Helping a friend

jholland1964
Administrator

Posts: 2,722

Former World Start Member: Yes

Helping a friend Oct 1, 2017 19:56:13 GMT -5

Quote

Post by jholland1964 on Oct 1, 2017 19:56:13 GMT -5

Run the program again. Please go slowly through the list of items found BEFORE you hit the clean button.

These listings that have the Registry heading:

***** [ Registry ] *****

PUP.Optional.AdvancedSystemCare, [Key] - HKLM\SOFTWARE\IOBIT\ASC
PUP.Optional.AdvancedSystemCare, [Key] - HKLM\SOFTWARE\CLASSES\DIRECTORY\SHELLEX\CONTEXTMENUHANDLERS\Advanced SystemCare
PUP.Optional.AdvancedSystemCare, [Key] - HKLM\SOFTWARE\CLASSES\DRIVE\SHELLEX\CONTEXTMENUHANDLERS\Advanced SystemCare
PUP.Optional.AdvancedSystemCare, [Key] - HKLM\SOFTWARE\CLASSES\LNKFILE\SHELLEX\CONTEXTMENUHANDLERS\Advanced SystemCare
PUP.Optional.AdvancedSystemCare, [Key] - HKLM\SOFTWARE\Google\Chrome\NativeMessagingHosts\com.ascplugin.protect
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\ask.com
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\cloudfront.net
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\dotomi.com
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\duvmkqu6ebwqz.cloudfront.net
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\dwq4do82y8xi7.cloudfront.net
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\shopathome.com
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\weatherblink.dl.tb.ask.com
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.ask.com
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.shopathome.com
PUP.Optional.Legacy, [Value] - HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | {468B395C-4970-4D20-AEF6-07603A1C38AA}
PUP.Optional.Legacy, [Value] - HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | {18422512-8D37-4CCB-B3C4-A2788EFD6205}
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\BoostSoftware
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
PUP.Optional.DriverAgent, [Key] - HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\download.driversupport.com
PUP.Optional.DriverAgent, [Key] - HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\driversupport.com
PUP.Optional.DriverAgent, [Key] - HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\download.driversupport.com
PUP.Optional.DriverAgent, [Key] - HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\driversupport.com

Should have NO check marks so please remove them from the boxes . ALL other listings MUST have check marks in the boxes so they will be cleaned off. Once you have done that then hit Clean. Let the program reboot, etc. and post back with the log produced.

Inspiron 15 5510 Windows 11 64bit
Vivaldi; EDGE; Mailbird; Windows Defender, Windows Firewall, MBAM FREE, SpywareBlaster

Inspiron 7591; Windows 10 64bit; Same programs as above.

jholland1964 Administrator Posts: 2,722 Former World Start Member: Yes	Helping a friend Oct 1, 2017 19:57:00 GMT -5 Quote Select Post Deselect Post Link to Post Member Give Gift Back to Top Post by jholland1964 on Oct 1, 2017 19:57:00 GMT -5 Oct 1, 2017 19:54:21 GMT -5 acker1 said: Should I do it again? Read my post above yours. Yes. Follow the directions I give above. Read it very carefully
	Inspiron 15 5510 Windows 11 64bit Vivaldi; EDGE; Mailbird; Windows Defender, Windows Firewall, MBAM FREE, SpywareBlaster Inspiron 7591; Windows 10 64bit; Same programs as above.

acker1 Member Posts: 220 Former World Start Member: Yes	Helping a friend Oct 1, 2017 20:43:21 GMT -5 Quote Select Post Deselect Post Link to Post Member Give Gift Back to Top Post by acker1 on Oct 1, 2017 20:43:21 GMT -5 "AdwCleaner has stopped working" Got this message again after I hit 'clean'.
	HP ENVY Intel Core i7-6500 CPU@260ghz 2.60 Win 10 Home Ram 16GB 64 Bit Vietnam Veteran

acker1
Member

Posts: 220

Former World Start Member: Yes

Helping a friend Oct 1, 2017 20:46:38 GMT -5

Quote

Post by acker1 on Oct 1, 2017 20:46:38 GMT -5

# AdwCleaner 7.0.3.1 - Logfile created on Mon Oct 02 01:30:27 2017
# Updated on 2017/29/09 by Malwarebytes
# Database: 09-29-2017.1
# Running on Windows 10 Home (X64)
# Mode: scan
# Support: www.malwarebytes.com/support

***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

PUP.Optional.AdvancedSystemCare, C:\ProgramData\IObit\Advanced SystemCare
PUP.Optional.AdvancedSystemCare, C:\ProgramData\Application Data\IObit\Advanced SystemCare
PUP.Optional.AdvancedSystemCare, C:\Windows\System32\config\systemprofile\AppData\Roaming\IObit\Advanced SystemCare
PUP.Optional.AdvancedSystemCare, C:\Program Files (x86)\IObit\Advanced SystemCare
PUP.Optional.AdvancedSystemCare, C:\Program Files (x86)\Common Files\IObit\Advanced SystemCare
PUP.Optional.AdvancedSystemCare, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\IObit\Advanced SystemCare
PUP.Optional.AdvancedSystemCare, C:\Users\All Users\IObit\Advanced SystemCare
PUP.Optional.AdvancedSystemCare, C:\Users\Dave&Toni\AppData\LocalLow\IObit\Advanced SystemCare
PUP.Optional.AdvancedSystemCare, C:\Users\Dave&Toni\AppData\Roaming\IObit\Advanced SystemCare
PUP.Optional.Legacy, C:\ProgramData\BoostSoftware
PUP.Optional.Legacy, C:\ProgramData\Application Data\BoostSoftware
PUP.Optional.Legacy, C:\Users\All Users\BoostSoftware
PUP.Optional.Legacy, C:\ProgramData\IObit\ASCDownloader
PUP.Optional.Legacy, C:\ProgramData\Application Data\IObit\ASCDownloader
PUP.Optional.Legacy, C:\Users\All Users\IObit\ASCDownloader
Adware.Popups, C:\Users\Dave&Toni\AppData\Roaming\Device
Trojan.FakeAlert, C:\Users\Dave&Toni\AppData\Roaming\serv

