I fixed the duplicate posts.
Do you see a file called Fixlog.txt in here -->C:\Users\Owner\Desktop\Downloads
You're posting the Fixlist, I need Fixlog.txt
Not sure how to create a fixLOG.txt Not in C Users Owner Downloads folder either. ???
PopUps because neighbor kids were playing online games?
Started by
JulieFromMidwest
, May 27 2017 06:29 PM
-
This topic is locked
#16
Posted 27 May 2017 - 09:14 PM
JulieFromMidwest
- Topic Starter
-
- Member
-
- 22 posts
Member
#17
Posted 27 May 2017 - 09:28 PM
JulieFromMidwest
- Topic Starter
-
- Member
-
- 22 posts
Member
Sorry you're dealing with an idiot. Here it is.
Fix result of Farbar Recovery Scan Tool (x64) Version: 24-05-2017
Ran by Owner (27-05-2017 23:17:19) Run:1
Running from C:\Users\Owner\Desktop\Downloads
Loaded Profiles: Owner (Available Profiles: Owner)
Boot Mode: Normal
==============================================
fixlist content:
*****************
CloseProcesses:
CreateRestorePoint:
ANT Drivers Installer x64 (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden
Elevated Installer (x32 Version: 5.3.1.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin Express (x32 Version: 5.3.1.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin Express Tray (x32 Version: 5.3.1.0 - Garmin Ltd or its subsidiaries) Hidden
HKLM\...\Run: [] => [X]
HKU\S-1-5-21-3877550178-2833100196-2315676171-1000\...\MountPoints2: {a116b327-d10a-11e6-bf8c-00266cc6178c} - E:\LaunchU3.exe -a
SearchScopes: HKLM -> DefaultScope {{67A2568C-7A0A-4EED-AECC-B5405DE63B64}} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNJ
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {{67A2568C-7A0A-4EED-AECC-B5405DE63B64}} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNJ
SearchScopes: HKLM-x32 -> DefaultScope {{67A2568C-7A0A-4EED-AECC-B5405DE63B64}} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNJ
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {{67A2568C-7A0A-4EED-AECC-B5405DE63B64}} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNJ
SearchScopes: HKU\S-1-5-21-3877550178-2833100196-2315676171-1000 -> {9A2B6F64-2E74-4E4C-8FE8-DBDD16C2250B} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNJ_enUS446
SearchScopes: HKU\S-1-5-21-3877550178-2833100196-2315676171-1000 -> {{67A2568C-7A0A-4EED-AECC-B5405DE63B64}} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNJ
CustomCLSID: HKU\S-1-5-21-3877550178-2833100196-2315676171-1000_Classes\CLSID\{84B5A313-CD5D-4904-8BA2-AFDC81C1B309}\InprocServer32 -> C:\Users\Owner\AppData\Local\Citrix\GoToMeeting\2331\G2MOutlookAddin64.dll => No File
Task: {D733D37D-7445-41EC-B018-5F9F38C9B8FC} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-06] (Google Inc.)
Task: {E6BE003C-9F44-475E-A16B-4021610B53D0} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-06] (Google Inc.)
CMD: bitsadmin /reset /allusers
CMD: ipconfig /flushdns
Emptytemp:
*****************
Processes closed successfully.
Restore point was successfully created.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\\SystemComponent => value not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\\SystemComponent => value not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\\SystemComponent => value not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\\SystemComponent => value not found.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\ => value removed successfully
HKU\S-1-5-21-3877550178-2833100196-2315676171-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a116b327-d10a-11e6-bf8c-00266cc6178c} => key removed successfully
HKCR\CLSID\{a116b327-d10a-11e6-bf8c-00266cc6178c} => key not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => key removed successfully
HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => key not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{{67A2568C-7A0A-4EED-AECC-B5405DE63B64}} => key removed successfully
HKCR\CLSID\{{67A2568C-7A0A-4EED-AECC-B5405DE63B64}} => key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => key not found.
HKCR\Wow6432Node\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{{67A2568C-7A0A-4EED-AECC-B5405DE63B64}} => key removed successfully
HKCR\Wow6432Node\CLSID\{{67A2568C-7A0A-4EED-AECC-B5405DE63B64}} => key not found.
HKU\S-1-5-21-3877550178-2833100196-2315676171-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9A2B6F64-2E74-4E4C-8FE8-DBDD16C2250B} => key removed successfully
HKCR\CLSID\{9A2B6F64-2E74-4E4C-8FE8-DBDD16C2250B} => key not found.
HKU\S-1-5-21-3877550178-2833100196-2315676171-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{{67A2568C-7A0A-4EED-AECC-B5405DE63B64}} => key removed successfully
HKCR\CLSID\{{67A2568C-7A0A-4EED-AECC-B5405DE63B64}} => key not found.
HKU\S-1-5-21-3877550178-2833100196-2315676171-1000_Classes\CLSID\{84B5A313-CD5D-4904-8BA2-AFDC81C1B309} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D733D37D-7445-41EC-B018-5F9F38C9B8FC} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D733D37D-7445-41EC-B018-5F9F38C9B8FC} => key removed successfully
C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{E6BE003C-9F44-475E-A16B-4021610B53D0} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E6BE003C-9F44-475E-A16B-4021610B53D0} => key removed successfully
C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore => key removed successfully
========= bitsadmin /reset /allusers =========
BITSADMIN version 3.0 [ 7.5.7601 ]
BITS administration utility.
© Copyright 2000-2006 Microsoft Corp.
BITSAdmin is deprecated and is not guaranteed to be available in future versions of Windows.
Administrative tools for the BITS service are now provided by BITS PowerShell cmdlets.
Unable to cancel {0D65FFE3-FB12-4AA2-BF43-3A90E0977E1D}.
0 out of 1 jobs canceled.
========= End of CMD: =========
========= ipconfig /flushdns =========
Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
========= End of CMD: =========
=========== EmptyTemp: ==========
BITS transfer queue => 8388608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 116134725 B
Java, Flash, Steam htmlcache => 140222 B
Windows/system/drivers => 3455286453 B
Edge => 0 B
Chrome => 576929514 B
Firefox => 444983269 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Users => 0 B
Default => 0 B
Public => 0 B
ProgramData => 0 B
systemprofile => 42337272 B
systemprofile32 => 66088 B
LocalService => 66228 B
NetworkService => 1177444795 B
Owner => 12512196 B
RecycleBin => 6152033474 B
EmptyTemp: => 11.2 GB temporary data Removed.
================================
The system needed a reboot.
==== End of Fixlog 23:21:34 ====
#18
Posted 27 May 2017 - 09:30 PM
zep516
-
- Malware Removal
-
- 8,090 posts
Trusted Helper
Nice work, I knew you would get it.
Are there any issues left and in what browser ?
Are there any issues left and in what browser ?
#19
Posted 27 May 2017 - 09:32 PM
JulieFromMidwest
- Topic Starter
-
- Member
-
- 22 posts
Member
Three things to say to you.
Thx
IOU
UR Gr8
#20
Posted 27 May 2017 - 09:35 PM
zep516
-
- Malware Removal
-
- 8,090 posts
Trusted Helper
Keep Malwarebytes and run it once a week.
Download this program and run it once a month.
Download TFC by OldTimer http://oldtimer.geekstogo.com/TFC.exe to your desktop.
Double-click TFC.exe to run it.
Note: If you are running on Vista, right-click on the file and choose Run As Administrator
TFC will close all programs when run, so make sure you have saved all your work before you begin.
* Click the Start button to begin the cleaning process.
* Depending on how often you clean temp files, execution time should be anywhere from a few seconds to a minute or two.
* Please let TFC run uninterrupted until it is finished.
Once TFC is finished it should restart your computer. If it does not, please manually restart the computer yourself to ensure a complete cleaning.
You don't need to run it now, just keep it on the desktop for use later.
Download this program and run it once a month.
Download TFC by OldTimer http://oldtimer.geekstogo.com/TFC.exe to your desktop.
Double-click TFC.exe to run it.
Note: If you are running on Vista, right-click on the file and choose Run As Administrator
TFC will close all programs when run, so make sure you have saved all your work before you begin.
* Click the Start button to begin the cleaning process.
* Depending on how often you clean temp files, execution time should be anywhere from a few seconds to a minute or two.
* Please let TFC run uninterrupted until it is finished.
Once TFC is finished it should restart your computer. If it does not, please manually restart the computer yourself to ensure a complete cleaning.
You don't need to run it now, just keep it on the desktop for use later.
#21
Posted 27 May 2017 - 09:38 PM
JulieFromMidwest
- Topic Starter
-
- Member
-
- 22 posts
Member
No way to thank you enough.
#22
Posted 27 May 2017 - 09:42 PM
zep516
-
- Malware Removal
-
- 8,090 posts
Trusted Helper
You're welcome.
This topic is closing now. Thank you for using the forum for your computer needs today.
You usually get infected because your security settings are too low.
Here are a number of recommendations that will help tighten them, and which will contribute to making you a less likely victim:
Safe Computing Practices please read Here
Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.
If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.
Everyone else please begin a New Topic.
Thanks
Joe
This topic is closing now. Thank you for using the forum for your computer needs today.
You usually get infected because your security settings are too low.
Here are a number of recommendations that will help tighten them, and which will contribute to making you a less likely victim:
Safe Computing Practices please read Here
Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.
If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.
Everyone else please begin a New Topic.
Thanks
Joe
Similar Topics
0 user(s) are reading this topic
0 members, 0 guests, 0 anonymous users
As Featured On:
Sign In
Create Account
