Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Advertisement Powered by Provider removal needed

03 Aug 2016   #11
Callender

Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
 
 

Download Farbar from here:

Farbar Recovery Scan Tool Download

Save or copy the file to into a new folder on your desktop. Run Frst64.exe by right clicking the file then choose "Run as administrator"

Run the scan.

Results will be saved in the same folder. Upload FRST.txt and Addition.txt for us to look at.

Cheers.


My System SpecsSystem Spec
.
03 Aug 2016   #12
Gozoman

Windows 7 Home Premium 64 bit
 
 

Quote   Quote: Originally Posted by Callender View Post
Download Farbar from here:

Farbar Recovery Scan Tool Download

Save or copy the file to into a new folder on your desktop. Run Frst64.exe by right clicking the file then choose "Run as administrator"

Run the scan.

Results will be saved in the same folder. Upload FRST.txt and Addition.txt for us to look at.

Cheers.
Thanks I'll try that as it's driving me nuts!
My System SpecsSystem Spec
03 Aug 2016   #13
Gozoman

Windows 7 Home Premium 64 bit
 
 

Okay just got this run and here are the files.


Attached Files
File Type: txt FRST.txt (49.7 KB, 1 views)
File Type: txt Addition.txt (61.9 KB, 1 views)
My System SpecsSystem Spec
.

03 Aug 2016   #14
Callender

Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
 
 

Would you upload this file to VirusTotal and post a link to the report?

C:\Users\Alex\AppData\Roaming\Full Menager\Full Menager.exe

Cheers.

https://virustotal.com/

I think that might be the problem and I can post a script to delete it but would like to see the VirusTotal report first.
My System SpecsSystem Spec
03 Aug 2016   #15
Gozoman

Windows 7 Home Premium 64 bit
 
 

Quote   Quote: Originally Posted by Callender View Post
Would you upload this file to VirusTotal and post a link to the report?

C:\Users\Alex\AppData\Roaming\Full Menager\Full Menager.exe

Cheers.

https://virustotal.com/

I think that might be the problem and I can post a script to delete it but would like to see the VirusTotal report first.
Okay I think this is what you want. Bear with me. I'd like to be a silver surfer but I need hair first!

https://virustotal.com/en/file/f6132...9393/analysis/
My System SpecsSystem Spec
03 Aug 2016   #16
Callender

Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
 
 

Anyway if the report for Full Menager.exe looks bad:

Code:
start
CreateRestorePoint:

Task: {36C96EB4-965E-4185-9EF1-006457A6D80E} - System32\Tasks\Full Menager => C:\Users\Alex\AppData\Roaming\Full Menager\Full Menager.exe

Task: {563A74CE-8002-490D-9D4D-DD1D8ABBDA25} - System32\Tasks\Full Menager Logon => C:\Users\Alex\AppData\Roaming\Full Menager\Full Menager.exe

C:\Users\Alex\AppData\Roaming\Full Menager\Full Menager.exe

EmptyTemp:

end
Open Notepad (Start > All Programs > Accessories > Notepad)
Copy the entire contents of the Farbar script shown above into a notepad document.
Save it to into the same folder as Frst64.exe, and name it: fixlist.txt

Run FRST64.exe.
When the tool opens click Yes to disclaimer.

Now, press the Fix button, only once, and wait.
When done, FRST produces Fixlog.txt on your Desktop.

Upload the Fixlog.txt file or check it yourself to see if everything was deleted.
My System SpecsSystem Spec
03 Aug 2016   #17
Callender

Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
 
 

Quote   Quote: Originally Posted by Gozoman View Post

Okay I think this is what you want. Bear with me. I'd like to be a silver surfer but I need hair first!

https://virustotal.com/en/file/f6132...9393/analysis/
That doesn't look quite right. The file name should be Full Menager.exe and not admin cleaner.exe
Advertisement Powered by Provider removal needed-antivirus-scan-f61323ebb6e379f524d668907c5e602355e15fbfb70b9d7c1510453344f89.jpg
Are you sure that you uploaded this file?

C:\Users\Alex\AppData\Roaming\Full Menager\Full Menager.exe


My System SpecsSystem Spec
03 Aug 2016   #18
Callender

Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
 
 

I think I found the VirusTotal report:

https://www.virustotal.com/en/file/4...e0cb/analysis/

Not great.
My System SpecsSystem Spec
03 Aug 2016   #19
Gozoman

Windows 7 Home Premium 64 bit
 
 

Quote   Quote: Originally Posted by Callender View Post
Quote   Quote: Originally Posted by Gozoman View Post

Okay I think this is what you want. Bear with me. I'd like to be a silver surfer but I need hair first!

https://virustotal.com/en/file/f6132...9393/analysis/
That doesn't look quite right. The file name should be Full Menager.exe and not admin cleaner.exe
Attachment 390234
Are you sure that you uploaded this file?

C:\Users\Alex\AppData\Roaming\Full Menager\Full Menager.exe
That was the file I browsed to and uploaded yes. Do you want me to try again?
My System SpecsSystem Spec
03 Aug 2016   #20
Callender

Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
 
 

Quote   Quote: Originally Posted by Gozoman View Post
That was the file I browsed to and uploaded yes. Do you want me to try again?
The file name (in the report) is wrong so something is not right.

Try downloading a copy of UVK Portable

UVK - Ultra Virus Killer

Copy the downloaded file to a new folder on your desktop and run it by right clicking then choose "Run as administrator"

From the welcome screen:

Choose "Misc Tools"

Advertisement Powered by Provider removal needed-uvk-1.jpg

Then browse for the file and select it. Then get a Virus Total report.

Click "Perform Action" and in the window that opens right click "Permalink" and copy shortcut. Paste it here.


Attached Thumbnails
Advertisement Powered by Provider removal needed-uvk-2.jpg  
My System SpecsSystem Spec
Reply

 Advertisement Powered by Provider removal needed




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
How do I get rid of the Windows 10 advertisement from MS?
As of today in the tray is a Windows 10 advertisement to get it. MS at it again. Thanks in advance.
General Discussion
advice urgently needed for Malaware removal
Hello All, A quick post to ask advice on the best software to detect and remove Malaware (Urgently please). My computer has picked up a nasty one (or more) and is now not behaving itself, so much that the PC has become virtually impossible to use. I am happy for info on both Free & Paid...
System Security
BIOS Advertisement
computer, software and mobile phone makers can make lot of money by selling BIOS Advertisement........ ie this computer has been brought to you by PEPSI, McDonald etc
Chillout Room
14 Rootkits, Removal Help Needed
Ok so, to start this, I have an ASUS K53SV-B1 Laptop, whose specs. are these: Intel Core i7 2630QM Nvidia GT540M 6GB RAM 5'400RPM HDD, 640GB 15.6" Inch Screen Microsoft Windows 7 Home Premium 64-bit The problem is, today I felt curious, and ran a scan with Avast! Free Antivirus to detect...
System Security
3 minute advertisement for SF on Youtube.
I just came across this :) Pretty cool I thought, free advertising :) jjXdmdooLgA
Chillout Room


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 04:50.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App