How safe is running Zoek 5.0.0.0

marysilver · 28 Mar 2015

Code:

01:11

marysilver · 28 Mar 2015

Code:

01:11

marysilver · 28 Mar 2015

Code:

01:11:

marysilver · 28 Mar 2015

Code:

01:11

gregrocker · 28 Mar 2015

Mary you can paste the results all in one code box by clicking on the # symbol on reply box toolbar and pasting your results between the code tags.

marysilver · 28 Mar 2015

The TDSSKILLER did not find any viruses.

cottonball said:

marysilver,

On your Save as and perhaps other issues, try the following, using Option 2 to Scan and Repair System files:
SFC /SCANNOW Command - System File Checker
If there are files that SFC cannot fix automatically, follow Option 3.

Will following those instructions delete anything on my computer? What does the warning mean when it says "theme"?

cottonball said:

At this point, my personal assessment of your situation is the following:

Whatever virus or malware was taking over the computer, IMO, it caused irreparable damage to the system.
Just the possibility of having Win32.Fareit seriously compromises your computer, and a variant of this trojan steals passwords.

If this computer is a Dell, and has a Dell Recovery Partition, would consider pursuing the following:
https://neosmart.net/wiki/dell-recovery-partition/

Follow the instructions to: Access the recovery partition in Windows 7
It will reformat the hard drive and restore system software to factory condition.

May consider it if the situation with the computer worsens.

Thank you so much for all your help! It was educational.

marysilver · 28 Mar 2015

gregrocker said:

Mary you can paste the results all in one code box by clicking on the # symbol on reply box toolbar and pasting your results between the code tags.

Thank you gregrocker. Didn't realize there was a way to overcome the 2,000 character limit. I'll do that next time.

cottonball · 28 Mar 2015

No luck with TDSSKiller...nothing found.

Let's give Malwarebytes Anti-Malware a whirl.
Download > https://www.malwarebytes.org/products/
Select the FREE version!
Save to the Desktop.

On the Desktop. double-click mbam-setup-2.X.X.XXXX.exe to install (X's = current version)
Allow the file to run.
Follow the setup wizard to Install.

Place a checkmark next to Launch Malwarebytes Anti-Malware, then click: Finish
However, please make sure to uncheck the PREMIUM version Trial checkmark, if it appears near the end of the installation.

Once MBAM opens, click the Settings tab at the top, and, in the left column, select Detections and Protections
If not already checked, select: Scan for rootkits
Click the Scan tab at the top of the program window, and select: Threat Scan

Next, click: Scan Now
If you receive a message that updates are available, click: Update Now
At this point, the update is downloaded, installed, and the scan starts.
The scan may take some time to finish, so please be patient.

If potential threats are detected, select Quarantine All as the Action for all the listed items.
Next, click: Apply Actions

While still on the Scan tab, click the link for View detailed log
In the window that opens, click the Export button, select Text file (*.txt), and save the log to the Desktop.

Please post the MBAM report in your reply.

Notes:
1. The log is automatically saved by MBAM and is also viewed by clicking:
History tab > Application Logs.
2, If MBAM encounters a file that is difficult to remove...
Click OK and allow MBAM to proceed with the disinfection process.
If asked to restart the computer, please do so immediately.

On:

Will following those instructions delete anything on my computer?

SFC scans and repairs system files, it does not remove files.

What does the warning mean when it says "theme"?

Can you provide more info on the above?
Is SFC giving this warning???

marysilver · 28 Mar 2015

Thanks, I'll try that scan tomorrow.

I just meant this warning:
"Be aware that if you have modified your system files as in theming explorer/system files, running sfc /scannow will revert the system files such as explorer.exe back to it's default state. Make the appropriate backups of your system files that you have modified for theming if you wish to save them before running sfc /scannow."

cottonball · 29 Mar 2015

Ah! OK..

It just means that if you have modified your system files in order to add custom themes to your operating system, running sfc /scannow will revert the system files such as explorer.exe back to it's default.