de-bugging i-pad

espresso

joe134 wrote: »

never needed to, sounds a roundabout way of doing it.never used explorer all the years on pc.
search is easier, to me :::I,m just a silver 70 year old, but, the R on explore and note book, make the world of difference to the likes of me;whether I get it right or wrong;

I don't see what age has to do with following simple instructions - not a valid excuse.

Surely you have created and saved this txt file on your flashdrive by now!

joe134

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 13-09-2013
Ran by Rose at 2013-09-13 11:22:01 Run:2
Running from C:\Users\Rose\Desktop
Boot Mode: Normal

joe134

joe134 wrote: »

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 13-09-2013
Ran by Rose at 2013-09-13 11:22:01 Run:2
Running from C:\Users\Rose\Desktop
Boot Mode: Normal

Hope this is it. Gone a different route, creating a new empty file on desktop first, then copy/paste text to it.
Made umpteen copy/paste, but only done this this way for first time;Always prepared to learn, but it does help if instructions are not mispelt or called something else.Sorry for bother waddle, my fault;;;

joe134

espresso wrote: »

I don't see what age has to do with following simple instructions - not a valid excuse.

Surely you have created and saved this txt file on your flashdrive by now!

it,s not meant for flash, it,s for desktop on infected pc.

waddler_8

joe134 wrote: »

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 13-09-2013
Ran by Rose at 2013-09-13 11:22:01 Run:2
Running from C:\Users\Rose\Desktop
Boot Mode: Normal

That's it, but is there any more to it than that?

Have you backed up important files from the pc at all?

joe134

waddler_8 wrote: »

That's it, but is there any more to it than that?

Have you backed up important files from the pc at all?

Hi waddler, thats all i,ve got, Do you mean backed up pictures etc?yes, nothing to lose;
Do you think there should be more? Can do again, might have been premature during reboot;
OOps sorry mate. theres more..gonna try and post it. really cocking up today.
didn,t copy/paste it all

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 13-09-2013
Ran by Rose at 2013-09-13 11:22:01 Run:2
Running from C:\Users\Rose\Desktop
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
S2 *etadpug; "C:\Program Files\Google\Desktop\Install\{f5bcd340-d062-07d2-560a-ffd3597a14f2}\ \...\???\{f5bcd340-d062-07d2-560a-ffd3597a14f2}\GoogleUpdate.exe" < <==== ATTENTION (ZeroAccess)
C:\Program Files\Google\Desktop\Install\{f5bcd340-d062-07d2-560a-ffd3597a14f2}
C:\Users\Rose\AppData\Local\Google\Desktop\Install\{f5bcd340-d062-
*****************
*etadpug => Service deleted successfully.
"C:\Program Files\Google\Desktop\Install\{f5bcd340-d062-07d2-560a-ffd3597a14f2}" directory move:
Could not move "C:\Program Files\Google\Desktop\Install\{f5bcd340-d062-07d2-560a-ffd3597a14f2}" directory. => Scheduled to move on reboot.
"C:\Users\Rose\AppData\Local\Google\Desktop\Install\{f5bcd340-d062-" => File/Directory not found.
=========== Result of Scheduled Files to move ===========
C:\Program Files\Google\Desktop\Install\{f5bcd340-d062-07d2-560a-ffd3597a14f2} => Is moved successfully.
==== End of Fixlog ====

joe134

joe134 wrote: »

Hi waddler, thats all i,ve got, Do you mean backed up pictures etc?yes, nothing to lose;
Do you think there should be more? Can do again, might have been premature during reboot;oops sorry mate. theres more..gonna try and post it. really cocking up today.Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 13-09-2013
Ran by Rose at 2013-09-13 11:22:01 Run:2
Running from C:\Users\Rose\Desktop
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
S2 *etadpug; "C:\Program Files\Google\Desktop\Install\{f5bcd340-d062-07d2-560a-ffd3597a14f2}\ \...\???\{f5bcd340-d062-07d2-560a-ffd3597a14f2}\GoogleUpdate.exe" < <==== ATTENTION (ZeroAccess)
C:\Program Files\Google\Desktop\Install\{f5bcd340-d062-07d2-560a-ffd3597a14f2}
C:\Users\Rose\AppData\Local\Google\Desktop\Install\{f5bcd340-d062-
*****************
*etadpug => Service deleted successfully.
"C:\Program Files\Google\Desktop\Install\{f5bcd340-d062-07d2-560a-ffd3597a14f2}" directory move:
Could not move "C:\Program Files\Google\Desktop\Install\{f5bcd340-d062-07d2-560a-ffd3597a14f2}" directory. => Scheduled to move on reboot.
"C:\Users\Rose\AppData\Local\Google\Desktop\Install\{f5bcd340-d062-" => File/Directory not found.
=========== Result of Scheduled Files to move ===========
C:\Program Files\Google\Desktop\Install\{f5bcd340-d062-07d2-560a-ffd3597a14f2} => Is moved successfully.
==== End of Fixlog ====

Gonna do again, infected pc is playing up.

joe134

joe134 wrote: »

Gonna do again, infected pc is playing up.

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 13-09-2013
Ran by Rose at 2013-09-13 11:22:01 Run:2
Running from C:\Users\Rose\Desktop
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
S2 *etadpug; "C:\Program Files\Google\Desktop\Install\{f5bcd340-d062-07d2-560a-ffd3597a14f2}\ \...\???\{f5bcd340-d062-07d2-560a-ffd3597a14f2}\GoogleUpdate.exe" < <==== ATTENTION (ZeroAccess)
C:\Program Files\Google\Desktop\Install\{f5bcd340-d062-07d2-560a-ffd3597a14f2}
C:\Users\Rose\AppData\Local\Google\Desktop\Install\{f5bcd340-d062-
*****************
*etadpug => Service deleted successfully.
"C:\Program Files\Google\Desktop\Install\{f5bcd340-d062-07d2-560a-ffd3597a14f2}" directory move:
Could not move "C:\Program Files\Google\Desktop\Install\{f5bcd340-d062-07d2-560a-ffd3597a14f2}" directory. => Scheduled to move on reboot.
"C:\Users\Rose\AppData\Local\Google\Desktop\Install\{f5bcd340-d062-" => File/Directory not found.
=========== Result of Scheduled Files to move ===========
C:\Program Files\Google\Desktop\Install\{f5bcd340-d062-07d2-560a-ffd3597a14f2} => Is moved successfully.
==== End of Fixlog ====

joe134

joe134 wrote: »

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 13-09-2013
Ran by Rose at 2013-09-13 11:22:01 Run:2
Running from C:\Users\Rose\Desktop
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
S2 *etadpug; "C:\Program Files\Google\Desktop\Install\{f5bcd340-d062-07d2-560a-ffd3597a14f2}\ \...\???\{f5bcd340-d062-07d2-560a-ffd3597a14f2}\GoogleUpdate.exe" < <==== ATTENTION (ZeroAccess)
C:\Program Files\Google\Desktop\Install\{f5bcd340-d062-07d2-560a-ffd3597a14f2}
C:\Users\Rose\AppData\Local\Google\Desktop\Install\{f5bcd340-d062-
*****************
*etadpug => Service deleted successfully.
"C:\Program Files\Google\Desktop\Install\{f5bcd340-d062-07d2-560a-ffd3597a14f2}" directory move:
Could not move "C:\Program Files\Google\Desktop\Install\{f5bcd340-d062-07d2-560a-ffd3597a14f2}" directory. => Scheduled to move on reboot.
"C:\Users\Rose\AppData\Local\Google\Desktop\Install\{f5bcd340-d062-" => File/Directory not found.
=========== Result of Scheduled Files to move ===========
C:\Program Files\Google\Desktop\Install\{f5bcd340-d062-07d2-560a-ffd3597a14f2} => Is moved successfully.
==== End of Fixlog ====

Does that look better.? checked across both pcs , same on both.no more

waddler_8

joe134 wrote: »

Does that look better.? checked across both pcs , same on both.no more

Well done Joe, that's great.

We need to run more more fixlist script as there's a certain order this malware needs to be removed.

First delete any fixlist.txt files on your desktop. Then create one as you did before.

• Click Start
• Type notepad in the search programs and files box and click Enter.
• A blank Notepad page should open.
  • Copy/Paste all of the contents of the code box below into Notepad. Do not include Code:

  DeleteJunctionsIndirectory: C:\Program Files\Windows Defender
  

  • Save it as fixlist.txt and save to your desktop

It's important both FRST & Fixlist.txt are on the Desktop.

• Right-click FRST & choose "Run as administrator" to run it.
• When the tool opens click Yes to disclaimer.
• Press the Fix button once and wait.
• FRST will process fixlist.txt
• When finished, it will produce a log fixlog.txt on your desktop. Post the contents.

If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.