Can't Get rid of Quickshare

[Leslie_G]

When I've gone through this in the past, I've gone to the computer's control panel, then to the uninstall/remove list, clicked the program that I wanted to remove, and uninstalled it.

When I try to uninstall QuickShare, I get a message box saying that QuickShare's "installation resource" pathway has been lost (I use Malware Bytes anit-malware, which could have affected this?). (See attached pictures)

My McAfee Anti-Virus protection is ineffective.

The attached pictures show what happens when I click to remove Quickshare and then click cancel to close the message box.

 

[TwinHeadedEagle]

Follow this topic and attach requested reports

http://malwaretips.com/threads/malware-removal-assistance-how-to-get-help.20334/

 

[Leslie_G]

Thank you!!
Here are the reports:

 

[TwinHeadedEagle]

Please download AdwCleaner by Xplode and save to your Desktop.

Double click on AdwCleaner.exe to run the tool.

• Click on the Scan button.
• After the scan has finished click on the Clean button.

Press OK when asked to close all programs and follow the onscreen prompts.
Press OK again to allow AdwCleaner to restart the computer and complete the removal process.

• After rebooting, a logfile report (AdwCleaner[S0].txt) will open automatically.
• Post logfile will also be saved in the C:\AdwCleaner folder.

Please download zoek.zip or zoek.rar by smeenk (

) from here or here and save it to your Desktop.
Unpack the archive...

• Close any open browsers
• Temporarily disable your AntiVirus program. (If necessary)
  If you are unsure how to do this please read this or this Instruction.
  
• Double click on zoek.exe to run the tool .
  Please wait while the tool does not start...
  
• Copy the text present inside the code box below and paste it into the large window in the zoek tool:
  
  

  createsrpoint; 
  StandardSearch; 
  emptyfolderscheck; 
  installer-list; 
  installedprogs; 
  uninstall-list;

• Click on
  
  button.
  Please wait until a logreport will open (this can be after reboot)
  
• Save notepad to your Desktop and attach here zoek-results.log
  Note: It will also create a log in the C:\ directory named "zoek-results.log"

 

[Leslie_G]

Adwcleaner log

 

[Leslie_G]

I'm posting two zoek logs... I accidentally ran the first while I had my browser open and wasn't sure if it would make a difference... And I didn't want to close anything while the program was running. So the first log is with an open browser and the second log is with everything closed.

 

[TwinHeadedEagle]

> Re-run zoek with this script and attach here fresh zoek log results.

emptyfolderscheck;delete
QuickShare;u
[HKEY_USERS\S-1-5-21-3942289474-1141463907-3801749707-1001\Software\Microsoft\Windows\CurrentVersion\Run];r
"L44aamHH5sJ7dL8"=-;r
C:\Users\gillespie\AppData\Roaming\dwme.exe;f
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce];r
"{90140000-003D-0000-0000-0000000FF1CE}"=-;r
"{90140000-001A-0409-0000-0000000FF1CE}"=-;r
HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\RunOnce];r
"{90140000-003D-0000-0000-0000000FF1CE}"=-;r
"{90140000-001A-0409-0000-0000000FF1CE}"=-;r
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run];r
"L44aamHH5sJ7dL8"=-;r
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows];r
"AppInit_DLLs"="";r
bopakagnckmlgajfccecajhnimjiiedh;chr
ekdjfcdinekpfcedakhpngcnaamhiihn;chr
C:\ProgramData\TheBflix;fs
autoclean;
emptyalltemp;
emptyclsid;

 

[Leslie_G]

results:

 

[TwinHeadedEagle]

How is the situation now?

 

[Leslie_G]

The quickshare is gone and computer has not locked up!! Thank you so much!

 

[Leslie_G]

One more question: What anti-virus, spyware, & malware protection do you recommend??

 

[TwinHeadedEagle]

Choose any antivirus you want. You can ask for opinion here at forum and you will get a lot of answers.


I can recommend you this software to avoid Adware in the future:

http://unchecky.com/

Read here how it works --> http://www.howtogeek.com/179758/how-to-avoid-junkware-offers-with-unchecky/



• The following will implement some post-cleanup procedures:

=> Please download DelFix by Xplode to your Desktop.

Run the tool and check the following boxes below;

Remove disinfection tools

Create registry backup

Purge System Restore
Click Run button and wait a few seconds for the programme completes his work.
At this point all the tools we used here should be gone. Tool will create an report for you (C:\DelFix.txt)

The tool will also record healthy state of registry and make a backup using ERUNT program in %windir%\ERUNT\DelFix
Tool deletes old system restore points and create a fresh system restore point after cleaning.