OOps I did it again

Same stuff different malware. I think I got it after viewing one of those stories at the bottom opf Fooxnews online. Anyway...
MS Security essentials picked up on pws win32 frethog. Stupidly I selected the delete option because it said severe threat, recommend deletion.

For nearly a week I get resolving host messages, internet not available messages. It looks as if the same message is on the kitchen PC as well.

Have downloaded several of the tools and am getting started in the procedures for chasing this down. not sure if this is hijacking? Doing that first.
Catches all empties, no Java installed.

The instructions showing how to post logs are incomplete and do not show the actual buttons or photos that are supposed to be there so I cannot make heads or tales of it.
Here is a brief JRT readout.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 7.6.4 (09.28.2015:1)
OS: Windows 7 Home Premium x64
Ran by Sal on Thu 10/15/2015 at 10:49:14.10
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services~~~ Tasks~~~ Registry Values
Successfully deleted: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\GoogleChromeAutoLaunch_52EC7A1DC76C3623378C4A86AEE96E81
~~~ Registry Keys
~~~ Files
~~~ FoldersSuccessfully deleted: [Folder] C:\Program Files (x86)\coupons
~~~ Chrome
[C:\Users\Sal\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - default search provider reset
[C:\Users\Sal\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:
[C:\Users\Sal\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset
[C:\Users\Sal\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:
[]
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Thu 10/15/2015 at 10:52:35.86
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

Things are looking pretty good on this PC. Here are the results.
TDSS killer gave no results.
MWB gave no results as you will see.
You didn't ask for jt but I did it I think to make sure it wasn't hijacking at work here. Things seem to be working well. The internet is snappy fast again, no more messages telling me how there is no internet/ reload, or the other message about resolving host or something like that.

Thank You.

Sadly when I was attempting to get a password and get on the site I was using the little (intel pentium 2) kitchen PC. It appears to be infected as well in the very same way. There will be a continuation of this infection thread. At least I will post results of the scans to verify the hopefully positive results.

Thanks Again.
I hate paying a "tech" to do what I can learn to do for myself.

 

I spoke too soon. Its doing the :"dns probe finished, no internet" and "resolving host" messages. I don"t know. :-( Whenever you get to the readouts you can determine if it looked clear or if more testing is needed. Thanks just the same.

 

I guess HTML wont load. Hopefully this is what you needed. I think I see some problems here.:cry

 

Im using Chrome. I got the same message when I pulled out MS IE and Firefox on the other PC. Those items that showed up in the log from rouge Killer are not Malware? Thats what I was thinking but Im not experienced. Ii do know that I constantly am getting messages that there is no service :"dns probe finished, no internet" and "resolving host" . Very frustrating. I assumed it was malware because initially Microsoft Security Essentials flagged PWS Win32 frethog said it was very serious, and I deleted it using MS SE. I heard that it leaves something behind that reproduces malware everytime the browser starts. I must have bad info. Is it possible that those message I get are actually caused by bad service from my internet provider? Its never been that bad, especially with the odd messages. Thank You for your attention.

 

Reset Chrome and called internet provider, reset signal to router. Symptome have cleared up. Nice and quick now. Thank You.

 

I'm going to get on to the final touches and removing unnecessary software I used. I did have another episode with the internet slowing to a crawl even after I contacted the internet provider and the reset everything.
As it would turn out I did a search on my Zoom router and found the if "IP Flood Detection" is selected the modem will inevitably nut up and slow to a crawl. Sinc I changed this setting there have been no major problems.