Tweet
Zoek Scan
Disable your antivirus prior to this scan.
Download Zoek
Save the file to your desktop.
Right click Zoek.exe and run as administrator. (Xp Users double click)
Copy the items in red below, and paste them into Zoek.
createsrpoint;
{d8559eb9-20c0-410e-beda-7ed416aecc2a};c
{67C334C0-408D-4E6D-B5A7-0ADD6AFFA252};c
getPlusHelper;s
SkypeUpdate;s
MozillaMaintenance;s
AdobeFlashPlayerUpdateSvc;s
C:\Windows\System32\drivers\avipbb.sys;f
C:\Windows\tasks\Adobe Flash Player Updater.job;f
C:\Windows\system32\tasks\Adobe Acrobat Update Task;f
C:\Windows\system32\tasks\Adobe Flash Player Updater;f
C:\Windows\system32\tasks\CrystalDiskInfo;f
C:\Windows\system32\tasks\PCMAgent.exe;f
C:\Windows\system32\tasks{EB5A17F7-59B1-4914-80F9-8981CBF7FF0B};f
C:\Windows\system32\tasks\NCH Software\debutShakeIcon;f
C:\Windows\system32\tasks\Microsoft\Windows Defender;f
C:\Windows\system32\tasks\Microsoft\Windows\Wirele ss\GatherWirelessInfo;f
C:\Windows\system32\tasks\Microsoft\Windows\Remote Assistance;f
C:\Windows\system32\tasks\Microsoft\Windows\Custom er Experience Improvement Program;f
C:\Windows\system32\tasks\Apple\AppleSoftwareUpdat e;f
[HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run];r
“CCleaner Monitoring”=-;r
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal!SASCORE];r
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\network!SASCORE];r
C:\Program Files\Mozilla Maintenance Service;f
ipconfig /flushdns;b
emptyfolderscheck;delete
emptyclsid;
emptyalltemp;
netsh winsock reset all;b
autoclean;
Now hit the run script button.
The log will appear after a reboot, also you can find it on the C: drive.
Post the log in your next reply.
ClearLNK
Download ClearLNK save it to your desktop.
Drag the file Check_Browsers_LNK from your Collection log made earlier.
As per picture.
A report on the work as a file ClearLNK- .log
Will be produced, post that log.
https://pchelpforum.net/proxy.php?image=https%3A%2F%2Fup2sha.re%2Fuploads% 2F2015%2F3%2FBPD7B3BAgEQl.gif&hash=f65630ba2178027 f4643224f28999e44
Hijack This Fix.
Locate the HijackThis file within the Autologger folder, Right Click Run as Admin.
Close all other open programs prior to running this tool!!
Click System Scan Only.
Then check mark the items listed below.
R3 - Default URLSearchHook is missing
O4 - HKCU..\Run: [CCleaner Monitoring] “C:\Program Files\CCleaner\CCleaner.exe” /MONITOR
O4 - MSConfig\startupfolder: C:^Users^psimoes^AppData^Roaming^Microsoft^Windows ^Start Menu^Programs^Startup^OneNote 2007 Screen Clipper and Launcher.lnk - C:\Windows\pss\OneNote 2007 Screen Clipper and Launcher.lnk.Startup (2017/03/05)
O4 - MSConfig\startupreg: [APSDaemon] (HKLM) (2013/09/25) (no file)
O4 - MSConfig\startupreg: [CLMLServer] “C:\Program Files\CyberLink\PowerCinema for TOSHIBA\Kernel\CLML\CLMLSvc.exe” (HKLM) (2013/09/25)
O4 - MSConfig\startupreg: [GizmoDriveDelegate] “C:\Program Files\Gizmo\gizmo.exe” /RemountStartupImages (HKCU) (2016/11/24)
O4 - MSConfig\startupreg: [Google Desktop Search] “C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe” /startup (HKLM) (2013/05/13)
O4 - MSConfig\startupreg: [GrooveMonitor] “C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe” (HKLM) (2012/03/01)
O4 - MSConfig\startupreg: [PCMAgent] “C:\Program Files\CyberLink\PowerCinema for TOSHIBA\PCMAgent.exe” (HKLM) (2012/03/01)
Now click on fix checked.
After the fix is complete, then reboot your machine.
Easy Service Optimizer
Download easy service optmizer, save it to your desktop and unzip it there. Right click it and run as admin, then select Tweaked at the bottom. Then click on the rocket, this will turn off a lot of useless items.
https://i.imgur.com/tnkjYlk.png
You will however need to change one setting. Right Click on Wlansvc — WLAN AutoConfig, then select start service, the edit service. Make sure it is automatic across the board, as per the picture.
https://i.imgur.com/PO7tPc7.png
Let’s have a fresh look at your system after the above scans please.
Please run Farbar Recovery Scan Tool to give me a fresh look at your system.
Please download the FRST 32 bit or FRST 64bit version to suit your operating system. It is important FRST is downloaded to your desktop.
If you are unsure if your operating system is 32 or 64 Bit please go HERE.
[ul]
[li]Right-click on FRST icon and select Run as Administrator to start the tool.[/li](XP users click run after receipt of Windows Security Warning - Open File).
[li]Make sure that Addition option is checked, as well as Shortcut.txt[/li][li]Press Scan button and wait.[/li][li]The tool will produce three logfiles on your desktop: FRST.txt, and Addition.txt – & Shortcut.txt[/li][/ul]
Please Copy & Paste them into your next reply. But attach Shortcut.txt
Disable your antivirus prior to this scan.
