Author Topic: C:\Program Files\gssoft\gswb\2.8.1.0113 Keep Install  (Read 45870 times)

0 Members and 1 Guest are viewing this topic.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: C:\Program Files\gssoft\gswb\2.8.1.0113 Keep Install
« Reply #75 on: January 31, 2014, 04:57:26 PM »
Yes untick the trial option

TokeiLampin

  • Guest
Re: C:\Program Files\gssoft\gswb\2.8.1.0113 Keep Install
« Reply #76 on: January 31, 2014, 06:38:54 PM »
No see any trial but already scan like you said ...MBAM-log-2014-02-01 (01-18-32).txt is after scan show result and mbam-log-2014-01-31 (23-48-19).txt is log after check and remove selected...before me run MBAM that dos popup still popup and make my pc a bit hang and laggy...after scan not see any registry show how that thing keep run..

TokeiLampin

  • Guest
Re: C:\Program Files\gssoft\gswb\2.8.1.0113 Keep Install
« Reply #77 on: January 31, 2014, 07:03:03 PM »
Are this normal?  Coz that small advertise still popup after MBAM

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: C:\Program Files\gssoft\gswb\2.8.1.0113 Keep Install
« Reply #78 on: January 31, 2014, 11:30:55 PM »
When does this ad appear ?  Is it at logon or when you open a browser.  If a browser which one

TokeiLampin

  • Guest
Re: C:\Program Files\gssoft\gswb\2.8.1.0113 Keep Install
« Reply #79 on: February 01, 2014, 08:53:22 AM »
The advertise just out random...sometime i not do nothing it open..it no time it flexible

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: C:\Program Files\gssoft\gswb\2.8.1.0113 Keep Install
« Reply #80 on: February 01, 2014, 01:59:30 PM »
Please RIGHT-CLICK HERE and Save As (in IE it's "Save Target As", in FF it's "Save Link As") to download Silent Runners.
  • Save it to the desktop.
  • Run Silent Runner's by doubleclicking the "Silent Runners" icon on your desktop.
  • You will receive a prompt:
    Do you want to skip supplementary searches?
    click NO
    [/list]
    • If you receive an error just click OK and double-click it to run it again - sometimes it won't run as it's supposed to the first time but will in subsequent runs.
    • You will see a text file appear on the desktop - it's not done, let it run (it won't appear to be doing anything!)
    • Once you receive the prompt All Done!, open the text file on the desktop, copy that entire log, and paste it here.
    *NOTE* If you receive any warning message about scripts, please choose to allow the script to run.

    TokeiLampin

    • Guest
    Re: C:\Program Files\gssoft\gswb\2.8.1.0113 Keep Install
    « Reply #81 on: February 01, 2014, 08:46:21 PM »
    That dos prompt always make my pc hang and lag when it show up..cannot download avast block that thing.

    Offline essexboy

    • Malware removal instructor
    • Avast Überevangelist
    • Probably Bot
    • *****
    • Posts: 40589
    • Dragons by Sasha
      • Malware fixes
    Re: C:\Program Files\gssoft\gswb\2.8.1.0113 Keep Install
    « Reply #82 on: February 01, 2014, 08:55:59 PM »
    Temporarily disable the Avast shields to download silent runners. it is safe.   To remove that dos box we may have to run an sfc which will require the windows CD

    TokeiLampin

    • Guest
    Re: C:\Program Files\gssoft\gswb\2.8.1.0113 Keep Install
    « Reply #83 on: February 01, 2014, 09:00:49 PM »
    Here the log.. did i need to make it now ? sfc /scannow ..if you said yes i try it now or you want see the log first?


    The message exceeds the maximum allowed length (10000 characters).
    « Last Edit: February 01, 2014, 09:04:45 PM by TokeiLampin »

    Offline essexboy

    • Malware removal instructor
    • Avast Überevangelist
    • Probably Bot
    • *****
    • Posts: 40589
    • Dragons by Sasha
      • Malware fixes
    Re: C:\Program Files\gssoft\gswb\2.8.1.0113 Keep Install
    « Reply #84 on: February 01, 2014, 09:29:14 PM »
    I cannot see where the little ad is hiding... I will investigate this

    Meanwhile

    Run a command prompt and type in the following followed by the enter key :

    sfc /scannow

    Let it run to completion and then reboot

    TokeiLampin

    • Guest
    Re: C:\Program Files\gssoft\gswb\2.8.1.0113 Keep Install
    « Reply #85 on: February 02, 2014, 07:09:57 AM »
    Ai Ai sir

    TokeiLampin

    • Guest
    Re: C:\Program Files\gssoft\gswb\2.8.1.0113 Keep Install
    « Reply #86 on: February 02, 2014, 12:58:19 PM »
    So far after that Silent Runners.vbs and sfc /scannow ...only see that small advertise popup

    Offline essexboy

    • Malware removal instructor
    • Avast Überevangelist
    • Probably Bot
    • *****
    • Posts: 40589
    • Dragons by Sasha
      • Malware fixes
    Re: C:\Program Files\gssoft\gswb\2.8.1.0113 Keep Install
    « Reply #87 on: February 02, 2014, 01:51:33 PM »
    Could you right click the ad and select properties please and then screenshot that

    TokeiLampin

    • Guest
    Re: C:\Program Files\gssoft\gswb\2.8.1.0113 Keep Install
    « Reply #88 on: February 02, 2014, 04:56:10 PM »
    The DOS still here... after that Silent Runners.vbs and sfc /scannow ..that advertise popup...cannot click right...only left click funtion and open my default browser to page of what being advertise..already use procexp.exe to detect where that run coming from but not show at procexp.exe .

    Offline essexboy

    • Malware removal instructor
    • Avast Überevangelist
    • Probably Bot
    • *****
    • Posts: 40589
    • Dragons by Sasha
      • Malware fixes
    Re: C:\Program Files\gssoft\gswb\2.8.1.0113 Keep Install
    « Reply #89 on: February 02, 2014, 05:44:20 PM »
    OK I will have to investigate this deeper...  Do you have anything in your startup folder C:\Documents and Settings\(user)\Start Menu\Programs\Startup