Advertisement Powered by Provider removal needed

Download Farbar from here:

Farbar Recovery Scan Tool Download

Save or copy the file to into a new folder on your desktop. Run Frst64.exe by right clicking the file then choose "Run as administrator"

Run the scan.

Results will be saved in the same folder. Upload FRST.txt and Addition.txt for us to look at.

Cheers.

Would you upload this file to VirusTotal and post a link to the report?

C:\Users\Alex\AppData\Roaming\Full Menager\Full Menager.exe

Cheers.

https://virustotal.com/

I think that might be the problem and I can post a script to delete it but would like to see the VirusTotal report first.

Anyway if the report for Full Menager.exe looks bad:

Code:

start
CreateRestorePoint:

Task: {36C96EB4-965E-4185-9EF1-006457A6D80E} - System32\Tasks\Full Menager => C:\Users\Alex\AppData\Roaming\Full Menager\Full Menager.exe

Task: {563A74CE-8002-490D-9D4D-DD1D8ABBDA25} - System32\Tasks\Full Menager Logon => C:\Users\Alex\AppData\Roaming\Full Menager\Full Menager.exe

C:\Users\Alex\AppData\Roaming\Full Menager\Full Menager.exe

EmptyTemp:

end

Open Notepad (Start > All Programs > Accessories > Notepad)
Copy the entire contents of the Farbar script shown above into a notepad document.
Save it to into the same folder as Frst64.exe, and name it: fixlist.txt

Run FRST64.exe.
When the tool opens click Yes to disclaimer.

Now, press the Fix button, only once, and wait.
When done, FRST produces Fixlog.txt on your Desktop.

Upload the Fixlog.txt file or check it yourself to see if everything was deleted.

Gozoman said:

Okay I think this is what you want. Bear with me. I'd like to be a silver surfer but I need hair first!

https://virustotal.com/en/file/f6132...9393/analysis/

That doesn't look quite right. The file name should be Full Menager.exe and not admin cleaner.exe

Are you sure that you uploaded this file?

C:\Users\Alex\AppData\Roaming\Full Menager\Full Menager.exe

I think I found the VirusTotal report:

https://www.virustotal.com/en/file/4...e0cb/analysis/

Not great.

Gozoman said:

That was the file I browsed to and uploaded yes. Do you want me to try again?

The file name (in the report) is wrong so something is not right.

Try downloading a copy of UVK Portable

UVK - Ultra Virus Killer

Copy the downloaded file to a new folder on your desktop and run it by right clicking then choose "Run as administrator"

From the welcome screen:

Choose "Misc Tools"



Then browse for the file and select it. Then get a Virus Total report.

Click "Perform Action" and in the window that opens right click "Permalink" and copy shortcut. Paste it here.