Download Zoek
Save the file to your desktop.
Right click Zoek.exe and run as administrator. (Xp Users double click)
Copy the items in red below, and paste them into Zoek.
createsrpoint;
{d8559eb9-20c0-410e-beda-7ed416aecc2a};c
{67C334C0-408D-4E6D-B5A7-0ADD6AFFA252};c
getPlusHelper;s
SkypeUpdate;s
MozillaMaintenance;s
AdobeFlashPlayerUpdateSvc;s
C:\Windows\System32\drivers\avipbb.sys;f
C:\Windows\tasks\Adobe Flash Player Updater.job;f
C:\Windows\system32\tasks\Adobe Acrobat Update Task;f
C:\Windows\system32\tasks\Adobe Flash Player Updater;f
C:\Windows\system32\tasks\CrystalDiskInfo;f
C:\Windows\system32\tasks\PCMAgent.exe;f
C:\Windows\system32\tasks{EB5A17F7-59B1-4914-80F9-8981CBF7FF0B};f
C:\Windows\system32\tasks\NCH Software\debutShakeIcon;f
C:\Windows\system32\tasks\Microsoft\Windows Defender;f
C:\Windows\system32\tasks\Microsoft\Windows\Wirele ss\GatherWirelessInfo;f
C:\Windows\system32\tasks\Microsoft\Windows\Remote Assistance;f
C:\Windows\system32\tasks\Microsoft\Windows\Custom er Experience Improvement Program;f
C:\Windows\system32\tasks\Apple\AppleSoftwareUpdat e;f
[HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run];r
“CCleaner Monitoring”=-;r
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal!SASCORE];r
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\network!SASCORE];r
C:\Program Files\Mozilla Maintenance Service;f
ipconfig /flushdns;b
emptyfolderscheck;delete
emptyclsid;
emptyalltemp;
netsh winsock reset all;b
autoclean;
Now hit the run script button.
The log will appear after a reboot, also you can find it on the C: drive.
Post the log in your next reply.
ClearLNK
Download ClearLNK save it to your desktop.
Drag the file Check_Browsers_LNK from your Collection log made earlier.
As per picture.
A report on the work as a file ClearLNK- .log
Will be produced, post that log.
https://pchelpforum.net/proxy.php?image=https%3A%2F%2Fup2sha.re%2Fuploads% 2F2015%2F3%2FBPD7B3BAgEQl.gif&hash=f65630ba2178027 f4643224f28999e44
Hijack This Fix.
Locate the HijackThis file within the Autologger folder, Right Click Run as Admin.
Close all other open programs prior to running this tool!!
Click System Scan Only.
Then check mark the items listed below.
R3 - Default URLSearchHook is missing
O4 - HKCU..\Run: [CCleaner Monitoring] “C:\Program Files\CCleaner\CCleaner.exe” /MONITOR
O4 - MSConfig\startupfolder: C:^Users^psimoes^AppData^Roaming^Microsoft^Windows ^Start Menu^Programs^Startup^OneNote 2007 Screen Clipper and Launcher.lnk - C:\Windows\pss\OneNote 2007 Screen Clipper and Launcher.lnk.Startup (2017/03/05)
O4 - MSConfig\startupreg: [APSDaemon] (HKLM) (2013/09/25) (no file)
O4 - MSConfig\startupreg: [CLMLServer] “C:\Program Files\CyberLink\PowerCinema for TOSHIBA\Kernel\CLML\CLMLSvc.exe” (HKLM) (2013/09/25)
O4 - MSConfig\startupreg: [GizmoDriveDelegate] “C:\Program Files\Gizmo\gizmo.exe” /RemountStartupImages (HKCU) (2016/11/24)
O4 - MSConfig\startupreg: [Google Desktop Search] “C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe” /startup (HKLM) (2013/05/13)
O4 - MSConfig\startupreg: [GrooveMonitor] “C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe” (HKLM) (2012/03/01)
O4 - MSConfig\startupreg: [PCMAgent] “C:\Program Files\CyberLink\PowerCinema for TOSHIBA\PCMAgent.exe” (HKLM) (2012/03/01)
Now click on fix checked.
After the fix is complete, then reboot your machine.
Easy Service Optimizer
Download easy service optmizer, save it to your desktop and unzip it there. Right click it and run as admin, then select Tweaked at the bottom. Then click on the rocket, this will turn off a lot of useless items.
https://i.imgur.com/tnkjYlk.png
You will however need to change one setting. Right Click on Wlansvc — WLAN AutoConfig, then select start service, the edit service. Make sure it is automatic across the board, as per the picture.
https://i.imgur.com/PO7tPc7.png
Let’s have a fresh look at your system after the above scans please.
Please run Farbar Recovery Scan Tool to give me a fresh look at your system.
Please download the FRST 32 bit or FRST 64bit version to suit your operating system. It is important FRST is downloaded to your desktop.
If you are unsure if your operating system is 32 or 64 Bit please go HERE.
[ul]
[li]Right-click on FRST icon and select Run as Administrator to start the tool.[/li](XP users click run after receipt of Windows Security Warning - Open File).
[li]Make sure that Addition option is checked, as well as Shortcut.txt[/li][li]Press Scan button and wait.[/li][li]The tool will produce three logfiles on your desktop: FRST.txt, and Addition.txt – & Shortcut.txt[/li][/ul]
Please Copy & Paste them into your next reply. But attach Shortcut.txt
rogram code includes networking-related functionality
Comment