[zep516]

"why am I checking Windows validity then?"
It checks all the software for validity.

"how is this connected to the fdclient file?"
I would be forbidden / uncomfortable to work on the fdclient issue or any issue, if the presence of illegal software is on your computer.

"If office is not legit, what do I do?"

At this point we will not worry about it since i missed it, but most helpers will not assist with the presence of illegal software. Perhaps the place of purchase is to blame.

[Advertisements]

In post 76 we removed fdclient,

Has it returned ?

[zep516]

In post 76 we removed fdclient,

Has it returned ?

[BrynnD17]

Okay. Fair enough. I read that rule and did not know there was/could be illegal software on the computer. I live in Asia... it is possible. I'm sorry if this has put you in a difficult position. I understand if you cannot help further. I am booting up my computer now

[zep516]

Post that log report from wvcheck so we both know what's going on.

I need to get off very late here at 12:35 am

Thanks
Joe

[BrynnD17]

Sorry, the scan is taking ages. I'm not on wifi here

[zep516]

I'll look at in the am. and we will continue with fdclient issue.

[BrynnD17]

Here is the log:

 

Windows Validation Check

Version: 1.9.12.7

Log Created On: 1315_01-12-2016

-----------------------

INFORMATION & UPDATES

[email protected]

Latest versions:

http://www.demonwork...arl/WVCheck.exe

http://www.geekstogo...4d76/wvcheckexe

http://www.demonwork...arl/WVCheck.zip

-----------------------

 

 

Windows Information

-----------------------

Windows Mode: Normal

Systemroot Path: C:\WINDOWS

 

WVCheck's Auto Update Check

-----------------------

Auto-Update Option: Download updates and install them automatically.

-----------------------

Last success time for Automatic Updates for 'Detect', 'Download' and 'Install' could not be found.

 

 

WVCheck's Registry Check Check

-----------------------

Antiwpa: Not Found

-----------------------

Chew7Hale: Not Found

-----------------------

 

 

WVCheck's File Dump

-----------------------

C:\Windows\System32\slwga.dll

Size: 73216 bytes

Creation; 16/7/2016 19:42:46

Modification; 16/7/2016 19:42:46

MD5; ba404412db39ce1fd08daceed91fa102

Matched: slwga.dll

-----------------------

C:\Windows\SysWOW64\slwga.dll

Size: 73216 bytes

Creation; 16/7/2016 19:42:46

Modification; 16/7/2016 19:42:46

MD5; ba404412db39ce1fd08daceed91fa102

Matched: slwga.dll

-----------------------

C:\Windows\WinSxS\amd64_microsoft-windows-security-spp-wga_31bf3856ad364e35_10.0.14393.0_none_2cc5f57dba08177b\slwga.dll

Size: 74240 bytes

Creation; 16/7/2016 19:42:19

Modification; 16/7/2016 19:42:19

MD5; ac7220b15acf9a900c6b3e39b8c8a424

Matched: slwga.dll

-----------------------

C:\Windows\WinSxS\x86_microsoft-windows-security-spp-wga_31bf3856ad364e35_10.0.14393.0_none_d0a759fa01aaa645\slwga.dll

Size: 73216 bytes

Creation; 16/7/2016 19:42:46

Modification; 16/7/2016 19:42:46

MD5; ba404412db39ce1fd08daceed91fa102

Matched: slwga.dll

-----------------------

 

 

WVCheck's Dir Dump

-----------------------

WVCheck found no known bad directories.

 

 

WVCheck's Missing File Check

-----------------------

WVCheck found no missing Windows files.

 

 

WVCheck's MBAM Quarantine Check

-----------------------

There were no bad files quarantined by MBAM.

 

 

WVCheck's HOSTS File Check

-----------------------

WVCheck found no bad lines in the hosts file.

 

 

WVCheck's MD5 Check

EXPERIMENTAL!!

-----------------------

user32.dll - 7f1f8a3af8cda9368966e22ae64d5c9e

 

 

-------- End of File, program close at 1347_01-12-2016 --------

[BrynnD17]

I've done a hitmanpro scan... no fdclient... which is weird because I'm pretty sure it was there last time I booted. Anyway, let me know what the log means and I'll take it up with the dealer if there are any strange findings.

 

Maybe sluggishness is just because there is a lot on the computer.

 

Thanks for your help, Joe.

[zep516]

We need to remove the tools we used and then close the topic.


The following procedures will implement some cleanup procedures to remove these tools. It will also reset your System Restore by flushing out previous restore points and create a new restore point. It will also remove all the backups our tools may have made.
Any leftover logs, files, folders or tools remaining on your Desktop which were not removed can be deleted manually (right-click the file + delete).


