Cabin Dweller Needs Help Removing Tuvaro Malware

[Cabin Dweller]

Cabin Dweller Needs help permanently removing Tuvaro malware from computer

 

[TwinHeadedEagle]

Hi,



Please download AdwCleaner by Xplode and save to your Desktop.

Double click on AdwCleaner.exe to run the tool.

• Click on the Scan button.
• After the scan has finished click on the Clean button.

Press OK when asked to close all programs and follow the onscreen prompts.
Press OK again to allow AdwCleaner to restart the computer and complete the removal process.

• After rebooting, a logfile report (AdwCleaner[S0].txt) will open automatically.
• Post logfile will also be saved in the C:\AdwCleaner folder.

Please download zoek.zip or zoek.rar by smeenk (

) from here or here and save it to your Desktop.
Unpack the archive...

• Close any open browsers
• Temporarily disable your AntiVirus program. (If necessary)
  If you are unsure how to do this please read this or this Instruction.
  
• Double click on zoek.exe to run the tool .
  Please wait while the tool does not start...
  
• Copy the text present inside the code box below and paste it into the large window in the zoek tool:
  
  

  createsrpoint;
  gpt.ini;z 
  C:\Windows\System32\GroupPolicy;v
  C:\Windows\SysWOW64\GroupPolicy;v 
  StandardSearch; 
  emptyfolderscheck; 
  installer-list; 
  installedprogs; 
  uninstall-list;

• Click on
  
  button.
  Please wait until a logreport will open (this can be after reboot)
  
• Save notepad to your Desktop and attach here zoek-results.log
  Note: It will also create a log in the C:\ directory named "zoek-results.log"

 

[Cabin Dweller]

Here is the AdwCleaner file. I had to add the .txt extension

Cabin

 

[Cabin Dweller]

Here is the zoek log file. I hope this workds

 

[TwinHeadedEagle]

Re-run Zoek once more with this script:

C:\Windows\System32\GroupPolicy\GPT.INI
C:\Windows\SysWOW64\GroupPolicy\gpt.ini
C:\Windows\System32\GroupPolicy\Machine;fs
C:\Windows\System32\GroupPolicy\User;fs
Shopper-Pro;ff
Bee Coupons;ff
Freeze.com NetAssistant;ff
Spring Smart;ff
cmclajginlihohopoeofghddnhpplhom;chr
C:\Program Files (x86)\Highlightly;fs
C:\Program Files (x86)\Spring Smart;fs
fgeapihpgbepllencafcpkfbjlkogfan;chr
autoclean;
emptyalltemp;
emptyclsid;
ipconfig /flushdns;b
shortcutfix;

 

[Cabin Dweller]

I hope this is the correct results file. I used the time stamp. Also, will the fix work for IE since I can no longer open it?

 

[TwinHeadedEagle]

How is the situation now? Do you still have problems? What happens when you try to open IE?

 

[Cabin Dweller]

IE still will not open ant FoxFire still opens with Tuvaro

Cabin

 

[Cabin Dweller]

Was the file that I sent from the last script that you wanted me to run the correct file? When IE opens, it gives me a blank page and nothing that I enter into the URL shows up on the page. It doesn't say that it cannot find IE??

 

[Cabin Dweller]

Is there anything else I should try or do I need to re-format the computer?? I would prefer not to have to re-format.

Cabin

 

[TwinHeadedEagle]

I'll be away from PC till sunday, then we will continue...

 

[Cabin Dweller]

Hi Eagle,
Since I had to get the computer reliable over the weekend, I decided to go ahead and format the C drive. I want to thank you for all your help and patience with me.

Thanks again,

Cabin

 

[TwinHeadedEagle]

Thanks for letting me know