Password reset and notification emails are now sending correctly.
If you recently requested a password reset, please check your inbox (and spam folder just in case).
You can now reset your password and log in as normal.
Welcome back to PCHF, and thank you for your patience during our migration process!
— The PCHF Team
Welcome to PC Help Forum!
You’re viewing our community as a guest.
That means you can browse posts, but can’t yet reply or start new topics.
Join us today — it's completely free!
As a member, you'll be able to:
✅ Get personalized tech support from trusted volunteers
🦠 Work one-on-one with our Malware Removal Specialists
which caused me to lose ClearLNK’s log file location.
Should be located on the desktop if instructions were followed..
Originally posted by Fla_Panther
Also, I’m unable to run Zamana. I ran it a few months ago as a result of my other thread here, and now the license has expired. Do I need to purchase a license or is there another tool you’d like me to use?
You should still be able to run the tool, it reverts to the free version after the license expires.
If you are unable to run it then uninstall it with Geek Uninstaller, then reboot the machine and grab the free version and run it.
Hello @Fla_Panther how are you moving along with the instructions? Have you got an update for us?
Please update this thread within 48 hours, or it will be closed. You can however have it re-opened at any time, by sending a private message to a staff member.
Re: ClearLNK log: I’ve been trying to clean up my desktop and moved some files into folders, I may have moved it. What was the file name supposed to be?
Re: Zamana: Yeah, had to use that uninstall tool before it would let me scan. Decided to also scan my NAS, looks like there were a few archived files over there that is didn’t like as well.
Zemana AntiMalware 2.72.2.324 (Installed)
Scan Result : Completed
Scan Date : 2017/3/26
Operating System : Windows 7 64-bit
Processor : 4X Intel(R) Core™ i5-3470 CPU @ 3.20GHz
BIOS Mode : Legacy
CUID : 1273F17A3C8C26D2AE6262
Scan Type : Custom Scan
Duration : 116m 34s
Scanned Objects : 260468
Detected Objects : 0
Excluded Objects : 0
Read Level : Normal
Auto Upload : Enabled
Detect All Extensions : Disabled
Scan Documents : Disabled
Domain Info : WORKGROUP,0,2
[HEADING=1]Detected Objects[/HEADING]
No threats detected
Zemana AntiMalware 2.72.2.324 (Installed)
Scan Result : Completed
Scan Date : 2017/3/26
Operating System : Windows 7 64-bit
Processor : 4X Intel(R) Core™ i5-3470 CPU @ 3.20GHz
BIOS Mode : Legacy
CUID : 1273F17A3C8C26D2AE6262
Scan Type : Custom Scan
Duration : 176m 38s
Scanned Objects : 180481
Detected Objects : 12
Excluded Objects : 0
Read Level : Normal
Auto Upload : Enabled
Detect All Extensions : Disabled
Scan Documents : Disabled
Domain Info : WORKGROUP,0,2
[HEADING=1]Detected Objects[/HEADING]
l5m-usjobsearch-dtx.exe
Status : Scanned
Object : Z:\30 - Cate’s Docs\Downloads\l5m-usjobsearch-dtx.exe
MD5 : BB288096343B531FDB50869D7FF0EDC6
Publisher : Zugo Ltd
Size : 273904
Version : 1.0.0.0
Detection : Adware:Win32/ZugoToolbar!Ep
Cleaning Action : Quarantine
Related Objects :
File - Z:\30 - Cate’s Docs\Downloads\l5m-usjobsearch-dtx.exe
3d_traceroute.exe
Status : Scanned
Object : Z:\02 - Other Files to Sort\Dad’s CDs\3d_traceroute.exe
MD5 : FE58872A50511E9429AC9753C182F8A0
Publisher : -
Size : 996352
Version : 1.6.46.94
Detection : Malware:Win32/Tamaca!Tltr
Cleaning Action : Quarantine
Related Objects :
File - Z:\02 - Other Files to Sort\Dad’s CDs\3d_traceroute.exe
Hello @Fla_Panther how are you moving along with the instructions? Have you got an update for us?
Please update this thread within 48 hours, or it will be closed. You can however have it re-opened at any time, by sending a private message to a staff member.
Malnutrition:
Ha. Whoops. I can rerun it with that if I need to. As for being solved … I don’t know. I hope so. The browser hijacks only happened maybe once a week or once every two weeks and that was the only symptom so it’s hard to say. But if your review of the logs indicate stuff got cleaned up I can trust that, and if something more happens I can create another thread. Or, if you want we can keep this one open for a while longer and then close it? Up to you.
The browser hijacks only happened maybe once a week or once every two weeks
May be due to what website you are looking at, I’d suggest looking at the info below, install Ublock Origin along with adding the adblocking Dns servers…
suggest the following in place of adblock.
Alternate DNS Server. Ad Blocking DNS.
Ublock Origin.
Anti Ad Block Killer.
Also, keep your browsing private with these tools:
Self Destructing Cookies.