Why we need to remove some of our tools:
Some of the tools we have used to clean your computer were made by fellow malware fighters and are very powerful and if used incorrectly or at the wronge time can make the computer an expensive paper weight. They are updated all the time and some of them more than once a day so by the time you are ready to use them again they will already be outdated.



Download DelFix by Xplode and save it to your desktop.

• Run the tool by right click on the icon and Run as administrator option.
• Make sure that these ones are checked:
  • Remove disinfection tools
  • Purge system restore
  • Reset system settings
• Push Run.
• The program will run for a few seconds and display a notepad report.
  Paste it for my review.

[BrynnD17]

# DelFix v1.013 - Logfile created 04/12/2016 at 20:44:28

# Updated 17/04/2016 by Xplode

# Username : USER - DELL

# Operating System : Windows 10 Home  (64 bits)

 

~ Removing disinfection tools ...

 

Deleted : C:\FRST

Deleted : C:\zoek_backup

Deleted : C:\AdwCleaner

Deleted : C:\Users\USER\Desktop\FRST-OlderVersion

Deleted : C:\zoek-results.log

Deleted : C:\Users\USER\Desktop\Addition.txt

Deleted : C:\Users\USER\Desktop\adwcleaner_6.020.exe

Deleted : C:\Users\USER\Desktop\Fixlog.txt

Deleted : C:\Users\USER\Desktop\FRST.txt

Deleted : C:\Users\USER\Desktop\FRST64.exe

Deleted : C:\Users\USER\Desktop\JRT.exe

Deleted : C:\Users\USER\Desktop\JRT.txt

Deleted : C:\Users\USER\Desktop\Search.txt

Deleted : C:\Users\USER\Desktop\Silent Runners.zip

Deleted : C:\Users\USER\Desktop\wvcheck.exe

Deleted : C:\Users\USER\Desktop\WVCheck_1347_01-12-2016.txt

Deleted : C:\Users\USER\Desktop\zoek.exe

Deleted : C:\Users\USER\Downloads\FRST64.exe

Deleted : HKLM\SOFTWARE\AdwCleaner

 

~ Cleaning system restore ...

 

Deleted : RP #7 [Windows Update | 12/01/2016 06:08:36]

 

New restore point created !

 

~ Resetting system settings ... OK

 

########## - EOF - ##########

[BrynnD17]

 

 

 

Just popped up.... I give up

[zep516]

try the bitdefender quickscan.

http://quickscan.bitdefender.com/

When it finishes there is a View Report option at the bottom. Click on it and copy and paste the report (even if it says nothing found).

[BrynnD17]

Hi Joe,

 

I had already done some research online and I found another trail to use (emsisoft anti-malware) to remove the fdclient file. It removed it, but as we've seen it randomly reappears.

 

I tried to run that bitdefender scan and it wouldn't run... I don't know why. I clicked it and it would say connecting, then nothing.

[zep516]

Have we run ESET yet ?

Note: You can use either Internet Explorer or Mozilla FireFox for this scan. You will however need to disable your current installed Anti-Virus, how to do so can be read here.

• Please go here then click on:
  Note: If using Mozilla Firefox you will need to download esetsmartinstaller_enu.exe when prompted then double click on it to install.
  All of the below instructions are compatible with either Internet Explorer or Mozilla FireFox.
• Select the option YES, I accept the Terms of Use then click on:
• When prompted allow the Add-On/Active X to install.
• Make sure that the option Remove found threats is NOT checked, and the option Scan archives is checked.
• Now click on Advanced Settings and select the following:

• • Scan for potentially unwanted applications
  • Scan for potentially unsafe applications
  • Enable Anti-Stealth Technology
• Now click on:
• The virus signature database... will begin to download. Be patient this make take some time depending on the speed of your Internet Connection.
• When completed the Online Scan will begin automatically.
• Do not touch either the Mouse or keyboard during the scan otherwise it may stall.
• When completed make sure you first copy the logfile located at C:\Program Files\ESET\EsetOnlineScanner\log.txt or C:\Program Files (x86)\ESET\Esetonlinescanner\log.txt)
• Copy and paste that log as a reply to this topic.
• Now click on: (Selecting Uninstall application on close if you so wish)

[BrynnD17]

Hi,

 

Did the ESET scan... Found 1 threat - a PUA to do with some sort of AD wrapper - I removed it. Tried everything to find the log files before I did this... searched my whole computer. They were nowhere to be found. No fdclient as of yet