One more getusaall ... please help

[REDACTED]

Hi there,

I keep getting this popup, it's been a few days now.

Please find attached my logs and maybe you can find the magic commands for my laptop ...

Many thanks
Stefan

NB the attached mbam was run without "scan for rootkits" (cleaned all the items it found) ; asecond run with the "rootkits" found nothing else (for some reason I cannot export that one)

[REDACTED]

Sorry the mbam didn't go into the previous one - here it is

[essexboy]

Hi a fairly clean system.  Let me know if this stops it 

Download and Install Combofix
 
Download ComboFix from one of the following locations:
Link 1
Link 2
 
VERY IMPORTANT !!! Save ComboFix.exe to your Desktop
 
* IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here

• Double click on ComboFix.exe & follow the prompts.
  
• Accept the disclaimer and allow to update if it asks

• When finished, it shall produce a log for you.
• Please include the C:\ComboFix.txt in your next reply.[/b]
  

Notes:
1. Do not mouse-click Combofix's window while it is running. That may cause it to stall.
2. Do not "re-run" Combofix. If you have a problem, reply back for further instructions.
3.  If after the reboot you get errors about programmes being marked for deletion then reboot, that will cure it.


Please make sure you include the combo fix log in your next reply as well as describe how your computer is running now

[REDACTED]

It took a while ...
Here you have the log file
The pop-up seems to have gone away ! I'll keep you updated later tonight or tomorrow morning to confirm

thank you a thousand times !
Stefan

[essexboy]

OK looks good

[REDACTED]

I cried victory too soon, the ugly pop-up is still here

[essexboy]

Does this appear in any specific browser now ? 

For the following programme it will generate a avptool.sysinfo.zip folder could you upload that to a file sharing site.. Google docs etc.  and give me the sharing link so that I can download it


Download AVPTool from Here to your desktop
 
Run the programme you have just downloaded to your desktop ( it will be randomly named )
 
First we will run a virus scan
Select the cog to access scan areas


On the first tab select all elements down to OS C and then select start scan 


 Once it has finished select reports and post the detected threats
.

Now an analysis scan
Select the Manual Disinfection tab 
Press the Gather System Information button 
 


Once it has completed then click Step 2 Report sending


Click avptool.sysinfo.zip
And you will be taken to the zip file that needs to be uploaded

[REDACTED]

3 days after I'm still at only 60% of the first run ...
I stopped it twice because I noticed it was pending infinite time (at about 9%) in analysing 2 iso of windows install - that I deleted - but still the progress is very slow
S

[essexboy]

OK stop that and run an Avast boot scan please

[REDACTED]

Hi
Here it is
thanks

[essexboy]

Are the alerts still happening ?  If so could you run the analysis portion of AVP

Now an analysis scan
Select the Manual Disinfection tab 
Press the Gather System Information button 
 


Once it has completed then click Step 2 Report sending


Click avptool.sysinfo.zip
And you will be taken to the zip file that needs to be attached

[essexboy]

OK scrub that, we may now have the solution, so I would like you to be the guinea pig

CAUTION :  This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:
 

CMD: bitsadmin /reset /allusers
CMD: DEL %TEMP%\*.* /F /S /Q
CMD: RD /S /Q %TEMP%
REBOOT:

 
Save this as fixlist.txt, in the same location as FRST.exe
Run FRST and press Fix
On completion a log will be generated please post that

[REDACTED]

here we go

[essexboy]

Have the alerts now ceased ?

[REDACTED]

I believe so, today I haven't seen any
In case anything pops up, I'll tell you - and in any case will post a report tomorrow to say how it goes
many many thanks
S