[zep516]

Hello
 
Right click on FRST, run as administrator when it opens type or copy an paste this:
SmartPCFix 3.09 into the search box.
Click search files.
Post the log.

Also do the same again, this time search registry.
Post log.

I need to go out for a while and may not return till late.

Thanks
Joe

[Advertisements]

Good morning sir 

 

Farbar Recovery Scan Tool (x64) Version: 19-02-2017

Ran by Johnny (21-02-2017 02:52:22)

Running from C:\Users\Johnny\Desktop

Boot Mode: Normal

 

================== Search Files: "SmartPCFix 3.09" =============

 

====== End of Search ======

 

 

Farbar Recovery Scan Tool (x64) Version: 19-02-2017

Ran by Johnny (21-02-2017 03:06:27)

Running from C:\Users\Johnny\Desktop

Boot Mode: Normal

 

================== Search Registry: "SmartPCFix 3.09" ===========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SmartPCFix_is1]

"DisplayName"="SmartPCFix 3.09"

 

====== End of Search ======

 

 

  Revo didn't get all of it!!  

[Dr.Quest]

Good morning sir 

 

Farbar Recovery Scan Tool (x64) Version: 19-02-2017

Ran by Johnny (21-02-2017 02:52:22)

Running from C:\Users\Johnny\Desktop

Boot Mode: Normal

 

================== Search Files: "SmartPCFix 3.09" =============

 

====== End of Search ======

 

 

Farbar Recovery Scan Tool (x64) Version: 19-02-2017

Ran by Johnny (21-02-2017 03:06:27)

Running from C:\Users\Johnny\Desktop

Boot Mode: Normal

 

================== Search Registry: "SmartPCFix 3.09" ===========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SmartPCFix_is1]

"DisplayName"="SmartPCFix 3.09"

 

====== End of Search ======

 

 

  Revo didn't get all of it!!  

[zep516]

Hello

Looks like just a left over key is present and it still shows the program as being installed when actually it isn't.

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system
Open notepad (Start =>All Programs => Accessories => Notepad).
Copy/Paste the contents of the code box below into Notepad.

start
CloseProcesses:
CreateRestorePoint:
Deletekey: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SmartPCFix_is1
Emptytemp:

• Click Format and ensure Wordwrap is unchecked.
• Save as Fixlist.txt to your Desktop (Must be in this location)
• Run FRST/FRST64 and press the Fix button just once and wait.
• If the tool needed a restart please make sure you let the system to restart normally and let the tool completes its run after restart.
• The tool will make a log on the Desktop (Fixlog.txt). Please post it to your reply.

[Dr.Quest]

Fix result of Farbar Recovery Scan Tool (x64) Version: 19-02-2017

Ran by Johnny (22-02-2017 03:22:52) Run:2

Running from C:\Users\Johnny\Desktop

Loaded Profiles: Johnny (Available Profiles: Johnny)

Boot Mode: Normal

==============================================

 

fixlist content:

*****************

start

CloseProcesses:

CreateRestorePoint:

Deletekey: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SmartPCFix_is1

Emptytemp:

*****************

 

Processes closed successfully.

Restore point was successfully created.

HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SmartPCFix_is1 => key removed successfully

 

=========== EmptyTemp: ==========

 

BITS transfer queue => 1134528 B

DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 8515736 B

Java, Flash, Steam htmlcache => 0 B

Windows/system/drivers => 0 B

Edge => 110 B

Chrome => 11571426 B

Firefox => 0 B

Opera => 0 B

 

Temp, IE cache, history, cookies, recent:

Default => 0 B

Users => 0 B

ProgramData => 0 B

Public => 0 B

systemprofile => 128 B

systemprofile32 => 0 B

LocalService => 0 B

NetworkService => 0 B

Johnny => 17680897 B

DefaultAppPool => 0 B

 

RecycleBin => 0 B

EmptyTemp: => 37.1 MB temporary data Removed.

