ask.com bar problem

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by edbo20, May 7, 2015.

  1. edbo20

    edbo20 Corporal

    Hello,

    Can you check these logs for me. I have run the scans and see some things in them, but not sure what it is.

    I got a Pop-up saying the computer was infected. I ran the scans and saw a few things.

    I ran MBytes on the 4th and hoped it would do the trick, but it did not (I attached this scan, as well). That's why there are 2 MBytes scan logs attached.

    You have assisted me before and you guys are terrific. Thanks in advance.

    Todd
     

    Attached Files:

  2. edbo20

    edbo20 Corporal

    another file attached
     

    Attached Files:

  3. dr.moriarty

    dr.moriarty Malware Super Sleuth Staff Member

    Please attach the Hitman Pro log.
     
  4. edbo20

    edbo20 Corporal

    Your site says that my file exceeds the limit in size. I broke it up into two files.
     

    Attached Files:

  5. dr.moriarty

    dr.moriarty Malware Super Sleuth Staff Member

    Hello, edbo20

    You can re-run Hitman Pro and have it remove all that it finds.

    Please re-run RogueKiller and run a scan. After it finishes the scan, select the Registry tab and then select any of the below that exist and then click the Delete button.
    Then immediately reboot your PC.

    After reboot, run a new scan with both Hitman Pro and RogueKiller and save a log as in the original instructions and attach the new logs.

    Using "Programs & Features" - uninstall
    Search App by Ask

    Now please download Junkware Removal Tool to your desktop.
    • Make sure to shut down your protection software now to avoid potential conflicts.
    • Run the tool by double-clicking it. If you are using Windows Vista or Seven, right-mouse click it and select Run as Administrator.
    • The tool will open and start scanning your system.
    • Note: That JRT may reset your home page to a google default so you will need to restore your home page setting if this happens.
    • Please be patient as this can take a while to complete depending on your system's specifications.
    • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
    • Attach JRT.txt to your next message.

    Next download AdwCleaner by Xplode and save to your Desktop.
    • Double click on AdwCleaner.exe to run the tool.
      Vista/Windows 7/8 users right-click and select Run As Administrator
    • Click on the Scan button.
    • AdwCleaner will begin...be patient as the scan may take some time to complete.
    • When it's done you'll see: Pending: Please uncheck elements you don't want removed.
    • Now click on the Report button...a logfile (AdwCleaner[R#].txt) will open in Notepad for review (where the largest value of # represents the most recent report).
    • Look over the log especially under Files/Folders for any program you want to save.
    • If there's a program you may want to save, just uncheck it from AdwCleaner.
    • If you're not sure, post the log for review. (all items found are either adware/spyware/foistware)
    • If you're ready to clean it all up.....click the Clean button.
    • After rebooting, a logfile report (AdwCleaner[S0].txt) will open automatically.
    • Attach that logfile to your next reply.
    • A copy of all logfiles are saved in the C:\AdwCleaner folder which are created when running the tool.
    Now run the C:\MGtools\GetLogs.bat file by double clicking on it (Note: if using Vista, Win7 or Win8, don't double click, use right click and select "Run As Administrator").

    Then attach the below logs:
    • the JRT.TXT log
    • AdwCleaner[S#].txt
    • C:\MGlogs.zip
    Make sure you tell me how things are working now!
     
  6. edbo20

    edbo20 Corporal

    I ran Hitman and let it remove some files. I screwed up and did not get a log, so I reran it after all of the steps and posted that log.

    Ran RogueKiller and did not see the PUP files you listed. There were 4, but not the ones you listed.

    I could not delete "Search App by Ask". It says, "The specified account already exists."

    Ran the rest without incident. Files attached.
     

    Attached Files:

  7. edbo20

    edbo20 Corporal

    last log
     

    Attached Files:

  8. dr.moriarty

    dr.moriarty Malware Super Sleuth Staff Member

    I'll assume all is well since you didn't answer my question about how things are running...

    It is time to do our final steps:
    1. We recommend you keep Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase it, it provide no protection. It do not use any significant amount of resources ( except a little disk space ) until you run a scan.
    2. Go back to step 6 of the READ ME and re-enable your Disk Emulation software with Defogger if you had disabled it.
    3. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
    4. If running Vista, Win 7/8 - it is time to make sure you have re-enabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
    5. Go to add/remove programs and uninstall HijackThis.
    6. Go to the C:\MGtools folder and find the MGclean.bat file. Double click on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.
    7. If you are running Win 7/8, Vista, Windows XP or Windows ME, do the below:
      • Refer to the cleaning procedures pointed to by step 7 of the READ ME
        for your Window version and see the instructions to Disable System Restore which will flush your Restore Points.
      • Then reboot and Enable System Restore to create a new clean Restore Point.
    8. After doing the above, you should work through the below link:
    Safe surfing! http://i268.photobucket.com/albums/jj5/drmoriarty/Emoticons/char145.gif
     
  9. edbo20

    edbo20 Corporal

    I'm sorry I did not respond appropriately.

    The computer does not move from site to site as quickly as it has in the past. It seems much slower.

    Also, the "Search App by Ask" still shows in the Programs list.

    I apologize for being so dim, but I found the Hitman log I ran directly after deleting the items you told me to. I have attached it, but I had to split it into two files. The site says the file is too large.

    Thank you for your help.
     

    Attached Files:

  10. dr.moriarty

    dr.moriarty Malware Super Sleuth Staff Member

    See if this portable un-installer lists it -
    GeekUninstaller 1.3.3.46.
     
  11. edbo20

    edbo20 Corporal

    That seems to have don the trick. It has been removed along with 59 other items.

    Thank you.
     
  12. dr.moriarty

    dr.moriarty Malware Super Sleuth Staff Member

    You're welcome.
     
  13. edbo20

    edbo20 Corporal

    Very soon after we ended this session the machine began to slow down moving from web address to web address. Sometimes it would not move to the new address.

    Can you check my logs to verify that there is no infection and that I should pursue another issue?

    Thanks
     

    Attached Files:

  14. dr.moriarty

    dr.moriarty Malware Super Sleuth Staff Member

    :)

    I didn't find any malware in those logs.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds