Im getting what looks like virus/adware

[Antoine]

just restarted windows again just to test, still no pop ups, btw I notice the log says couldnt created a restore point. Is that ok?

[jmarket]

It’s because System Restore is disabled. Try this.

[ol]
[li]Right click on the Start Button and select System.[/li][li]Click on System Protection.[/li][li]Under Protection Settings, select your primary drive and click the Configure button.[/li][li]Select Turn on system protection and then adjust the Max Usage percentage to something above zero. I like to set mine to 15%.[/li][li]Click OK and System Restore has been enabled.[/li][/ol]

[Antoine]

system protection on mny C drive was on already it was muy external that was off. Also i did the browser resets

[jmarket]

Awesome. It seems like those rogue popups have stopped. Let’s go ahead and remove the tools we’ve used

Please go HERE and download Delfix Save it to your desktop.

Right click the new Delfix desktop icon and then click “run as administrator”

Place a tick in the following checkboxes

[ol][li]Remove disinfection tools[/li][li]Create registry backup[/li][li]Purge system restore[/li][/ol]

Then select “Run”


Delfix will remove the tools used to clean your PC and remove itself. When finished a .txt file will display on your desktop. A copy of this file will be also located as C:\Delfix.txt.

Please post a copy of this file in your next post

[Antoine]

[HEADING=1]DelFix v1.013 - Logfile created 04/03/2021 at 11:33:52[/HEADING]
[HEADING=1]Updated 17/04/2016 by Xplode[/HEADING]
[HEADING=1]Username : Owner - OWNER-PC[/HEADING]
[HEADING=1]Operating System : Windows 10 Enterprise (64 bits)[/HEADING]
~ Removing disinfection tools …

Deleted : C:\FRST
Deleted : C:\AdwCleaner
Deleted : C:\QuickDiag
Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
Deleted : C:\QuickDiag_25_04_2017_14_31_10.txt
Deleted : C:\Users\Owner\Desktop\Addition.txt
Deleted : C:\Users\Owner\Desktop\AdwCleaner[C00].txt
Deleted : C:\Users\Owner\Desktop\AdwCleaner[S00].txt
Deleted : C:\Users\Owner\Desktop\adwcleaner_6.046.exe
Deleted : C:\Users\Owner\Desktop\adwcleaner_8.1.exe
Deleted : C:\Users\Owner\Desktop\Fixlog.txt
Deleted : C:\Users\Owner\Desktop\FRST.txt
Deleted : C:\Users\Owner\Desktop\FRST2.txt
Deleted : C:\Users\Owner\Desktop\FRST64.exe
Deleted : HKCU\Software\g3n-h@ckm@n

~ Creating registry backup … OK

~ Cleaning system restore …

Deleted : RP #1 [ResetBrowser | 03/04/2021 17:22:38]

New restore point created !

########## - EOF - ##########

[jmarket]

Looks good Even successfully created a restore point. I’ll leave this thread open for a couple days and if no more popups happen then I think we can call it solved

[Antoine]

ok thanks. Btw that log says it deleted reset browser even though its still on my desktop? (i deleted it manually just now)

[jmarket]

That’s perfectly ok Sometimes the removal tool misses some files but you can safely delete the remnants.

There shouldn’t be much, the only one that should be left is the fixlist.txt and ResetBrowser. You can uninstall Malwarebytes if you want as well

[Antoine]

ok thanks again. Ill hold on to malwarebytes for awhile

[jmarket]

It’s been almost a week and haven’t heard any bad news @Antoine. How are things?

[Antoine]

Seems fine still (or at least the person using it hasn’t said anything so I guess it is lol) thanks again

[jmarket]

You’re welcome

I will go ahead and mark this as Solved.