 

================================

 

 

The system needed a reboot.

 

==== End of Fixlog 03:23:53 ====

 

 

  Good morning Sir, can you elaborate here because i don't understand what this means

 

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

[zep516]

Hello,
 

Good morning Sir, can you elaborate here because i don't understand what this means

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

The reason we post that is so no other user looking for help decides to run the fix I specifically made for you.

How's the computer doing ?

[Dr.Quest]

Hi Joe,

 

Well it seems to be a different machine now. Start up and shut down is fast. Chrome opens up at it's home page and not the last tab closed. Web pages open in seconds instead of minutes. you sir are a malware removal genius. Thank you so much!   Now how to keep it this way? 

[zep516]

Hello,
 

Now how to keep it this way?

Don't download anything, run a Malwarebytes scan when things don't seem right. Check your uninstall programs list too for any odd looking entries.

I"ll give some more tips when we close the topic.

We need to remove the tools we used and then close the topic.

The following procedures will implement some cleanup procedures to remove these tools. It will also reset your System Restore by flushing out previous restore points and create a new restore point. It will also remove all the backups our tools may have made.
Any leftover logs, files, folders or tools remaining on your Desktop which were not removed can be deleted manually (right-click the file + delete).

Why we need to remove some of our tools:
Some of the tools we have used to clean your computer were made by fellow malware fighters and are very powerful and if used incorrectly or at the wronge time can make the computer an expensive paper weight. They are updated all the time and some of them more than once a day so by the time you are ready to use them again they will already be outdated.

Download delfix-> https://www.bleeping...ownload/delfix/ by Xplode and save it to your desktop.

• Run the tool by right click on the icon and Run as administrator option.
• Make sure that these ones are checked:
  • Remove disinfection tools
  • Purge system restore
  • Reset system settings
• Push Run.
• The program will run for a few seconds and display a notepad report.
  Paste it for my review.

[Dr.Quest]

# DelFix v1.010 - Logfile created 24/02/2017 at 04:12:04

# Updated 26/04/2015 by Xplode

# Username : Johnny - JOHNNY-PC

# Operating System : Windows 10 Home  (64 bits)

 

~ Removing disinfection tools ...

 

Deleted : C:\FRST

Deleted : C:\AdwCleaner

Deleted : C:\Users\Johnny\Desktop\FRST-OlderVersion

Deleted : C:\Users\Johnny\Desktop\Addition.txt

Deleted : C:\Users\Johnny\Desktop\Fixlog.txt

Deleted : C:\Users\Johnny\Desktop\FRST.txt

Deleted : C:\Users\Johnny\Desktop\FRST64.exe

Deleted : C:\Users\Johnny\Desktop\JRT.txt

Deleted : C:\Users\Johnny\Desktop\Search.txt

Deleted : C:\Users\Johnny\Downloads\Addition.txt

Deleted : C:\Users\Johnny\Downloads\adwcleaner_6.043.exe

Deleted : C:\Users\Johnny\Downloads\FRST.txt

Deleted : C:\Users\Johnny\Downloads\FRST64 - Shortcut.lnk

Deleted : C:\Users\Johnny\Downloads\JRT (1).exe

Deleted : C:\Users\Johnny\Downloads\JRT.exe

 

~ Cleaning system restore ...

 

Deleted : RP #1 [JRT Pre-Junkware Removal | 02/16/2017 21:40:11]

Deleted : RP #10 [Windows Update | 02/22/2017 02:20:01]

 

New restore point created !

 

~ Resetting system settings ... OK

 

########## - EOF - ##########

 

Good Morning

[zep516]

 
I see no signs of malware on your computer, and feel satisfied that our work here is done. The steps below will remove the tools we have used, and reset any settings changed.
You usually get infected because your security settings are too low.

Here are a number of recommendations that will help tighten them, and which will contribute to making you a less likely victim:
Safe Computing Practices please read Here
Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.


If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.
Everyone else please begin a New Topic.
Thanks
Joe