lgoncalves

Hi Chuck, Thanks a lot for your help. Slowness has relieved, but Windows Update service suddenly eats a lot of memory and I have to wait to finish in order to come back to work. Below log created by Delfix: # DelFix v1.013 - Logfile created 28/04/2017 at 11:35:49 # Updated 17/04/2016 by Xplode # Username : LGONCALVES - NU0106E12 # Operating System : Windows 8 Pro (64 bits) ~ Removing disinfection tools ... Deleted : C:\_OTL Deleted : C:\AdwCleaner Deleted : HKLM\SOFTWARE\OldTimer Tools ~ Creating registry backup ...

Hi Chuck, Thank you very much for your help. Below OTL log: All processes killed ========== OTL ========== HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully! 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully. 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set

Hi Chuck, I have posted both OTL log: OTL.txt is below malware bytes log, in same post. But Extras.txt was posted separated. I will run again malwarebytes, as you said. Best regards

Hi Chuck, I have removed all threats in quarantine, but It does not show any log. Do you mean I should run a new scan? Best regards

Hi Chuck, I will post second log from OTL: OTL Extras logfile created on: 23-04-2017 11:21:33 a.m. - Run 2 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Data\Software\JRT 64bit- Professional (Version = 6.2.9200) - Type = NTWorkstation Internet Explorer (Version = 9.10.9200.17607) Locale: 0000200a | Country: Republica Bolivariana de Venezuela | Language: ESV | Date Format: dd-MM-yyyy 3,82 Gb Total Physical Memory | 1,43 Gb Available Physical Memory | 37,36% Memory free 7,57 Gb Paging File | 3,94 Gb Available in Paging File | 51,99% Paging File free Paging file

Hi Chuck, Thanks a lot for your help. In this time I put in quarantine findings from malwarebytes. I will post log from Malware bytes and OLT.txt. Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 4/23/17 Scan Time: 9:27 AM Logfile: Malware_report_2.txt Administrator: Yes -Software Information- Version: 3.0.6.1469 Components Version: 1.0.103 Update Package Version: 1.0.1791 License: Trial -System Information- OS: Windows 8 CPU: x64 File System: NTFS User: System -Scan Summary- Scan Type: Threat Scan Result: Completed Objects

Hi Chuck, Thanks for your help. Below logs collected: Adware: # AdwCleaner v6.045 - Archivo de registro creado 06/04/2017 en 09:29:35 # Actualizado en 28/03/2017 por Malwarebytes # Base de datos : 2017-03-28.2 [Local] # Sistema Operativo : Windows 8 Pro (X64) # Nombre de usuario : LGONCALVES - NU0106E12 # Ejecutado desde : C:\Data\Software\Adware\adwcleaner_6.045.exe # Modo: Escanear # Soporte : https://www.malwarebytes.com/support ***** [ Servicios ] ***** No se han encontrado servicios maliciosos. ***** [ Carpetas ] ***** Carpeta En

Hi, I am running WIndows 8 and since a few weeks ago my computer is very slow. I have run JRT tool and every time find a different thread. Please help.

Hi Chuck, The processes i do not recognize are nvsvc32.exe, rundll32.exe and tw_w32.exe. In addition, there is a videobeach program I can not uninstall from "add and remove programs" in control panel. I have made an antivirus scan and it put in quarantine a video beach file. When the system is starting up, the system shows an error because could not find videobeach.dll. I have run adwcleaner and jrt.exe. I still cannot open firefox and the system still freezes. Next, the logs: Adwcleaner # AdwCleaner v5.026 - Registro generado 23/12/2015 en 16:27:48 # Actualizado 21/

Hi Chuck, thanks for your reply. I am running the apps and then I send you the logs.

Hi, Yes, I still have windows XP, because a program that does not run in a latest version. So my PC freezes sometimes and firefox does not open. I have some process running I do not recognize. Please help

Hi Chuck, everything is running ok. After I enabled the addons in Firefox I have to enable scripts on trustful sites, but I think is fair if I have a safe browsing. Thank you very much for yur help.

