[Sennheiser]

When it was infected by the adware

I ran
Malwarebytes Scan
Adwcleaner
JRT
then reset internet settings
deleted all junky programs that were uneeded

(there is hijackthis on there, but I didn't use it as I don't know how)

I ran an FRST scan after this so these logs are up to date with no changes made after the logs were posted

FRST Logs: http://pastebin.com/uXH8ghM2
Addition Logs: http://pastebin.com/15rRm3Tq

(Set to expire in a week)

After all I did, the adware or worse is still on there.

Thanks

[Sleeping With Sirens]

If the adware is gone, you should be good. You went a bit overkill with the software, so I'm almost 100% it's gone.

[Sennheiser]

If the adware is gone, you should be good. You went a bit overkill with the software, so I'm almost 100% it's gone.

Just wanting to make sure there aren't any more problems with the PC

like hidden malware or anything out of the ordinary.

Still get some ads popped on a new page on occasion but not as excessive as before the scans

[Sennheiser]

Still need help with this

Getting a few pop up's still where they shouldn't be

[Sennheiser]

The core of your problem is (imo) your cracked software. As long as you keep it, I don't think that cleaning will have much effect (is your OS legally activated?). I could still attempt to clean the computer, though.

Please read through the points below to ensure this process moves as quickly and efficiently as possible.

• Ensure you read through my instructions thoroughly, and carry out each step in the order specified.
  


• Please do not run any tools or take any steps other than those I provide for you. Independent efforts may make matters worse, and will affect my ability in providing the best set of instructions for you.
  


• Please backup important files before proceeding with my instructions. Malware removal can be unpredictable at times.
  


• If you come across any issues whilst following my instructions, please stop and inform me of the issue in as much detail as possible. Please do not hesitate to ask before proceeding.
  


• I will notify you when I believe your computer is free of malware. Please bear in mind, absence of symptoms does not necessarily correlate to absence of malware, so please wait until the "All Clean".
  

------

Step 1: Potentially Unwanted
The following programs are potentially unwanted. They may bundle third party software, show ads, be on your computer without your consent or have questionable policies and behaviour. Please tell me for each of the following programs if you want to keep it.

• Shop for HP Supplies
  


• HP Games
  

Only thing that was cracked was the microsoft word, that has been there for over a year now.

Everything else was legitimate, the OS is legitimate

---

this is the pop up by the way



happens randomly, same one on any website i go to.

This started occuring almost a month ago

[Sennheiser]

Please answer my question in Step 1. I need to know that before I give further instructions.

Just uninstalled both, neither have been used or ever will be

[Sennheiser]

I ran that fixlog and am going on the sites i usually use to make sure its gone

[Sennheiser]

does bleeping computer get ads normally?

If so, I think it is all good now

[Sennheiser]

It should not show ads. And as I said, we are not done.

ok

ill run another frst scan so we can have updated logs

---

Additions: http://pastebin.com/RSCsCtxH

FRST: http://pastebin.com/H3tNwFHg

---

sorry, here is the fixlog as well http://pastebin.com/jwZLEajM

[Sennheiser]

rougekiller log: http://pastebin.com/ytV9srT2

fixlog: http://pastebin.com/PUHZyxAf

[Black_Georg]

The only way to get rid of that malware is to FORMAT HDD! Do a clean system installation, it'll take you less time then searching for good anti-malware software.

[Sennheiser]

The only way to get rid of that malware is to FORMAT HDD! Do a clean system installation, it'll take you less time then searching for good anti-malware software.

https://hackforums.net/showthread.php?tid=4557247

[Sennheiser]

RogueKiller Fix

• Close any running programmes.
  


• Right-Click RogueKiller.exe and select Run as administrator to run the programme.
  


• Allow the Prescan to complete.
  


• A browser window may open. Close the browser window.
  


• Click .
  


• Upon completion, do the following:
  
  


• Click and place a checkmark next to the following items. Ensure any other items are unchecked.
  
  • [PUM.SearchPage] (X64) HKEY_USERS\S-1-5-21-1255986293-1186383839-1666926913-1001\Software\Microsoft\Internet Explorer\Main | Search Bar : Preserve -> Found
    
  
  
  • [PUM.SearchPage] (X86) HKEY_USERS\S-1-5-21-1255986293-1186383839-1666926913-1001\Software\Microsoft\Internet Explorer\Main | Search Bar : Preserve -> Found
    
  
  
  • [PUP] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows | AppInit_DLLs : C:\ProgramData\FlashBeat\FlashBeat64.dll [x] -> Found
    
  
  
  
  
  
  


• Click .
  


• Click .
  


• Copy the contents of the log and paste in your next reply.
  

done

http://pastebin.com/1aK1D43t

[Sleeping With Sirens]

The only way to get rid of that malware is to FORMAT HDD! Do a clean system installation, it'll take you less time then searching for good anti-malware software.

I really suggest you leave this forum, bud.

[Sennheiser]

JRT Logs: http://pastebin.com/CzTYCgxV

adwcleaner: http://pastebin.com/Uav4rw6T

I think it may be gone now, hasn't come up from what i've seen yet