Problems with popus etc [Closed]

Hello Deb, 
  

 Adobe Reader 9 Adobe Reader out of Date! 

Please uninstall this outdated programme from your control panel.
 

Adobe Reader 10.1.4 Adobe Reader out of Date!  

This is in fact the latest version for Vista, so it is not outdated. 
 

 Total Fragmentation on Drive C: 5 % Defragment your hard drive soon! (Do NOT defrag if SSD!)

Unless you have a Solid State Drive (SSD), please perform a defrag.
Instructions on how to do so can be found here.
 

My computer appears to be all better!  Thanks so much.

Very good.

 
All Clean!
Congratulations, your computer appears clean!  [image unavailable: xsmile.png.pagespeed.ic.CwSpBGGvqN.png]
I no longer see signs of malware on your computer, and feel satisfied that our work here is done. The steps below will remove the tools we have used, and reset any settings changed. I have also provided a list of resources and tools that you may find useful. 
 
My help will always be free. But if you are happy with the help provided, and would like to support my fight against malware and/or buy me a beer, please consider a donation. [external image: YSCcjW7.png.pagespeed.ce.vPjGp_AkW3.png]
 
 

STEP 1
[external image: xAFZxnZc.jpg.pagespeed.ic.8db6OVtjOI.png] DelFix

• Please download DelFix and save the file to your Desktop.
• Double-click DelFix.exe to run the programme.
• Place a checkmark next to the following items:
  • Activate UAC
  • Remove disinfection tools
  • Create registry backup
  • Purge system restore
  • Reset system settings
• Click the Run button.

– This will remove the specialised tools we used to disinfect your system. Any leftover logs, files, folders or tools remaining on your Desktop which were not removed can be deleted manually (right-click the file + delete).
 
— Malwarebytes Anti-Malware will still be present on your computer. I recommend keeping this programme, updating and scanning with it once a week to maintain security on your computer. If you do not wish to keep this programme on your computer, you can uninstall it by pressing the Windows Key [external image: xpdKOQKY.png.pagespeed.ic.tmAgS1-k6q.png] + r on your keyboard at the same time, typing appwiz.cpl, clicking OK and searching for Malwarebytes.
 
======================================================
 
Below I have compiled a list of resources you may find useful. The articles document information on computer security, common infection vectors and how you can stay safe on the Internet.

• Answers to common security questions - Best Practices by quietman7, MVP
• How Malware Spreads - How did I get infected? by quietman7, MVP
• Simple and easy ways to keep your computer safe and secure on the Internet by Lawrence Abrams, MVP
• How to Prevent Malware by miekiemoes, MVP
• How to backup and restore your data using Cobian Backup by YourHighness
• Slow Computer/browser? It May Not Be Malware by quietman7, MVP
   

The following programmes come highly recommended in the security community.

• [external image: xKsUqI5A.png.pagespeed.ic.vn1Hlvqi8h.jpg] AdBlock is a browser add-on that blocks annoying banners, pop-ups and video ads.
• [external image: x7D2ig3K.png.pagespeed.ic.x4TC1AK8OX.jpg] Emsisoft Antimalware (free) acts as an additional on-demand scanner, and can be used in conjunction with your Anti-Virus. 
• [external image: xEG85Vjt.png.pagespeed.ic.3itacBrobj.jpg] Malwarebytes Anti-Exploit (MBAE) is designed to prevent zero-day malware from exploiting vulnerable software.
• [external image: x6YRrgUC.png.pagespeed.ic.HjgFxjvw2Z.jpg] Malwarebytes Anti-Malware Premium (MBAM) incorporates real-time protection and is designed to run alongside your Anti-Virus. 
• [external image: xjv4nhMJ.png.pagespeed.ic.A5YbWn1eDO.png] NoScript is a Firefox add-on that blocks the actions of malicious scripts by using whitelisting and other technology. 
• [external image: 3O8r9Uq.png.pagespeed.ce.0ubSznu3ZV.png] Sandboxie isolates programmes of your choice, preventing files from writing to your HDD unless you approve the file. 
• [external image: DgW1XL2.png.pagespeed.ce.v1OlJl_ZAS.png] Secuina PSI will scan your computer for vulnerable software that is outdated, and automatically find the latest update for you.
• [external image: xj1OLIec.png.pagespeed.ic.k6hhwopU0q.jpg] SpywareBlaster is a form of passive protection, designed to block the actions of malicious websites and tracking cookies.
• [external image: xsHjS79L.png.pagespeed.ic.n4Sk8_GzZn.jpg] Unchecky automatically removes checkmarks for additional software in programme installers, helping you avoid adware and PUPs. 
• [external image: xJEP5iWI.png.pagespeed.ic.4tmM1lM7DQ.png] Web of Trust (WOT) is a browser add-on designed to alert the user before interacting with a potentially malicious website. 
   

