[Chef April]

 

fixlist content:

*****************

CreateRestorePoint:

[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{912C156F-05CF-4B62-851A-96E167A677B0}]

[-HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{912C156F-05CF-4B62-851A-96E167A677B0}]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\BFlix.DLL]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\AppID\BFlix.DLL]

[-HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\AppID\BFlix.DLL]

*****************

 

Restore point was successfully created.

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{912C156F-05CF-4B62-851A-96E167A677B0} => could not remove at first attempt (ErrorCode: C0000121), see next line.

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{912C156F-05CF-4B62-851A-96E167A677B0} => key removed successfully

HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{912C156F-05CF-4B62-851A-96E167A677B0} => key not found. 

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\BFlix.DLL => key removed successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\AppID\BFlix.DLL => key not found. 

HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\AppID\BFlix.DLL => key not found. 

 

==== End of Fixlog 19:02:05 ====

[Advertisements]

OK! Well done, your computer is clean again! Part of our jobs here is to help you clean your computer. But beyond that and just as important is to provide you with some information to keep you safe and secure on the net as well as to share knowledge. Following is that information. In addition, for your hard drive issue I would recommend posting an inquiry in our Computer Hardware forum where the experts there have much more knowledge in hardware than many of us in malware removal. You can refer to this thread and ask for a second opinion.
 
1. Clean Up!
We need to remove all the tools that we used so that should you ever be re-infected, you will download updated versions which may have updated detection logic.
1. Download Delfix from here.
2. Ensure everything is checked.
3. Click Run.
Note: The program will run for a few moments and then notepad will open with a log. Please paste the log in your next reply.
Note: Delete any  other .bat, .log, .reg, .txt,  and any other files created during this process, and left on the desktop and empty the Recycle Bin.
 
2. Keeping Programs Updated
You need to ensure that any programs installed on your machine are kept current. The bad guys exploit vulnerabilities that are found in older versions of software. A very good piece of software that keeps your programs up-to-date is Secunia Personal Software Inspector (PSI). You can download and install it from here. You can read more information about this free software as well as a video walkthrough from here.
 
3. Antimalware- Preventative
Note: Let's keep Malwarebytes installed as it's a fantastic piece of software. Malwarebytes is an anti-malware software and not an antivirus software so it won't conflict with the Antivirus that you are running. I would recommend that you open up this program, allow it to update and scan your machine at least quarterly...monthly if you can.
 
4. Crypto Warning!!!! - Complete Data Loss can occur!
There are particularly nasty infections out there at the moment that encrypt your data and hold it for ransom. You may read more about this here.
 

• Download CryptoPrevent free for home use here following the instructions below.
• Save the file to your desktop from the link above and then open the program by clicking Run when prompted from your browser or by going to the desktop where the file was saved and double-clicking.
• Accept all the defaults during the install. The last screen of the install has a checkmark in "Launch CryptoPrevent". This is good and will launch the program once you click Finish.
• You will get a prompt asking if you purchased a Product Key for Automatic Updates. You can answer No.
• You will then be prompted to learn more about automatic updates or if you want to purchase a key. This is up to you but you don't have to.
• You will be prompted to click OK to continue and select your protection level. Go ahead and click OK.
• Click the Apply button to set Default protection.
• You may get a message stating that Windows Sidebar and Desktop Gadgets are a major security vulnerability and asking you if you want to disable them. If you don't use these features, answer Yes.
• That's it. The protection is in place.

Note: The free version doesn't provide automatic updates. Periodically, you should open up the program (there is a shortcut on your desktop now) and select the Updates! menu....and select Check for Updates to see if there are any as this infection has serious consequences.
 

 

 

 
For more information about computer security and how to protect yourself when on the internet, please read this guide Best Practices for Safe Computing
 
OK, all the best, and stay safe!
 
Items for your next post
1. Contents of the delfix log

[BrianDrab]

OK! Well done, your computer is clean again! Part of our jobs here is to help you clean your computer. But beyond that and just as important is to provide you with some information to keep you safe and secure on the net as well as to share knowledge. Following is that information. In addition, for your hard drive issue I would recommend posting an inquiry in our Computer Hardware forum where the experts there have much more knowledge in hardware than many of us in malware removal. You can refer to this thread and ask for a second opinion.
 
