Search Protect message on start up

Uninstall IObit Malware. Anything iobit software is junk and will cause multiple issues with your PC.

CCleaner - Delete Junk Files

You can use ccleaner to go into the startup entries there and delete it if found under tools-startup in ccleaner.



1.) Download herdprotect: (choose the portable version)

Download herdProtect - Free Anti-Malware Platform

2.) Run the scan.

3.) When the scan finishes, save the results per the screenshot below. Then upload the log here.

DO NOT REMOVE ANYTHING YET. I will advise if anything needs removed when I receive the log.

Attached Images

kevtherev,

Also, please use the tool Zoek:
Download > [url=http://hijackthis.nl/smeenk/[/ur
When the Zoek.exe download appears, save to the Desktop.

On the Desktop, right-click [COLOR="Blue"]Zoek.exe [/COLOR]and select: Run as Administrator
Give it a few seconds to appear.

Disable your AntiVirus and AntiSpyware programs, so they don't interfere with the running of Zoek.exe.
You can find instructions how to disable your security applications here:
http://www.bleepingcomputer.com/foru...ersion 5.0.0.0

Click the Options button and place a checkmark only on the following:

Do a Deep Scan
Installed Programs

Now...

• Close any open Browsers.
• Click the Run script button, and wait. It takes a few minutes to run all the script.
• When the tool finishes, the zoek-results.log is opened in Notepad.
• The log is also found on the systemdrive, normally C:\
• If a reboot is needed log is opened after the reboot.

Please post the zoek-results.log in your reply.

andrew129260 said:

Uninstall IObit Malware. Anything iobit software is junk and will cause multiple issues with your PC.
CCleaner - Delete Junk Files
You can use ccleaner to go into the startup entries there and delete it if found under tools-startup in ccleaner.
1.) Download herdprotect: (choose the portable version)
Download herdProtect - Free Anti-Malware Platform
2.) Run the scan.
3.) When the scan finishes, save the results per the screenshot below. Then upload the log here.
DO NOT REMOVE ANYTHING YET. I will advise if anything needs removed when I receive the log.
Attached Images

Have just run the first scan of HerdProtect before CCleaner. Results are in attached file. Was informed that I should run HerdProtect again in about 1hr 15mins. Will do that and keep you informed. Was I doing it correctly by running this first before using CCleaner ?

I suggest you follow Cottonball Instructions too ...

1.) You have a lot of junk programs installed on your pc. AKA snake oil.

Uninstall the following:

-Advanced SystemCare
-Anything IOBIT-including Smart Defrag
-Driver booster

Restart the pc.

2.) Run herdprotect again and remove the following items:

How to remove with herdprotect: Click the entry, and then click action-remove. Restart the PC after removing all items. Then post a fresh log of herdprotect.

Code:

File path: 		c:\users\kevin\appdata\local\temp\fjxd34wb.hu5.exe
Publisher: 		
MD5: 			c849eff2a4d9d233cf1c4eb9cffa16a0
SHA-1: 			90b6337aedf13d2835be0842c6f608ae31dbe09c
Created: 		23/05/2014 14:50:51
Detections: 		8

Code:

File path: 		c:\users\kevin\appdata\local\temp\gpupd.exe
Publisher: 		
Signer: 		Closed Joint-Stock Company 
MD5: 			356cba6f32e67e7c607a0d467334a93e
SHA-1: 			c8ea747c00b74a4393057fceefdea96df5c2effc
Created: 		23/05/2014 14:59:11
Detections: 		4
Determination: 		Adware

Code:

File path: 		c:\users\kevin\appdata\local\microsoft\windows\temporary internet files\content.ie5\qcxp1bd6\isafe_upgrade_release_win32_4.4.50.11132_2014.05.22[1].exe
Publisher: 		Elex do Brasil Participações Ltda
Signer: 		Elex do Brasil Participações Ltda
MD5: 			2ca3a7fbc32a338621d87477cea4bf9a
SHA-1: 			2f6ec93477d5d7eaeaa2bed48b5fff53ade7feac
Created: 		24/05/2014 16:20:05
Detections: 		3
Determination: 		Adware

Code:

File path: 		c:\users\kevin\appdata\roaming\wi_upd\si.exe
Publisher: 		
Signer: 		Closed Joint-Stock Company 
MD5: 			47e618a0d2477068741d73a0f2c5a10c
SHA-1: 			1735e2c1632ae6146be074215bb2f8df4a8e9734
Created: 		23/05/2014 14:50:30
Detections: 		1

Code:

File path: 		c:\users\kevin\appdata\roaming\microsoft\installer\{72aaf455-1e54-475b-b0ab-5413c78d0e63}\icon1226a4c5.exe
Publisher: 		
MD5: 			36b98b8197e1be8e7382d29c1a3628aa
SHA-1: 			90e3b7412ae40f102d2f99faae950fabe4426f8d
Created: 		10/11/2013 18:06:54
Detections: 		4

Code:

File path: 		c:\program files (x86)\wisen wizard\updatewisenwizard.exe
Publisher: 		
Signer: 		wisen wizard
MD5: 			b8fe02993a6047194e94f6c61ffb364c
SHA-1: 			64f31591d7b971722a20b7764ea93c4764a04733
Created: 		28/04/2014 15:34:38
Detections: 		5

Code:

File path: 		c:\program files (x86)\systpl\systplutil.dll
Publisher: 		Tlapia
Signer: 		TLAPIA
MD5: 			0e8614e34a9109d9d8e16648b16cc3a3
SHA-1: 			5a407ead5e79f5816e48c87ab67c085226967a98
Created: 		29/09/2013 23:10:38

Make sure your data is backed up either on an external hard drive or somewhere else before proceeding:


You have a lot of items hiding in your temp folders, lets clean them out:

1.) Please download and save the file TFC by Old Timer. Again, save the file to your downloads folder or your desktop. Do not run it.

Downloading TFC


2.) Close your programs before running this tool. TFC will close ALL open programs.

3.) Browse to where you saved tfc. Right click on tfc.exe and choose Run As Administrator.

4.) Click the Start button to begin the cleaning process and let it run uninterrupted to completion. When it finishes it will say total files cleaned, and the start button will be grayed out. Click exit.
Important! If TFC prompts you to reboot, please do so immediately. If not prompted, manually reboot the machine anyway to ensure a complete clean.

You still have iobit products installed. Remove everything that involves iobit.

You still have a registry defregger from them, and their malware scanner in your downloads folder.

Delete/uninstall all of it.

Then post another herdprotect log after you do all the above and restart.