Self Destructing Cookies Chrome.
Some items to keep you safe on the internet.
VooDoo Shield. control of what is running on your machine
Qualys BrowserCheck To update plugins.
Web Of Trust To Avoid Shady Websites.
Unchecky To Avoid Bundled Software.
Privazer To Clean up your mahcine.
Now Lets Clean up the tools we used and remove old restore points.
Download DelFix by “Xplode” to your Desktop.[/URL]
Right Click the tool and Run as Admin ( Xp Users Double Click)
Put a check mark next the items below:
Remove disinfection tools
Create registry backup
Purge System Restore
Now click on “Run” button.
allow the program to complete its work.
all the tools we used will be removed.
Tool will create and open a log report (DelFix.txt)
Note: The report can be located at the following location C:\DelFix.txt
Speak of the devil. See attachment. This one happened when I went to view an Imgur page. I looked at the page, browsed another tab, and when I came back close that tab it had navigated to this site.
[ul]
[li]Download ResetBrowser To your desktop.[/li][li]Now close all open browsers.[/li][li]Right click and run as administrator.[/li][li]Click on Reset for each of your browsers one at a time. – Allow completion.[/li][/ul]
Also make sure and add the Ublock origin to your browser… Also, it depends on what type of website you visit as well, if you are trying to use sites such as solar movie to stream movies, you will get these types of popups…
Run a full scan with Loaris Trojan Remover The program will update on its own, it will then attempt a standard scan. Please stop the standard scan and then go to the update tab, just make sure it is updated. Then go back to the computer scan and select full scan.
[ATTACH]1928[/ATTACH]
Once complete, go to the logfiles tab and double click on the scan log.
[ATTACH]1927[/ATTACH]
After you double click on the log a notepad will open, copy and paste that report into your next reply.
You will not be able to use Loaris unless you pay for it, at this point the program has served its purpose and you may uninstall it. Having the logfile is all that is needed, if anything was detected by the program. https://forum.windowsinstructed.com/...ns/biggrin.png
Malwarebytes Scan.
Download MalwareBytes Anti-Malware : https://www.malwarebytes.com/mwb-download/ take the free version ( on the left )
Perform the installation
Uncheck “Enable Free Trial of Malwarebytes Anti-Malware Premium” if it’s asked
Malwarebytes will update, let this update,
Click on the “Settings” tab and then on the “Detection and Protection” tab, Check the box “Search for Rootkits”
Click on the “Analysis” tab and then on “Start analysis”
Once the review is complete, check that all detections are checked and then click [Delete Selection]
If Malwarebytes asks you to restart your PC, click “Yes”,
When restarting your PC, restarts Malwarebytes
Opens the “History” tab and then “Application logs”
Double click on the last Scan Log in date (the one above)
At the bottom click [Export] → select “Text file (* .txt)”
In the explorer selects the desktop, name it mbam.txt, click [Save]
copy/paste the content of the report in your next reply
[ul]
[li]Disable Windows Defender, Firewall & Antivirus prior to running this tool!![/li][li]Save AdsFix to your desktop.[/li][li]Right Click & Run As Administrator.[/li][li]With an infected machine, it could take several seconds to be charged.[/li][li]You will then be prompted to install Certificates.[/li][li]Install then click OK.[/li][li]Right Click & Run As Administrator Again.[/li][/ul]
[ul]
[li]Click Options then select Unlock the deletion.[/li][li]Then click on clean.[/li][li]Enter your country[/li][li]Don’t use the machine while scanning and be patient[/li][li]Once the scan has completed, please copy and paste the report in your next reply.[/li][li]The report will be C:\AdsFix_date_hour.txt or on your dektop with the same name.[/li][/ul]
Upload Files to VirusTotal
[ul]
[li]Please go to VirusTotal.[/li][li]Click the Choose File button.[/li][li]Navigate to >>>>>>>> C:\ProgramData\Line 6\L6TWXY\L6TWXY64.dll[/li][li]or simply copy and paste it. [/li][li]Click the Scan it! button.[/li][li]You might see a message saying File already analysed, if you do click Reanalyse.[/li][li]Wait for all the scans to finish then copy and paste the web address from your broswer’s address bar.[/li]Example of web address :
[IMG alt="VirusTotalresultslink" width="690px" height="19px"]http://i526.photobucket.com/albums/cc345/MPKwings/VirusTotalresultslink.jpg[/IMG]
[li]Include the link in your next reply.[/li][/ul]
We process personal data about users of our site, through the use of cookies and other technologies, to deliver our services, personalize advertising, and to analyze site activity. We may share certain information about our users with our advertising and analytics partners. For additional details, refer to our Privacy Policy.
By clicking "I AGREE" below, you agree to our Privacy Policy and our personal data processing and cookie practices as described therein. You also acknowledge that this forum may be hosted outside your country and you consent to the collection, storage, and processing of your data in the country where this forum is hosted.
Tweet
Malnutrition:
Comment