Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Virus browser warning & noise [Solved]

Started by Feather24 , Jun 18 2015 01:38 PM

virus slow computer noisy computer

This topic is locked

#31
pystryker

Posted 08 July 2015 - 06:25 PM

Trusted Helper

Malware Removal
3,912 posts

Hi Ok I'm back. Thanks for the info in your last reply, glad all is well. thanks for keeping this open. I'll do what I can today. Overall it is less noisy than it was which is good. Sometimes I still get error message (stop script messages) in facebook. I'll monitor after this next scan.

I'm busy most of tomorrow so may not get much done then if needed.

Just wanted to give you an update.

Welcome back and you're quite welcome.

Malware wise, you machine is clean. I'd like to let the Hardware Techs take a look at it and they can run some diagnostics on it to test the hardware. How is the machine running now that you've completed the CBS scan?

Let's go ahead and remove my tools, and create a clean restore point. :thumbsup:

Step 1: Tool Removal with Delfix and Creation of a clean restore point

Download Delfix from here
Ensure Remove disinfection tools is ticked
Also tick:
- Create registry backup
- Purge system restore
- Reset System Settings
Click Run

The program will run for a few moments and then notepad will open with a log. Please paste the log in your next reply.

You can uninstall ESET Online Scanner at this time.
I recommend keeping Malwarebytes Anti-Malware installed. Make sure to update it and run it at least once a week. If it finds things such as PUP's (Potentially Unwanted Programs) you can delete those with no worries. However, if it finds something like a trojan, come see us.

Step 2: Tips, Information, and Optional Installation of Unchecky

Watch what you open in your emails. If you get an email from an unknown source with any attached files, do not open it.
Install and keep only one anti-virus on your machine. Update it and scan your machine with it at least once a week.
Be careful of the websites you visit.
When installing new programs, don't be "click happy" and click through the screens. Many programs come with adware in them and are set to install them by default. Several programs require that you uncheck or select no to prevent the installation. Take your time and read each screen as you go.

To help protect yourself while on the web, I recommend you read How did I get infected in the first place?

Installation of Unchecky

This is a very good little program that will automatically uncheck any boxes during a software installation. This helps prevent the software from installing any malware that is by default checked while the program is being installed.

Click here to be taken to Unchecky.com
Click the very large Download button.
Click Save
Once downloaded, double click the program (Vista, Win 7, and 8, right click and Run as Administrator)
Once open, click the Install button.

Then click Finish

Unchecky is now installed and will help you keep unwanted check boxes unchecked. :thumbsup:

Step 3: Protection Against CryptoLocker

CryptoLocker is a ransomware program that was released around the beginning of September 2013 that targets all versions of Windows including Windows XP, Windows Vista, Windows 7, and Windows 8. This ransomware will encrypt certain files using a mixture of RSA & AES encryption. When it has finished encrypting your files, it will display a CryptoLocker payment program that prompts you to send a ransom of either $100 or $300 in order to decrypt the files. This screen will also display a timer stating that you have 72 hours, or 4 days, to pay the ransom or it will delete your encryption key and you will not have any way to decrypt your files. This ransom must be paid using MoneyPak vouchers or Bitcoins. Once you send the payment and it is verified, the program will decrypt the files that it encrypted.

Please download and install CryptoPrevent to lock your machine down from this infection.

Things I need to see in your next post

Delfix Log

#32
Feather24

Posted 10 July 2015 - 01:34 PM

Member

Topic Starter
Member
251 posts

Hi, here is the log you requested. I really appreciate all the clean up advice and programs, I think this is the best I've received on this site, so thanks for all your help and support.

# DelFix v10.8 - Logfile created 10/07/2015 at 20:29:17
# Updated 29/07/2014 by Xplode
# Username : Frances - FRANCES-PC
# Operating System : Windows 7 Home Premium Service Pack 1 (32 bits)

~ Removing disinfection tools ...

