New
#21
yes...I have scanned at least three times....no errors.....running again now.
yes...I have scanned at least three times....no errors.....running again now.
....RogueKiller returned a bad image and would not execute
running RKill.....has not found malware.......RogueKiller has started scanning now since I downloaded Rkill from bleepingcomputer......here we go.
roguekiller stopped the scan at 50% completition....got the bad image error msg from SecureAssist.dll again.
Follow the Instruction in the Link below ...
Remove "Ads by Supra Savings" virus (Easy Removal Guide)
this is from the rogueKiller log
¤¤¤ Registry : 23 ¤¤¤
[PUP] (X64) HKEY_CLASSES_ROOT\CLSID\{03EF41A4-BA24-4e49-A2C0-E1D047299287} -> Found
[PUP] (X64) HKEY_CLASSES_ROOT\CLSID\{130CCD34-0382-48E5-B307-0E7E72166828} -> Found
[PUP] (X64) HKEY_CLASSES_ROOT\CLSID\{26D25DD5-F17A-4d93-9A94-997E2124EEB4} -> Found
[PUP] (X64) HKEY_CLASSES_ROOT\CLSID\{30279F40-D76B-443c-A34D-F43B35B35CE1} -> Found
[PUP] (X64) HKEY_CLASSES_ROOT\CLSID\{533403E2-6E21-4615-9E28-43F4E97E977B} -> Found
[PUP] (X64) HKEY_CLASSES_ROOT\CLSID\{796D0AA0-DC0E-44C9-A398-C874F04D55A4} -> Found
[PUP] (X64) HKEY_CLASSES_ROOT\CLSID\{CE2102F0-DF63-452e-9CA7-0F75FF4DDD4B} -> Found
[PUP] (X64) HKEY_CLASSES_ROOT\CLSID\{DADFCC6F-66D2-4e1d-A01B-7064CAD2F583} -> Found
[PUP] (X64) HKEY_CLASSES_ROOT\CLSID\{EBE666C3-F26C-4cf6-8ABA-3D5F5D2625E1} -> Found
[PUP] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670} -> Found
[Hidden.From.SCM] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\klkbdflt2 (system32\DRIVERS\klkbdflt2.sys) -> Found
[PUM.Proxy] (X64) HKEY_USERS\S-1-5-21-4245506359-3275111897-1498653616-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings | ProxyServer : http=127.0.0.1:49337;https=127.0.0.1:49337 -> Found
[PUM.Proxy] (X86) HKEY_USERS\S-1-5-21-4245506359-3275111897-1498653616-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings | ProxyServer : http=127.0.0.1:49337;https=127.0.0.1:49337 -> Found
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters | DhcpNameServer : 192.168.0.1 205.152.37.23 -> Found
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters | DhcpNameServer : 192.168.0.1 205.152.37.23 -> Found
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters | DhcpNameServer : 192.168.0.1 205.152.37.23 -> Found
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8AD5C7A1-C10F-4B40-A7F3-1B6FED44F3C3} | DhcpNameServer : 192.168.0.1 205.152.37.23 -> Found
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{8AD5C7A1-C10F-4B40-A7F3-1B6FED44F3C3} | DhcpNameServer : 192.168.0.1 205.152.37.23 -> Found
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters\Interfaces\{8AD5C7A1-C10F-4B40-A7F3-1B6FED44F3C3} | DhcpNameServer : 192.168.0.1 205.152.37.23 -> Found
[PUM.DesktopIcons] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> Found
[PUM.DesktopIcons] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> Found
[PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> Found
[PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> Found
......
I can reach the internet now. I used the url below to go back to IE8.
How to Uninstall Internet Explorer 11 for Windows 7: 8 Steps
However the Kaspersky and malwarebytes cannot connect to the internet.