PC Cleaner and More [Solved]

A friend of mine has a computer that started acting real slow and a program indicated that it had several problems (PC Cleaner) I manually removed that, but I am sure there is a bunch of other stuff going on. I couldn't get the link to FRST to work so I downloaded it elsewhere, so I am not sure if it is the correct version. 

Thanks for your time in looking at this.

Hello poporacer and welcome to the WTT forum.

My name is Satchfan and I would be glad to help you with your computer problem.

Please read the following guidelines which will help to make cleaning your machine easier:

• please follow all instructions in the order posted
• please continue to review my answers until I tell you your machine appears to be clear. Absence of symptoms does not mean that everything is clear
• all logs/reports, etc. must be posted in Notepad. Please ensure that word wrap is unchecked. In Notepad click Format, uncheck Word wrap if it is checked
• if you don't understand something, please don't hesitate to ask for clarification before proceeding
• the fixes are specific to your problem and should only be used for this issue on this machine.
• please reply within 3 days. If you do not reply within this period I will post a reminder but topics with no reply in 4 days will be closed!

IMPORTANT:

Please DO NOT install/uninstall any programs unless asked to.
Please DO NOT run any scans other than those requested

===================================================

Uninstall programs

Please uninstall these programs:

360 Total Security
Ask Toolbar
Consumer Input
McAfee Security Scan Plus
MyPC Backup
PDF Reader Packages
UpdateAdmin

• click Start, Control Panel, Programs and Features
• click on 360 Total Security and then Uninstall
• repeat this for the other programs listed above.

 If you are prompted for an administrator password or confirmation, type the password or provide confirmation.

================================================

Note: Please run these in the order given in the instructions.

===================================================

Download and run AdwCleaner

Download AdwCleaner from here and save it to your desktop.

• run AdwCleaner
• when it has finished, select Clean
• if it asks to reboot, allow the reboot
• on reboot a log will be produced; please attach the content of the log to your next reply.

===================================================

Download and run Junkware Removal Tool

[external image: thisisujrt.gif] Please download Junkware Removal Tool to your desktop.

• shut down your protection software now to avoid potential conflicts.
• run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator"
• the tool will open and start scanning your system
• please be patient as this can take a while to complete depending on your system's specifications
• on completion, a log (JRT.txt) is saved to your desktop and will automatically open
• post the contents of JRT.txt into your next message.

When you’ve done the above, please run FRST again and send the new log

Logs to include with next post:

AdwCleaner log
JRT.txt
Frst.txt

Thanks

Satchfan

Yes it is running better. I don't know how it normally ran, but it is way better than when I got it.

I ran accross a slight problem…Probably due to the version of windows this computer has(Vista). The System Properties does not have "Protection Settings" or a Configure so I couldn't do the Restore system settings and previous versions of files and then click OK twice. I followed the other instructions and here are the results:

Fix result of Farbar Recovery Scan Tool (x86) Version: 13-06-2015
Ran by [removed] at 2015-06-13 09:41:11 Run:1
Running from C:\Users\[removed]\Desktop
[removed] Boot Mode: Normal