***** [ Files ] *****

PUP.Optional.Legacy, C:\Users\All Users\Desktop\Smart Defrag 5.lnk
PUP.Optional.Legacy, C:\Users\Public\Desktop\Smart Defrag 5.lnk
PUP.Optional.DriverBooster, C:\Users\Dave&Toni\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Driver Booster 3.lnk

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

PUP.Optional.Legacy, Driver Booster Scheduler

***** [ Registry ] *****

PUP.Optional.AdvancedSystemCare, [Key] - HKLM\SOFTWARE\IOBIT\ASC
PUP.Optional.AdvancedSystemCare, [Key] - HKLM\SOFTWARE\CLASSES\DIRECTORY\SHELLEX\CONTEXTMENUHANDLERS\Advanced SystemCare
PUP.Optional.AdvancedSystemCare, [Key] - HKLM\SOFTWARE\CLASSES\DRIVE\SHELLEX\CONTEXTMENUHANDLERS\Advanced SystemCare
PUP.Optional.AdvancedSystemCare, [Key] - HKLM\SOFTWARE\CLASSES\LNKFILE\SHELLEX\CONTEXTMENUHANDLERS\Advanced SystemCare
PUP.Optional.AdvancedSystemCare, [Key] - HKLM\SOFTWARE\Google\Chrome\NativeMessagingHosts\com.ascplugin.protect
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\ask.com
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\cloudfront.net
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\dotomi.com
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\duvmkqu6ebwqz.cloudfront.net
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\dwq4do82y8xi7.cloudfront.net
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\shopathome.com
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\weatherblink.dl.tb.ask.com
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.ask.com
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.shopathome.com
PUP.Optional.Legacy, [Value] - HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | {468B395C-4970-4D20-AEF6-07603A1C38AA}
PUP.Optional.Legacy, [Value] - HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | {18422512-8D37-4CCB-B3C4-A2788EFD6205}
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\BoostSoftware
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
PUP.Optional.DriverAgent, [Key] - HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\download.driversupport.com
PUP.Optional.DriverAgent, [Key] - HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\driversupport.com
PUP.Optional.DriverAgent, [Key] - HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\download.driversupport.com
PUP.Optional.DriverAgent, [Key] - HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\driversupport.com

***** [ Firefox (and derivatives) ] *****

PUP.Optional.Legacy, Plugin found: Advanced SystemCare Surfing Protection - IObit

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries.

*************************

C:/AdwCleaner/AdwCleaner[C0].txt - [1333 B] - [2017/10/2 0:19:26]
C:/AdwCleaner/AdwCleaner[S0].txt - [5574 B] - [2017/10/1 5:23:41]
C:/AdwCleaner/AdwCleaner[S1].txt - [5395 B] - [2017/10/1 5:32:18]
C:/AdwCleaner/AdwCleaner[S2].txt - [5708 B] - [2017/10/1 20:49:16]
C:/AdwCleaner/AdwCleaner[S3].txt - [5530 B] - [2017/10/2 0:16:27]

########## EOF - C:\AdwCleaner\AdwCleaner[S4].txt ##########

HP ENVY
Intel Core i7-6500 CPU@260ghz 2.60
Win 10 Home
Ram 16GB
64 Bit

Vietnam Veteran

jholland1964
Administrator

Posts: 2,722

Former World Start Member: Yes

Helping a friend Oct 1, 2017 20:54:04 GMT -5

Quote

Post by jholland1964 on Oct 1, 2017 20:54:04 GMT -5

Oct 1, 2017 20:43:21 GMT -5 acker1 said:

"AdwCleaner has stopped working" Got this message again after I hit 'clean'.

Did you follow the directions I gave you? Removing all check marks from the Registry listings and leaving all others in place and only then hitting Clean?
This means you DON'T want to clean the Registry listings but DO want to clean out all others. Is that what you did?

Last Edit: Oct 1, 2017 20:55:40 GMT -5 by jholland1964

Inspiron 15 5510 Windows 11 64bit
Vivaldi; EDGE; Mailbird; Windows Defender, Windows Firewall, MBAM FREE, SpywareBlaster

Inspiron 7591; Windows 10 64bit; Same programs as above.

acker1 Member Posts: 220 Former World Start Member: Yes	Helping a friend Oct 1, 2017 21:06:52 GMT -5 Quote Select Post Deselect Post Link to Post Member Give Gift Back to Top Post by acker1 on Oct 1, 2017 21:06:52 GMT -5 Yes
	HP ENVY Intel Core i7-6500 CPU@260ghz 2.60 Win 10 Home Ram 16GB 64 Bit Vietnam Veteran

jholland1964 Administrator Posts: 2,722 Former World Start Member: Yes	Helping a friend Oct 1, 2017 21:10:20 GMT -5 Quote Select Post Deselect Post Link to Post Member Give Gift Back to Top Post by jholland1964 on Oct 1, 2017 21:10:20 GMT -5 This log was created in Normal Mode right? You had McAfee turned off right?
	Inspiron 15 5510 Windows 11 64bit Vivaldi; EDGE; Mailbird; Windows Defender, Windows Firewall, MBAM FREE, SpywareBlaster Inspiron 7591; Windows 10 64bit; Same programs as above.

acker1 Member Posts: 220 Former World Start Member: Yes	Helping a friend Oct 1, 2017 21:13:04 GMT -5 Quote Select Post Deselect Post Link to Post Member Give Gift Back to Top Post by acker1 on Oct 1, 2017 21:13:04 GMT -5 Yes
	HP ENVY Intel Core i7-6500 CPU@260ghz 2.60 Win 10 Home Ram 16GB 64 Bit Vietnam Veteran

jholland1964 Administrator Posts: 2,722 Former World Start Member: Yes	Helping a friend Oct 1, 2017 21:14:21 GMT -5 Quote Select Post Deselect Post Link to Post Member Give Gift Back to Top Post by jholland1964 on Oct 1, 2017 21:14:21 GMT -5 Ok, boot to Safe Mode and follow the directions I gave you...remove check marks from all the registry listings and Then hit Clean. We'll see if that works.
	Inspiron 15 5510 Windows 11 64bit Vivaldi; EDGE; Mailbird; Windows Defender, Windows Firewall, MBAM FREE, SpywareBlaster Inspiron 7591; Windows 10 64bit; Same programs as above.

