disk-err-windows-error-failure1.warnning8541.com (has infected my brow

Well done locating and posting the log.

How is your computer now?

Thanks satchfan.

Well, I have checked both chrome and firefox and there are still a few problems. There seem to be a lot of pop-ups, plus sometimes you get new hyperlinks appearing on the page. Often, when you open one new tab, another one opens as well, trying to sell you something. 

The pop-up that I got when I first turned the laptop on (see first post) seems to not happen anymore, which is good.

I think maybe Chrome and Firefox need to be uninstalled/reinstalled. Let’s go with Chrome first and see how it goes.

Uninstall/Reinstall Google Chrome

First save all your bookmarks/favourites.

• open Chrome, click on the 3 bars in the top right hand corner, select Bookmarks and then Bookmarks Manager
• click on Organise and then select Export Bookmarks to HTML file, then choose Desktop to save it
• again, click on the three bars in the top right hand corner and select Settings
• in the list of Settings under “Sign in” click on Disconnect your Google Account
• in the text of the next window click on “Google Dashboard” then, at the “Chrome sync” screen, click on Stop and Clear at the bottom
• a box will open and ask for confirmation, click on OK (wait for this to complete before doing the next step)
• when confirmation appears close that page and then click on Disconnect account
• shut Google Chrome, click on Start > Control Panel > Programs and Features (or Add/Remove Programs in XP) and uninstall Google Chrome. Select Everything for removal if asked.

Reboot the system and then reinstall Google Chrome from here

Repeat the process to reinstate your bookmarks by going to Bookmarks > Bookmarks Manager > Organise and select Import Bookmarks.

Let me know if there is any change.

Satchfan
 

Yes, Satchfan. Chrome seems fine now. Have checked Internet Explorer and that seems fine but there's still a problem with Firefox. Could you possibly give me instructions to remove and then reinstall Firefox? Many thanks.

I think the best thing is to uninstall and reinstall Firefox; this will clear out all user data and plugins, so we are starting with a fresh install of Firefox,

You can backup your bookmarks if you need to but you will need to install any addins again.

Also note down any passwords etc.

Download a new copy of Firefox from here and save it to your desktop.


How to backup your bookmarks

• open Firefox.
• click the “Bookmarks” menu
• click select Show All Bookmarks
• in the “Library” window, click the Import and Backup button and then select Backup
• in the “Bookmarks backup filename” window that opens, choose a location to save the file, which is named Bookmarks-"date".json by default
• once the backup has run, close all windows and check location for backup file.

Remove Firefox

• click on Start, Run
• in the open text entry box please copy/paste appwiz.cpl Then click Enter.
• press the Remove or Change/Remove…button to uninstall Firefox.

Delete folders in red

C:\Program Files\Mozilla Firefox 37.0.1
D:\Documents and Settings\Administrator\Application Data\Mozilla

Reboot

Install the new copy of Firefox that you saved to the desktop.

Restore Bookmarks

• open Firefox
• click the “Bookmarks” menu
• click Show All Bookmarks
• in the “Library” window, click the “Import and Backup” button and then select Restore
• in the “Bookmarks backup filename” window that opens, choose the location you saved the backup file to

When the restore has taken place, close all windows.

Open Firefox again and let me know how it is working now.

Satchfan
 

All done. Computer seems to be working fine. Many, many thanks Satchfan. You have been a huge help.

Here's hoping Liverpool beat Villa in the semi-final.

Here's hoping Liverpool beat Villa in the semi-final.

No problem!!!!!

I'll send instructions to tidy up in the morning as I have another couple to answer tonight and it's getting late.

Good morning!

Before we tidy up I'd like a couple more scans,  one of which is an online scan due to the amount of rubbish that Mbam found.


Run ESET Online Scan

Note: This may take a long time so please be patient.

IMPORTANT Please make sure you uncheck the box next to Remove found threats. Eset will detect anything that looks even slightly suspicious, which could include legitimate program files. If you do not uncheck the box, Eset will automatically remove all suspicious files which could leave some of your software inoperable.

Note: You can use Internet Explorer, FireFox or  Chrome for this scan. You will however need to disable your current installed Anti-Virus, how to do so can be read here.

Hold down Control and click on the following link to open ESET OnlineScan in a new window.

ESET OnlineScan

• click the Eset online Scanner button
• for alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
  

  
  o    click on esetinstaller.exe to download the ESET Smart Installer. Save it to your desktop.
  o    double click on the Eset installer icon on your desktop.
   

• check Yes, I accept the Terms of Use
• click the Start button
• accept any security warnings from your browser
• check Enable detection of potentially unwanted applications
• click Advanced settings and select the following:
  

  
  o    scan archives
  o    scan for potentially unsafe applications
  o    enable Anti-Stealth technology

  
  Note: Do not check Remove found threats
   

• ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
• when the scan completes, push List of found threats
• push Export to Text file and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
  

  
  Note - if ESET doesn't find any threats, no report will be created.
   

