New
#111
Florida Rene,
You may want to reconsider following Post #103...
Seriously.
Virus Deletion Now Makes Internet Access Impossible
Florida Rene,
You may want to reconsider following Post #103...
Seriously.
Virus Deletion Now Makes Internet Access Impossible
Thank you, Cottonball.
I ran the Farbar routines from fresh downloads this morning. (Not as Admin because I didn't think to do so). The 3 reports you requested are attached.
BTW, all three of my Internet access programs -- IE, FF, Chrome -- are now working fine on the infected machine...and that is THANKS TO SEVEN FORUMS POSTERS!After running the two Farbar routines, SuperAntiSpyware has the same report as yesterday (see my above post). Maybe it's wrong? Ransack can't find those entries. Do I need TuneUp Utilities or System Mechanic or something similar to clear those references?
I greatly appreciate the help.
HAPPY HOLIDAYS to all the Gurus on Seven Forums!
Please read... How to delete Extensions in Firefox:
How to delete extensions and plug-ins from Firefox - PC Advisor
Thank you, Jacee...and Happy Holidays 2 U.
I read that report and followed it. No extensions in my FF. Disabled all questionable plug-ins.
Now running Mbam again as admin in Safe Mode with Networking.
Will report later.
Basically, I'm thrilled that Seven Forums gurus were able to get my Internet Access going again and cleaned out most of the bad stuff. Now I'm in a period of testing and scrubbing. Thank you again.
^^Good^^ :)Now I'm in a period of testing and scrubbing.
Please download SystemLook:
64-bit:
http://jpshortstuff.247fixes.com/SystemLook_x64.exe
Save to your Desktop.
Double-click on SystemLook.exe to run the program.
At the SystemLook program console, copy the content inside the following quote box into the main text field (do not include the word Quote):
Click the Look button to start the scan.:file
C:\Program Files\ScorpionSaver Services\AdpeakProxy.dll
C:\Program Files\ScorpionSaver Services\AdpeakProxy.exe
C:\Program Files\ScorpionSaver Services\AdpeakProxy64.dll
C:\Program Files\ScorpionSaver Services\AdpeakRegisterLSP.exe
C:\Program Files\ScorpionSaver Services\AdpeakRegisterLSP.ini
C:\Program Files\ScorpionSaver Services\AdpeakRegisterLSP64.exe
C:\Program Files\ScorpionSaver Services\InstallDLL.dll
C:\Program Files\ScorpionSaver Services\InstallDLL64.dll
C:\Program Files\ScorpionSaver Services\Installbat.dll
C:\Program Files\ScorpionSaver Services\Installbat64.dll
C:\Program Files\ScorpionSaver Services\Microsoft.Deployment.WindowsInstaller.dll
C:\Program Files\ScorpionSaver Services\Microsoft.Deployment.WindowsInstaller.xml
C:\Program Files\ScorpionSaver Services\PCProxyDLL.dll
C:\Windows\Installer\{6E810AB6-F34E-49A3-A93F-9E503660F718}\
C:\Windows\Installer\{6E810AB6-F34E-49A3-A93F-9E503660F718}\icon64.ico
C:\Windows\SysWOW64\AdpeakProxy.dll
C:\Windows\SysWOW64\AdpeakProxy.ini
C:\Windows\SysWOW64\AdpeakProxyOff.ini
C:\Windows\System32\AdpeakProxy.ini
C:\Windows\System32\AdpeakProxy64.dll
C:\Windows\System32\AdpeakProxyOff.ini
C:\Windows\Temp\AdpeakProxy.log
:service
AdpeakProxy
adproxy
AdpeakWFP
:filefind
*Scorpion*
*Adpeak*
Level Quality Watcher64.exe
Level Quality Watcher32.exe
:folderfind
*Scorpion*
*Adpeak
:regfind
Scorpion
ScorpionSaver
Adpeak
AdpeakProxy
{9DC8FA51-B596-4f77-802C-5B295919C205}
6BA018E6E43F3A949AF3E90563067F81
When finished, a notepad window opens on the Desktop with the results of the scan.
Please post the SystemLook.txt in your reply.
Please do as cottonball instructed. We'll get you out of the "am I still infected?" mode and into a clean and safe environment
Since ScorpionSaver uses a service to run, let's also get a list of started services using the Command Prompt...
Please do the following:
Go to Start > All Programs > Accessories > Command Prompt
At the Command Prompt, copy/paste the following text inside the code box, and press: Enter
To copy the text contained/produced in the Command Prompt, click on the small command icon in the top left corner, and then choose:Code:net start
Edit > Select All
Once again, Edit > Copy
Next, open Notepad, and paste the text to it.
Please post the text in your reply.
To close the Command Prompt, use the [X], or type in: exit Press: Enter