150 replies to this topic

[Baruga]

Oh man....I don't even know how to use Internet Explorer anymore....I've forgotten where all the stuff is....and my printer is not working so I can't print out these instructions....I have been writing everything out by hand......Can I use Google Chrome to do it?. It's all so overwhelming.... Um, I don't think i have any antivirus stuff......the machine says I dont' even though I can see the AVG thing in different places...... I gotta turn in...I'll tackle this mountain range tomorrow ...... Thanks so much Tom, Sleep well.

[Tomk]

You can use chrome.

After you click on a window will open that will give you a link to download the supplemental program that will allow it to run in Chrome. Just follow the directions.

[Baruga]

Good Morning Tom. Ok...great on the Google Chrome. Now, I just want to be sure on the Anti-Virus thing before I dive into the abyss. In the Windows Security Center it says that "No Virus protection was found", but I can still see the AVG picture on my opening page. Is there other places, other than the Security Centre, that I should look, to make sure that there is no Anti-Virus stuff running while I do this scan? Or is the Security Center telling me the truth. It's lied to me before about stuff.....

[Tomk]

I believe you're good to go. AVG is terrible for cleaning up behind itself. We'll work on that some more before we're done.

[Baruga]

Was just about to start the scan, when I was told that "Another anti-virus software was detected and may affect scan" It is "Windows Defender". And I can't figure out how to disable it....I am only finding options to run it but not turn it off. ??????

[Baruga]

Was just about to start the scan, when I was told that "Another anti-virus software was detected and may affect scan" It is "Windows Defender". And I can't figure out how to disable it....I am only finding options to run it but not turn it off. ??????

[Tomk]

To disable Windows Defender:

Click on the start button in the lower left of your screen.

Clicking All Programs, and then click Windows Defender.

Click Tools, and then click Options.

Under Administrator options, select or clear the Use Windows Defender check box, and then click Save.

[Baruga]

*Exhales* Alrighty. The scan is complete...but I am hung up between Uninstall app on close, COPY LOG FIRST and click finish I am not seeing where or how to "COPY LOG" so I have not clicked finish yet.

[Baruga]

I could not find a way to copy the results by using the machine. So I resorted to the most reliable way of copying things: PEN AND PAPER. This is what the little box had in it: C:\USERS\Owner\APPDATA\LocalLow\SUN\Java\Deployment... Multiple Threats C:\USERS\Owner\APPDATA\LocalLow\SUN\Java\Deployment...Multiple Threats C:\Windows\System32\config\systemprofile\APPDATA\local A variant of win32\adware Onestep P App ______________________________________________ They are the 3 threats identified.

[Tomk]

Unfortunately those are incomplete file "identifications" I've got the Chrome version of the scan running on a computer and in a few minutes hopefully I'll be able to give you better directions.

[Tomk]

OK...

On the screen that shows the found threats.. on the lower left it says Copy to Clipboard. Click on those words, then right click in a reply window back here and select paste.

[Baruga]

I'll have to do the whole thing again. It did take two hours. Lots of swear words here_____________________________________________.

[Baruga]

C:\Users\Owner\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\61\47e7863d-3747cd00 multiple threats C:\Users\Owner\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\62\62d4253e-33fe7fb0 multiple threats C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QCMDGE4Q\upgrade[1].cab a variant of Win32/Adware.OneStep.P application

[Baruga]

And should I put my Windows Defender back on now?

[Tomk]

Yes. Go ahead and turn it back on.

We're almost done with the malware removal.

Please download ATF Cleaner by Atribune.
Download - ATF Cleaner
Double-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.

It's normal after running ATF cleaner that the PC will be slower to boot the first time or two.

This is just cleaning up the temporary files and the cache files (which is where the items the ESET found are located.

Then please let me know how things are running.