Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

my laptop is infected.


  • This topic is locked This topic is locked

#16
zep516

zep516

    Trusted Helper

  • Malware Removal
  • 6,804 posts
Hello :headscratch:
 
Right click on FRST, run as administrator when it opens type or copy an paste this:
SmartPCFix 3.09 into the search box.
Click search files.
Post the log.

Also do the same again, this time search registry.
Post log.

I need to go out for a while and may not return till late.

Thanks
Joe :)
  • 0

Advertisements


#17
Dr.Quest

Dr.Quest

    Member

  • Topic Starter
  • Member
  • PipPip
  • 16 posts

Good morning sir  :D

 

Farbar Recovery Scan Tool (x64) Version: 19-02-2017
Ran by Johnny (21-02-2017 02:52:22)
Running from C:\Users\Johnny\Desktop
Boot Mode: Normal
 
================== Search Files: "SmartPCFix 3.09" =============
 
====== End of Search ======
 
 
Farbar Recovery Scan Tool (x64) Version: 19-02-2017
Ran by Johnny (21-02-2017 03:06:27)
Running from C:\Users\Johnny\Desktop
Boot Mode: Normal
 
================== Search Registry: "SmartPCFix 3.09" ===========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SmartPCFix_is1]
"DisplayName"="SmartPCFix 3.09"
 
====== End of Search ======
 
 
:oops:  Revo didn't get all of it!!   :D

  • 0

#18
zep516

zep516

    Trusted Helper

  • Malware Removal
  • 6,804 posts
Hello :wave:

Looks like just a left over key is present and it still shows the program as being installed when actually it isn't.

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system
Open notepad (Start =>All Programs => Accessories => Notepad).
Copy/Paste the contents of the code box below into Notepad.
start
CloseProcesses:
CreateRestorePoint:
Deletekey: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SmartPCFix_is1
Emptytemp:
  • Click Format and ensure Wordwrap is unchecked.
  • Save as Fixlist.txt to your Desktop (Must be in this location)
  • Run FRST/FRST64 and press the Fix button just once and wait.
  • If the tool needed a restart please make sure you let the system to restart normally and let the tool completes its run after restart.
  • The tool will make a log on the Desktop (Fixlog.txt). Please post it to your reply.

  • 0

#19
Dr.Quest

Dr.Quest

    Member

  • Topic Starter
  • Member
  • PipPip
  • 16 posts
Fix result of Farbar Recovery Scan Tool (x64) Version: 19-02-2017
Ran by Johnny (22-02-2017 03:22:52) Run:2
Running from C:\Users\Johnny\Desktop
Loaded Profiles: Johnny (Available Profiles: Johnny)
Boot Mode: Normal
==============================================
 
fixlist content:
*****************
start
CloseProcesses:
CreateRestorePoint:
Deletekey: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SmartPCFix_is1
Emptytemp:
*****************
 
Processes closed successfully.
Restore point was successfully created.
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SmartPCFix_is1 => key removed successfully
 
=========== EmptyTemp: ==========
 
BITS transfer queue => 1134528 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 8515736 B
Java, Flash, Steam htmlcache => 0 B
Windows/system/drivers => 0 B
Edge => 110 B
Chrome => 11571426 B
Firefox => 0 B
Opera => 0 B
 
Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 128 B
systemprofile32 => 0 B
LocalService => 0 B
NetworkService => 0 B
Johnny => 17680897 B
DefaultAppPool => 0 B
 
RecycleBin => 0 B
EmptyTemp: => 37.1 MB temporary data Removed.
 
================================
 
 
The system needed a reboot.
 
==== End of Fixlog 03:23:53 ====
 
 
:wave:  Good morning Sir, can you elaborate here because i don't understand what this means
 
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

  • 0

#20
zep516

zep516

    Trusted Helper

  • Malware Removal
  • 6,804 posts
Hello,
 

Good morning Sir, can you elaborate here because i don't understand what this means

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system


The reason we post that is so no other user looking for help decides to run the fix I specifically made for you.