acker1 Member Posts: 220 Former World Start Member: Yes	Helping a friend Oct 1, 2017 21:35:52 GMT -5 Quote Select Post Deselect Post Link to Post Member Give Gift Back to Top Post by acker1 on Oct 1, 2017 21:35:52 GMT -5 This time it shut down after 'clean'. If you need the log I'll send it after this slow puter reboots from 'safe mode'.
	HP ENVY Intel Core i7-6500 CPU@260ghz 2.60 Win 10 Home Ram 16GB 64 Bit Vietnam Veteran

jholland1964
Administrator

Posts: 2,722

Former World Start Member: Yes

Helping a friend Oct 1, 2017 21:37:36 GMT -5

Quote

Post by jholland1964 on Oct 1, 2017 21:37:36 GMT -5

Oct 1, 2017 21:35:52 GMT -5 acker1 said:

This time it shut down after 'clean'.

If you need the log I'll send it after this slow puter reboots from 'safe mode'.

It is supposed to shut down after clean. That is the way the program works. I told you that earlier.

Yes, I need the log.

Last Edit: Oct 1, 2017 21:38:14 GMT -5 by jholland1964

Inspiron 15 5510 Windows 11 64bit
Vivaldi; EDGE; Mailbird; Windows Defender, Windows Firewall, MBAM FREE, SpywareBlaster

Inspiron 7591; Windows 10 64bit; Same programs as above.

acker1
Member

Posts: 220

Former World Start Member: Yes

Helping a friend Oct 1, 2017 21:49:22 GMT -5

Quote

Post by acker1 on Oct 1, 2017 21:49:22 GMT -5

Again sorry, I meant it turned off immediately after I clicked 'clean'.

# AdwCleaner 7.0.3.1 - Logfile created on Mon Oct 02 02:25:28 2017
# Updated on 2017/29/09 by Malwarebytes
# Database: 09-29-2017.1
# Running on Windows 10 Home (X64)
# Mode: scan
# Support: www.malwarebytes.com/support

***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

PUP.Optional.AdvancedSystemCare, C:\Windows\System32\config\systemprofile\AppData\Roaming\IObit\Advanced SystemCare
PUP.Optional.AdvancedSystemCare, C:\Program Files (x86)\IObit\Advanced SystemCare
PUP.Optional.AdvancedSystemCare, C:\Program Files (x86)\Common Files\IObit\Advanced SystemCare
PUP.Optional.AdvancedSystemCare, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\IObit\Advanced SystemCare
PUP.Optional.AdvancedSystemCare, C:\Users\Dave&Toni\AppData\LocalLow\IObit\Advanced SystemCare
PUP.Optional.AdvancedSystemCare, C:\Users\Dave&Toni\AppData\Roaming\IObit\Advanced SystemCare
PUP.Optional.Legacy, C:\ProgramData\BoostSoftware
PUP.Optional.Legacy, C:\ProgramData\Application Data\BoostSoftware
PUP.Optional.Legacy, C:\Users\All Users\BoostSoftware
PUP.Optional.Legacy, C:\ProgramData\IObit\ASCDownloader
PUP.Optional.Legacy, C:\ProgramData\Application Data\IObit\ASCDownloader
PUP.Optional.Legacy, C:\Users\All Users\IObit\ASCDownloader
Adware.Popups, C:\Users\Dave&Toni\AppData\Roaming\Device
Trojan.FakeAlert, C:\Users\Dave&Toni\AppData\Roaming\serv

***** [ Files ] *****

PUP.Optional.Legacy, C:\Users\All Users\Desktop\Smart Defrag 5.lnk
PUP.Optional.Legacy, C:\Users\Public\Desktop\Smart Defrag 5.lnk
PUP.Optional.DriverBooster, C:\Users\Dave&Toni\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Driver Booster 3.lnk

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

PUP.Optional.Legacy, Driver Booster Scheduler

***** [ Registry ] *****

PUP.Optional.AdvancedSystemCare, [Key] - HKLM\SOFTWARE\IOBIT\ASC
PUP.Optional.AdvancedSystemCare, [Key] - HKLM\SOFTWARE\CLASSES\DIRECTORY\SHELLEX\CONTEXTMENUHANDLERS\Advanced SystemCare
PUP.Optional.AdvancedSystemCare, [Key] - HKLM\SOFTWARE\CLASSES\DRIVE\SHELLEX\CONTEXTMENUHANDLERS\Advanced SystemCare
PUP.Optional.AdvancedSystemCare, [Key] - HKLM\SOFTWARE\CLASSES\LNKFILE\SHELLEX\CONTEXTMENUHANDLERS\Advanced SystemCare
PUP.Optional.AdvancedSystemCare, [Key] - HKLM\SOFTWARE\Google\Chrome\NativeMessagingHosts\com.ascplugin.protect
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\ask.com
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\cloudfront.net
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\dotomi.com
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\duvmkqu6ebwqz.cloudfront.net
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\dwq4do82y8xi7.cloudfront.net
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\shopathome.com
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\weatherblink.dl.tb.ask.com
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.ask.com
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.shopathome.com
PUP.Optional.Legacy, [Value] - HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | {468B395C-4970-4D20-AEF6-07603A1C38AA}
PUP.Optional.Legacy, [Value] - HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | {18422512-8D37-4CCB-B3C4-A2788EFD6205}
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\BoostSoftware
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
PUP.Optional.DriverAgent, [Key] - HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\download.driversupport.com
PUP.Optional.DriverAgent, [Key] - HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\driversupport.com
PUP.Optional.DriverAgent, [Key] - HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\download.driversupport.com
PUP.Optional.DriverAgent, [Key] - HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\driversupport.com

***** [ Firefox (and derivatives) ] *****

PUP.Optional.Legacy, Plugin found: Advanced SystemCare Surfing Protection - IObit

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries.