Deleted : C:\Qoobox
Deleted : C:\_OTL
Deleted : C:\FRST
Deleted : C:\AdwCleaner
Deleted : C:\Users\Frances\Desktop\FRST-OlderVersion
Deleted : C:\AdwCleaner[R1].txt
Deleted : C:\AdwCleaner[R2].txt
Deleted : C:\AdwCleaner[R3].txt
Deleted : C:\ComboFix.txt
Deleted : C:\TDSSKiller.3.0.0.44_22.06.2015_12.47.33_log.txt
Deleted : C:\Users\Frances\Desktop\Addition.txt
Deleted : C:\Users\Frances\Desktop\AdwCleaner.exe
Deleted : C:\Users\Frances\Desktop\adwcleaner_4.000.exe
Deleted : C:\Users\Frances\Desktop\aswmbr
Deleted : C:\Users\Frances\Desktop\aswmbr.exe
Deleted : C:\Users\Frances\Desktop\aswMBR.txt
Deleted : C:\Users\Frances\Desktop\ComboFix.exe
Deleted : C:\Users\Frances\Desktop\esetsmartinstaller_enu.exe
Deleted : C:\Users\Frances\Desktop\Extras.Txt
Deleted : C:\Users\Frances\Desktop\Fixlog.txt
Deleted : C:\Users\Frances\Desktop\FRST.exe
Deleted : C:\Users\Frances\Desktop\FRST.txt
Deleted : C:\Users\Frances\Desktop\JRT.exe
Deleted : C:\Users\Frances\Desktop\JRT.txt
Deleted : C:\Users\Frances\Desktop\MBR.dat
Deleted : C:\Users\Frances\Desktop\OTL.Txt
Deleted : C:\Users\Frances\Desktop\OTL (1).exe
Deleted : C:\Users\Frances\Desktop\OTL.exe
Deleted : C:\Users\Frances\Desktop\SecurityCheck(1).exe
Deleted : C:\Users\Frances\Desktop\SecurityCheck.exe
Deleted : C:\Users\Frances\Desktop\tdsskiller.exe
Deleted : C:\Users\Frances\Desktop\TFC.exe
Deleted : C:\Users\Frances\Downloads\Addition.txt
Deleted : C:\Users\Frances\Downloads\esetsmartinstaller_enu (1).exe
Deleted : C:\Users\Frances\Downloads\esetsmartinstaller_enu (2).exe
Deleted : C:\Users\Frances\Downloads\esetsmartinstaller_enu (3).exe
Deleted : C:\Users\Frances\Downloads\esetsmartinstaller_enu.exe
Deleted : C:\Users\Frances\Downloads\JRT.exe
Deleted : C:\Users\Frances\Downloads\MiniToolBox.exe
Deleted : C:\Users\Frances\Downloads\Result.txt
Deleted : C:\Users\Frances\Downloads\TFC.exe
Deleted : C:\Windows\grep.exe
Deleted : C:\Windows\PEV.exe
Deleted : C:\Windows\NIRCMD.exe
Deleted : C:\Windows\MBR.exe
Deleted : C:\Windows\SED.exe
Deleted : C:\Windows\SWREG.exe
Deleted : C:\Windows\SWSC.exe
Deleted : C:\Windows\SWXCACLS.exe
Deleted : C:\Windows\Zip.exe
Deleted : HKLM\SOFTWARE\OldTimer Tools
Deleted : HKLM\SOFTWARE\AdwCleaner
Deleted : HKLM\SOFTWARE\Swearware
Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\combofix.exe
Deleted : HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ASWMBR

~ Creating registry backup ... OK

~ Cleaning system restore ...

Deleted : RP #442 [Windows Update | 06/10/2015 22:07:14]
Deleted : RP #443 [Windows Backup | 06/14/2015 18:00:24]
Deleted : RP #444 [Windows Backup | 06/22/2015 10:45:24]
Deleted : RP #446 [Restore Point Created by FRST | 06/22/2015 11:09:33]
Deleted : RP #447 [Windows Backup | 06/28/2015 18:00:21]
Deleted : RP #448 [Windows Backup | 07/07/2015 14:52:08]

New restore point created !

~ Resetting system settings ... OK

########## - EOF - ##########

#33
Feather24

Posted 10 July 2015 - 01:40 PM

Member

Topic Starter
Member
251 posts

Ok I've downloaded everything you suggested, these are really helpful tools thanks.

I noticed one difference from your instructions about crytolocker it maybe because it's the latest version change? The policies screen was different to your screen shot. It asked me to decide what level I wanted, basic, leave it and forget it, max and max plus. I choose leave it and forget it because it seemed to default to that and the higher properties could stop legal software downloading. It also said I could whitelist files already downloaded - it suggested not doing that unless you were totally sure so I didn't do that. I just used my common sense hopefully that was ok. If not can you advise please. thanks

The machine is a lot quieter which is good. I notice start up and shut down run times are a lot faster which is a relief because it was taking ages. I still get some error messages in facebook on a regular basis not sure what that is. Perhaps it is to do with my cpu, or RAM not sure.

Thanks for suggesting about the other specialists who may be able to help with performance/hardware. I think things are a little faster than they were, less hanging on browsers. It's good to know that it's free of malware and that we deleted those infected backup files.

Edited by Feather24, 10 July 2015 - 02:04 PM.

#34
pystryker

Posted 10 July 2015 - 05:03 PM

Trusted Helper

Malware Removal
3,912 posts

Hi, here is the log you requested. I really appreciate all the clean up advice and programs, I think this is the best I've received on this site, so thanks for all your help and support.

You're quite welcome and thank you for your kind words.

