Having some trouble.

So as you've read from the title I'm having a bit of trouble with my laptop. While downloading an art program (Paint Tool Sai if this info is necessary) I may have clicked a little too fast through the ads and installed something that I think is harming my computer. First things started randomly popping up on the screen, I didn't think much of it until it started to get more frequent. In a  bit of a panic, I started deleting things such as the art tool and the application I downloaded by accident. I thought it would have stopped it but some things still pop up. So, I went into the task manager to see what was running that shouldn't have been. I saw that there was an application that was running that was in a completely different language. When I went to uninstall it the program didn't even show up. I then went to the location of the program to delete it, but when I tried it said I needed admin approval. This confused me even more because I was signed in as the Admin. I don't really want to mess with it any further in fear of messing my computer up.

Hello ComputerNewb!

Welcome to What the Tech.
I am Marie Curie and will gladly help you with any malware-related problems.

I am currently in training at WhatTheTech and every post of mine will be approved by a teacher. I will return as soon as possible with instructions. Please familiarize yourself with the following ground rules in the meanwhile.

• Read my instructions thoroughly, carry out each step in the given order.
• Do not make any changes to your system, or run any tools other than those I provided. Do not delete, fix, uninstall, or install anything unless I tell you to.
• If you are unsure about anything or if you encounter any problems, please stop and inform me about it.
• Stick with me until I tell you that your computer is clean. Absence of symptoms does not mean that your computer is free of malware.
• Back up important files before we start.

Please run the following diagnostic scans so I can ascertain the state of your computer.
 

STEP 1
[external image: xlK5Hdb.png] Farbar Recovery Scan Tool (FRST) Scan

• Please download Farbar Recovery Scan Tool (x32) or Farbar Recovery Scan Tool (x64) and save the file to your Desktop.
• Note: Download and run the version compatible with your system (32 or 64-bit). Download both if you're unsure; only one will run.
• Right-Click FRST.exe or FRST64.exe and select [external image: AVOiBNU.jpg] Run as administrator to run the programme.
• Click Yes to the disclaimer.
• Ensure the Addition.txt box is checked.
• Click the Scan button and let the programme run.
• Upon completion, click OK, then OK on the Addition.txt pop up screen.
• Two logs (FRST.txt & Addition.txt) will now be open on your Desktop. Copy the contents of both logs and paste in your next reply.

STEP 2
[external image: aA7bkRO.png] aswMBR

• Please download aswMBR and save the file to your Desktop. 
• Temporarily disable your anti-virus software. For instructions, please refer to the following link.
• Right-Click aswMBR.exe and select [external image: xAVOiBNU.jpg.pagespeed.ic.H5HC6LkiJX.jpg] Run as administrator to run the programme.
• Click Yes when prompted to download avast! virus definitions. Wait until AVAST engine defs: ### appears. 
• If you are prompted to enable the use of "Virtualization Technology", click Yes.
• Click the AV Scan: drop down box and click C:\.
• Click Scan. 
• Upon completion, you will see Scan finished successfully. Click Save log. Save the log to your Desktop. 
• Re-enable your anti-virus software.
• Copy the contents of the log and paste in your next reply.

Note: Do NOT click Fix or FixMBR.
Note: A file (MBR.dat) will be created on your Desktop. Do NOT click or delete it.
 
======================================================
 
STEP 3
[external image: pfNZP4A.png] Logs
In your next reply please include the following logs.

• FRST.txt
• Addition.txt
• aswMBR log

My computer wont allow me to submit the logs.

What exactly happens? Are you just not able to upload files or can't you create any logs?

📎Addition.txt

📎FRST.txt

📎aswMBR.txt

Sorry I didn't try uploading the files

STEP 1
[external image: xlK5Hdb.png] Farbar Recovery Scan Tool (FRST) Script

• Download 📎fixlist.txt and save it to your desktop.
• Important: The file must be saved in the same location as FRST64.exe. 

NOTICE: This script is intended for use on this particular machine. Do not use this script on any other machine; doing so may cause damage to your Operating System.

• Right-Click FRST64.exe and select [external image: AVOiBNU.jpg] Run as administrator to run the programme.
• Click Fix.
• A log (Fixlog.txt) will open on your desktop. Attach the log in your next reply.

