[emeraldnzl]

I guess it might have defaulted to bold but just in case and for your information, there is no need to post your logs in bold. In fact it makes it harder to read lol.

 

Moving on

 

Go to the link below and follow the instructions to run Dr Web CureIt.

http://www.freedrweb.com/cureit/

• Dr Web will scan your computer. When finished a report is generated.

• Please open and copy and paste the contents back here.

If the log is too long for one post just use as many as necessary or zip and upload as an attachment.

 

[Advertisements]

In the process of doing that now. I assume the program name is yzr9cdhv.exe, and I have to consent to giving them the scan results? Just wan't to make sure I didn't click some download button from an Ad rather than the official website. Sorry about the bold btw, ill make sure to remove that in the future.

Edited by Imrelativelynewtothis, 12 December 2015 - 10:02 PM.

[Imrelativelynewtothis]

In the process of doing that now. I assume the program name is yzr9cdhv.exe, and I have to consent to giving them the scan results? Just wan't to make sure I didn't click some download button from an Ad rather than the official website. Sorry about the bold btw, ill make sure to remove that in the future.

Edited by Imrelativelynewtothis, 12 December 2015 - 10:02 PM.

[emeraldnzl]

Yep, that is the correct one.

[Imrelativelynewtothis]

Tried to copy and paste the log a few times but i kept getting not responding error because it's so big. So I pasted it in a notepad and attached it. Hope that's OK.

 

edit; can't thank you enough, really appreciate it. 

Attached Files

•  cureitlog.txt   2.39MB   1759 downloads

Edited by Imrelativelynewtothis, 12 December 2015 - 10:52 PM.

[emeraldnzl]

Thank you, yes it was fine to attach that one.

 

Before we go on please give me a progress report on your machine.

 

Can you boot and work in normal mode?

 

How is your computer generally now?

[Imrelativelynewtothis]

Done. Can now open task manager but not my antivirus(Norton).

 

I also figured I'd try running JRT and I didn't get the 'not admin' error now that I'm in normal mode. This is the log;

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.1 (11.24.2015)
Operating System: Windows 8.1 x64
Ran by natco_000 (Administrator) on 12/12/15 at 23:22:43.90
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

File System: 0

 

Registry: 0

 

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 12/12/15 at 23:25:17.30
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

[emeraldnzl]

I also figured I'd try running JRT

Thank you for that. Confirms that the adware/foistware is gone.
 

but not my antivirus(Norton).

Yes, I did wonder about that.

Let's try something.

Uninstall Norton and all it's connected programs. We can do a clean reinstall later.

In the meantime activate Windows Defender as protection in the interim.

Also

I think for your machine running chkdsk would be helpful.

Go here for instructions to run chkdsk in Win 8/8.1

You may have to shut down your machine and restart to make chkdsk run.

It can take quite a while. Just have a cup of tea/coffee and relax... let it do it's job.

Tell me how it went.

If you miss the result for whatever reason.

You can access the chkdsk report on the C partition by doing this:

Press the Windows key + the R key

The Run box will open. Type:

cmd

And press Enter

Type chkdsk and press Enter

A report will present.

Right click and select Mark

Highlight the text and click copy

Open Notepad > right click and paste

Copy and paste the report from notepad back here.

Note: If you want a report on a partition or drive other than C you need to go to that partition. For example to access D (where D is the required partition) you would type D: and press the ENTER key.

After that

Run your machine in normal mode for a bit. Come back and tell me if it is how it is.
 

[Imrelativelynewtothis]

Uninstalled Norton and updated/activated windows defender. Currently running chkdsk. Going to sleep now so will update tomorrow. Thanks for everything so far.

[emeraldnzl]

Getting late where I am too.

 

Catch you tomorrow.

[Imrelativelynewtothis]

Hey I did the chkdsk and got the log from eventvwr. Here it is;

 

　

Checking file system on C:

The type of the file system is NTFS.

Volume label is Windows.

　

A disk check has been scheduled.

Windows will now check the disk.

Stage 1: Examining basic file system structure ...

Cleaning up instance tags for file 0x3586.

382976 file records processed. File verification completed.

5741 large file records processed. 0 bad file records processed.

Stage 2: Examining file name linkage ...

476000 index entries processed. Index verification completed.

0 unindexed files scanned. 0 unindexed files recovered.

Stage 3: Examining security descriptors ...

CHKDSK is compacting the security descriptor stream

Cleaning up 4127 unused security descriptors.

46513 data files processed. CHKDSK is verifying Usn Journal...

Usn Journal verification completed.

CHKDSK discovered free space marked as allocated in the volume bitmap.

Windows has made corrections to the file system.

No further action is required.

950114303 KB total disk space.

54026400 KB in 213105 files.

136948 KB in 46516 indexes.

0 KB in bad sectors.

480131 KB in use by the system.

65536 KB occupied by the log file.

895470824 KB available on disk.

4096 bytes in each allocation unit.

237528575 total allocation units on disk.

223867706 allocation units available on disk.

Internal Info:

00 d8 05 00 2a f6 03 00 16 59 07 00 00 00 00 00 ....*....Y......

b2 01 00 00 56 00 00 00 00 00 00 00 00 00 00 00 ....V...........

Windows has finished checking your disk.

Please wait while your computer restarts.

[emeraldnzl]

How is your machine now?

[Imrelativelynewtothis]

It seems to be about the same. Should I try re-installing Norton and seeing if it works?

[emeraldnzl]

It seems to be about the same.

Does that mean it is running normally now or you still have problems?

[Imrelativelynewtothis]

Well the original problems I had were;

 

-Not being able to open or run Norton.

 

-Not being able to open task manager (fixed)

 

-Not being able to open or run Malwarebytes without renaming (fixed, can now open)

[emeraldnzl]

Okay, that sounds as though the malware problems are gone.

 

Let's remove the tools we have been using and after that reinstall Norton and see how things go.

 

To clear away the tools we have been using download Delfix from here.

Put a check (tick) in the following boxes:

• Activate UAC
• Remove disinfection tools
• Create registry backup
• Purge System Restore
• Reset System Settings
• Then click Run

The tool will run for a short time. When completed a notepad window will open with a log. Please copy and paste the log back here.

Any remaining tools may be deleted.