*************************

C:/AdwCleaner/AdwCleaner[C0].txt - [1333 B] - [2017/10/2 0:19:26]
C:/AdwCleaner/AdwCleaner[S0].txt - [5574 B] - [2017/10/1 5:23:41]
C:/AdwCleaner/AdwCleaner[S1].txt - [5395 B] - [2017/10/1 5:32:18]
C:/AdwCleaner/AdwCleaner[S2].txt - [5708 B] - [2017/10/1 20:49:16]
C:/AdwCleaner/AdwCleaner[S3].txt - [5530 B] - [2017/10/2 0:16:27]
C:/AdwCleaner/AdwCleaner[S4].txt - [5910 B] - [2017/10/2 1:30:28]

########## EOF - C:\AdwCleaner\AdwCleaner[S5].txt ##########

HP ENVY
Intel Core i7-6500 CPU@260ghz 2.60
Win 10 Home
Ram 16GB
64 Bit

Vietnam Veteran

jholland1964
Administrator

Posts: 2,722

Former World Start Member: Yes

Helping a friend Oct 1, 2017 22:21:14 GMT -5

Quote

Post by jholland1964 on Oct 1, 2017 22:21:14 GMT -5

Many people are having trouble with AdwCleaner right now, I don't know if this is caused by those problems or if the infections are causing this.
I have another program I want you to run:

It is the TDSSKiller. It is a program that looks for and removes rootkits.

this link will give you the executable file;

www.bleepingcomputer.com/download/tdsskiller/dl/4/

As soon as it is downloaded you need to rename the file so that if there IS a rootkit it will not recognize the file. You should rename it to iexplore.exe so that it can more easily bypass any protection routines a particular rootkit may use.

Close everything else, including McAfee and double click the executable file to open it.

. TDSSKiller will now start and display the welcome screen
At the 1st screen click on the Start scan button to have TDSSKiller scan your computer for the TDSS infection.TDSSKiller will now scan your computer for the TDSS infection.
When the scan has finished it will display a result screen stating whether or not the infection was found on your computer. If one is found you will need to have the program remove it.
To remove the infection simply click on the Continue button and TDSSKiller will attempt to clean the infection.

If it does not say Cure, leave it at the default action of Skip and press the Continue button. Do not change it to Delete or Quarantine as it may delete infected files that are required for Windows to operate properly.

When it has finished cleaning the infection you will see a report stating whether or not it was successful. If it tells you to reboot then of course Click on the Reboot now button to reboot your computer and finish the removal of the TDSS infection from your computer.

Please report back with

Attachments:

Inspiron 15 5510 Windows 11 64bit
Vivaldi; EDGE; Mailbird; Windows Defender, Windows Firewall, MBAM FREE, SpywareBlaster

Inspiron 7591; Windows 10 64bit; Same programs as above.

acker1 Member Posts: 220 Former World Start Member: Yes	Helping a friend Oct 1, 2017 22:53:51 GMT -5 Quote Select Post Deselect Post Link to Post Member Give Gift Back to Top Post by acker1 on Oct 1, 2017 22:53:51 GMT -5 "No threats found". I can get to the report but can't copy it. I can highlite it but no 'copy' when I right click.
	HP ENVY Intel Core i7-6500 CPU@260ghz 2.60 Win 10 Home Ram 16GB 64 Bit Vietnam Veteran

jholland1964
Administrator

Posts: 2,722

Former World Start Member: Yes

Helping a friend Oct 1, 2017 23:15:27 GMT -5

Quote

Post by jholland1964 on Oct 1, 2017 23:15:27 GMT -5

Oct 1, 2017 22:53:51 GMT -5 acker1 said:

"No threats found". I can get to the report but can't copy it. I can highlite it but no 'copy' when I right click.

Super! That is a relief for sure. Now I truly am very concerned about that Chrome browser and all the infected files that definitely are connected to it and at this time, because the AdwCleaner won't clean them, is a scary thing to me. If you use a browser on that computer absolutely do NOT use Chrome. Use Edge, IE or Firefox. Do not even open Chrome, it is too dangerous at this point.

You might try the Hitman pro from that bleepingcomputer link. It's not one I've used or recommended too often. I don't know if this would help or not. It is the last step in that link so you might try it.
Post back with the log.

I am watching some threads at toolslib.net, the home forum for AdwCleaner and several others so maybe by tomorrow they might have a solution. As I said, you are not the only one having this problem and I know for sure they ARE working on a solution.

Try the Hitman Pro and see what happens. I have to head for bed now...I stayed up too late last night and it is after midnight already. I will check back in here first thing in the morning.

Inspiron 15 5510 Windows 11 64bit
Vivaldi; EDGE; Mailbird; Windows Defender, Windows Firewall, MBAM FREE, SpywareBlaster

Inspiron 7591; Windows 10 64bit; Same programs as above.

acker1 Member Posts: 220 Former World Start Member: Yes	Helping a friend Oct 2, 2017 0:08:55 GMT -5 Quote Select Post Deselect Post Link to Post Member Give Gift Back to Top Post by acker1 on Oct 2, 2017 0:08:55 GMT -5 I was able to download HitmanPro (twice) and both times it failed to install. Would it help to try and uninstall Those things the installed with this problem program? Just a thought. DICK
	Last Edit: Oct 2, 2017 0:11:10 GMT -5 by acker1 HP ENVY Intel Core i7-6500 CPU@260ghz 2.60 Win 10 Home Ram 16GB 64 Bit Vietnam Veteran

jholland1964
Administrator

Posts: 2,722

Former World Start Member: Yes

Helping a friend Oct 2, 2017 7:28:02 GMT -5

Quote

Post by jholland1964 on Oct 2, 2017 7:28:02 GMT -5

Oct 2, 2017 0:08:55 GMT -5 acker1 said:

I was able to download HitmanPro (twice) and both times it failed to install.