==============================================

fixlist content:
*****************

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKU\S-1-5-21-3035152371-51418450-4088448234-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-3035152371-51418450-4088448234-1000\…\MountPoints2: {1128326d-8a4e-11dd-81d3-806e6f6e6963} - E:\Setup.exe
SearchScopes: HKU\.DEFAULT -> {2381E4B7-5C04-459E-9D46-2F9AC1608B66} URL = http://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=ysp
SearchScopes: HKU\.DEFAULT -> {443789B7-F39C-4b5c-9287-DA72D38F4FE6} URL = http://search.aol.com/aolcom/search?query={searchTerms}&invocationType=tb50ie7
SearchScopes: HKU\.DEFAULT -> {AC7EE147-3932-4E15-A3CC-2F70D92337FC} URL = http://search.aol.com/aolcom/search?query={searchTerms}&invocationType=msie70a
Toolbar: HKLM - AOL Toolbar - {ba00b7b1-0351-477a-b948-23e3ee5a73d4} - C:\Program Files\AOL Toolbar\aoltb.dll No File
Toolbar: HKU\.DEFAULT -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKU\S-1-5-21-3035152371-51418450-4088448234-1000 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKU\S-1-5-21-3035152371-51418450-4088448234-1000 -> AOL Toolbar - {BA00B7B1-0351-477A-B948-23E3EE5A73D4} - C:\Program Files\AOL Toolbar\aoltb.dll No File
FF SearchEngineOrder.1: Ask Search
FF Extension: No Name - C:\Users\Debbie\AppData\Roaming\Mozilla\Firefox\Profiles\wif1l4te.default\extensions\[removed] [not found]
FF Extension: No Name - C:\Program Files\Consumer Input\Firefox\ciff-3.2.0-12099.xpi [not found]
FF Extension: No Name - C:\Program Files\360\Total Security\safemon\webprotection_firefox [not found]
FF Extension: No Name - C:\Program Files\Consumer Input\Firefox\ciff-3.2.0-12099.xpi [not found]
S1 BAPIDRV; system32\DRIVERS\BAPIDRV.sys [X]
2015-06-11 20:16 - 2015-04-11 01:13 - 00000000 ____D C:\Program Files\360
2015-06-11 20:16 - 2012-12-20 00:01 - 00000380 _____ C:\Windows\Tasks\FreeFileViewerUpdateChecker.job
2015-06-09 22:23 - 2015-04-11 01:19 - 00000000 __SHD C:\ProgramData\360Quarant
2015-06-09 22:23 - 2015-04-11 01:19 - 00000000 __SHD C:\$360Section
Task: {8A0C5E62-A6E8-4C64-9BCB-C8312BFE77D3} - System32\Tasks\FreeFileViewerUpdateChecker => C:\Program Files\FreeFileViewer\FFVCheckForUpdates.exe <==== ATTENTION
Task: {E7C47B2D-12F3-4045-AA09-0F250606A5EA} - \ProPCCleaner_Start No Task File <==== ATTENTION
Task: C:\Windows\Tasks\FreeFileViewerUpdateChecker.job => C:\Program Files\FreeFileViewer\FFVCheckForUpdates.exe <==== ATTENTION
FirewallRules: [{3910F279-41DF-47A4-A93A-FB178FB6D79F}] => (Allow) C:\Program Files\FreeFileViewer\FFVCheckForUpdates.exe
FirewallRules: [{10211F78-2D66-4433-9BF8-F4B3849D701B}] => (Allow) C:\Windows\System32\dmwu.exe
FirewallRules: [{DE9C2700-B0FA-45D1-8923-93DDE5560C4F}] => (Allow) C:\Windows\System32\dmwu.exe
FirewallRules: [{7A3390D6-ACE7-40EF-98DC-E6EF8AC7A074}] => (Allow) C:\Windows\System32\ARFC\wrtc.exe
FirewallRules: [{1E5B4321-4CD8-4457-BE37-BC626CD258B8}] => (Allow) C:\Windows\System32\ARFC\wrtc.exe
FirewallRules: [{0093BB0A-732B-4506-92B5-CB6BFEBB27B0}] => (Allow) C:\Program Files\360\Total Security\safemon\QHSafeTray.exe
FirewallRules: [{A3E7C8A1-0B2C-451F-9A8E-ABA05791931F}] => (Allow) C:\Program Files\360\Total Security\safemon\QHSafeTray.exe
FirewallRules: [{AFB10E07-12D5-4CB0-8086-BE6AAEAC754E}] => (Allow) C:\Program Files\360\Total Security\LiveUpdate360.exe
FirewallRules: [{3FCF58E6-6BD1-4D7D-90CC-1E054669A0B2}] => (Allow) C:\Program Files\360\Total Security\LiveUpdate360.exe
FirewallRules: [{F567F335-BA28-42D4-B4C5-0A103653F01F}] => (Allow) C:\Users\Debbie\AppData\Local\Temp\~os1A44.tmp\pmropn.exe
C:\Program Files\360
C:\Windows\Tasks\FreeFileViewer
C:\ProgramData\360Quarant
C:\$360Section
C:\Windows\Tasks\FreeFileViewerUpdateChecker.job
C:\Program Files\FreeFileViewer
EmptyTemp:
*****************

"HKLM\SOFTWARE\Policies\Google" => key removed successfully.
"HKU\S-1-5-21-3035152371-51418450-4088448234-1000\SOFTWARE\Policies\Microsoft\Internet Explorer" => key removed successfully.
"HKU\S-1-5-21-3035152371-51418450-4088448234-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{1128326d-8a4e-11dd-81d3-806e6f6e6963}" => key removed successfully.
HKCR\CLSID\{1128326d-8a4e-11dd-81d3-806e6f6e6963} => key not found.
"HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2381E4B7-5C04-459E-9D46-2F9AC1608B66}" => key removed successfully.
HKCR\CLSID\{2381E4B7-5C04-459E-9D46-2F9AC1608B66} => key not found.
"HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{443789B7-F39C-4b5c-9287-DA72D38F4FE6}" => key removed successfully.
HKCR\CLSID\{443789B7-F39C-4b5c-9287-DA72D38F4FE6} => key not found.
"HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AC7EE147-3932-4E15-A3CC-2F70D92337FC}" => key removed successfully.
HKCR\CLSID\{AC7EE147-3932-4E15-A3CC-2F70D92337FC} => key not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{ba00b7b1-0351-477a-b948-23e3ee5a73d4} => value removed successfully.
"HKCR\CLSID\{ba00b7b1-0351-477a-b948-23e3ee5a73d4}" => key removed successfully.
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => value removed successfully.
HKCR\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => key not found.
HKU\S-1-5-21-3035152371-51418450-4088448234-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => value removed successfully.
HKCR\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => key not found.
HKU\S-1-5-21-3035152371-51418450-4088448234-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{BA00B7B1-0351-477A-B948-23E3EE5A73D4} => value removed successfully.
HKCR\CLSID\{BA00B7B1-0351-477A-B948-23E3EE5A73D4} => key not found.
Firefox SearchEngineOrder.1 removed successfully.
C:\Users\Debbie\AppData\Roaming\Mozilla\Firefox\Profiles\wif1l4te.default\extensions\[removed] => not found.
C:\Program Files\Consumer Input\Firefox\ciff-3.2.0-12099.xpi => not found.
C:\Program Files\360\Total Security\safemon\webprotection_firefox => not found.
C:\Program Files\Consumer Input\Firefox\ciff-3.2.0-12099.xpi => not found.
BAPIDRV => Service removed successfully.
C:\Program Files\360 => moved successfully.
C:\Windows\Tasks\FreeFileViewerUpdateChecker.job => moved successfully.
C:\ProgramData\360Quarant => moved successfully.
C:\$360Section => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{8A0C5E62-A6E8-4C64-9BCB-C8312BFE77D3}" => key removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8A0C5E62-A6E8-4C64-9BCB-C8312BFE77D3}" => key removed successfully.
C:\Windows\System32\Tasks\FreeFileViewerUpdateChecker => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\FreeFileViewerUpdateChecker" => key removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{E7C47B2D-12F3-4045-AA09-0F250606A5EA}" => key removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E7C47B2D-12F3-4045-AA09-0F250606A5EA}" => key removed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ProPCCleaner_Start" => key removed successfully.
C:\Windows\Tasks\FreeFileViewerUpdateChecker.job not found.
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{3910F279-41DF-47A4-A93A-FB178FB6D79F} => value removed successfully.
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{10211F78-2D66-4433-9BF8-F4B3849D701B} => value removed successfully.
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{DE9C2700-B0FA-45D1-8923-93DDE5560C4F} => value removed successfully.
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{7A3390D6-ACE7-40EF-98DC-E6EF8AC7A074} => value removed successfully.
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{1E5B4321-4CD8-4457-BE37-BC626CD258B8} => value removed successfully.
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{0093BB0A-732B-4506-92B5-CB6BFEBB27B0} => value removed successfully.
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{A3E7C8A1-0B2C-451F-9A8E-ABA05791931F} => value removed successfully.
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{AFB10E07-12D5-4CB0-8086-BE6AAEAC754E} => value removed successfully.
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{3FCF58E6-6BD1-4D7D-90CC-1E054669A0B2} => value removed successfully.
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{F567F335-BA28-42D4-B4C5-0A103653F01F} => value removed successfully.
"C:\Program Files\360" => File/Folder not found.
"C:\Windows\Tasks\FreeFileViewer" => File/Folder not found.
"C:\ProgramData\360Quarant" => File/Folder not found.
"C:\$360Section" => File/Folder not found.
"C:\Windows\Tasks\FreeFileViewerUpdateChecker.job" => File/Folder not found.
"C:\Program Files\FreeFileViewer" => File/Folder not found.
EmptyTemp: => 3.2 GB temporary data Removed.

The system needed a reboot.

