error message

[SafeSurf]

Hello Laurion,

While everyone will have their opinion on what software works best, I am here to help you, with Essexboy remove your malware, and to get this thread back on topic.

Thank you for posting your MBAM log.

Please refer back to Post #1 and follow the instructions that were posted on how to run the OTL log as we need this to help diagnose your problem on your machine.  Post the (2) OTL log as an attachment (Additional Options > Attach > Browse (the logs will be on your desktop > Post). 

IMPORTANT: If you are on a home network, disconnect the affected machine from the network.  Do not share a USB/flash drive with this affected machine.  Do not use this machine to install or modify anything unless Essexboy instructs you do to malware removal instructions; if possible use a different machine to check email, sync your phone, etc.

***Please do not make any further changes to your machine after you have provided the OTL logs.***

Essexboy will also review your logs and give you further instructions, however he comes on the forum late UK time.  He will respond to you in this thread, so remember to check this thread daily.  I will continue to provide assistance in the meantime, then remain in the background while he works with you. 

Please let me know if you have any questions.  Thank you.

[Laurion]

Many thanks to all for your help! I am hoping I haven't caused myself more grief because I did check my mail on this machine, but, thank goodness, I didn't hook my iPhone up to it!

[SafeSurf]

Thank you for your log Laurion.  Essexboy will also review the log when he comes on the forum later.  He will give you specific instructions to follow, so check the thread in several hours (he is on UK time).  Thank you.

[essexboy]

I notice that you have spyware doctor, did the alerts start occuring after you installed this programme ? 

Start OTS. Copy/Paste the information in the quotebox below into the panel where it says "Paste fix here" and then click the Run Fix button.

Code: [Select]

[Unregister Dlls]
[Registry - Safe List]
< Internet Explorer Settings [HKEY_USERS\S-1-5-21-2204818908-4029211735-1334293680-1000\] > ->
YN -> HKEY_USERS\S-1-5-21-2204818908-4029211735-1334293680-1000\: "ProxyServer" -> 172.17.1.1:8080
< Internet Explorer ToolBars [HKEY_USERS\S-1-5-21-2204818908-4029211735-1334293680-1000\] > -> HKEY_USERS\S-1-5-21-2204818908-4029211735-1334293680-1000\Software\Microsoft\Internet Explorer\Toolbar\
YN -> WebBrowser\\"{604BC32A-9680-40D1-9AC6-E06B23A1BA4C}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.]
< Name Servers [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Adapters\
YN -> {62623D1D-9775-4BE9-AFAD-EF60C2220D4E}\\DhcpNameServer -> 209.183.33.23 209.183.35.23   ()
[Files/Folders - Modified Within 30 Days]
NY ->  354 C:\Users\User\AppData\Local\Temp\*.tmp files -> C:\Users\User\AppData\Local\Temp\*.tmp
[Empty Temp Folders]
[EmptyFlash]
[CreateRestorePoint]
[Reboot]
 
The fix should only take a very short time. When the fix is completed a message box will popup telling you that it is finished. Click the Ok button and Notepad will open with a log of actions taken during the fix.  Post that information back here

I will review the information when it comes back in.

[Laurion]

I had some trouble getting OTS to run but after 3 attempts, success!
No, the alerts didn't come with Spyware Doctor. I am pretty sure it has been on this machine from the beginning of ownership.

[essexboy]

Are you still getting the alerts ?

Download ComboFix from one of these locations:


Link 1
Link 2


* IMPORTANT !!! Save ComboFix.exe to your Desktop

• Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools
• Double click on ComboFix.exe & follow the prompts.

When finished, it shall produce a log for you.  Please include the C:\ComboFix.txt in your next reply.

[SafeSurf]

@ Laurion,

I'm checking in to see how you are doing with the ComboFix log that Essexboy requested to help with your malware removal.  Let us know if you have any questions or problems.  Thank you.

[Laurion]

Sorry for the delay, I have had a family emergency.
I downloaded Combofix and was in the midst of getting ready for a scan. I do have a question, how do you disable security software without uninstalling?  I looked through both Spyware Doctor and Malwarebytes but didn't see that option. Haven't checked Avast yet.

[essexboy]

For MBAM and Spyware doctor there is no need - also Avast now knows what combofix is made of so should not need to be paused

But if you wish to right click the orange blob
Select shield control
Select disable until computer restarts