Laptop Service [Solved]

Hello againSt3liz and welcome back to the WTT forum.

My name is Satchfan and I would be glad to help you with your computer problem.

Please read the following guidelines which will help to make cleaning your machine easier:

• please follow all instructions in the order posted
• please continue to review my answers until I tell you your machine appears to be clear. Absence of symptoms does not mean that everything is clear
• all logs/reports, etc. must be posted in Notepad. Please ensure that word wrap is unchecked. In Notepad click Format, uncheck Word wrap if it is checked
• if you don't understand something, please don't hesitate to ask for clarification before proceeding
• the fixes are specific to your problem and should only be used for this issue on this machine.
• please reply within 3 days. If you do not reply within this period I will post a reminder but topics with no reply in 4 days will be closed!

IMPORTANT:

Please DO NOT install/uninstall any programs unless asked to.
Please DO NOT run any scans other than those requested

===================================================

Note: Please run these in the order given in the instructions.

===================================================

Download and run AdwCleaner

Download AdwCleaner from here and save it to your desktop.

• run AdwCleaner
• when it has finished, select Clean
• if it asks to reboot, allow the reboot
• on reboot a log will be produced; please attach the content of the log to your next reply.

===================================================

Download and run Junkware Removal Tool

[external image: thisisujrt.gif] Please download Junkware Removal Tool to your desktop.

• shut down your protection software now to avoid potential conflicts.
• run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator"
• the tool will open and start scanning your system
• please be patient as this can take a while to complete depending on your system's specifications
• on completion, a log (JRT.txt) is saved to your desktop and will automatically open
• post the contents of JRT.txt into your next message.

===================================================

Run Farbar Recovery Scan Tool

Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

• right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
• press Scan button
• it will produce a log called Frst.txt in the same directory the tool is run from
• please copy and paste log back here.
• the first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the Frst.txt into your reply.

Logs to include with next post:

AdwCleaner log
JRT.txt
Frst.txt
Addition.txt

Thanks

Satchfan

Hi,

I managed to get adwcleaner to download using firefox and the rest worked fine with chrome. Here are the logs.

# AdwCleaner v5.002 - Logfile created 19/08/2015 at 19:15:05

# Updated 18/08/2015 by Xplode

# Database : 2015-08-18.2 [Server]

# Operating system : Windows 8.1  (x64)

# Username : Steven - LAPTOP

# Running from : C:\Users\Steven\Desktop\adwcleaner_5.002.exe

# Option : Cleaning

***** [ Services ] *****

[-] Service Deleted : netfilter64

[-] Service Deleted : CoupoonService64

[-] Service Deleted : UpdateCheck

***** [ Folders ] *****

[-] Folder Deleted : C:\Program Files\WebBar

[-] Folder Deleted : C:\Program Files\coupoon

[!] Folder Not Deleted : C:\Program Files\Coupoon

[-] Folder Deleted : C:\Program Files (x86)\predm

[-] Folder Deleted : C:\Program Files (x86)\coupoon

[!] Folder Not Deleted : C:\Program Files (x86)\Coupoon

[-] Folder Deleted : C:\ProgramData\abc

[-] Folder Deleted : C:\Users\Steven\AppData\Local\WebBar

[-] Folder Deleted : C:\Users\Steven\AppData\Roaming\Nosibay

[-] Folder Deleted : C:\Users\Steven\AppData\Roaming\Store

***** [ Files ] *****

[-] File Deleted : C:\END

[-] File Deleted : C:\Users\Steven\AppData\Roaming\Bubble Dock.boostrap.log

[-] File Deleted : C:\Users\Steven\AppData\Roaming\Bubble Dock.installation.log

[-] File Deleted : C:\Users\Steven\AppData\Roaming\WindApp.boostrap.log

[-] File Deleted : C:\Users\Steven\AppData\Roaming\WindApp.installation.log

[-] File Deleted : C:\Users\Steven\Desktop\Continue GamesDesktop Uninstaller.lnk

[-] File Deleted : C:\WINDOWS\Sysnative\drivers\netfilter64.sys

***** [ Shortcuts ] *****

***** [ Scheduled tasks ] *****

[-] Task Deleted : Optscan

***** [ Registry ] *****

[-] Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [WindApp]

[-] Key Deleted : HKLM\SOFTWARE\14265f33-28c6-bdeb-d944-28f8240a3506

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}

[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}

[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}

[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}

[-] Key Deleted : HKU\.DEFAULT\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}

[-] Key Deleted : HKU\.DEFAULT\Software\AppDataLow\Software\coupoon

[!] Key Not Deleted : HKU\.DEFAULT\Software\AppDataLow\Software\Coupoon

[-] Key Deleted : HKCU\Software\MyBestOffersToday

[-] Key Deleted : HKCU\Software\Myfree Codec

[-] Key Deleted : HKCU\Software\Nosibay

[-] Key Deleted : HKCU\Software\Store

[-] Key Deleted : HKCU\Software\Vittalia

[-] Key Deleted : HKCU\Software\DAILYPCCLEAN

[-] Key Deleted : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}

[-] Key Deleted : HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}

[-] Key Deleted : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}

[-] Key Deleted : HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}

[-] Key Deleted : HKLM\SOFTWARE\Myfree Codec

[-] Key Deleted : HKLM\SOFTWARE\Tutorials

[-] Key Deleted : HKLM\SOFTWARE\coupoon

[!] Key Not Deleted : HKLM\SOFTWARE\Coupoon

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7ADF667E-E14D-4D2C-827C-B0108F0D93BC}

[!] Key Not Deleted : [x64] HKCU\Software\MyBestOffersToday

[!] Key Not Deleted : [x64] HKCU\Software\Myfree Codec

[!] Key Not Deleted : [x64] HKCU\Software\Nosibay

[!] Key Not Deleted : [x64] HKCU\Software\Store

[!] Key Not Deleted : [x64] HKCU\Software\Vittalia

[!] Key Not Deleted : [x64] HKCU\Software\DAILYPCCLEAN

[-] Key Deleted : [x64] HKLM\SOFTWARE\WebBar

[-] Key Deleted : [x64] HKLM\SOFTWARE\coupoon

[!] Key Not Deleted : [x64] HKLM\SOFTWARE\Coupoon

***** [ Web browsers ] *****

*************************

:: Proxy settings cleared

:: Winsock settings cleared

:: Chrome policies deleted

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [4147 bytes] ##########

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Hi,

fixlog -

Fix result of Farbar Recovery Scan Tool (x64) Version:20-08-2015

Ran by [removed] (2015-08-19 22:42:50) Run:1

Running from C:\Users\[removed]\Desktop

[removed]

Boot Mode: Normal

==============================================

fixlist content:

*****************

ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File

ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File

ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File

ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File

ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File

ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File

Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  No File

Toolbar: HKU\S-1-5-21-542554017-3682258803-1898252317-1001 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File

AlternateDataStreams: C:\Users\Steven\Downloads\noname.eml:OECustomProperty

AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`26hfm

AlternateDataStreams: C:\Users\Steven\SkyDrive:ms-properties

EmptyTemp:

*****************

"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ SkyDrive1" => key removed successfully

HKCR\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A} => key not found.

"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ SkyDrive2" => key removed successfully

HKCR\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => key not found.

"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ SkyDrive3" => key removed successfully

HKCR\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524} => key not found.

"HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ SkyDrive1" => key removed successfully

HKCR\Wow6432Node\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A} => key not found.

"HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ SkyDrive2" => key removed successfully

HKCR\Wow6432Node\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => key not found.

"HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ SkyDrive3" => key removed successfully

HKCR\Wow6432Node\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524} => key not found.

HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} => value removed successfully

HKCR\CLSID\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} => key not found.

HKU\S-1-5-21-542554017-3682258803-1898252317-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => value removed successfully

HKCR\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => key not found.

C:\Users\Steven\Downloads\noname.eml => ":OECustomProperty" ADS removed successfully.

C:\ProgramData\Reprise => ":wupeogjxldtlfudivq`qsp`26hfm" ADS removed successfully.

"C:\Users\Steven\SkyDrive" => ":ms-properties" ADS not found.

EmptyTemp: => 3.9 GB temporary data Removed.

The system needed a reboot..

==== End of Fixlog 22:46:34 ====

MBAM still won't update -

Malwarebytes Anti-Malware