1. Clean Up!
We need to remove all the tools that we used so that should you ever be re-infected, you will download updated versions which may have updated detection logic.
1. Download Delfix from here.
2. Ensure everything is checked.
3. Click Run.
Note: The program will run for a few moments and then notepad will open with a log. Please paste the log in your next reply.
Note: Delete any  other .bat, .log, .reg, .txt,  and any other files created during this process, and left on the desktop and empty the Recycle Bin.
 
2. Keeping Programs Updated
You need to ensure that any programs installed on your machine are kept current. The bad guys exploit vulnerabilities that are found in older versions of software. A very good piece of software that keeps your programs up-to-date is Secunia Personal Software Inspector (PSI). You can download and install it from here. You can read more information about this free software as well as a video walkthrough from here.
 
3. Antimalware- Preventative
Note: Let's keep Malwarebytes installed as it's a fantastic piece of software. Malwarebytes is an anti-malware software and not an antivirus software so it won't conflict with the Antivirus that you are running. I would recommend that you open up this program, allow it to update and scan your machine at least quarterly...monthly if you can.
 
4. Crypto Warning!!!! - Complete Data Loss can occur!
There are particularly nasty infections out there at the moment that encrypt your data and hold it for ransom. You may read more about this here.
 

• Download CryptoPrevent free for home use here following the instructions below.
• Save the file to your desktop from the link above and then open the program by clicking Run when prompted from your browser or by going to the desktop where the file was saved and double-clicking.
• Accept all the defaults during the install. The last screen of the install has a checkmark in "Launch CryptoPrevent". This is good and will launch the program once you click Finish.
• You will get a prompt asking if you purchased a Product Key for Automatic Updates. You can answer No.
• You will then be prompted to learn more about automatic updates or if you want to purchase a key. This is up to you but you don't have to.
• You will be prompted to click OK to continue and select your protection level. Go ahead and click OK.
• Click the Apply button to set Default protection.
• You may get a message stating that Windows Sidebar and Desktop Gadgets are a major security vulnerability and asking you if you want to disable them. If you don't use these features, answer Yes.
• That's it. The protection is in place.

Note: The free version doesn't provide automatic updates. Periodically, you should open up the program (there is a shortcut on your desktop now) and select the Updates! menu....and select Check for Updates to see if there are any as this infection has serious consequences.
 

 

 

 
For more information about computer security and how to protect yourself when on the internet, please read this guide Best Practices for Safe Computing
 
OK, all the best, and stay safe!
 
Items for your next post
1. Contents of the delfix log

[Chef April]

# DelFix v1.011 - Logfile created 05/02/2016 at 19:38:28

# Updated 18/08/2015 by Xplode

# Username : JOHN THE MAN - DARINSWORKCOMP

# Operating System : Windows 10 Home  (64 bits)

 

~ Activating UAC ... OK

 

~ Removing disinfection tools ...

 

Deleted : C:\FRST

Deleted : C:\AdwCleaner

Deleted : C:\Users\JOHN THE MAN\Desktop\Addition.txt

Deleted : C:\Users\JOHN THE MAN\Desktop\AdwCleaner.exe

Deleted : C:\Users\JOHN THE MAN\Desktop\esetsmartinstaller_enu.exe

Deleted : C:\Users\JOHN THE MAN\Desktop\Fixlog.txt

Deleted : C:\Users\JOHN THE MAN\Desktop\FRST.txt

Deleted : C:\Users\JOHN THE MAN\Desktop\FRST64.exe

Deleted : C:\Users\JOHN THE MAN\Desktop\JRT.exe

Deleted : C:\Users\JOHN THE MAN\Desktop\JRT.txt

Deleted : C:\Users\JOHN THE MAN\Desktop\Search.txt

Deleted : C:\Users\JOHN THE MAN\Downloads\esetsmartinstaller_enu.exe

Deleted : C:\Users\JOHN THE MAN\Downloads\FRST.txt

 

~ Creating registry backup ... OK

 

~ Cleaning system restore ...

 

Deleted : RP #3 [Restore Point Created by FRST | 02/06/2016 03:00:07]

 

New restore point created !

 

~ Resetting system settings ... OK

 

########## - EOF - ##########

[Chef April]

excellent thank you very much!!! cheers!

[BrianDrab]

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.