Malware check

Discussion in 'Malware Help (A Specialist Will Reply)' started by ShelleyME, Aug 17, 2014.

  1. ShelleyME

    ShelleyME Private E-2

    I hope that I am doing this correctly

    My lovely daughter has been on the computer under a child account using Windows 8.1. Despite talking to her about getting on websites to play games, she has managed to download some kind of adware, I believe. If I get onto her account and use Chrome, ads pop-up with something to do with Arcade listed at the bottom of the pop-ups. I use Torch and even while viewing Majorgeeks, certain words are underlined 3X and I have seen this happen before even before my daughter was born. Anyway, I just noticed this problem this past week. I rarely get onto our PC since I have a tablet. But, my daughter has been complaining about the PC being slow. It takes several minutes just to switch accounts. We had only been using CCleaner since getting this PC. We have Norton 360 for security suite

    Attached are the logs as requested
     

    Attached Files:

    ShelleyME, Aug 17, 2014
    #1
  2. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    Re run Hitman and have it remove what it finds.


    Now Copy the bold text below to notepad. Save it as fixME.reg to your desktop. Be sure the "Save as" type is set to "all files" Once you have saved it double click it and allow it to merge with the registry.

    Make sure that you tell me if you receive a success message about adding the above
    to the registry. If you do not get a success message, it definitely did not work.

    You should try resetting Google Chrome: (And let us know if it makes any difference)


    Reset Google Chrome to defaults
     
    Kestrel13!, Aug 17, 2014
    #2
  3. ShelleyME

    ShelleyME Private E-2

    I ran Hitman and had it delete whatever it found. I then copied and ran the registry fix with success. I re-set the Torch on my account and the Chrome on my daughter's and found that the ads were still popping up from the underlined words that I see on this website. I clicked on the right bottom corner that said AdChoices. It said that it was showing me ads according to my browsing history and somehow it was involving Dell. Interesting seeing as I have a HP computer and not a Dell. The actual site running these ads is called Ghostery. It shows how you can opt out of ads, but, looks tedious. Then it offers some add-on to your browser. I know that this site uses ads, so, maybe it's just the site? I checked both my daughter's and my accounts and this is the only website with the unlined words. The random Arcade ones are gone though. Switching accounts doesn't take forever either. So hopefully, problem is solved. Thanks!
     
    ShelleyME, Aug 17, 2014
    #3
  4. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    Problem gone? Ready for final steps? :)
     
    Kestrel13!, Aug 18, 2014
    #4
  5. ShelleyME

    ShelleyME Private E-2

    I went ahead and toggled the system restore. Then followed steps for prevention. Anything else that I should do?
     
    ShelleyME, Aug 18, 2014
    #5
  6. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    You followed these final steps?


    If you are not having any other malware problems, it is time to do our final steps:
    1. We recommend you keep Malwarebytes Anti-Malware for scanning/removal of malware.
    2. Renable your Disk Emulation software with Defogger if you had disabled it in step 4 of the READ & RUN ME.
    3. Go to add/remove programs and uninstall HijackThis. If you don't see it or it will not uninstall, don't worry about it. Just move on to the next step.
    4. If running Vista, Win 7 or Win 8, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
    5. Now goto the C:\MGtools folder and find the MGclean.bat file. Double click ( if running Vista, Win7, or Win 8 Right Click and Run As Administrator ) on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.
    6. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.

    7. After doing the above, you should work thru the below link:
     
    Kestrel13!, Aug 19, 2014
    #6

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds