I am having a problem with my new/used laptop

[reble]

I am having a problem with my Dell Inspiron 3541 laptop, OS win 7 Home 64 bits. I have had this laptop for about 6 months with no problems. About 2 days ago. I think it is due to a web site that I looked at. Now I am getting some strange unwanted pop ups. 1 was randomly popping up on the desktop, (called trailers, as in movie trailers) I deleted that via the regedit prog. I deleted every reference to the name "trailers" in the registry. That took care of that.
I am still randomly getting the following screen captures bellow in Google Chrome (I don't get the pop ups in Internet Explorer or Firefox, I don't use them). The 1st one says I have 4 virus's in my system. I can close the box marked with the red box around it. Then I have the 2nd screen capture. It says that they detected 4 virus's on my sys. And I have to download and run a prog called "PCKeeper" ASAP. Who any what is spying on my sys, and why? The 3rd screen capture is supposably from MicroSoft them self. Part of the message on that screen capture reads as "Ignore this alert and your computer will be disabled to stop anymore damage to our network" And the only way to shut down that web page is to use Ctrl + Alt + Del > start task manager and shut down Google Chrome from there. At that point Goggle Chrome is completely frozen (only Chrome is frozen, the rest of win is fine), nothing works. The #4 screen capture. I have no beep, beep idea what it is. Is all of this stuff a spam attack or is it the normal virus, trojan horse or some kind of a worm?

Steve

 

[strollin]

Sounds like you have been smart enough that you didn't click on any of these schemes which is a good thing.

Have you attempted to run a scan with your anti-virus program? If not, I would do that pronto.

I would also run a scan using MalwareBytes anti-malware scanner.

 

[torchwood]

ITS A SCAM.
the messages DO NOT COME FROM MS.

The url Provi ????
not MS phone no

As you have IE/FF i would suggest you totally uninstall Google, DO NOT SAVE any data
This includes the folders in C >> programs & programs (x86)

REBOOT

then as Stollin said run MWB, enable root kit detection.


Roy

 

[reble]

Thanks to Strollin and torchwood. for your input. I do have the payed version of MalwareBytes and I ran it. MalwareBites found a lot of garbage. I then uninstalled Google Chrome and everything that goes with it. Then I ran MalwareBites again. The 1st malware scan (before uninstalling Chrome) found around 125 hits. After uninstalling everything to do with Google Chrome. I ran the Malware scan again, there was still about 20 hits. I cleaned those out. Rebooted and ran a 3rd scan, clean as a whistle, NO hits!!

Steve

Sounds like you have been smart enough that you didn't click on any of these schemes which is a good thing.

Have you attempted to run a scan with your anti-virus program? If not, I would do that pronto.

I would also run a scan using MalwareBytes anti-malware scanner.

ITS A SCAM.
the messages DO NOT COME FROM MS.

The url Provi ????
not MS phone no

As you have IE/FF i would suggest you totally uninstall Google, DO NOT SAVE any data
This includes the folders in C >> programs & programs (x86)

REBOOT

then as Stollin said run MWB, enable root kit detection.


Roy

 

[strollin]

That's great that there were no hits during the scan but the big question is: Are your popups gone too?

 

[reble]

I guess the problem isn't solved yet. I am now getting redirects in Firefox.

That's great that there were no hits during the scan but the big question is: Are your popups gone too?

 

[bigmck]

I guess the problem isn't solved yet. I am now getting redirects in Firefox.

Have your number of popups decreased since you did the Malwarebytes? Having a few of them is no big deal, but if you have them all of the time, that is a problem.

 

[reble]

Nope the popups are still continuing. When I hit the quote to make this post I was redirected to the following 2 web pages bellow. An one other popup that keeps coming up (but I won't screen capture it and pose it) It is a XXXX porn site. But you can see that these redirects are automatic start in nature and not even close to the subject in question.

Steve

Have your number of popups decreased since you did the Malwarebytes? Having a few of them is no big deal, but if you have them all of the time, that is a problem.

 

[Callender]

You need to run a few dedicated adware scanners:

ToolsLib - Downloads - AdwCleaner

Download ZHPCleaner - MajorGeeks

Ultra Adware Killer

Note: ADWcleaner will prompt you to select items to remove after a scan.

ZHP Cleaner will remove all items unless you validate your choices first before closing the window. See more on that here: Weird browsing

UAK will require you to manually add items to keep to the whitelist.

Basics of UAK - run a scan and add items to whitelist or uncheck any items that should not be deleted. Whitelist items via right clicking on selected items. Manage whitelist via "Menu" button.

 

[reble]

The problem is that some prog's and games have adware linked to the prog's or games and if you delete the adware then the prog/game stops working and I don't know whitch adwares to delete.

You need to run a few dedicated adware scanners:

ToolsLib - Downloads - AdwCleaner

Download ZHPCleaner - MajorGeeks

Ultra Adware Killer

Note: ADWcleaner will prompt you to select items to remove after a scan.

ZHP Cleaner will remove all items unless you validate your choices first before closing the window. See more on that here: Weird browsing

UAK will require you to manually add items to keep to the whitelist.

Basics of UAK - run a scan and add items to whitelist or uncheck any items that should not be deleted. Whitelist items via right clicking on selected items. Manage whitelist via "Menu" button.

 

[Callender]

Each application produces a log of found items. Upload the logs.

