[dmarie7658]

Hello,

 

Someone was kind enough to help me through a lengthy malware issue about a year ago (zep516) (Thank you again so much!!!). I printed out a sheet from that "journey" that enabled me to find your site once again, as I am not computer literate - other than using a PC and installing simple programs with instructions. So I apologize upfront if I don't provide the correct information that you will need - (please ask!). I would greatly like to ask for your help again please. 

 

When opening my g-mail this morning, I noticed that several times I was sent to a "redirect" page. I get several daily emails from some of these sources so was surprised when asked to go somewhere else. I thought maybe I had changed a password, or done something that altered something. I did a little reading and it sounds like I might have a virus? I pulled up Task master and see that I have an extension that has no file source and I cannot click on anything to see what it is or when it was installed (csrss.exe).  Could this be it? 

 

I have an Asus PC with an a i7 core, and Windows 7. 

 

Thank you so much for your help once again. 

 

dmarie7658

Edited by dmarie7658, 13 April 2016 - 09:46 PM.

[Advertisements]

Hi dmarie7658,

Welcome to . My name is Jr0x and I'll be helping you with your problem.

Please Note: I am still in training and my fixes have to be approved by my instructor so there may be a slight delay in my replies. Look upon it as a good thing though in that you have two people looking at your problem.

Before we get started, there are a few things I need you to take note of.

• Please read through the instructions before attempting to follow those procedures. I would recommend printing them out as some of the instructions would requires you to be in safe mode / offline.
• If there is anything you are unclear of, please ask before you start the fix.
• Do not run any scripts / tools on your own, unsupervised usage may cause more harm than good.
• Please stay with me on this thread, do not start another thread in here (Geeks To Go) or any other forum until I've declared you clean and good to go.
• There may be delayed response to you as we may live in different timezone.
• Inform me of anything that happens unexpectedly during the fix at any point of time.
• As much as we like to make this a easy process for you. Malware removal is a complex multi-step process, and things may happen such as data loss or render your machine unbootable. I would recommend that you backup your personal data before we proceed.
• Posts that are not replied to in four (4) days will result in the topic being closed. We have not forgotten you; this is just an effort to keep the boards organized and flowing. To continue on your closed topic, please PM me or any Moderator to have the topic reactivated. If, at any time during our working together, I have not responded to you in 2 days (48 hours), then please PM me.
• Please do not attach any log files to your replies unless I specifically ask you. Instead please copy and paste so as to include the log in your reply. You can do this in separate posts if it's easier for you.
• As we go along please tell me how the computer is running now. Please be as descriptive as possible e.g. I'm still getting web redirects, I am unable to access the internet etc.

Let's get started.

I would suggest you to change your password (emails, banks and so on) on a clean machine (machine you trust) first. Next, do not click on any link from your email even it seem to be legit.

Scan with Farbar's Recovery Scan Tool (FRST)

Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

• Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
• Press Scan button.
• It will produce a log called FRST.txt in the same directory the tool is run from.
• Please copy and paste log back here.
• The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.

[Jr0x]

Hi dmarie7658,

Welcome to . My name is Jr0x and I'll be helping you with your problem.

Please Note: I am still in training and my fixes have to be approved by my instructor so there may be a slight delay in my replies. Look upon it as a good thing though in that you have two people looking at your problem.

Before we get started, there are a few things I need you to take note of.

• Please read through the instructions before attempting to follow those procedures. I would recommend printing them out as some of the instructions would requires you to be in safe mode / offline.
• If there is anything you are unclear of, please ask before you start the fix.
• Do not run any scripts / tools on your own, unsupervised usage may cause more harm than good.
• Please stay with me on this thread, do not start another thread in here (Geeks To Go) or any other forum until I've declared you clean and good to go.
• There may be delayed response to you as we may live in different timezone.
• Inform me of anything that happens unexpectedly during the fix at any point of time.
• As much as we like to make this a easy process for you. Malware removal is a complex multi-step process, and things may happen such as data loss or render your machine unbootable. I would recommend that you backup your personal data before we proceed.
• Posts that are not replied to in four (4) days will result in the topic being closed. We have not forgotten you; this is just an effort to keep the boards organized and flowing. To continue on your closed topic, please PM me or any Moderator to have the topic reactivated. If, at any time during our working together, I have not responded to you in 2 days (48 hours), then please PM me.
• Please do not attach any log files to your replies unless I specifically ask you. Instead please copy and paste so as to include the log in your reply. You can do this in separate posts if it's easier for you.
• As we go along please tell me how the computer is running now. Please be as descriptive as possible e.g. I'm still getting web redirects, I am unable to access the internet etc.

Let's get started.

I would suggest you to change your password (emails, banks and so on) on a clean machine (machine you trust) first. Next, do not click on any link from your email even it seem to be legit.

Scan with Farbar's Recovery Scan Tool (FRST)

Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

• Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
• Press Scan button.
• It will produce a log called FRST.txt in the same directory the tool is run from.
• Please copy and paste log back here.
• The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.

[dmarie7658]

Hi Jr0x - thank you for responding. I apologize for my delay; I've kept this tab open to check in on the request -- but I did not refresh it until just now so I didn't realize I had a response (bad ;(). It is midnight at the moment where I am - so I won't be doing any testing tonight - what's left of it! I know the last go around I mentioned above that we worked on about a year ago took several days, several steps, but everything clicked along on both sides very well. I was very pleased and impressed with the detailed amount of time and assistance I was given. I was very, very appreciative. Anyway, I wanted to let you know that I read your response and that I am ready to start work - I just didn't want to be deleted by not responding after a couple of days, if that makes sense.  Thank you again. And yes, I am currently working on an important file so I'll make sure to copy it off along with others before we begin. Looking forward to working with you - and as I mentioned, I am not very computer literate - so if I ask a lot of rather unintelligent questions -- here's your answer why  Good night for now.

[Jr0x]

That's alright. 

 

Post when you're ready. And no such thing as unintelligent question.

[Essexboy]

Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.

[Jr0x]

Hi dmarie7658,

Please follow the instruction on Post #2.

[Essexboy]

Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.