How's the computer doing ?
  • 0

#21
Dr.Quest

Dr.Quest

    Member

  • Topic Starter
  • Member
  • PipPip
  • 16 posts

Hi Joe,

 

Well it seems to be a different machine now. Start up and shut down is fast. Chrome opens up at it's home page and not the last tab closed. Web pages open in seconds instead of minutes. you sir are a malware removal genius. Thank you so much!  :spoton:  Now how to keep it this way? 


  • 0

#22
zep516

zep516

    Trusted Helper

  • Malware Removal
  • 6,804 posts
Hello,
 

Now how to keep it this way?

Don't download anything, run a Malwarebytes scan when things don't seem right. Check your uninstall programs list too for any odd looking entries.

I"ll give some more tips when we close the topic.

We need to remove the tools we used and then close the topic.

The following procedures will implement some cleanup procedures to remove these tools. It will also reset your System Restore by flushing out previous restore points and create a new restore point. It will also remove all the backups our tools may have made.
Any leftover logs, files, folders or tools remaining on your Desktop which were not removed can be deleted manually (right-click the file + delete).

Why we need to remove some of our tools:
Some of the tools we have used to clean your computer were made by fellow malware fighters and are very powerful and if used incorrectly or at the wronge time can make the computer an expensive paper weight. They are updated all the time and some of them more than once a day so by the time you are ready to use them again they will already be outdated.

Download delfix-> https://www.bleeping...ownload/delfix/ by Xplode and save it to your desktop.
  • Run the tool by right click on the 51a5ce45263de-delfix.png icon and Run as administrator option.
  • Make sure that these ones are checked:
    • Remove disinfection tools
    • Purge system restore
    • Reset system settings
  • Push Run.
  • The program will run for a few seconds and display a notepad report.
    Paste it for my review.

  • 0

#23
Dr.Quest

Dr.Quest

    Member

  • Topic Starter
  • Member
  • PipPip
  • 16 posts
# DelFix v1.010 - Logfile created 24/02/2017 at 04:12:04
# Updated 26/04/2015 by Xplode
# Username : Johnny - JOHNNY-PC
# Operating System : Windows 10 Home  (64 bits)
 
~ Removing disinfection tools ...
 
Deleted : C:\FRST
Deleted : C:\AdwCleaner
Deleted : C:\Users\Johnny\Desktop\FRST-OlderVersion
Deleted : C:\Users\Johnny\Desktop\Addition.txt
Deleted : C:\Users\Johnny\Desktop\Fixlog.txt
Deleted : C:\Users\Johnny\Desktop\FRST.txt
Deleted : C:\Users\Johnny\Desktop\FRST64.exe
Deleted : C:\Users\Johnny\Desktop\JRT.txt
Deleted : C:\Users\Johnny\Desktop\Search.txt
Deleted : C:\Users\Johnny\Downloads\Addition.txt
Deleted : C:\Users\Johnny\Downloads\adwcleaner_6.043.exe
Deleted : C:\Users\Johnny\Downloads\FRST.txt
Deleted : C:\Users\Johnny\Downloads\FRST64 - Shortcut.lnk
Deleted : C:\Users\Johnny\Downloads\JRT (1).exe
Deleted : C:\Users\Johnny\Downloads\JRT.exe
 
~ Cleaning system restore ...
 
Deleted : RP #1 [JRT Pre-Junkware Removal | 02/16/2017 21:40:11]
Deleted : RP #10 [Windows Update | 02/22/2017 02:20:01]
 
New restore point created !
 
~ Resetting system settings ... OK
 
########## - EOF - ##########
 
Good Morning

  • 0

#24
zep516

zep516

    Trusted Helper

  • Malware Removal
  • 6,804 posts
:wave:
 
I see no signs of malware on your computer, and feel satisfied that our work here is done. The steps below will remove the tools we have used, and reset any settings changed.
You usually get infected because your security settings are too low.

Here are a number of recommendations that will help tighten them, and which will contribute to making you a less likely victim:
Safe Computing Practices please read Here
Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.


If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.
Everyone else please begin a New Topic.
Thanks
Joe :)
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP