[pystryker]

ok, It started to uninstall but shortly after ask if I want to let it update.. Im lost

When uninstalling it, Java will sometimes ask if you want to update to the latest version. If you want to keep Java on the machine, you can let it update, but make sure you always keep the latest version on the machine.

You can follow the link below to verify whether or not you have the latest version on the machine.

http://www.java.com/...stallapplet.jsp

When finished, please let me know.

[Advertisements]

All it says is that the plug-in is not supported.

[uFinditEazy!]

All it says is that the plug-in is not supported.

[uFinditEazy!]

If it helps any it is no longer in the uninstall a program.

[pystryker]

If it helps any it is no longer in the uninstall a program.

How is the machine running?

[uFinditEazy!]

She seems to be running much better. No more error messages on startup either. =)

[pystryker]

She seems to be running much better. No more error messages on startup either. =)

Good to hear

Subject to no more issues, I'll go ahead and remove my tools and we'll create a new, clean restore point on your machine.


Step 1: Tool Removal with Delfix and Creation of a clean restore point

• Download Delfix from here
• Ensure Remove disinfection tools is ticked
  Also tick:
  • Create registry backup
  • Purge system restore
  • Reset System Settings
  
• Click Run

The program will run for a few moments and then notepad will open with a log. Please paste the log in your next reply.

• You can uninstall ESET Online Scanner at this time.
• I recommend keeping Malwarebytes Anti-Malware installed. Make sure to update it and run it at least once a week. If it finds things such as PUP's (Potentially Unwanted Programs) you can delete those with no worries. However, if it finds something like a trojan, come see us.

Step 2: Tips, Information, and Optional Installation of Unchecky

• Watch what you open in your emails. If you get an email from an unknown source with any attached files, do not open it.
• Install and keep only one anti-virus on your machine. Update it and scan your machine with it at least once a week.
• Be careful of the websites you visit.
• When installing new programs, don't be "click happy" and click through the screens. Many programs come with adware in them and are set to install them by default. Several programs require that you uncheck or select no to prevent the installation. Take your time and read each screen as you go.

To help protect yourself while on the web, I recommend you read How did I get infected in the first place?


Installation of Unchecky

This is a very good little program that will automatically uncheck any boxes during a software installation. This helps prevent the software from installing any malware that is by default checked while the program is being installed.

• Click here to be taken to Unchecky.com
• Click the very large Download button.
• Click Save
• Once downloaded, double click the program (Vista, Win 7, and 8, right click and Run as Administrator)
• Once open, click the Install button.

Then click Finish




Unchecky is now installed and will help you keep unwanted check boxes unchecked.


Step 3: Protection Against CryptoLocker


CryptoLocker is a ransomware program that was released around the beginning of September 2013 that targets all versions of Windows including Windows XP, Windows Vista, Windows 7, and Windows 8. This ransomware will encrypt certain files using a mixture of RSA & AES encryption. When it has finished encrypting your files, it will display a CryptoLocker payment program that prompts you to send a ransom of either $100 or $300 in order to decrypt the files. This screen will also display a timer stating that you have 72 hours, or 4 days, to pay the ransom or it will delete your encryption key and you will not have any way to decrypt your files. This ransom must be paid using MoneyPak vouchers or Bitcoins. Once you send the payment and it is verified, the program will decrypt the files that it encrypted.

Please download and install CryptoPrevent to lock your machine down from this infection.




Things I need to see in your next post

Delfix Log

[uFinditEazy!]

Delfix link is a 502 bad gateway.

[pystryker]

Delfix link is a 502 bad gateway.

My apologies, it appears the site is down. Here's an alternative site.


http://www.bleepingc...ownload/delfix/

[uFinditEazy!]

# DelFix v10.8 - Logfile created 18/05/2015 at 16:46:14

# Updated 29/07/2014 by Xplode

# Username : Owner - OWNER-PC

# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)

 

~ Removing disinfection tools ...

 

Deleted : C:\Qoobox

Deleted : C:\FRST

Deleted : C:\AdwCleaner

Deleted : C:\Users\Owner\Desktop\FRST-OlderVersion

Deleted : C:\Users\Owner\Desktop\RK_Quarantine

Deleted : C:\TDSSKiller.3.0.0.44_15.05.2015_07.57.00_log.txt

Deleted : C:\Users\Owner\Desktop\Addition.txt

Deleted : C:\Users\Owner\Desktop\adwcleaner_4.203.exe

Deleted : C:\Users\Owner\Desktop\esetsmartinstaller_enu.exe

Deleted : C:\Users\Owner\Desktop\Fixlog.txt

Deleted : C:\Users\Owner\Desktop\FRST.txt

Deleted : C:\Users\Owner\Desktop\FRST64.exe

Deleted : C:\Users\Owner\Desktop\JRT (1).exe

Deleted : C:\Users\Owner\Desktop\JRT.exe

Deleted : C:\Users\Owner\Desktop\JRT.txt

Deleted : C:\Users\Owner\Desktop\RKreport[1]_S_03082013_02d1035.txt

Deleted : C:\Users\Owner\Desktop\RKreport[2]_D_03082013_02d1036.txt

Deleted : C:\Users\Owner\Desktop\Search.txt

Deleted : C:\Users\Owner\Desktop\SecurityCheck (1).exe

Deleted : C:\Users\Owner\Desktop\SecurityCheck.exe

Deleted : C:\Users\Owner\Desktop\tdsskiller.exe

Deleted : C:\Users\Owner\Downloads\ComboFix.exe

Deleted : C:\Users\Owner\Downloads\dds.scr

Deleted : C:\Users\Owner\Downloads\esetsmartinstaller_enu.exe

Deleted : C:\Users\Owner\Downloads\JRT.exe

Deleted : C:\Users\Owner\Downloads\OTL.exe

Deleted : C:\Users\Owner\Downloads\SecurityCheck.exe

Deleted : C:\Windows\grep.exe

Deleted : C:\Windows\PEV.exe

Deleted : C:\Windows\NIRCMD.exe

Deleted : C:\Windows\MBR.exe

Deleted : C:\Windows\SED.exe

Deleted : C:\Windows\SWREG.exe

Deleted : C:\Windows\SWSC.exe

Deleted : C:\Windows\SWXCACLS.exe

Deleted : C:\Windows\Zip.exe

Deleted : HKLM\SOFTWARE\OldTimer Tools

Deleted : HKLM\SOFTWARE\AdwCleaner

Deleted : HKLM\SOFTWARE\Swearware

Deleted : HKLM\SOFTWARE\TrendMicro\Hijackthis

Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\combofix.exe

 

~ Creating registry backup ... OK

 

~ Cleaning system restore ...

 

Deleted : RP #255 [Restore Point Created by FRST | 05/13/2015 04:03:27]

Deleted : RP #256 [Removed WinZip 15.0 | 05/16/2015 20:18:27]

Deleted : RP #257 [Windows Update | 05/18/2015 02:21:11]

Deleted : RP #258 [Windows Update | 05/18/2015 02:21:20]

Deleted : RP #259 [Windows Modules Installer | 05/18/2015 02:23:12]

Deleted : RP #260 [Removed Java 7 Update 25 | 05/18/2015 03:55:22]

Deleted : RP #261 [Removed Java 7 Update 25 | 05/18/2015 03:56:37]

Deleted : RP #262 [Removed Java 7 Update 25 | 05/18/2015 03:59:05]

Deleted : RP #263 [Removed Java 7 Update 25 | 05/18/2015 15:48:33]

 

New restore point created !

 

~ Resetting system settings ... OK

 

########## - EOF - ##########

[pystryker]

That looks good. If you ever need us again, please don't hesitate to come see us.

[uFinditEazy!]

Oh my! Thank you so very much!!

[pystryker]

Oh my! Thank you so very much!!

You're quite welcome, I'm glad we were able to help you.

Safe surfing!

Pystryker

[pystryker]

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.