==== End of Fixlog 10:26:41 ====

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 6/13/2015
Scan Time: 10:45:53 AM
Logfile:
Administrator: Yes

Version: 2.01.6.1022
Malware Database: v2015.06.13.04
Rootkit Database: v2015.06.02.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows Vista Service Pack 2
CPU: x86
File System: NTFS
User: Debbie

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 333841
Time Elapsed: 35 min, 9 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 12
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\CLSID\{65c72339-fb1d-4155-84e1-9afacee02d6f}, Quarantined, [3afe7248f3976fc7f8c78a1e877ce020],
PUP.Optional.Mindspark.A, HKU\S-1-5-21-3035152371-51418450-4088448234-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{65C72339-FB1D-4155-84E1-9AFACEE02D6F}, Quarantined, [3afe7248f3976fc7f8c78a1e877ce020],
PUP.Optional.Mindspark.A, HKU\S-1-5-21-3035152371-51418450-4088448234-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{65C72339-FB1D-4155-84E1-9AFACEE02D6F}, Quarantined, [3afe7248f3976fc7f8c78a1e877ce020],
PUP.Optional.ConsumerInput.A, HKU\S-1-5-18\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{B49699FC-1665-4414-A1CB-C4A2A4A13EEC}, Quarantined, [e45400ba42488bab6099a7ca16ed9868],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{131A1F72-5C50-43CF-BA3E-3AC75DF1188B}, Quarantined, [74c47d3deaa0f73fd398c5c16e97c937],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{21111111-1111-1111-1111-110111981166}, Quarantined, [17217248a0ea74c25795e3a4d03517e9],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C8C9C24E-7C07-49A7-8246-3A33AEDB5E65}, Quarantined, [ce6ab00a335702344c1ff5912bda7d83],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{1146AC44-2F03-4431-B4FD-889BC837521F}{22134214}, Quarantined, [41f7f1c9bccec472f2318900f0154eb2],
PUP.Optional.SuperOptimizer.C, HKU\S-1-5-18\SOFTWARE\APPDATALOW\{1146AC44-2F03-4431-B4FD-889BC837521F}, Quarantined, [cc6c596118722016d40c2468030232ce],
PUP.Optional.ProPCCleaner.A, HKU\S-1-5-21-3035152371-51418450-4088448234-1000\SOFTWARE\ProPCCleanerLanguage, Quarantined, [f444f7c3404a5bdb9a5e5432a065bd43],
PUP.Optional.CouponAmazing.A, HKU\S-1-5-21-3035152371-51418450-4088448234-1000\SOFTWARE\APPDATALOW\SOFTWARE\couponamazing, Quarantined, [fc3c5c5e0b7f1620c62a730750b5ce32],
PUP.Optional.ProductSetup.A, HKU\S-1-5-21-3035152371-51418450-4088448234-1000\SOFTWARE\PRODUCTSETUP, Quarantined, [c375c9f1b2d8e0568d08a5e7fb0a6a96],

Registry Values: 4
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{131a1f72-5c50-43cf-ba3e-3ac75df1188b}|AppPath, C:\Program Files\CouponXplorer_5z\bar\1.bin, Quarantined, [74c47d3deaa0f73fd398c5c16e97c937]
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{21111111-1111-1111-1111-110111981166}|AppName, Deal Vault-bg.exe, Quarantined, [17217248a0ea74c25795e3a4d03517e9]
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{c8c9c24e-7c07-49a7-8246-3a33aedb5e65}|AppPath, C:\Program Files\CouponXplorer_5z\bar\1.bin, Quarantined, [ce6ab00a335702344c1ff5912bda7d83]
PUP.Optional.ProductSetup.A, HKU\S-1-5-21-3035152371-51418450-4088448234-1000\SOFTWARE\PRODUCTSETUP|tb, 1Y1L1M1G1I1Q, Quarantined, [c375c9f1b2d8e0568d08a5e7fb0a6a96]

Registry Data: 0
(No malicious items detected)

Folders: 1
PUP.Optional.MindSpark.A, C:\Users\Debbie\AppData\Roaming\Mozilla\Firefox\Profiles\wif1l4te.default\CouponXplorer_5z, Quarantined, [84b4f5c59eec6ccaeb7c5f9047bce51b],

Files: 3
PUP.Optional.APNToolBar.A, C:\Users\Debbie\Documents\APNSetup.exe, Quarantined, [e4544b6f5d2d78bea98e1b4abd457f81],
PUP.Optional.MindSpark.A, C:\Users\Debbie\AppData\Roaming\Mozilla\Firefox\Profiles\wif1l4te.default\CouponXplorer_5z\761596AE-596D-41F2-B885-F8C5EEECEDC0.sqlite, Quarantined, [84b4f5c59eec6ccaeb7c5f9047bce51b],
PUP.Optional.WinYahoo, C:\Users\Debbie\AppData\LocalLow\Microsoft\Internet Explorer\Services\WinYahoo.ico, Quarantined, [ae8a17a3751576c00ab6dea9bb4a946c],

Physical Sectors: 0
(No malicious items detected)

(end)

Your computer appears to be clean.

Now that you’re free from malware, as long as your computer seems to be running well, please follow these simple steps to tidy up you computer and decrease the likelihood of getting infected again:


Uninstall AdwCleaner

• double click on adwcleaner.exe to run the tool
• click on Uninstall
• confirm with Yes.

===================================================

Download & run Delfix

• download Delfix from here to remove many of the tools we've used during the cleaning process.
• ensure “Remove disinfection tools” is checked.

Also place a checkmark next to:

o    Create registry backup
o    Purge system restore

• click the Run button.
   

You can delete all other logs and programs we’ve used that are on your desktop. Just click on them and press Delete.

===================================================

Update installed programs

Your versions of Flash Player, Java and Adobe Reader are out-of-date and need to be removed and updated.

Having the latest updates and removing old versions ensures there are no security vulnerabilities in your system.

To remove them:

• click Start, Control Panel, Programs and Features.
• click on each of these programs, one at a time, name and then on Uninstall:

Java 7 Update 67
Adobe Flash Player 17.0.0.188
Adobe Reader 8

 

You can also uninstall Eset in the same way.

If you are prompted for an administrator password or confirmation, type the password or provide confirmation.

Go here and download the latest version of Flash Player.

Note: Before you hit the Download now button, uncheck the Chrome offer if it’s not something you want.

NEXT

Visit Adobe and download the latest version of Acrobat Reader.

NEXT

Install the latest version of Java:

Java

NOTE – when you install Java, before clicking on Install, be sure to Uncheck “Install the Ask Toolbar and make Ask my default search provider”

🖼Click to load external image (Java.gif)

Even though I just had you get the latest version of Java, there is a vulnerability with regards to Java and web browsers. Therefore, we recommend to disable java in web browsers.

More information can be found here.

===================================================

Recommended programs

SpywareBlaster. SpywareBlaster protects against bad ActiveX, it immunizes your PC against them. It blocks over 11,000 bad sites and uses no resources of your computer.

======================

Update and run Malwarebytes. This really is an excellent program that you should also update and run on a regular basis, probably weekly.

======================

It’s important to keep programs up to date so that malware doesn't exploit any old security flaws.

FileHippo Update Checker is an extremely helpful program that will tell you which of your programs need to be updated.

======================

Download WOT

Web of Trust, warns you about risky websites that try to scam visitors, deliver malware or send spam. Protect your computer against online threats by using WOT as your front-line layer of protection when browsing or searching in unfamiliar territory. WOT's color-coded icons show you ratings for 21 million websites, helping you avoid the dangerous sites:

green if it's safe
yellow for caution
red for unsafe

You can download the WOT add-on for Firefox, Chrome, Internet Explorer, Opera, and Safari browsers. It does not slow down your browsing experience, it is easy to use and free. Just click “Download” and you are ready to go!

======================

Unchecky

Be careful when downloading free software. Many free programs come bundled with adware, many of which cause redirects/popups and verge on being malware. There is a program that automatically “unckecks” the boxes you may not notice when downloading programs.

Download and install Unchecky .

======================

Download and install CryptoPrevent

Crypto Ransomware Warning

There are particularly nasty “Ransomware” infections out there at the moment that encrypt your files and the only way possible to get them “de-crypted” is to pay a ransome. You can read more about this here.

• download CryptoPrevent
• save the file to your Desktop and then open the program by clicking Run when prompted from your browser or by going to the desktop where the file was saved and double-clicking.
• accept all the defaults during the install. The last screen of the install has a checkmark in "Launch CryptoPrevent". This will launch the program once you click Finish
• you will get a prompt asking if you purchased a Product Key for Automatic Updates. Click No
• you will then be prompted to learn more about automatic updates or if you want to purchase a key. This is up to you but you don't have to
• click OK to continue and select your protection level. Go ahead and click OK.
• click the Apply button to set Default protection
• you may get a message stating that Windows Sidebar and Desktop Gadgets are a major security vulnerability and asking you if you want to disable them. If you don't use these features, answer Yes.

You are now protected.

Note: The free version doesn't provide automatic updates but should be updated often, (at least weekly), as this infection has serious consequences. To update it manually, open the program, select the “Updates” menu then select Check for Updates to see if there are any available.

===================================================

I also recommend that you read the following:

How to prevent malware by miekiemoes

Help! My computer is slow! by miekiemoes

Simple and easy ways to keep your computer safe and secure on the Internet  by Lawrence Abrams


I will keep this open for 24 hours in case you have any problems, after which I’ll close the topic.

Safe computing

Satchfan