This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

for Jeff - Need your expertise again! [Solved]

31 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Good Morning Jeff! I have a few issues, not sure if they are related or not, so I came here to find out! First, for a long time, EVERYTHING is "not responding", Explorer 9, Microsoft Word and Excel. At one point the other day, this laptop made a few unusual sounds like a horn….have no clue why that occured…has not happened in the past 24 hours. The other night I was laying our a route in Mapsource and after creating a few waypoints and created a route - when I click on RECALCULATE there is a 5 second pause before it does it. Much like when I open WORD, right after it opens - there is "Word is not respionding" after 5 seconds or so - it responds. Opening a file, there is this pause, much too long as in the past. Same with Excel, or any software I open. Like something is causing the delay to follow thru. The same night, I tried to use STREET VIEW in google earth - if you ever used it, you know that when you drag pegman to the street, blue lines appear if street view is available for that location. No blue lines. But when I use it - street view is there on the road…can't figure this one out. then the other night Trend MIcro was running and I had to shut down. I stopped the scan, but it went back to scanning, would not cancel. Eventually I shut down, and it did stop the scan. I started a scan this morning at 5:30 am and I just stopped it now at 7:47 am and it seems to be cleaning up and ending. it did stop, as I have to leave for work in 10 minutes. Something is definitly going on here…just don't know what it is. you may have a clue! See you satureday! Darlene
Hi,

When you return on Saturday, or before if able, please do the following and we will take a look.

Please download DDS from either of these links

LINK 1
LINK 2

and save it to your desktop.
  • Disable any script blocking protection
  • Right-click and Run as Administrator dds to run the tool.
  • When done, two DDS.txt's will open.
  • Save both reports to your desktop.
—————————————————
Please include the contents of the following in your next reply:

DDS.txt

Attach.txt
———-

[external image: Posted Image] Please download TDSSKiller
  • Double click TDSSKiller.exe
  • Press Start Scan
  • If Malicious objects are found, select Skip by changing the Cure dropdown in the upper right.
  • Do Not Attempt To Fix Anything Now. We just need to look over the report and be sure we are removing the correct items.
  • Attach the log in your next reply
  • A copy of the log will be saved automatically to the root of the drive (typically C:\)
———-
Happy Friday Jeff! Will follow instructions saturday for sure - but one more note this morning… I use "Screen clipping" often for the newsletters I do, this morning when I used it - the screen displayed a gray screen instead of the data I wanted to capture. dont know if this is relevant or not. Also, I had seen a picture on facebook that I wanted to download, so when I clicked on download, nothing happened, 10 minutes later the box appears to ask where I want to save it, or save as..etc. there is some delay going on, don't know where this is coming from. will contact you tomorrow after I get those items downloaded, etc. enjoy your friday, I will! Dar
Happy Friday Jeff!

I downloaded link 1 - dds.com, Run as Administrator was not available, so I just ran it. DDS.txt is attached to this note. the other file says to zip it then attach - I don't have that so I will try to send you a private note and see if I can attach it there.

dar






Hi,

When you return on Saturday, or before if able, please do the following and we will take a look.

Please download DDS from either of these links

LINK 1
LINK 2

and save it to your desktop.

  • Disable any script blocking protection
  • Right-click and Run as Administrator dds to run the tool.
  • When done, two DDS.txt's will open.
  • Save both reports to your desktop.
—————————————————
Please include the contents of the following in your next reply:

DDS.txt

Attach.txt
———-

[external image: Posted Image] Please download TDSSKiller
  • Double click TDSSKiller.exe
  • Press Start Scan
  • If Malicious objects are found, select Skip by changing the Cure dropdown in the upper right.
  • Do Not Attempt To Fix Anything Now. We just need to look over the report and be sure we are removing the correct items.
  • Attach the log in your next reply
  • A copy of the log will be saved automatically to the root of the drive (typically C:\)
———-

Attachments:

Jeff

Ok - your link for the kaspersky software did not work, so I googled it and found it, ran it and the log is attached.

dar

I have a cat doing figure 8's around my ankles……someone short and furry wants snacks….





Hi,

When you return on Saturday, or before if able, please do the following and we will take a look.

Please download DDS from either of these links

LINK 1
LINK 2

and save it to your desktop.

  • Disable any script blocking protection
  • Right-click and Run as Administrator dds to run the tool.
  • When done, two DDS.txt's will open.
  • Save both reports to your desktop.
—————————————————
Please include the contents of the following in your next reply:

DDS.txt

Attach.txt
———-

[external image: Posted Image] Please download TDSSKiller
  • Double click TDSSKiller.exe
  • Press Start Scan
  • If Malicious objects are found, select Skip by changing the Cure dropdown in the upper right.
  • Do Not Attempt To Fix Anything Now. We just need to look over the report and be sure we are removing the correct items.
  • Attach the log in your next reply
  • A copy of the log will be saved automatically to the root of the drive (typically C:\)
———-

Good job…thanks! :)

ComboFix

Download Combofix from the link below, and save it to your desktop.
Link

**Note: It is important that it is saved directly to your desktop**
If you get a message saying "Illegal operation attempted on a registry key that has been marked for deletion", please restart your computer.