Would it help to try and uninstall Those things the installed with this problem program? Just a thought.

DICK

Get rid of Hitman Pro and forget about using it. There is nothing else from the Bleepingcomputer instructions needed so you can forget those.

I thought you had already done that because I told you to do that way back in my post #30 to remove them.
Yes, please remove these 6 that you listed earlier:

TeamViewer10,
IObit uninstaller,
Driver Booster 4,
Start Menu8,
Smart Defrag 5,
Win Tonic.

Is Chrome her default browser? You do know it is very, very infected don't you?

Does she have CCleaner installed on the computer?

Last Edit: Oct 2, 2017 7:29:37 GMT -5 by jholland1964

Inspiron 15 5510 Windows 11 64bit
Vivaldi; EDGE; Mailbird; Windows Defender, Windows Firewall, MBAM FREE, SpywareBlaster

Inspiron 7591; Windows 10 64bit; Same programs as above.

acker1
Member

Posts: 220

Former World Start Member: Yes

Helping a friend Oct 2, 2017 11:48:59 GMT -5

Quote

Post by acker1 on Oct 2, 2017 11:48:59 GMT -5

Chrome is her default but I am using FF on her puter. I realize it is VERY infected. Only time I am using her puter is when I have to download and install some of the 'help' stuff. Then post the results. Rest of the answers is from my puter. I have them side by side.

I installed CC when I started this. She didn't have it before.

I will delete those others when I get back from the eye Dr. They are squeezing me in for a follow up since my eye is not getting better. Not sure when I'll get back here. You probably know how long some of those "squeeze you in" type appts take.

Many, many thanks
DICK

HP ENVY
Intel Core i7-6500 CPU@260ghz 2.60
Win 10 Home
Ram 16GB
64 Bit

Vietnam Veteran

jholland1964
Administrator

Posts: 2,722

Former World Start Member: Yes

Helping a friend Oct 2, 2017 12:14:43 GMT -5

Quote

Post by jholland1964 on Oct 2, 2017 12:14:43 GMT -5

Oct 2, 2017 11:48:59 GMT -5 acker1 said:

Chrome is her default but I am using FF on her puter. I realize it is VERY infected. Only time I am using her puter is when I have to download and install some of the 'help' stuff. Then post the results. Rest of the answers is from my puter. I have them side by side.

I installed CC when I started this. She didn't have it before.

I will delete those others when I get back from the eye Dr. They are squeezing me in for a follow up since my eye is not getting better. Not sure when I'll get back here. You probably know how long some of those "squeeze you in" type appts take.

Many, many thanks
DICK

LOL! yes, in fact I just went through a "squeeze you in" appointment with my eye doctor last week...knew I was in trouble when I arrived 20 min. early since it was a "squeeze in" and there were no chairs available in the waiting room! I was there 2 and one-half hours before I got it to see her. Glad I did of course cause it was a Friday & knew I couldn't wait until Tuesday...she's not there on Monday's. When I came out from my appointment the only person in the waiting room was the receptionist's granddaughter who was waiting for her to get off work!

Uninstall those programs and then I will tell you a couple things I would like you to do using CCleaner. I really feel that Chrome should be totally removed, we know it contains so many infected files they are almost too numerous to count so it has been damaged for sure.

Follow these instructions on how to save Chrome Bookmarks which you can use then to put them back onto a new copy of Chrome. Then...totally uninstall Chrome too. Here are some instructions. Follow them especially remove browsing data also, that may contain infected files or web sites.
www.wikihow.com/Uninstall-Google-Chrome

You really need to stress to your friend that this must be done. If she refuses then tell her the chance to truly clean the machine will be greatly reduced.

Last Edit: Oct 2, 2017 12:21:46 GMT -5 by jholland1964

Inspiron 15 5510 Windows 11 64bit
Vivaldi; EDGE; Mailbird; Windows Defender, Windows Firewall, MBAM FREE, SpywareBlaster

Inspiron 7591; Windows 10 64bit; Same programs as above.

acker1
Member

Posts: 220

Former World Start Member: Yes

Helping a friend Oct 2, 2017 14:52:42 GMT -5

Quote

Post by acker1 on Oct 2, 2017 14:52:42 GMT -5

Chrome gone! I uninstalled the above programs + saw 'iobit malware' so I removed it also.

Didn't save her bookmarks (only 5) so I set them up in FF.

Eye Dr. said it looks better but trying to spread to the other eye. Hope it's under control now. Going to stay in this RVPark for another week for followup. Probably a good thing--might take that long to fix puter!!! LOL

HP ENVY
Intel Core i7-6500 CPU@260ghz 2.60
Win 10 Home
Ram 16GB
64 Bit

Vietnam Veteran

jholland1964
Administrator

Posts: 2,722

Former World Start Member: Yes

Helping a friend Oct 2, 2017 15:28:37 GMT -5

Quote

Post by jholland1964 on Oct 2, 2017 15:28:37 GMT -5

Oct 2, 2017 14:52:42 GMT -5 acker1 said:

Chrome gone! I uninstalled the above programs + saw 'iobit malware' so I removed it also.

Didn't save her bookmarks (only 5) so I set them up in FF.

Eye Dr. said it looks better but trying to spread to the other eye. Hope it's under control now. Going to stay in this RVPark for another week for followup. Probably a good thing--might take that long to fix puter!!! LOL

Good, I am glad you removed Chrome. Now with CCleaner I would like you to do the following;
open it up and on the left side go to Tools. When that opens go up to the top section and you will see Uninstall. I DON'T want you to Uninstall anything I want a list of everything Installed. You can generate that easily by going to the bottom right corner and click Save To Text file button. This will give you a log showing all the installed and that is something I would like to see.
See attachment*

Attachments:

Inspiron 15 5510 Windows 11 64bit
Vivaldi; EDGE; Mailbird; Windows Defender, Windows Firewall, MBAM FREE, SpywareBlaster

Inspiron 7591; Windows 10 64bit; Same programs as above.

acker1
Member

Posts: 220

Former World Start Member: Yes

Helping a friend Oct 2, 2017 15:45:07 GMT -5

Quote

Post by acker1 on Oct 2, 2017 15:45:07 GMT -5

3D Builder Microsoft Corporation 5/16/2017 14.1.1302.0
Alarms & Clock Microsoft Corporation 8/29/2017 10.1706.2231.0
Amazon Amazon.com 4/12/2017 2016.829.2800.0
Amazon 1Button App Amazon 12/23/2013 9.85 MB 1.0.3
App connector Microsoft Corporation 9/30/2016 1.3.3.0
App Installer Microsoft Corporation 2/18/2017 1.0.10332.0
Calculator Microsoft Corporation 9/1/2017 10.1706.2271.0
Camera Microsoft Corporation 9/19/2017 2017.727.40.0
Candy Crush Soda Saga king.com 9/25/2017 1.98.500.0
CCleaner Piriform 9/27/2017 20.4 MB 5.35
CleanUp! 6/15/2017
CyberLink Media Suite Essentials CyberLink Corp. 6/15/2017 98.2 MB 10.0
Dell Backup and Recovery Dell Inc. 5/2/2013 741 MB 1.8.1.70
Dell Shop Dell Inc 9/30/2016 2.2.1.0
Dell Touchpad Synaptics Incorporated 6/15/2017 46.4 MB 19.2.17.45
Dell WLAN and Bluetooth Client Installation Dell Inc. 5/2/2013 50.8 MB 10.0
Dell | Getting Started with Windows 8 Dell Inc 9/30/2016 1.0.0.35
eBay eBay, Inc 9/30/2016 1.6.0.34
EPSON XP-310 Series Printer Uninstall SEIKO EPSON Corporation 6/15/2017
Feedback Hub Microsoft Corporation 8/15/2017 1.1705.2121.0
Garmin Express Garmin Ltd or its subsidiaries 6/15/2017 204 MB 5.3.1.0
Get Office Microsoft Corporation 7/22/2017 17.8414.5925.0
Groove Music Microsoft Corporation 9/26/2017 10.17072.16431.0
HP Deskjet 2540 series Basic Device Software Hewlett-Packard Co. 11/26/2013 98.2 MB 32.0.1180.44630
HP Deskjet 2540 series Help Hewlett Packard 11/26/2013 4.30 MB 30.0.0
HP FWUpdateEDO2 Hewlett-Packard 2/13/2014 1.53 MB 1.2.0.0
HP Photo Creations HP 6/15/2017 2.75 MB 1.0.0.7702
HP Smart HP Inc. 8/7/2017 75.1.298.0
HP Update Hewlett-Packard 11/26/2013 7.52 MB 5.005.002.002
Intel(R) Management Engine Components Intel Corporation 5/2/2013 8.1.0.1252
Intel(R) Processor Graphics Intel Corporation 11/11/2013 10.18.10.3316
Intel(R) Rapid Storage Technology Intel Corporation 5/2/2013 11.7.0.1013
Java 8 Update 31 Oracle Corporation 1/27/2015 6.20 MB 8.0.310
Java 8 Update 71 Oracle Corporation 1/22/2016 177 MB 8.0.710.15
Kindle AMZN Mobile LLC 9/30/2016 2.1.0.2
Mail and Calendar Microsoft Corporation 9/28/2017 17.8500.40955.0
Malwarebytes version 3.2.2.2029 Malwarebytes 9/27/2017 212 MB 3.2.2.2029
Maps Microsoft Corporation 8/8/2017 5.1706.2001.0
McAfee SafeKey(uninstall only) McAfee, Inc. 7/27/2017 52.1 MB
McAfee SecurityCenter McAfee, Inc. 10/1/2017 392 MB 16.0.3
McAfee® Central for Dell McAfee Inc 9/30/2016 4.5.139.1
Messaging Microsoft Corporation 6/15/2017 3.26.24002.0
Microsoft Office 365 - en-us Microsoft Corporation 10/1/2017 0.98 GB 16.0.8431.2079
Microsoft OneDrive Microsoft Corporation 6/15/2017 84.8 MB 17.3.6816.0313
Microsoft Solitaire Collection Microsoft Studios 9/29/2017 3.17.8162.0
Microsoft SQL Server 2005 Compact Edition [ENU] Microsoft Corporation 11/15/2014 3.85 MB 3.1.0000
Microsoft Sticky Notes Microsoft Corporation 4/8/2017 1.8.0.0
Microsoft Visual C++ 2005 Redistributable Microsoft Corporation 5/2/2013 7.37 MB 8.0.59193
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Corporation 5/2/2013 5.59 MB 9.0.30729
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 Microsoft Corporation 11/15/2014 4.95 MB 9.0.30729.6161
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 Microsoft Corporation 2/13/2015 18.4 MB 10.0.40219
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 Microsoft Corporation 2/13/2015 19.1 MB 10.0.40219
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 Microsoft Corporation 6/15/2017 20.5 MB 11.0.61030.0
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 Microsoft Corporation 6/15/2017 17.3 MB 11.0.61030.0
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 Microsoft Corporation 6/15/2017 17.1 MB 12.0.21005.1
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Microsoft Corporation 6/15/2017 2.42 MB 10.0.50903
Microsoft Wi-Fi Microsoft Corporation 9/30/2016 1.1604.4.0
Mixed Reality Viewer Microsoft Corporation 9/28/2017 2.1709.8012.0
Money Microsoft Corporation 8/30/2017 4.21.2212.0
Movies & TV Microsoft Corporation 9/28/2017 10.17082.14121.0
Mozilla Firefox 47.0.2 (x86 en-US) Mozilla 10/2/2017 91.7 MB 47.0.2
Mozilla Maintenance Service Mozilla 10/1/2017 375 KB 47.0.2.6148
MSN Food & Drink Microsoft Corporation 9/30/2016 3.0.4.336
MSN Health & Fitness Microsoft Corporation 9/30/2016 3.0.4.336
MSN Travel Microsoft Corporation 9/30/2016 3.0.4.336
News Microsoft Corporation 8/30/2017 4.21.2212.0
OneNote Microsoft Corporation 9/14/2017 17.8568.57561.0
Paid Wi-Fi & Cellular Microsoft Corporation 9/19/2017 2.1709.2484.0
Paint 3D Microsoft Corporation 9/21/2017 3.1709.13037.0
People Microsoft Corporation 6/8/2017 10.2.1451.0
Phone Microsoft Corporation 9/30/2016 2.17.27003.0
Phone Companion Microsoft Corporation 9/30/2016 10.1609.2561.0
Photos Microsoft Corporation 9/9/2017 2017.35071.16410.0
Product Improvement Study for HP Deskjet 2540 series Hewlett-Packard Co. 11/26/2013 19.1 MB 32.0.1180.44630
Quickset64 Dell Inc. 5/2/2013 5.54 MB 10.15.017
Reader Microsoft Corporation 9/19/2017 6.4.9926.18819
Realtek Card Reader Realtek Semiconductor Corp. 6/15/2017 14.6 MB 10.0.14393.31233
Realtek High Definition Audio Driver Realtek Semiconductor Corp. 6/16/2017 50.7 MB 6.0.1.8036
Realtek USB 2.0 Card Reader Realtek Semiconductor Corp. 5/2/2013 14.1 MB 6.1.8400.39030
Shared C Run-time for x64 McAfee 5/2/2013 2.76 MB 10.0.0
SiteAdvisor McAfee, Inc. 6/15/2017 21.6 MB 3.7.206
Skype Skype 8/23/2017 11.19.856.0
Sports Microsoft Corporation 8/30/2017 4.21.2212.0
Store Microsoft Corporation 9/24/2017 11708.1001.26.0
Store Experience Host Microsoft Corporation 8/17/2017 11707.1707.25006.0
Sway Microsoft Corporation 8/23/2017 17.8471.45091.0
Tips Microsoft Corporation 7/25/2017 5.11.1641.0
Twitter Twitter Inc. 7/8/2017 5.8.1.0
Voice Recorder Microsoft Corporation 9/1/2017 10.1706.2211.0
Wallet Microsoft Corporation 6/15/2017 1.0.16328.0
Weather Microsoft Corporation 8/31/2017 4.21.2212.0
Windows 10 Update and Privacy Settings Microsoft Corporation 6/14/2017 2.10 MB 1.0.13.0
Windows Driver Package - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) Dynastream Innovations, Inc. 6/15/2017 04/11/2012 1.2.40.201
Windows Driver Package - Silicon Labs Software (DSI_SiUSBXp_3_1) USB (02/06/2007 3.1) Silicon Labs Software 6/15/2017 02/06/2007 3.1
Windows Live Essentials Microsoft Corporation 11/15/2014 16.4.3528.0331
Windows Reading List Microsoft Corporation 9/30/2016 6.3.9654.21234
Windows Scan Microsoft Corporation 9/30/2016 6.3.9654.17133
Xbox Microsoft Corporation 8/15/2017 31.32.11001.0
Xbox Game bar Microsoft Corporation 9/14/2017 1.21.11001.0
Xbox Game Speech Window Microsoft Corporation 6/15/2017 1.14.2002.0
Xbox Identity Provider Microsoft Corporation 7/11/2017 11.29.23003.0

HP ENVY
Intel Core i7-6500 CPU@260ghz 2.60
Win 10 Home
Ram 16GB
64 Bit

Vietnam Veteran

jholland1964
Administrator

Posts: 2,722

Former World Start Member: Yes

Helping a friend Oct 2, 2017 15:55:30 GMT -5

Quote

Post by jholland1964 on Oct 2, 2017 15:55:30 GMT -5

She really doesn't have that much that isn't Microsoft installed. So I see nothing to remove but her Firefox is TWO years old and 9 versions out of date. She has Firefox v. 47.0.2, and the most recent version is 56.0.
Please update through the program, go t Help, About Firefox, Check for Updates. Do that right now because a 2 year old browser is a great security risk.

Inspiron 15 5510 Windows 11 64bit
Vivaldi; EDGE; Mailbird; Windows Defender, Windows Firewall, MBAM FREE, SpywareBlaster

Inspiron 7591; Windows 10 64bit; Same programs as above.

acker1 Member Posts: 220 Former World Start Member: Yes	Helping a friend Oct 2, 2017 16:05:53 GMT -5 Quote Select Post Deselect Post Link to Post Member Give Gift Back to Top Post by acker1 on Oct 2, 2017 16:05:53 GMT -5 FF is now up to date.
	HP ENVY Intel Core i7-6500 CPU@260ghz 2.60 Win 10 Home Ram 16GB 64 Bit Vietnam Veteran

jholland1964
Administrator

Posts: 2,722

Former World Start Member: Yes

Helping a friend Oct 2, 2017 16:34:05 GMT -5

Quote

Post by jholland1964 on Oct 2, 2017 16:34:05 GMT -5

Oct 2, 2017 16:05:53 GMT -5 acker1 said:

FF is now up to date.

Very good. I did just find out that this version of AdwCleaner is causing trouble for all users, similar to the problems you have had so you can just go ahead and open it, hit File, Uninstall and get rid of it. They are working on repairing the problems and it will be fixed in the next version.