Hi Chuck, thank you very muh for your help. I have followed your advices and now I have installed the add ons in Firefox. Let me post the last log: # DelFix v10.8 - Logfile created 29/01/2015 at 23:40:22 # Updated 29/07/2014 by Xplode # Username : DXXNMS - DXXNMS-PC # Operating System : Windows 7 Home Premium Service Pack 1 (64 bits) ~ Removing disinfection tools ... Deleted : C:\_OTL Deleted : C:\AdwCleaner Deleted : C:\Users\DXXNMS\Desktop\JRT.txt Deleted : HKLM\SOFTWARE\OldTimer Tools Deleted : HKLM\SOFTWARE\AdwCleaner Deleted : HKLM\SOFTWARE\TrendMicro\Hijackthis ~ Creating registry backup

Hi Chuck, Posting results from script: All processes killed ========== OTL ========== HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully! 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully. 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully! Registry key HKEY_LOCA

Posting Extras log: OTL Extras logfile created on: 27/01/2015 07:05:21 p.m. - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Programas\Malware\Malware removal 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.11.9600.17501) Locale: 0000200A | Country: Bolivarian Republic of Venezuela | Language: ESV | Date Format: dd/MM/yyyy 3,84 Gb Total Physical Memory | 1,71 Gb Available Physical Memory | 44,45% Memory free 7,68 Gb Paging File | 4,28 Gb Available in Paging File | 55,80% Paging File free Paging file location(s)

Posting OTL log: OTL logfile created on: 27/01/2015 07:05:21 p.m. - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Programas\Malware\Malware removal 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.11.9600.17501) Locale: 0000200A | Country: Bolivarian Republic of Venezuela | Language: ESV | Date Format: dd/MM/yyyy 3,84 Gb Total Physical Memory | 1,71 Gb Available Physical Memory | 44,45% Memory free 7,68 Gb Paging File | 4,28 Gb Available in Paging File | 55,80% Paging File free Paging file location(s): ?:\pagef

Hi Chuck, posting checkup log: Results of screen317's Security Check version 0.99.95 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` Windows Firewall Enabled! McAfee Anti-Virus and Anti-Spyware WMI entry may not exist for antivirus; attempting automatic update. `````````Anti-malware/Other Utilities Check:````````` McAfee SiteAdvisor Java 8 Update 31 Java version 32-bit out of Date! Java 64-bit 8 Update 31 Adobe Reader 10.1.13 Adobe Reader out of Date! Mozilla Firefox (35.0.1) Google Chr

Hi Chuck, I have tried to download securitycheck.exe, but my antivrus renoved the file when the browser it is going to save it. That is why I coul not post the log.

Malwarebytes Antimalware did not find anything.

Posting JRT log: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.4.1 (12.28.2014:1) OS: Windows 7 Home Premium x64 Ran by DXXNMS on 25/01/2015 at 23:26:05,35 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Start Page Successfully repaired: [Registry Value] HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Main\\Start Page Successfully repaired: [Registry Value] HKEY_US

Hi Chuck, thanks again for your help. I have made the registry backup as you indicated and I have run adwcleaner, At this time I keep the network functions, luckily. I apologize for attaching instead of posting logs. Posting the log from adwcleaner: # AdwCleaner v4.108 - Report created 23/01/2015 at 22:25:58 # Updated 17/01/2015 by Xplode # Database : 2015-01-23.3 [Live] # Operating System : Windows 7 Home Premium Service Pack 1 (64 bits) # Username : DXXNMS - DXXNMS-PC # Running from : C:\Programas\Malware\AdwCleaner.exe # Option : Clean ***** [ Services ] ***** Service Deleted : hshld

Hi Chuck, I have restord the system to the point before adwcleaner cleaning. Now I have my network functions ok, but the malware making a mess on my browsers. Should I back to point where I did not have any network connections and run the OTL fix or I begin from adwcleaner again and take care of cleaning, checking only the options that keep network functions?

Hi Chuck, As you suggest, I have tried System restore and the Ip functions back again.

Hi Chuck, Here is security chech log: Results of screen317's Security Check version 0.99.95 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` Windows Firewall Enabled! McAfee Anti-Virus and Anti-Spyware WMI entry may not exist for antivirus; attempting automatic update. `````````Anti-malware/Other Utilities Check:````````` McAfee SiteAdvisor Java 7 Update 55 Java version 32-bit out of Date! Java 64-bit 8 Update 31 Adobe Reader 10.1.13 Adobe Reader out of Date! Mozilla Firefox 34.0.5 Fire

I forgot to run dds.scr. Now I have attached the dds log and attach log in zip format. Malware.zip