Hey, Cottonball, I will download Zoek and start that process in the morning. I appreciate you hanging in there with me. Hopefully, we are closer to the end than the beginning. Thanks again and I will post reports as soon as I get them done.
Cottonball, decided to get it over with. Anyway, I completed the scan but MBAM doesn't give me the option to Quarantine. I select them and it asks if I want to REMOVE them. Is that what you want me to do? I just don't want to take any chances so I want to make I am selecting the right option.
Report before actions have been applied.
Yep, those two entries are the 'treasures'.
With checkmarks on the entries, click on: Remove Selected
The computer should reboot twice, and, at the second reboot MBAM should take action to repair the damage.
If it does not, and the Internet connection is down again, then use Zoek.
If the Internet connection works fine, use Zoek, but only use the following:
There would be no need for netsh winsock reset catalog;b if the connection is OK.Code:createsrpoint; ipconfig /flushdns;b emptyfolderscheck;delete emptyclsid; emptyalltemp; autoclean;
Okay, so the deletion of the files did not kill the connection. I did have to manually restart after MBAM ran as it did not prompt me to do so. I ran the internet success script you gave me through Zoek, attached is the report. Internet is currently functioning. :)
See if you can do the following:
System Protection Restore Points - Delete
If you can, delete the Restore Point for: 27/05/2015
We want to get rid of this:
C:\System Volume Information\SystemRestore\FRStaging\Windows\System32\plsapp64.dll ------- 439296 bytes [21:33 27/05/2015]
If not, please use Option 2.
Delete all, except the most recent Restore Point.
Let us know how it goes.
See ya sometime during the day. We have to stop meeting at this hour (2:11AM)!!!
Morning, Cottonball. :) May have been a little too early to try to think. Basically, I may sorta kinda have deleted all restore points but I just created a new one so I hope that doesn't set us back. I ran MBAM overnight and no threats or anything were discovered. And yeah, I feel more bad about your lack of sleep, I typically don't get much anyway so I'm used to it. LOL
ChronicX,
Glad you have good news this morning!! :)
Please use SystemLook, and search for these again:
:filefind
*plsapp*
:regfind
PureLeads
Let's see if they are gone.
My going to bed late PM is balanced off by getting up late in the AM!!
Please check you PMs on the upper left:
Welcome, ChronicX
You last visited: X Hours Ago at X
Private Messages: Unread 1, Total X
X = number(s)
Thanks!
Quote