM\SOFTWARE\AdwCleaner
Deleted : HKLM\SOFTWARE\Swearware
Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\combofix.exe
Deleted : HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ASWMBR

~ Creating registry backup ... OK

~ Cleaning system restore ...

Deleted : RP #442 [Windows Update | 06/10/2015 22:07:14]
Deleted : RP #443 [Windows Backup | 06/14/2015 18:00:24]
Deleted : RP #444 [Windows Backup | 06/22/2015 10:45:24]
Deleted : RP #446 [Restore Point Created by FRST | 06/22/2015 11:09:33]
Deleted : RP #447 [Windows Backup | 06/28/2015 18:00:21]
Deleted : RP #448 [Windows Backup | 07/07/2015 14:52:08]

New restore point created !

~ Resetting system settings ... OK

########## - EOF - ##########
 


  • 0

#33
Feather24

Feather24

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 251 posts

Ok I've downloaded everything you suggested, these are really helpful tools thanks. 

 

I noticed one difference from your instructions about crytolocker it maybe because it's the latest version change?  The policies screen was different to your screen shot.  It asked me to decide what level I wanted, basic, leave it and forget it, max and max plus.  I choose leave it and forget it because it seemed to default to that and the higher properties could stop legal software downloading.  It also said I could whitelist files already downloaded - it suggested not doing that unless you were totally sure so I didn't do that.  I just used my common sense hopefully that was ok.  If not can you advise please. thanks

 

 

The machine is a lot quieter which is good. I notice start up and shut down run times are a lot faster which is a relief because it was taking ages.  I still get some error messages in facebook on a regular basis not sure what that is.  Perhaps it is to do with my cpu, or RAM not sure.

 

Thanks for suggesting about the other specialists who may be able to help with performance/hardware. I think things are a little faster than they were, less hanging on browsers.  It's good to know that it's free of malware and that we deleted those infected backup files.


Edited by Feather24, 10 July 2015 - 02:04 PM.

  • 0

#34
pystryker

pystryker

    Trusted Helper

  • Malware Removal
  • 3,886 posts

 

Hi, here is the log you requested.  I really appreciate all the clean up advice and programs, I think this is the best I've received on this site, so thanks for all your help and support.

 

 

 

You're quite welcome and thank you for your kind words. :)

 

 

I noticed one difference from your instructions about crytolocker it maybe because it's the latest version change?  The policies screen was different to your screen shot.  It asked me to decide what level I wanted, basic, leave it and forget it, max and max plus.  I choose leave it and forget it because it seemed to default to that and the higher properties could stop legal software downloading.  It also said I could whitelist files already downloaded - it suggested not doing that unless you were totally sure so I didn't do that.  I just used my common sense hopefully that was ok.  If not can you advise please. thanks

 

 

That level of protection will work, I have that level set on my machine.  Also, thank you for the heads up about the instructions.  I'll need to adjust for the latest version. :)

 

 

The machine is a lot quieter which is good. I notice start up and shut down run times are a lot faster which is a relief because it was taking ages.  I still get some error messages in facebook on a regular basis not sure what that is.  Perhaps it is to do with my cpu, or RAM not sure.

 

 

I'm glad to hear the machine is running much smoother, that always makes me smile. :)  Sounds some scripts Facebook is running aren't too well liked by your browser.  Is Facebook the only site that's happening on? 

 

 

Thanks for suggesting about the other specialists who may be able to help with performance/hardware. I think things are a little faster than they were, less hanging on browsers.  It's good to know that it's free of malware and that we deleted those infected backup files.

 

 

If you'd like to have the techs take a look at it, please click the link below and start a new topic.  Let them know that the machine has been cleaned of malware when you post the topic. :thumbsup:

 

http://www.geekstogo...nd-peripherals/


  • 0

#35
Feather24

Feather24

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 251 posts

Hi, ok good.  To answer your question:

 

"I'm glad to hear the machine is running much smoother, that always makes me smile. :)  Sounds some scripts Facebook is running aren't too well liked by your browser.  Is Facebook the only site that's happening on?"

 

Yes from what I remember. 

 

thanks for the link to set up a new topic.

 

I wondered if I could ask a different question here, as we are coming to a close.  I have a windows phone and I've asked about virus protection on this site.  No system is totally protected although the advise I got was that it didn't need any.  Do you agree, I think avg do antivirus for phones would you suggest that or something else.  I just thought I'd ask while I'm here as I value your advice.

 

thanks again.


Edited by Feather24, 12 July 2015 - 04:33 PM.

  • 0

#36
pystryker

pystryker

    Trusted Helper

  • Malware Removal
  • 3,886 posts

Yes from what I remember.


Ok, that's more than likely on Facebook's end of things and not a problem with your browser. :thumbsup:
 

thanks for the link to set up a new topic.



I wondered if I could ask a different question here, as we are coming to a close. I have a windows phone and I've asked about virus protection on this site. No system is totally protected although the advise I got was that it didn't need any. Do you agree, I think avg do antivirus for phones would you suggest that or something else. I just thought I'd ask while I'm here as I value your advice.


You're welcome, it's my pleasure. The phone protection is a little out of my area, however, I do have Lookout antivirus on my phone for protection. For peace of mind, I'd install one. But, do remember, I'm not versed in the security measures Windows phones have for protection. :thumbsup:
  • 0

#37
Feather24

Feather24

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 251 posts

thanks for all your help pystryker and patience you have been great. :)


  • 0

#38
pystryker

pystryker

    Trusted Helper

  • Malware Removal
  • 3,886 posts

thanks for all your help pystryker and patience you have been great. :)


You're quite welcome. :) If we can be of assistance in the future, please don't hesitate to come back and see us. :thumbsup:

Safe surfing!

Pystryker :wave:
  • 0

#39
pystryker

pystryker

    Trusted Helper

  • Malware Removal
  • 3,886 posts

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help. :)

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.


  • 0






Similar Topics


Also tagged with one or more of these keywords: virus, slow computer, noisy computer

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP