Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
iSafeTray.exe YACTray
#1
Sorry I deleted post by mistake, was going to soft delete a post I made and hit permanent delete.  Angry

Step 1

[Image: malwarebytes-icon.png] Scan with Malwarebytes' Anti-Malware


Please download Malwarebytes Anti-Malware and save it to your desktop.
  • Install the progam and select update.
  • Once updated, click the Settings tab, in the left panel choose Detctions & protection and tick Scan for rootkits.
  • Click the Scan tab, choose Threat Scan is checked and click Scan Now.
  • If threats are detected, click the Apply Actions button. You will now be prompted to reboot. Click Yes.
  • Upon completion of the scan (or after the reboot), click the History tab.
  • Click Application Logs and double-click the Scan Log.
  • At the bottom click Export and choose Text file.
Save the file to your desktop and include its content in your next reply.

Step 2

[Image: adwcleaner_new.png] Fix with AdwCleaner


Please download AdwCleaner by Xplode and save the file to your desktop.
  • Right-click on [Image: adwcleaner_new.png] icon and select [Image: RunAsAdmin.jpg] Run as Administrator to start the tool.
  • Follow the prompts and click Scan
  • When finished, please click Clean.
  • Upon completion, click Report. A log (AdwCleaner[S*].txt) will open.

Please include the contents of that file in your reply. 
<left><form action="https://www.paypal.com/cgi-bin/webscr" method="post">If you are satisfied with my help, consider a donation. Thank you so much for your continued support! 
<input type="hidden" name="cmd" value="_s-xclick">
<input type="hidden" name="hosted_button_id" value="Y4ZDLXGFS4F8Q">
<input type="image" src="https://www.paypalobjects.com/en_US/GB/i/btn/btn_donateCC_LG.gif" border="0" name="submit" alt="PayPal — The safer, easier way to pay online.">
<img alt="" border="0" src="https://www.paypalobjects.com/en_GB/i/scr/pixel.gif" width="0" height="0">
</form>

   </div></left> 

#2
It won't post the content due to lines limitation, I attached them...


Attached Files
.txt   MalwareByte 1.txt (Size: 141.6 KB / Downloads: 1)
.txt   MalwareByte 2.txt (Size: 173.85 KB / Downloads: 1)
.txt   AdwCleaner[R0].txt (Size: 4.89 KB / Downloads: 1)
.txt   AdwCleaner[S0].txt (Size: 5.1 KB / Downloads: 1)

#3
Step 1

[Image: RogueKiller.png]Fix with RogueKiller


Please re-run RogueKiller.
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.
  • Right-click on [Image: RogueKiller.png] icon and select [Image: RunAsAdmin.jpg] Run as Administrator to start the tool.
  • Wait patiently until the pre-scan will be done. It shouldn't take more than 2-3 minutes.
  • Accept the Terms of use.
  • When the Scan button becomes available, please click it. RogueKiller will start a full scan.
  • Upon completion, the Delete button will become available. Click it.
  • Removal process may take some time. Also your machine may be restarted during this procedure. It's normal.
  • Let this process run uninterrupted!.
  • When finished, a Report button will become available. Click it. You will be presented with a logfile.
Please include the content of this logfile in your next reply.

Step 2


Please perform a scan with ESET Online Scan


§  open new browser tab

§  Click the [Image: scanner.png] button.

§  Click on [Image: eset.png] button to download the ESET Smart Installer.
 
Save it to your Desktop.

o    Double click on [Image: install.png] to start ESET Smart Installer.

§  Check "YES", and Tick "I accept the Terms of Use"

§  Click the [Image: start.jpg] button.

§  Yes to User Account Control warning.

§  Enable detection of potentially unwanted applications. 

§  Click Advanced settings and select the following:

o    Remove found threats

o    Scan Archives
o    Scan for potentially unsafe applications

o    Enable Anti-Stealth technology

§  ESET will then download updates for signature database, install itself, and begin scanning your computer. Please be patient as this can take some time.

§  When the scan completes, click List of Found Threats
§  Click Export toText File, and save the file to your desktop and name it EsetLog. Include the contents of this report in your next reply.