Need a second opinion on a file or website? Scan the file/URL before clicking by using one of the following free online scanner services.

• [external image: xnWhGEI3.png.pagespeed.ic.cDN7g2AqT7.png] VirusTotal (File & URL)
• [external image: xMJUfyKX.png.pagespeed.ic.GOObdNZCkZ.png] Jotti's Malware Scan (File)
• [external image: xXeTvs74.png.pagespeed.ic.xjH_srkKQO.jpg] Dr.Web Online Check (URL)
• [external image: x5v676cC.png.pagespeed.ic.Y27IHTRQH_.jpg] Trend Micro Site Safety Center (URL)
• [external image: x2tXp7dz.png.pagespeed.ic.2ZJWcR1tx8.png] Norton Safe Web (URL)

– Please feel free to ask if you have any questions or concerns on computer security or the programmes above.
 
======================================================
 
Please confirm you have no outstanding issues, and are happy with the state of your computer. Once I have confirmation things are in order, we can wrap things up and I will close this thread. 
 
Thank you for using WhatTheTech.
 
Safe Surfing.  [image unavailable: xthumbup.gif.pagespeed.ic.7aXFW0A4z_.png]
Adam (LiquidTension).

Hi Deb, 
 
Do you recognise this Chrome extension? (ForMATsConnverte) 
 
STEP 1
[external image: xlK5Hdb.png] Farbar Recovery Scan Tool (FRST) Script

• Press the Windows Key [external image: pdKOQKY.png] + r on your keyboard at the same time. Type Notepad and click OK.
• Copy the entire contents of the codebox below and paste into the Notepad document.
  

  start
  Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
  AlternateDataStreams: C:\Users\raypahl\Downloads\0riginal_message (1).eml:OECustomProperty
  AlternateDataStreams: C:\Users\raypahl\Downloads\0riginal_message (2).eml:OECustomProperty
  AlternateDataStreams: C:\Users\raypahl\Downloads\0riginal_message (3).eml:OECustomProperty
  AlternateDataStreams: C:\Users\raypahl\Downloads\0riginal_message (4).eml:OECustomProperty
  AlternateDataStreams: C:\Users\raypahl\Downloads\0riginal_message (5).eml:OECustomProperty
  AlternateDataStreams: C:\Users\raypahl\Downloads\0riginal_message (6).eml:OECustomProperty
  AlternateDataStreams: C:\Users\raypahl\Downloads\0riginal_message.eml:OECustomProperty
  CMD: ipconfig /flushdns
  CMD: netsh winsock reset all
  CMD: netsh int ipv4 reset
  CMD: netsh int ipv6 reset
  CMD: bitsadmin /reset /allusers
  EmptyTemp:
  end

• Click File, Save As and type fixlist.txt as the File Name. 
• Important: The file must be saved in the same location as FRST64.exe. 

NOTICE: This script is intended for use on this particular machine. Do not use this script on any other machine; doing so may cause damage to your Operating System.

• Right-Click FRST64.exe and select [external image: AVOiBNU.jpg] Run as administrator to run the programme.
• Click Fix.
• A log (Fixlog.txt) will open on your desktop. Copy the contents of the log and paste in your next reply.
   

STEP 2
[external image: mlEX1wH.png] RogueKiller

• Please download RogueKiller (x64) and save the file to your Desktop.
• Close any running programmes.
• Right-Click RogueKiller.exe and select [external image: AVOiBNU.jpg] Run as administrator to run the programme.
• Allow the Prescan to complete. Upon completion, a window will open. Click Accept.
• A browser window may open. Close the browser window.
• Click [external image: jpgUwzp.png]. Upon completion, click [external image: phPvmc6.png].
• Close the programme. Do not fix anything!
• A log (RKreport.txt) will be open. Copy the contents of the log and paste in your next reply.

Note: If RogueKiller is unable to run, please retry. If you find after several attempts the programme will still not run, please rename RogueKiller.exe towinlogon.exe and try again.
 
======================================================
 
STEP 3
[external image: pfNZP4A.png] Logs
In your next reply please include the following logs. Please be sure to copy and paste the requested logs, as well as provide information on any questions I may have asked.

• Fixlog.txt
• RKreport.txt

Hi Deb, 

How are you getting on? Do you require additional time to complete my instructions?