Solved infosis.net- should I be comcernedthat I ran it?

[phoenixmark]

Short story long, I've been having problems with my Dell laptop not saving profiles and whenever I type in tthe password for a secure internet connection I've never used before, I need to take ownership of the profiles program on the next bootup. Not really a big problem, I know to "take ownership" of profiles on next boot up. I've been in contact with Dell tech support about this. Anyways, yesterday I get a phone call claiming to be from windows support. Figuring Dell contacted them (whomever "them" might be) they walked me through this: windows key +r, typed eventvwr. It listed 38,000+ errors. He then told me to go to infosis.net and download team viewer and this allowed him to remotely access my laptop. I did- mistake???? Big mistake???? When he told me my computer has infected files and that my win7 root certificate expired in 2002, I immediatly shut off the computer. BTW, this laptop is 3 months old. The 2002 date is what alerted to me something is wrong with what was going on here.
Is this program I downloaded something I need to be concerned about? I ran a full Norton virus scan. I can not find anything called infosis or ammyy in either program files or program data folders. Nothing shows up in programs and features and Revo does not show anything either. I also ran malwarebytes and nothing showed up there either.
Thanks for any tips, ideas, or suggestions on what I should do next.
Mark

 

[aritra2116]

Yes, absolutely you made a big mistake. These are scam phone calls claiming to be from 'Microsoft' tricking users into downloading potentially unwanted software or otherwise scam you out of your money by asking you for money to fix your 'errors'. Event Viewer errors are common and are not so major until event viewer says it. If all the genuine security software you used show no problems with viruses, then pretty sure you must be safe. Never respond to such phone calls or give them access to team viewer or anything. All they want to do is get access to your data and scam you. Dell or Microsoft would never call you and tell you that you have viruses on your computer. So stay away from such tech support scams.

 

[phoenixmark]

Thank you for the reply. Do they still have access to my computer somehow? Is there any other procedures I can use to see that this program I ran is no longer installed and useable? I really would like to know how they got my cell phone number. I actually am having a Windows issue with my laptop which is why I've been in contact with Dell tech support.

 

[Jacee]

Download DDS from one of these links:
DDS.com
DDS.pif

• Disable any script blocking protection
• Double click the dds icon to run the tool.
• When done, DDS will open two (2) logs:
  1. DDS.txt
  2. Attach.txt <--- will be minimized in the task tray
• Save both reports to your desktop.

Include the contents of both logs in your next post.
The scan will instruct you to post Attach.txt as an attachment.

 

[phoenixmark]

Thanks for the programs to try. How do I disable script blocking? More importsnt, how would I re-enable it and does it need to be disabled or enabled?

 

[Jacee]

"Script blocking programs" refers to your anti-virus, anti-spyware, ... as well as disable any security applications which might interfere with the tools ... rebooting should turn it back on.

 

[phoenixmark]

Thanks. I ran the program and attached the files.

 

[Jacee]

Uninstall TeamViewer


Please download AdwCleaner by Xplode and save to your Desktop.
Step 1.

• Double click on AdwCleaner.exe to run the tool.
  Vista/Windows 7/8 users right-click and select Run As Administrator.
• Click on the Scan button.
• AdwCleaner will begin...be patient as the scan may take some time to complete.
• After the scan has finished, click on the Report button...a logfile (AdwCleaner[R#].txt) will open in Notepad for review (where the largest value of # represents the most recent report).
• The contents of the log file may be confusing. Unless you see a program name that you know should not be removed, don't worry about it. If you see an entry you want to keep, let me know about it.
• Copy and paste the contents of that logfile in your next reply.
• A copy of all logfiles are saved in the C:\AdwCleaner folder which was created when running the tool.

Step 2.
Using AdwCleaner v3: Scan & Clean:
This time click on the Clean button.
Press OK when asked to close all programs and follow the onscreen prompts.
Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
After rebooting, a logfile report (AdwCleaner[S#].txt) will open automatically (where the largest value of # represents the most recent report).
Copy and paste the contents of that logfile in your next reply.
A copy of that logfile will also be saved in the C:\AdwCleaner folder
******Post both .txt logs

 

[andrew129260]

I just want to point out:

Team viewer itself is not a bad program. It is a great program in fact. The people using it to be evil are what makes it bad.

 

[phoenixmark]

I searched for team viewer on my laptop and can not find any references to it.

Here is the results of running adwcleaner as requested in step 1. I see nothing in the log file I want to remove. It all looks good to me. Does anything look not right to you? Do I need to do step 2?

 

[Jacee]

None of those are good ... please follow step 2 to get rid of the Adware!


see what adware is: Adware - Wikipedia, the free encyclopedia

 

[phoenixmark]

Thanks. Will run the program again tommorrow when I start the computer. I'll post the results file as requested.

Mark

 

[phoenixmark]

Here are the results from step 2 as requested.

Mark

 

[Jacee]

Good! Now download Junkware Removal Tool to your desktop.

• Shut down your protection software now to avoid potential conflicts.
• Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
• The tool will open and start scanning your system.
• Please be patient as this can take a while to complete depending on your system's specifications.
• On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
• Post the contents of JRT.txt into your next message.

Next flush the DNS cache.>>> Right click on Command Prompt and choose to run as Administrator.
Copy and paste ipconfig /flushdns then press 'enter' key. Reboot

 

[phoenixmark]

JRT log file attached as requested. Thanks again.

Mark

 

[phoenixmark]

ipconfig /flushdns ran and rebooted.

 

[Jacee]

Good ... now download TFC by Old Timer TFC - Temp File Cleaner by OldTimer - Geeks to Go Forum and save it to your desktop.
Save any unsaved work. TFC will close ALL open programs including your browser!
Double-click on TFC.exe to run it. If you are using Vista/Windows 7 right-click on the file and choose Run As Administrator.
Click the Start button to begin the cleaning process and let it run uninterrupted to completion.

Important! If TFC prompts you to reboot, please do so immediately. If not prompted, {manually reboot the machine anyway to ensure a complete clean}.


Keep TFC! This is a great little app.


Tell me if you're having any problems.

 

[phoenixmark]

Just ran TLC. Manually rebooted system. Any concern about keyloggers?

Thanks so much for your help.
Mark

 

[Jacee]

I didn't see any key loggers. If you do any banking or use a credit card on line, to be on the safe side, change your passwords using a different computer.


Uninstall Adwcleaner:
Double click on AdwCleaner.exe to run the tool again. Click on the Uninstall button.
Click Yes when asked are you sure you want to uninstall.
Both AdwCleaner.exe, its folder and all logs will be removed.


If you have any problems, come as the members of the forum! Don't get involved with any scams again

 

[phoenixmark]

Thanks for everything. If I wasn't (still) having other Windows issues, I would have never gone as far as I did by installing that program. Now, on to trying to solve as to why I have to take ownership of the profiles folder everytime I add another wireless connection.

Mark