§  Put tick in Uninstall Application on close

§  Put tick in Delete Quarantined files
§  Click the [b]Finish button.
[/b]
<left><form action="https://www.paypal.com/cgi-bin/webscr" method="post">If you are satisfied with my help, consider a donation. Thank you so much for your continued support! 
<input type="hidden" name="cmd" value="_s-xclick">
<input type="hidden" name="hosted_button_id" value="Y4ZDLXGFS4F8Q">
<input type="image" src="https://www.paypalobjects.com/en_US/GB/i/btn/btn_donateCC_LG.gif" border="0" name="submit" alt="PayPal — The safer, easier way to pay online.">
<img alt="" border="0" src="https://www.paypalobjects.com/en_GB/i/scr/pixel.gif" width="0" height="0">
</form>

   </div></left> 

#4
I did not ran RogueKiller before, it was FRST. But anyway I have download it and run it as well. Please find attached files for logs.


Attached Files
.txt   RKreport_DEL_06142015_014639.txt (Size: 5.41 KB / Downloads: 1)
.txt   EsetLog.txt (Size: 1.94 KB / Downloads: 1)

#5
How is the system running now?
<left><form action="https://www.paypal.com/cgi-bin/webscr" method="post">If you are satisfied with my help, consider a donation. Thank you so much for your continued support! 
<input type="hidden" name="cmd" value="_s-xclick">
<input type="hidden" name="hosted_button_id" value="Y4ZDLXGFS4F8Q">
<input type="image" src="https://www.paypalobjects.com/en_US/GB/i/btn/btn_donateCC_LG.gif" border="0" name="submit" alt="PayPal — The safer, easier way to pay online.">
<img alt="" border="0" src="https://www.paypalobjects.com/en_GB/i/scr/pixel.gif" width="0" height="0">
</form>

   </div></left> 

#6
Thanks Brian, it is working 10 out of 10, really helpful Big Grin

I saw your videos on how to completely clean heavily infected PC, but I need a little help regarding what program should I run for which infection type... I mean I have ran out four programs now, and I do not know what they did exactly  Shy I have viewed what Internet says, And they all use words like (malware, adware, crapware, junkware...etc)  Huh But what actually they are equal in what we see in my computer?

Thanks again and I appreciate your help.

#7
Cool glad it worked out, can you please run this so I can make sure your system is clean.

[Image: FRST.png] Scan with Farbar Recovery Scan Tool


Please download Farbar Recovery Scan Tool x64 and save it to your Desktop.
  • Right-click on [Image: FRST.png] icon and select [Image: RunAsAdmin.jpg] Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • When the tool opens click Yes to disclaimer.
  • Make sure that Addition option is checked.
  • Press Scan button and wait.
  • The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.
Please copy and paste their content into your next reply.
<left><form action="https://www.paypal.com/cgi-bin/webscr" method="post">If you are satisfied with my help, consider a donation. Thank you so much for your continued support! 
<input type="hidden" name="cmd" value="_s-xclick">
<input type="hidden" name="hosted_button_id" value="Y4ZDLXGFS4F8Q">
<input type="image" src="https://www.paypalobjects.com/en_US/GB/i/btn/btn_donateCC_LG.gif" border="0" name="submit" alt="PayPal — The safer, easier way to pay online.">
<img alt="" border="0" src="https://www.paypalobjects.com/en_GB/i/scr/pixel.gif" width="0" height="0">
</form>

   </div></left> 

#8
Check attachments please.


Attached Files
.txt   FRST.txt (Size: 43.7 KB / Downloads: 4)
.txt   Addition.txt (Size: 41.3 KB / Downloads: 2)

#9
So if you're happy I will close this thread and mark as solved.
Any problems over the next 48 hours, come back and I will take a look.

Good luck.
<left><form action="https://www.paypal.com/cgi-bin/webscr" method="post">If you are satisfied with my help, consider a donation. Thank you so much for your continued support! 
<input type="hidden" name="cmd" value="_s-xclick">
<input type="hidden" name="hosted_button_id" value="Y4ZDLXGFS4F8Q">
<input type="image" src="https://www.paypalobjects.com/en_US/GB/i/btn/btn_donateCC_LG.gif" border="0" name="submit" alt="PayPal — The safer, easier way to pay online.">
<img alt="" border="0" src="https://www.paypalobjects.com/en_GB/i/scr/pixel.gif" width="0" height="0">
</form>

   </div></left> 



Forum Jump:


Users browsing this thread:
1 Guest(s)

Powered By MyBB, © 2002-2024 Melroy van den Berg.