Thanks for the info!
Does SAS have its Scan Logs in the Control Panel area?
If so, can you post its last report?
Or, run SAS again, and see if a Scan Log that can be copied/pasted is generated, so you can provide it in your reply.
Can't copy the individual items from the image, and do not want to make a mistake writing them out manually.
Also, running MBAM is a good idea. Will take a look at it when you post the report.
Thanks!
Thank you. And again, thanks for sticking with me!
Rkill.txt is attached again.
After restart, Mbam reported no threats, but SAS said I still had 3 Scorpion and 3 Great Arcade hijackers. Thinking SAS may have retained its memory, I uninstalled it and then reinstalled it, then ran it again. This time, it listed 66 cookie threats, all of which I removed. Got a report and it should be attached.
Ran SAS again. This time it again produced the 3 Scorpion and 3 Great Arcade hijackers, but allowed me to uninstall Scorpion(s). I did. It wouldn't let me uninstall Arcade(s).
So I ran SAS once more. This time, uninstalling Arcade(s) worked!
Backed out of SAS. Restarted SAS. None of the Scorpions or Arcades show now. So I'm running a complete SAS scan now.
SAS scan logs do not show the pre-scan hijackers it finds. They show up before you hit "continue" but the only way I have to get them to you is via a screen print. How can I convert a JPG to text?
OOPS, forgot to mention that I used IE, FF, and Chrome to check for extensions. All 3 said I still have none (except Bing in IE). That was before SAS found the 66 Cookie threats.
Last edited by Florida Rene; 26 Dec 2013 at 15:40. Reason: added extensions search
Wondering if new Internet access produces new threats, I decided to try running SAS after accessing the Internet, going to a few major sites (Major League Baseball, National Football League, USA Today, CNN and MSNBC) then running SAS again.
Here what I found, after starting with a clean SAS report.
STEP ONE
Run Chrome alone...
SAS found 20 threats, see Chrome report attached.
STEP TWO
Remove threats obtained via Chrome.
Run Internet Explorer alone...
No threats found by SAS
STEP THREE
Run FireFox alone...
No threats found by SAS.
STEP FOUR
Uninstalled Chrome and removed Chrome history.
Restart. F8. Safe with Networking.
Will run complete scan with SAS, then with Mbam, then with AVG...and will report.
Meanwhile...Thank You all for your perseverance and most helpful instructions. I guess if you can help a geezer, you can help a lot of other more tech-savvy folks. I greatly appreciate all you've done. And, Cottonball & Jacee, you get Gold Stars!
If SAS (IMO, The Cookie Monster) let you remove the last few entries, there is no need for your posting its results, unless SS appears again.
Ugh! Stubborn piece of tripe!
Let this program take a shot at removing SS:
Junkware Removal Tool Download
Save to the Desktop.
Make sure you temporarily disable your AntiVirus, Firewall, and any other AntiSpyware applications. These programs may interfere with the running of JRT.
Info: How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs - Security Mini-Guides
Right-click JRT.exe and select: Run as Administrator
The tool opens and starts scanning the system. Please be patient as this can take a while...
When done, a report, JRT.txt is saved on the Desktop.
Please post the contents of JRT.txt in your reply.
In Post #90, LaybackBear proposed a very good step in this process >> running the ESET Online Scanner.
It has a very good detection rate, so please give it a whirl. Different scanners have varying definitions for what they look for, so throwing in a new perspective may help us.
Since it is implemented as an ActiveX control, it is best run on Internet Explorer.
Right click the IE shortcut and select: Run as Administrator
Next, in IE, download > Free Virus Scan | Online Virus Scanner from ESET
On the ESET website, click on: Run ESET Online Scanner
Click: Start
When asked, allow the add-on to be installed.
Again, click: Start
On the next prompt, Computer Scan Settings, check: Remove found threats
Next, click on: Advanced Settings
Make sure the following options are checked:
>Scan for potentially unwanted applications
>Scan for potentially unsafe applications
>Enable Anti-Stealth Technology
By Current Scan Targets, Operating memory, Local drives, press: Change
In Selection of scan targets, Local drives, select the drives in question.
Click: OK
Click: Start
Follow the prompts.
When the scan completes, if threats are found, in the Scan Results prompt, click on: List of threats found
Click on: Export to text file
Save to the Desktop and name it: ESET Scan Results
Click on: Back
Click on: Finish, and close the program.
If anything is found, please provide the ESET Scan Results in your reply to determine what further action is necessary.
BTW, this scan may take a while, so get some more rum cake and some coffee! Just a suggestion, from geezer to geezer...
U R a STITCH! Alas, no more rum cake.
Thank you, Cottonball.
Late night summary: Ran SAS, Mbam, & AVG. All clear with all 3.
This a.m.: Ran JRT. Report is attached.
Haven't enough coffee in me yet to figure out how to do ESET and whether it's needed since all seems to be running okay today. Is it only for IE?
In Elevated Command Prompt :
Post output. Is "repair your computer" in the list again?Code:reagentc/disable reagentc/enable reagentc/info
From elevated command prompt:
If you also have a D driveCode:attrib /s c:\win*.wim attrib /s c:\*.sdi
Post output.Code:attrib /s d:\win*.wim attrib /s d:\*.sdi
Last edited by Kaktussoft; 27 Dec 2013 at 09:58.
Quote