I am leaving for a meeting shortly and will be gone several hours. Please go here and run the ESET online scanner. That is on the LEFT side of the page. Read and follow the directions there. You will want it to clean everything found. Report back with the results and I will check when I get home later on this evening.

www.eset.com/us/home/online-scanner/

Inspiron 15 5510 Windows 11 64bit
Vivaldi; EDGE; Mailbird; Windows Defender, Windows Firewall, MBAM FREE, SpywareBlaster

Inspiron 7591; Windows 10 64bit; Same programs as above.

acker1 Member Posts: 220 Former World Start Member: Yes	Helping a friend Oct 2, 2017 20:06:14 GMT -5 Quote Select Post Deselect Post Link to Post Member Give Gift Back to Top Post by acker1 on Oct 2, 2017 20:06:14 GMT -5 I ran it and it found 4 items. Then I hit clean & it did it BUT where do I find the logs? I've even googled it to see how but no luck.
	HP ENVY Intel Core i7-6500 CPU@260ghz 2.60 Win 10 Home Ram 16GB 64 Bit Vietnam Veteran

jholland1964
Administrator

Posts: 2,722

Former World Start Member: Yes

Helping a friend Oct 2, 2017 20:32:43 GMT -5

Quote

Post by jholland1964 on Oct 2, 2017 20:32:43 GMT -5

Oct 2, 2017 20:06:14 GMT -5 acker1 said:

I ran it and it found 4 items. Then I hit clean & it did it BUT where do I find the logs? I've even googled it to see how but no luck.

When you have completed that scan, a scanlog ought to have been created and located at

C:\Program Files\EsetOnlineScanner\log.txt. on a 32bit computer

On a 64bit computer it should be found on C:\Program Files (x86)\ESET\ESET Online Scanner\log.txt

Inspiron 15 5510 Windows 11 64bit
Vivaldi; EDGE; Mailbird; Windows Defender, Windows Firewall, MBAM FREE, SpywareBlaster

Inspiron 7591; Windows 10 64bit; Same programs as above.

acker1 Member Posts: 220 Former World Start Member: Yes	Helping a friend Oct 2, 2017 21:16:23 GMT -5 Quote Select Post Deselect Post Link to Post Member Give Gift Back to Top Post by acker1 on Oct 2, 2017 21:16:23 GMT -5 Can't seem to find it. I hit clean and didn't see a save button. Hard enough to see the clean button. Real light. Should I run it again?
	HP ENVY Intel Core i7-6500 CPU@260ghz 2.60 Win 10 Home Ram 16GB 64 Bit Vietnam Veteran

jholland1964
Administrator

Posts: 2,722

Former World Start Member: Yes

Helping a friend Oct 2, 2017 21:24:12 GMT -5

Quote

Post by jholland1964 on Oct 2, 2017 21:24:12 GMT -5

Oct 2, 2017 21:16:23 GMT -5 acker1 said:

Can't seem to find it. I hit clean and didn't see a save button. Hard enough to see the clean button. Real light.

Should I run it again?

Running it again would do nothing. That would not give you an old log. How did you look for it? There absolutely has to be an ESET folder on that computer.
Did you double click My Computer?
Double click "C" drive?
Double Click Program Files (x86) because this is a 64bit computer, and then go down through the list of Program Files to ESET?

Just running the online scanner absolutely does place an ESET folder on the computer, that is an absolute.

Inspiron 15 5510 Windows 11 64bit
Vivaldi; EDGE; Mailbird; Windows Defender, Windows Firewall, MBAM FREE, SpywareBlaster

Inspiron 7591; Windows 10 64bit; Same programs as above.

acker1 Member Posts: 220 Former World Start Member: Yes	Helping a friend Oct 2, 2017 21:40:46 GMT -5 Quote Select Post Deselect Post Link to Post Member Give Gift Back to Top Post by acker1 on Oct 2, 2017 21:40:46 GMT -5 I went thru the whole thing again--step by step & line by line and it is not there.
	HP ENVY Intel Core i7-6500 CPU@260ghz 2.60 Win 10 Home Ram 16GB 64 Bit Vietnam Veteran

Admin

Post by jholland1964 on Oct 1, 2017 19:56:13 GMT -5

Post by jholland1964 on Oct 1, 2017 19:57:00 GMT -5

Post by acker1 on Oct 1, 2017 20:43:21 GMT -5

Post by acker1 on Oct 1, 2017 20:46:38 GMT -5

Post by jholland1964 on Oct 1, 2017 20:54:04 GMT -5

Post by acker1 on Oct 1, 2017 21:06:52 GMT -5

Post by jholland1964 on Oct 1, 2017 21:10:20 GMT -5

Post by acker1 on Oct 1, 2017 21:13:04 GMT -5

Post by jholland1964 on Oct 1, 2017 21:14:21 GMT -5

Post by acker1 on Oct 1, 2017 21:35:52 GMT -5

Post by jholland1964 on Oct 1, 2017 21:37:36 GMT -5

Post by acker1 on Oct 1, 2017 21:49:22 GMT -5

Post by jholland1964 on Oct 1, 2017 22:21:14 GMT -5

Post by acker1 on Oct 1, 2017 22:53:51 GMT -5

Post by jholland1964 on Oct 1, 2017 23:15:27 GMT -5

Post by acker1 on Oct 2, 2017 0:08:55 GMT -5

Post by jholland1964 on Oct 2, 2017 7:28:02 GMT -5

Post by acker1 on Oct 2, 2017 11:48:59 GMT -5

Post by jholland1964 on Oct 2, 2017 12:14:43 GMT -5

Post by acker1 on Oct 2, 2017 14:52:42 GMT -5

Post by jholland1964 on Oct 2, 2017 15:28:37 GMT -5

Post by acker1 on Oct 2, 2017 15:45:07 GMT -5

Post by jholland1964 on Oct 2, 2017 15:55:30 GMT -5

Post by acker1 on Oct 2, 2017 16:05:53 GMT -5

Post by jholland1964 on Oct 2, 2017 16:34:05 GMT -5

Post by acker1 on Oct 2, 2017 20:06:14 GMT -5

Post by jholland1964 on Oct 2, 2017 20:32:43 GMT -5

Post by acker1 on Oct 2, 2017 21:16:23 GMT -5

Post by jholland1964 on Oct 2, 2017 21:24:12 GMT -5

Post by acker1 on Oct 2, 2017 21:40:46 GMT -5