• push the back button.
• push Finish

When the scan is complete:

If no threats were found:

o    put a checkmark in "Uninstall application on close"
o    close program
o    report to me that nothing was found
 

If threats were found:

o    click on "list of threats found"
o    click on "export to text file" and save it as ESET results and save to the desktop
o    Click on back
o    put a checkmark in "Uninstall application on close"
o    click on finish
o    close program
o    copy and paste the report here.
 

===================================================

Run Security Check

Download Security Check by screen317 from here or here.

• save it to your Desktop.
• double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
• a Notepad document should open automatically called checkup.txt; please post the contents of that document.

NOTE: If you get the following message: UNSUPPORTED OPERATING SYSTEM! ABORTED!, try rebooting the system and then run SecurityCheck again.

Satchfan

Sorry, been away for the weekend. Currently doing the ESET Online Scanner but, like you said, it's taking time so I'm going to leave it on overnight and hopefully post the report tomorrow.

Here is the ESET scan report. Will do the Security Check later.

Those results show what has already been quarantined: whatever is in these folders can't cause any harm and will be removed when we tidy up.

I'll wait for the Security Check.

Satchfan

Everything looking perfect.
 

 

Here's hoping Liverpool beat Villa in the semi-final.

Did that and Newcastle tonight.

I'll send details of how to tidy up the tools we've used in the morning unless there are any outstanding problems.

Satchfan

Thanks Satchfan. Great result for Liverpool tonight, you're right.

Well done percylovely, your computer appears to be clean.


Now that you’re free from malware, as long as your computer seems to be running well, please follow these simple steps to tidy up you computer and decrease the likelihood of getting infected again:

Uninstall AdwCleaner

• double click on adwcleaner.exe to run the tool
• click on Uninstall
• confirm with Yes.

===================================================

Download & run Delfix

• download Delfix from here to remove many of the tools we've used during the cleaning process.
• ensure “Remove disinfection tools” is checked.

Also place a checkmark next to:

o    Create registry backup
o    Purge system restore

• click the Run button.

You can delete all other logs and programs we’ve used that are on your desktop. Just click on them and press Delete.

===================================================

Recommended programs

SpywareBlaster. SpywareBlaster protects against bad ActiveX, it immunizes your PC against them. It blocks over 11,000 bad sites and uses no resources of your computer.

======================

Update and run Malwarebytes. This really is an excellent program that you should also update and run on a regular basis, probably weekly.

======================

Download WOT

Web of Trust, warns you about risky websites that try to scam visitors, deliver malware or send spam. Protect your computer against online threats by using WOT as your front-line layer of protection when browsing or searching in unfamiliar territory. WOT's color-coded icons show you ratings for 21 million websites, helping you avoid the dangerous sites:

green if it's safe
yellow for caution
red for unsafe
 

You can download the WOT add-on for Firefox, Chrome, Internet Explorer, Opera, and Safari browsers. It does not slow down your browsing experience, it is easy to use and free. Just click “Download” and you are ready to go!

======================

MVPS Hosts file replaces your current HOSTS file with one containing well known ad sites and other bad sites. Basically, this prevents your computer from connecting to those sites by redirecting them to 127.0.0.1 which is your local computer, meaning it will be difficult to infect yourself in the future.

A couple of links with information here and here which can answer any questions you might have about installing/using it.

======================

Unchecky

Be careful when downloading free software. Many free programs come bundled with adware, many of which cause redirects/popups and verge on being malware. There is a program that automatically “unckecks” the boxes you may not notice when downloading programs.

Download and install Unchecky .

======================

Download and install CryptoPrevent

Crypto Ransomware Warning

There are particularly nasty “Ransomware” infections out there at the moment that encrypt your files and the only way possible to get them “de-crypted” is to pay a ransome. You can read more about this here.

• download CryptoPrevent
• save the file to your Desktop and then open the program by clicking Run when prompted from your browser or by going to the desktop where the file was saved and double-clicking.
• accept all the defaults during the install. The last screen of the install has a checkmark in "Launch CryptoPrevent". This will launch the program once you click Finish
• you will get a prompt asking if you purchased a Product Key for Automatic Updates. Click No
• you will then be prompted to learn more about automatic updates or if you want to purchase a key. This is up to you but you don't have to
• click OK to continue and select your protection level. Go ahead and click OK.
• click the Apply button to set Default protection
• you may get a message stating that Windows Sidebar and Desktop Gadgets are a major security vulnerability and asking you if you want to disable them. If you don't use these features, answer Yes.

You are now protected.

Note: The free version doesn't provide automatic updates but should be updated often, (at least weekly), as this infection has serious consequences. To update it manually, open the program, select the “Updates” menu then select Check for Updates to see if there are any available.

===================================================

I also recommend that you read the following:

How to prevent malware by miekiemoes

Help! My computer is slow! by miekiemoes

Simple and easy ways to keep your computer safe and secure on the Internet  by Lawrence Abrams

Keeping your kids safer on the PC.


I will keep this open for 24 hours in case you have any problems, after which I’ll close the topic.

Safe computing

Satchfan