GeekPolice Tech TutorialsLog in

 

Share

descriptionRe: Need fixes and help removing Stormwatch , PUP

more_horiz
ESETSmartInstaller@High as CAB hook log:
OnlineScanner.ocx - registred OK
# product=EOS
# version=8
# iexplore.exe=11.00.9600.16428 (winblue_gdr.131013-1700)
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=beb89874d5a56245a36a4f8b645e5fde
# engine=22863
# end=finished
# remove_checked=true
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-03-11 08:46:18
# local_time=2015-03-11 04:46:18 (-0500, Eastern Daylight Time)
# country="United States"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='avast! Antivirus'
# compatibility_mode=783 16777213 100 97 0 189605668 0 0
# compatibility_mode_1='Microsoft Security Essentials'
# compatibility_mode=5895 16777213 100 100 1287612 120179982 0 0
# scanned=158006
# found=11
# cleaned=11
# scan_time=5133
sh=9EC383123A7416205085DCD71F5B2CCB8C78FD3F ft=1 fh=6a7410a6c9e8ed34 vn="a variant of MSIL/Rebrand.LittleRegClean.B potentially unwanted application (deleted - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files\Pro PC Cleaner\Helper.dll.vir"
sh=D49B60A12414C5F9FD39D4FAEE9ABB6CD5B3B3EA ft=1 fh=e6dd68f64917ffa5 vn="a variant of MSIL/Rebrand.LittleRegClean.B potentially unwanted application (deleted - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files\Pro PC Cleaner\ProPCCleaner.exe.vir"
sh=497D8A9697F271DAD0E1A63B0F7C56FD3B570F8C ft=1 fh=2949a26673d8f2ad vn="a variant of MSIL/Rebrand.LittleRegClean.B potentially unwanted application (deleted - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files\Pro PC Cleaner\Uninst000.CA.dll.vir"
sh=9EC383123A7416205085DCD71F5B2CCB8C78FD3F ft=1 fh=6a7410a6c9e8ed34 vn="a variant of MSIL/Rebrand.LittleRegClean.B potentially unwanted application (deleted - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Administrator\AppData\Roaming\Pro PC Cleaner\Pro PC Cleaner 2.5.5\install\D90887D\Helper.dll.vir"
sh=D49B60A12414C5F9FD39D4FAEE9ABB6CD5B3B3EA ft=1 fh=e6dd68f64917ffa5 vn="a variant of MSIL/Rebrand.LittleRegClean.B potentially unwanted application (deleted - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Administrator\AppData\Roaming\Pro PC Cleaner\Pro PC Cleaner 2.5.5\install\D90887D\ProPCCleaner.exe.vir"
sh=497D8A9697F271DAD0E1A63B0F7C56FD3B570F8C ft=1 fh=2949a26673d8f2ad vn="a variant of MSIL/Rebrand.LittleRegClean.B potentially unwanted application (deleted - quarantined)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Administrator\AppData\Roaming\Pro PC Cleaner\Pro PC Cleaner 2.5.5\install\D90887D\Uninst000.CA.dll.vir"
sh=48C87BF89A2FB7974AC4B81E7956F439B64D99A6 ft=1 fh=6defbe7c4fedab3d vn="a variant of Win32/SBWatchman.D potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Program Files\Common Files\System\SysMenu.dll"
sh=E4A3439C3370184AA795A710341CFE423D9444B0 ft=1 fh=dc14b1b2a5b02ce5 vn="a variant of Win32/Toolbar.SearchSuite.Y potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Users\New User\Downloads\iMeshV11.exe"
sh=737798535E7A693ADC760EA4132D12D387D34356 ft=1 fh=96fbfd2a42e1df7c vn="a variant of Win32/Toolbar.Perion.H potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Windows\System32\mjcm\dnkt.exe"
sh=C33FEDF1A60F25DC90A4754446535DF6924A9FDF ft=1 fh=017cd515e52a74e6 vn="a variant of Win32/Toolbar.Perion.H potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Windows\System32\mjcm\5108\nsib.dll"
sh=181241E6431887DC27F4E2B92159F77D82831893 ft=1 fh=80d13d017bfcdcc5 vn="a variant of Win32/Toolbar.Perion.H potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Windows\System32\mjcm\5113\nsib.dll"

descriptionRe: Need fixes and help removing Stormwatch , PUP

more_horiz
How's your computer running now? Any other issues?

descriptionRe: Need fixes and help removing Stormwatch , PUP

more_horiz
Seems to be working great! Thanks so much!

descriptionRe: Need fixes and help removing Stormwatch , PUP

more_horiz
Ok, let's clean up.

Click Start> Computer> right click the C Drive and choose Properties> enter
Click Disk Cleanup from there.



Click OK on the Disk Cleanup Screen.
Click Yes on the Confirmation screen.



This runs the Disk Cleanup utility along with other selections if you have chosen any. (if you had a lot System Restore points, you will see a significant change in the free space in C drive)
*********************************************
This step will remove all cleaning tools we used, it'll reset restore points (so you won't get reinfected by accidentally using some older restore point) and it'll make some other minor adjustments...
This is a very crucial step so make sure you don't skip it.
Download DelFix by Xplode to your desktop. Delfix will delete all the used tools and logfiles.

Double-click Delfix.exe to start the tool.
Make sure the following items are checked:

  • Activate UAC (optional; some users prefer to keep it off)
  • Remove disinfection tools
  • Create Registry backup
  • Purge System Restore Points
  • Re-set system settings

Now click "Run" and wait patiently.
Once finished a logfile will be created. You don't have to attach it to your next reply.
*********************************************
I suggest using WOT - Web of Trust . WOT is a free Internet security addon for your browser. It will keep you safe from online scams, identity theft, spyware, spam, viruses and unreliable shopping sites. WOT warns you before you interact with a risky website. It's easy and it's free.

Check out Keeping Yourself Safe On The Web for tips and free tools to help keep you safe in the future.

Also see Slow Computer? It may not be Malware for free cleaning/maintenance tools to help keep your computer running smoothly.
Safe Surfing!
Permissions in this forum:
You cannot reply to topics in this forum