 

[Callender]

​

​

​

 

[reble]

I have attached the following scan logs bellow. Also I am having a problem with "run cmd box, See the last 2 screen captures bellow. After I ran the 'Malwarebytes" scan. I couldn't fine the log. I new the log file name (malware log.txt). I typed that into the run cmd box and I got the 1st error message, see the screen capture bellow. Widows stated that it couldn't find the file named 'malware log.txt'. I next told the run cmd box to search for all txt files (*.txt). I got the same error message "can't find *.txt" ether. I finely found the log file with a manual search in the root directory on the hard drive.

You need to run a few dedicated adware scanners:

ToolsLib - Downloads - AdwCleaner

Download ZHPCleaner - MajorGeeks

Ultra Adware Killer

Note: ADWcleaner will prompt you to select items to remove after a scan.

ZHP Cleaner will remove all items unless you validate your choices first before closing the window. See more on that here: Weird browsing

UAK will require you to manually add items to keep to the whitelist.

Basics of UAK - run a scan and add items to whitelist or uncheck any items that should not be deleted. Whitelist items via right clicking on selected items. Manage whitelist via "Menu" button./quote

 

[Arcadian]

[FONT=&quot]Not sure if this is any help but have you ever tried Junkware Removal Tool by Malwarebytes which I now always fall back on in perhaps not quite so complicated situations such as yours? My guess is that you've perhaps got too many adware apps. running at once.

I've now used JRT and CCleaner entirely on their own and nothing else for ages with no pro[FONT=&quot]blems [/FONT]so might be worth a try....?

First download JRT which is free and then run it. It's very thorough and will take time perhaps 20 minutes or more for the first time so you have to be patient.

Malwarebytes | Junkware Removal Tool

Finally install and run the also free version of CCleaner alone which is always more than adequate....

CCleaner - Free Download or try CCleaner Professional - Piriform

Hope this helps
[/FONT]

 

[Callender]

Okay nothing but PUP's in the logs. Could you attach the ZHP Cleaner log?

Have a look at text files stored here:

C:\Users\Steve\AppData\Roaming\ZHP

 

[Callender]

I reckon you should select this lot for removal by selecting in ADWcleaner

PUP.Optional.Social2Search, HKLM\SOFTWARE\WOW6432NODE\Socia2Sear Browser Enhancer, No Action By User, [443], [345866],1.0.1177
PUP.Optional.Hicosmea, HKU\S-1-5-21-2339143647-2961872537-890903407-1000_Classes\CLSID\{56FDF344-FD6D-11d0-958A-006097C9A090}, No Action By User, [1284], [234782],1.0.1177
PUP.Optional.Social2Search, HKLM\SOFTWARE\Socia2Sear Browse Enhancer, No Action By User, [443], [345866],1.0.1177
PUP.Optional.Hicosmea, HKU\S-1-5-21-2339143647-2961872537-890903407-1000_Classes\WOW6432NODE\CLSID\{56FDF344-FD6D-11d0-958A-006097C9A090}, No Action By User, [1284], [234782],1.0.1177
PUP.Optional.Hicosmea, HKU\S-1-5-21-2339143647-2961872537-890903407-1000_Classes\WOW6432NODE\CLSID\{62BE5D10-60EB-11d0-BD3B-00A0C911CE86}, No Action By User, [1284], [341170],1.0.1177
PUP.Optional.Hicosmea, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{a329d60a-cb9f-440b-f789-14aa80a9d985}, No Action By User, [1284], [342227],1.0.1177
PUP.Optional.Hicosmea, HKU\S-1-5-21-2339143647-2961872537-890903407-1000\SOFTWARE\magryful, No Action By User, [1284], [342228],1.0.1177
PUP.Optional.Social2Search.Gen, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\d12306a9fb67fb020af6d2c29e0ee382|DISPLAYNAME, No Action By User, [18118], [261569],1.0.1177

 

[Callender]

After I ran the 'Malwarebytes" scan. I couldn't fine the log. I new the log file name (malware log.txt). I typed that into the run cmd box and I got the 1st error message, see the screen capture bellow. Widows stated that it couldn't find the file named 'malware log.txt'. I next told the run cmd box to search for all txt files (*.txt). I got the same error message "can't find *.txt" ether. I finely found the log file with a manual search in the root directory on the hard drive.

For all programs linked there should be a way to open the log from within the GUI. No need to go searching for logs.

 

[reble]

I know I can open the log from within the prog. I went looking for the malware log after saving the file to note pad so I could post the info here.

A new problem has cropped up. The wifi icon in the tray next to the clock shows look the drawing I made bellow a square box with a red X on top of the box. The wifi is still working on the laptop but the normal icon is not there. I keep notes when I run across a new problem. That way I can go and look up my notes and fix it again if the same problem pops up again, rather then ask online again. I did do the standerd wirelesss card tests, no change.

For all programs linked there should be a way to open the log from within the GUI. No need to go searching for logs.

 

[Callender]

RE: Red X on Wireless Network Connection Icon. I don't know much about that. I've seen it myself a few times in the past and resetting the router via the hard reset button usually fixes it for me along with a reboot. However there have been times when I needed to rewire the master socket. Check DNS and try changing to something else.

DNS Addressing - How to Change in Windows 7

 

[Callender]

Try running this:

Download Wireless Wizard - MajorGeeks

Warning - it's Ad Supported but just displays small ads in the GUI.

Try Networks > Update Network Profile

Tools > Test & Fix