I noticed one difference from your instructions about crytolocker it maybe because it's the latest version change? The policies screen was different to your screen shot. It asked me to decide what level I wanted, basic, leave it and forget it, max and max plus. I choose leave it and forget it because it seemed to default to that and the higher properties could stop legal software downloading. It also said I could whitelist files already downloaded - it suggested not doing that unless you were totally sure so I didn't do that. I just used my common sense hopefully that was ok. If not can you advise please. thanks

That level of protection will work, I have that level set on my machine. Also, thank you for the heads up about the instructions. I'll need to adjust for the latest version.

The machine is a lot quieter which is good. I notice start up and shut down run times are a lot faster which is a relief because it was taking ages. I still get some error messages in facebook on a regular basis not sure what that is. Perhaps it is to do with my cpu, or RAM not sure.

I'm glad to hear the machine is running much smoother, that always makes me smile. Sounds some scripts Facebook is running aren't too well liked by your browser. Is Facebook the only site that's happening on?

Thanks for suggesting about the other specialists who may be able to help with performance/hardware. I think things are a little faster than they were, less hanging on browsers. It's good to know that it's free of malware and that we deleted those infected backup files.

If you'd like to have the techs take a look at it, please click the link below and start a new topic. Let them know that the machine has been cleaned of malware when you post the topic. :thumbsup:

http://www.geekstogo...nd-peripherals/

#35
Feather24

Posted 12 July 2015 - 04:31 PM

Member

Topic Starter
Member
251 posts

Hi, ok good. To answer your question:

"I'm glad to hear the machine is running much smoother, that always makes me smile. Sounds some scripts Facebook is running aren't too well liked by your browser. Is Facebook the only site that's happening on?"

Yes from what I remember.

thanks for the link to set up a new topic.

I wondered if I could ask a different question here, as we are coming to a close. I have a windows phone and I've asked about virus protection on this site. No system is totally protected although the advise I got was that it didn't need any. Do you agree, I think avg do antivirus for phones would you suggest that or something else. I just thought I'd ask while I'm here as I value your advice.

thanks again.

Edited by Feather24, 12 July 2015 - 04:33 PM.

#36
pystryker

Posted 12 July 2015 - 07:02 PM

Trusted Helper

Malware Removal
3,912 posts

Yes from what I remember.

Ok, that's more than likely on Facebook's end of things and not a problem with your browser. :thumbsup:

thanks for the link to set up a new topic.

I wondered if I could ask a different question here, as we are coming to a close. I have a windows phone and I've asked about virus protection on this site. No system is totally protected although the advise I got was that it didn't need any. Do you agree, I think avg do antivirus for phones would you suggest that or something else. I just thought I'd ask while I'm here as I value your advice.

You're welcome, it's my pleasure. The phone protection is a little out of my area, however, I do have Lookout antivirus on my phone for protection. For peace of mind, I'd install one. But, do remember, I'm not versed in the security measures Windows phones have for protection. :thumbsup:

#37
Feather24

Posted 13 July 2015 - 11:47 AM

Member

Topic Starter
Member
251 posts

thanks for all your help pystryker and patience you have been great.

#38
pystryker

Posted 13 July 2015 - 04:26 PM

Trusted Helper

Malware Removal
3,912 posts

thanks for all your help pystryker and patience you have been great.

You're quite welcome.

If we can be of assistance in the future, please don't hesitate to come back and see us. :thumbsup:

Safe surfing!

Pystryker :wave:

#39
pystryker

Posted 13 July 2015 - 04:26 PM

Trusted Helper

Malware Removal
3,912 posts

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.

Back to Virus, Spyware, Malware Removal · Next Unread Topic →

Also tagged with one or more of these keywords: virus, slow computer, noisy computer

Security → Virus, Spyware, Malware Removal → Having Powersheel.exe Issues ... Need fixlist.txt Started by raj0171 , 19 Mar 2024 Virus, HELP, Malwarebytes	5 replies 3,496 views	DR M 06 Apr 2024
Security → Virus, Spyware, Malware Removal → Malware Issue [Closed] Started by Beloved9178 , 17 Aug 2023 Slow computer, popups and 2 more... 1 2 3	Hot 33 replies 43,960 views	DR M 30 Aug 2023
Security → Virus, Spyware, Malware Removal → HP desktop - google.com is in Norwegian [Solved] Started by wayneman50 , 23 Jul 2023 internet, google, virus and 1 more... 1 2 3	Hot 41 replies 26,435 views	wayneman50 17 Aug 2023
Security → Virus, Spyware, Malware Removal → Virus Infection Started by ForrestGump , 05 Oct 2022 Virus 1 2 3 8 →	Hot 110 replies 20,857 views	RKinner 14 Nov 2022
Security → Virus, Spyware, Malware Removal → Checkmate Ransomware detection / removal? Started by JcTcom , 18 Aug 2022 Checkmate, Ransomware, Virus and 5 more...	0 replies 2,516 views	JcTcom 18 Aug 2022