Total computer mess-please help

TakeThis

ampersand wrote: »

I can assure you, the OP was much happier not having to guess at which link was the right one and I'm much happier to know he has the right software.

##################
For me, this is true and I am hugely grateful to all of you.
It is me that is techie nerdwoman, but then I have other talents and will translate several European languages for you, if you need :-), as well as being a pretty decent cook, needlewoman. moneysaver, writer, DIYer in things construction and masonry, lateral thinking and much else....so we all can do things. But this putah is fouling its own nest and the problem is mine.

Again I say I value ALL your help and kindness. Repeatedly, a number of you are coming back with advice, which I endeavour to follow.

Please don't squabble over differing approaches. I'm sure all work well for different people with differing levels of knowledge.

Now, I've done the Malware again, from santer's link. Quick scan said 'Not all infected files could be removed' and that it would close down and restart to remove the rest. The re-start has happened{I'm typing this!], but nothing else.

Shall I just go and run malware again?

Now that you have used his link, I'm not talking to you.............................................................


Oh.... ok then... the second statement at least indicates the presence of Malware.

How about those logs?

You haven't in fact posted any of the ones I have requested. :mad:

santer_2

Yes, it will put the results window on screen, usually right in the middle of an exciting part of the great British bake off or some such similar epic

ampersand

santer wrote: »

Yes, it will put the results window on screen, usually right in the middle of an exciting part of the great British bake off or some such similar epic

:rotfl::rotfl::rotfl::rotfl:

ampersand

TakeThis wrote: »

Goodness me...why is this thread still going?

Let's begin to un-install some of the gunk.

Download, install and run CCleaner
Go to Tools > Start up and click on the save to text file button in the bottom right hand corner. Save the text file to your Desktop. Go to Tools > Uninstall and repeat the exercise.
Copy and paste the contents of both of the .txt files in your reply.

#############
Dear TT - apologies.
I'm losing track trying to keep up with everybody's advice.

I had already done the CC thing yesterday, several times, and wondered whether it was responsible for removing a lot of waiting skype msgs from NZ which disappeared. I have done it again today, so I'll try and find that log copy and post it. Ah, it just showed a msg saying I had to close google chrome, to allow the Internet cache to be cleaned. Looks like I'll have to start all over again....again.



I had some trouble initially running cc, but got there eventually.

TakeThis

ampersand wrote: »

#############
Dear TT - apologies.
I'm losing track trying to keep up with everybody's advice.

I had already done the CC thing yesterday, several times, and wondered whether it was responsible for removing a lot of waiting skype msgs from NZ which disappeared. I have done it again today, so I'll try and find that log copy and post it. Ah, it just showed a msg saying I had to close google chrome, to allow the Internet cache to be removed. Looks like I'll have to start all over again....again.



I had some trouble initially running cc, but got there eventually.

It's that santer's fault.

Actually, a slight misunderstanding. You don't need to 'Run Cleaner', just open the program interface and then follow my instruction.

Perhaps I should write to you in another European language. What's your preference?

waddler_8

ampersand wrote: »

Quick scan said 'Not all infected files could be removed' and that it would close down and restart to remove the rest. The re-start has happened{I'm typing this!], but nothing else.

Shall I just go and run malware again?

Nothing does happen after reboot. Files that are stubborn to remove are deleted as the computer reboots.

You'll be able to see in the log what was removed and what was scheduled to be deletd on reboot. Open MBAM and go to the logs tab. There you'll see the relevant log.

You'll see some -> Quarantined and deleted successfully.
and some are -> Delete on reboot

If you've run MBAM again, then it shouldn't find anything.

ampersand

1st bit for you, TT -

ANALYSIS COMPLETE - (187.381 secs)

---

2.50 MB to be removed. (Approximate size)

---

Details of files to be deleted (Note: No files have been deleted yet)

---

Internet Explorer - Temporary Internet Files 2,355 KB 59 files
Internet Explorer - Cookies 1 KB 4 files
System - Temporary Files 1 KB 1 files
Google Chrome - Internet Cache 0 KB 0 files
Google Chrome - Internet History 9 KB 1 files
Google Chrome - Cookies 3 KB 1 files
Google Chrome - Session 189 KB 1 files
Multimedia - Adobe Flash Player 1 KB 1 files
Windows - MS AntiMalware 8 KB 1 files

---

\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\AntiPhishing\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat 288 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\A0K9A3HV\569[1] 8 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\A0K9A3HV\ads-in-client[1] 1 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\A0K9A3HV\blank[1].gif 1 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\A0K9A3HV\button16left-1[1].png 2 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\A0K9A3HV\close[1].png 1 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\A0K9A3HV\favicon[1].ico 2 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\A0K9A3HV\index-combined[1].css 41 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\A0K9A3HV\nav_logo89[1].png 32 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\A0K9A3HV\promotion-data[1].txt 21 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\A0K9A3HV\promotion-data[2].txt 21 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\A0K9A3HV\result_rightborder[1] 14 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\A0K9A3HV\search[1].htm 119 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\A0K9A3HV\tips-data[1].txt 2 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\A0K9A3HV\webpagethumbnail[1] 38 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\GWERAHJ6\aclk[1].htm 2 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\GWERAHJ6\all[2].js 137 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\GWERAHJ6\collect[1].htm 1 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\GWERAHJ6\collect[2].htm 1 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\GWERAHJ6\fancybox[1].png 15 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\GWERAHJ6\ff91e9ee21ffc5e7[1].js 46 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\GWERAHJ6\jquery.min[1].js 90 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\GWERAHJ6\no_updates[1].png 2 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\GWERAHJ6\nycli1[1].gif 4 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\GWERAHJ6\play_c[1].gif 1 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\GWERAHJ6\promotion-data[1].txt 21 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\GWERAHJ6\swxa[1].gif 6 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\GWERAHJ6\T-9UWegxdsYJ[1].jpg 2 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\GWERAHJ6\tips-data[1].txt 2 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\GWERAHJ6\webpagethumbnail[1] 33 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\LCUBXN35\ads-in-client[1] 1 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\LCUBXN35\ads-in-client[2] 1 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\LCUBXN35\combined_sprites_windows[1].png 4 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\LCUBXN35\Dropdown_background[1].png 1 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\LCUBXN35\info[2] 2 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\LCUBXN35\search[1].htm 146 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\LCUBXN35\Spinner_light[1].gif 50 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\LCUBXN35\stopscan_btn_normal[1] 4 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\LCUBXN35\topcontact-background[1].png 1 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\LCUBXN35\weather[1].xml 1 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\LCUBXN35\webpagethumbnail[1] 25 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\LCUBXN35\webpagethumbnail[2] 1 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\LCUBXN35\xml[1].xml 209 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\LCUBXN35\xml[2].xml 99 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\LHSWJGVL\243[1] 1 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\LHSWJGVL\background_clouds[1].png 5 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\LHSWJGVL\button16-1[1].png 2 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\LHSWJGVL\headerbg[2] 1 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\LHSWJGVL\home[1].htm 2 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\LHSWJGVL\index-combined[1].js 379 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\LHSWJGVL\input_background[1].png 1 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\LHSWJGVL\results[1] 1 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\LHSWJGVL\result_body[2] 2 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\LHSWJGVL\tips-data[1].txt 2 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\LHSWJGVL\webpagethumbnail[1] 30 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\LHSWJGVL\webpagethumbnail[2] 33 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\LHSWJGVL\xml[1].xml 123 KB
\Documents and Settings\Hansen\Local Settings\Temporary Internet Files\Content.IE5\LHSWJGVL\ZfvMLhmyCDg[1].js 306 KB
\Documents and Settings\Hansen\Local Settings\Application Data\Microsoft\Feeds Cache\XC5YGZRA\update[1] 0 KB
\Documents and Settings\Hansen\Cookies\45W3CMTF.txt 1 KB
\Documents and Settings\Hansen\Cookies\ENOHI13S.txt 1 KB
\Documents and Settings\Hansen\Cookies\HFKF8YYF.txt 1 KB
\Documents and Settings\Hansen\Local Settings\Application Data\Microsoft\Internet Explorer\DOMStore\OABL7VH3\https://www.google.co[1].xml 1 KB
\Documents and Settings\Hansen\Local Settings\Temp\859A95E3.TMP 1 KB
Google Chrome cache cleaning was skipped.
\Documents and Settings\Hansen\Local Settings\Application Data\Google\Chrome\User Data\Default\Last Tabs 9 KB
\Documents and Settings\Hansen\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\https_secure.shared.live.com_0.localstorage 3 KB
\Documents and Settings\Hansen\Local Settings\Application Data\Google\Chrome\User Data\Default\Last Session 189 KB
\Documents and Settings\Hansen\Application Data\Macromedia\Flash Player\#SharedObjects\CUZQGDC7\skype.com\#ui\preferences.sol 1 KB
\Documents and Settings\All Users\Application Data\Microsoft\Microsoft antimalware\scans\history\results\resource\{C0E37C35-9629-481A-8160-933621D2EA47} 8 KB
###############
Will now follow your 2nd instruction.

TakeThis

ampersand wrote: »

1st bit for you, TT -

That was not even my first instruction.

Let me look at my instruction again, in order to check to see if I have misled you.
If not....

ampersand

waddler_8 wrote: »

The "Official" mbam download link is this one:
http://www.malwarebytes.org/mbam-download.php

From that link you'll be directed to one of many "official" mirrors for the download.

Often on the download pages there are seperate advertisements for "Recommended Downloads". Users often click these prominent links, mistakingly thinking it is the download they require.

It's an issue they (Malwarebytes) are aware of and do try to work with the sites hosting the download to avoid any confusion.

####################
C'est bien vrai, tout à fait!

ampersand

TakeThis wrote: »

That was not even my first instruction.

Let me look at my instruction again, in order to check to see if I have misled you.
If not....

###############

Hmmm, think that was the one about shoving the little wooden beads along the wire, counting as I went.