——————————————————————–

IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here

——————————————————————–

Right-Click and Run as Administrator on ComboFix.exe & follow the prompts.
  • When finished, it will produce a report for you.
  • Please post the C:\ComboFix.txt for further review.
———-
:) Good Morning from Pittsburgh Jeff! Ran the Combofix and have attached it. I glanced it…looks greek to me!! Glad it makes sense to you! After I downloaded Combo fix, I took this laptop off the internet, and disabled my TrendMicro, rand combofix, then enabled TrendMicro and here I am! While you read this .txt file, I'm going to make breakfast and start taking down Christmas! I'll come back now and then to see if you responded! Dar

Attachments:

Hi,

ComboFix
  • Please open Notepad (Start -> Run -> type notepad in the Open field -> OK) and copy and paste the text present inside the box below:


    ClearJavaCache::

    DDS::
    BHO: IB Updater: {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Program Files\Web Assistant\Extension32.dll
    BHO: Wajam: {A7A6995D-6EE1-4FD1-A258-49395D5BF99C} - C:\Program Files (x86)\Wajam\IE\wajam.dll
    x64-BHO: IB Updater: {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Program Files\Web Assistant\Extension64.dll

    File::
    ExtensionUpdaterService.exe

    Driver::
    IB Updater

  • Save this as CFScript.txt and change the "Save as type" to "All Files" and place it on your desktop.

    [external image: Posted Image]
  • Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before following the steps below. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
  • Referring to the screenshot above, drag CFScript.txt into ComboFix.exe.
  • ComboFix may request an update; please allow it.
  • ComboFix will now run a scan on your system. It may reboot your system when it finishes. This is normal.
  • When finished, it shall produce a log for you. Post the contents of the log in your next reply.
CAUTION: Do not mouse-click ComboFix's window while it is running. That may cause it to stall.
———-

Post the new ComboFix log and let me know how your system is running now. :)
Jeff Ok - ran the scan… I have not gotten a "not responding" so far in explorer. Mapsource still has a 4 second delay to begin a recalculate..dont' understand that. Word still has "not responding"……. so what is going on here? dar

Attachments:

Hi,

I have not gotten a "not responding" so far in explorer

Do you mean Internet Explorer or Windows Explorer?

ComboFix
  • Please open Notepad (Start -> Run -> type notepad in the Open field -> OK) and copy and paste the text present inside the box below:


    ClearJavaCache::

    File::
    c:\program files\Web Assistant\ExtensionUpdaterService.exe

    Driver::
    IB Updater

  • Save this as CFScript.txt and change the "Save as type" to "All Files" and place it on your desktop.

    [external image: Posted Image]
  • Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before following the steps below. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
  • Referring to the screenshot above, drag CFScript.txt into ComboFix.exe.
  • ComboFix may request an update; please allow it.
  • ComboFix will now run a scan on your system. It may reboot your system when it finishes. This is normal.
  • When finished, it shall produce a log for you. Post the contents of the log in your next reply.
CAUTION: Do not mouse-click ComboFix's window while it is running. That may cause it to stall.
———-
Jeff: that would be Internet Explorer……sorry!! Will follow thru with the new instructions soon - we are having buffalo wings delivered…….the world comes to a halt!! dar
hi


While combofix was running,l my laptop rebooted….that means TrendMicro was re-enabled and it went on line. Now the pc won't let me do anything, even IE9 won't come up ,s ays it's marked for deletion. I sent you a private message with the same info..

I am at my hubby's pc now….since I cant' use my laptop. I sure hope we can reverse this scenario asap!!

file is attached.

dar





Hi,

I have not gotten a "not responding" so far in explorer

Do you mean Internet Explorer or Windows Explorer?

ComboFix
  • Please open Notepad (Start -> Run -> type notepad in the Open field -> OK) and copy and paste the text present inside the box below:


    ClearJavaCache::

    File::
    c:\program files\Web Assistant\ExtensionUpdaterService.exe

    Driver::
    IB Updater

  • Save this as CFScript.txt and change the "Save as type" to "All Files" and place it on your desktop.

    [external image: Posted Image]
  • Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before following the steps below. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
  • Referring to the screenshot above, drag CFScript.txt into ComboFix.exe.
  • ComboFix may request an update; please allow it.
  • ComboFix will now run a scan on your system. It may reboot your system when it finishes. This is normal.
  • When finished, it shall produce a log for you. Post the contents of the log in your next reply.
CAUTION: Do not mouse-click ComboFix's window while it is running. That may cause it to stall.
———-

Attachments:

No problem…. The Patriots play tonight so I will be watching that. :)

5
hi - I need Jeff asap - the pc he was helping me with is now disabled, and I need him to send me the next step. I am using ourr smart tv" right now to leave this message. Not the best but it's what I have right now.
Can someone get Jeff? I'm about to have a panic attack soon!!!

Daar

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI