Author Topic: Virus and Malware.. after clean up of Ransomware... what next?  (Read 21498 times)

0 Members and 2 Guests are viewing this topic.

REDACTED

  • Guest
Re: Virus and Malware.. after clean up of Ransomware... what next?
« Reply #45 on: November 08, 2014, 09:34:31 PM »
Here the FSS.

Thanks.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Virus and Malware.. after clean up of Ransomware... what next?
« Reply #46 on: November 08, 2014, 09:56:01 PM »
Download and run this small programme to reset your services  http://www.tweaking.com/content/page/set_windows_services_to_default_startup.html

MBAM was in a temp folder so try to make a habit of cleaning them regularly

Clear Cache/Temp Files
Download TFC by OldTimer to your desktop
  • Please double-click TFC.exe to run it. (Note: If you are running on Vista, right-click on the file and choose Run As Administrator).
  • It will close all programs when run, so make sure you have saved all your work before you begin.
  • Click the Start button to begin the process. Depending on how often you clean temp files, execution time should be anywhere from a few seconds to a minute or two.  Let it run uninterrupted to completion.
  • Once it's finished it should reboot your machine. If it does not, please manually reboot the machine yourself to ensure a complete clean.
Once done let me know of any problems

REDACTED

  • Guest
Re: Virus and Malware.. after clean up of Ransomware... what next?
« Reply #47 on: November 08, 2014, 10:27:28 PM »
willco.

I attach CCleaner settings.  I run CCleaner after every session on the PC.

Maybe there are other boxes that should be ticked?


Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Virus and Malware.. after clean up of Ransomware... what next?
« Reply #48 on: November 08, 2014, 10:29:46 PM »
OK looks good, not that I use CC myself :)

How is the computer behaving ?

REDACTED

  • Guest
Re: Virus and Malware.. after clean up of Ransomware... what next?
« Reply #49 on: November 09, 2014, 05:23:00 PM »
OMG.... all was apparently going well then this afternoon I ran an Avast Boot-time scan.   It showed that it fund quite a bit of 'stuff' and 'fixed' it all but it was taking hours so I cancelled. Avast insisted on reboot then OMG  Restart with only plain desktop as in original set up.  IE without all my favourites, tags/headers etc.. nothing!!   Fortunately Restore to 6 November worked OK  BUT Avast Firewall would not start, Repair did not repair.... had to Uninstall Avast then reinstall from old download as new Download from Avast would not download (?) .. Then after updates etc all is again running well for Avast, Malwarebytes.. Windows Firewall bur Defender disabled.  Guns are such dangerous weapons in the hand of the untrained!!!    :-[

Panic now over (mostly) .. I'll move run TFC and report.

Malwarebytes shows this under Exclusions  pu.trafficshop.com/popunder.php    I find some info on the web but don't get clear info.. should I kill this from MWB Exclusions?
« Last Edit: November 09, 2014, 05:25:45 PM by cridgejm »

Offline CraigB

  • Avast Überevangelist
  • Serious Graphoman
  • *****
  • Posts: 11240
  • No support PM's thanks
Re: Virus and Malware.. after clean up of Ransomware... what next?
« Reply #50 on: November 09, 2014, 05:41:03 PM »
You must have added the exclusion as it wouldn't get there by itself, it appears to be a proxy server used for unblocking internet services, I would delete it and if something on your system requires it the you will receive a popup from Malwarebytes again.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Virus and Malware.. after clean up of Ransomware... what next?
« Reply #51 on: November 09, 2014, 06:02:59 PM »
Only use bootscan if you are asked to by Avast as it is more aggressive in this mode and care must be taken with what you remove and you must let it complete :)

When you use system restore you must first disable Avast self protection or it will throw a wobbly

Do you have a USB drive ?  As that is ideal for making a weekly system image in case everything goes pear shaped

REDACTED

  • Guest
Re: Virus and Malware.. after clean up of Ransomware... what next?
« Reply #52 on: November 09, 2014, 06:18:43 PM »
Bootscan - point taken.. once bitten never touch again!

Syst Restore and Avast....  I left Avast running and after Restore I could not Turn On Avast Firewall so Uninstalled, Reinstalled, Updated and Avast now seems OK. 
I have Turned Off GrimeFighter which was annoying and seemingly only an ad.

Only problem I see at the moment is that when I try to Download TFC nothing downloads.  I tried to Download CCleaner from File Hippo which always Downloads OK and still no Download.. it seems as though Download definitely not functioning.  Normally a 'do you want to Run or Save' box appears not now, nothing. Any ideas please? Oh MAN, protect us from amateurs like me.

I'll get to USB later.

YES - something definitely wrong... not able to download any file from File Hippo or similar place.  Search suggests security blocking but can't find anything.
« Last Edit: November 09, 2014, 07:39:24 PM by cridgejm »

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Virus and Malware.. after clean up of Ransomware... what next?
« Reply #53 on: November 09, 2014, 08:11:15 PM »
do you get an error when you try to download


REDACTED

  • Guest
Re: Virus and Malware.. after clean up of Ransomware... what next?
« Reply #54 on: November 09, 2014, 08:14:54 PM »
No but I think its' an IE10 prob as I have been able to make normal download of LastPass using Chrome.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Virus and Malware.. after clean up of Ransomware... what next?
« Reply #55 on: November 09, 2014, 08:19:17 PM »

REDACTED

  • Guest
Re: Virus and Malware.. after clean up of Ransomware... what next?
« Reply #56 on: November 09, 2014, 08:26:52 PM »
Yes, thanks, it's downloading via Chrome.

Hopefully that should do the trick.  Will IE11 replace IE10 or do I need to uninstall IE10?

IE11 downloaded via Chrome and now installed.

 All seems OK except download of CCleaner via File Hippo still does not start/show/download but it did via Chrome.[/b]  in fact I can download nothing with IE.

Have searched, tried bits but no change ..... no download works with IE but all work OK with Chrome.   Has to be a setting somewhere? but where?



« Last Edit: November 09, 2014, 10:05:29 PM by cridgejm »

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Virus and Malware.. after clean up of Ransomware... what next?
« Reply #57 on: November 09, 2014, 10:11:30 PM »
OK lets try this ..

First export your IE bookmarks to the desktop http://www.sevenforums.com/tutorials/86795-internet-explorer-import-export-favorites.html

Then go to control panel > Internet Options > Advanced tab
On the bottom right is a reset button Press that and apply then OK out
Now retry downloading with IE

REDACTED

  • Guest
Re: Virus and Malware.. after clean up of Ransomware... what next?
« Reply #58 on: November 09, 2014, 10:43:00 PM »
Nope- same .. nothing.  Normally a bar rises from the bottom asking RUN/Save/SaveAs  this no longer shows and did not show in IE 10 as soon as I had this problem.  Chrome runs OK.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Virus and Malware.. after clean up of Ransomware... what next?
« Reply #59 on: November 09, 2014, 10:45:28 PM »
Download Windows All In One Repair from  Tweaking.com to your desktop
Install the programme and run
Select Step 5 :  Back up your registry and create a system restore point


Then select the Repairs tab



Select Open repairs

Select the following repair number items :

7


Click Start




Once it has completed then reboot the system