📎Fixlog.txt

[external image: goGMWSt.gif]Multiple Anti-Virus Software Installed
——————————
 
It is inadvisable to have more than one Anti-Virus installed on your computer at the same time. Doing so may:

• Cause conflicts, negatively impacting the effectiveness of each Anti-Virus installed. 
• Trigger false-positives.
• Trigger false-negatives, where neither programme detects malware. 
• Cause system instability/performance issues. Your system may lock up or slow down due to both software attempting to access the same file at the same time. 

Please remove all but one Anti-Virus from your computer.

• Press the Windows Key [external image: pdKOQKY.png] + r on your keyboard at the same time.
• Type appwiz.cpl and click OK.
• Search for and uninstall all but one of the programmes listed below by right-clicking and clicking Uninstall.
  • McAfee
  • 电脑管家系统防护
• ​Follow the prompts, and reboot your computer once uninstalled.

Question:
You have a lot of games by WildTangent Games, which came possibly preinstalled. The privacy policy of WildTangent Games shows that you agree to advertisments (by WildTangent and third parties) and brand studies. You also allow WildTangent Games to collect certain personal information.
Do you want to keep these games?

In your next reply please tell me which AV you removed, if uninstallation was successful and whether you want to keep WildTangent Games.

I tried to uninstall the 电脑管家系统防护 Av but it wouldn't allow me and I don't want to keep the WildTangent games.

STEP 1
[external image: 6JO0hXH.png] Revo Uninstaller

• Please download and install Revo Uninstaller.
• Double-Click Revo Uninstaller to run the programme. 
• From the list of programmes, locate the following, or anything similar and carry out the steps below one at a time. (Note: It could be that not all of them are listed)
  • Flashbeat
  • FinanceAlert
  • Wildtangent Games
  • 电脑管家系统防护
• ​Double-Click the programme. 
• When prompted if you want to uninstall click Yes.
• Ensure the Moderate option is selected and click Next.
• The programme uninstaller will run. If prompted again click Yes.
• Work your way through the uninstaller, ensuring you read each page thoroughly.
• Note: If you are offered the choice to install additional software, ensure you decline. 
• Once the built-in uninstaller is finished click Next.
• Once the programme has searched for leftovers click Next.
• Check items in bold only in the list and click Delete. You may have to expand folders by clicking the "+" mark.
• When prompted click Yes, followed by Next.
• Click Select all, followed by Delete.
• When prompted click Yes, followed by Next.
• Upon completion, click Finish.

Please tell me if you were successful in uninstalling all programmes listed above.

Do you have any products by Tencent that you would like to keep (these programs start with QQ, e.g. QQPlayer, QQDownload)?

I uninstalled the programs FlashBeat, FinaceAlert, And WildTangent but I couldn't find 电脑管家系统防护 In the program list. And not I do not want to keep any of the Tencent products.

STEP 1
[external image: xlK5Hdb.png] Farbar Recovery Scan Tool (FRST) Script

• Download 📎fixlist.txt and save it to your desktop.
• Important: The file must be saved in the same location as FRST64.exe. 

NOTICE: This script is intended for use on this particular machine. Do not use this script on any other machine; doing so may cause damage to your Operating System.

• Right-Click FRST64.exe and select [external image: AVOiBNU.jpg] Run as administrator to run the programme.
• Click Fix.
• A log (Fixlog.txt) will open on your desktop. Attach the log in your next reply.

STEP 2

[external image: GfiJrQ9.png] Malwarebytes Anti-Malware (MBAM)

• Please download the Malwarebytes Anti-Malware setup file to your Desktop.
• Open mbam-setup.x.x.xxxx.exe (x represents the version #) and follow the prompts to install the programme. 
• Open Malwarebytes Anti-Malware and click Update Now.
• Once updated, click the Settings tab, followed by Detection and Protection and tick Scan for rootkits.
• Click the Scan tab, ensure Threat Scan is selected and click Start Scan.
• Note: You may see the following message, "Could not load DDA driver". Click Yes, allow your PC to reboot and continue afterwards. 
• If threats are detected, click Remove Selected. If you are prompted to reboot, click Yes.
• Upon completion of the scan (or after the reboot), click the History tab.
• Click Application Logs and double-click the Scan Log.
• Click Copy to Clipboard and paste the log in your next reply.

======================================================
 
STEP 3
[external image: pfNZP4A.png] Logs
In your next reply please include the following logs as well as provide information on any questions I may have asked.

• Fixlog.txt by FRST
• MBAM log