Solved CloudScout

L

Lena S.

New Member
Thread author
Verified
Jun 3, 2015
16
0
5
I would appreciate some help with this as I've spent hours trying to clean it now. I ran the Farbar Recovery Scan Tool and am uploading the logs from that. I don't know where the adwcleaner log is now and I don't know what aswMBR is. I also ran the CCleaner. Thanks in advance!
 

Attachments

51a46ae42d560-malwarebytes_anti_malware.png
Scan with Malwarebytes' Anti-Malware

Please re-run
51a46ae42d560-malwarebytes_anti_malware.png
Malwarebytes' Anti-Malware.

  • First of all, select update.
  • Once updated, click the Settings tab, in the left panel choose Detection & Protection and tick Scan for rootkits.
  • Click the Scan tab, choose Threat Scan is checked and click Scan Now.
  • If threats are detected, click the Apply Actions button. You will now be prompted to reboot. Click Yes.
  • Upon completion of the scan (or after the reboot), click the History tab.
  • Click Application Logs and double-click the newest Scan Log.
  • At the bottom click Export and choose Text file.
Save the file to your desktop and include its content in your next reply.



51a612a8b27e2-Zoek.png
Scan with ZOEK

Please download ZOEK by Smeenk and save it to your desktop (preferred version is the *.exe one)
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.

  • Right-click on
    51a612a8b27e2-Zoek.png
    icon and select
    RunAsAdmin.jpg
    Run as Administrator to start the tool.
  • Wait patiently until the main console will appear, it may take a minute or two.
  • In the main box please paste in the following script:
    Code: 
    createsrpoint;
autoclean;
emptyalltemp;
ipconfig /flushdns;b
  • Make sure that Scan All Users option is checked.
  • Push Run Script and wait patiently. The scan may take a couple of minutes.
  • When the scan completes, a zoek-results logfile should open in notepad.
  • If a reboot is needed, it will be opened after it. You may also find it at your main drive (usually C:\ drive)

Post its content into your next reply.
 
Still got the dang ads! It seems to be making things a bit slow as well, although not horribly slow.
 
FRST.gif
Scan with Farbar Recovery Scan Tool

Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.
  • Right-click on
    FRST.gif
    icon and select
    RunAsAdmin.jpg
    Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • Make sure that Addition option is checked.
  • Press Scan button and wait.
  • The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.
Please include their content into your next reply.
 
FRST.gif
Fix with Farbar Recovery Scan Tool

icon_exclaim.gif
This fix was created for this user for use on that particular machine.
icon_exclaim.gif

icon_exclaim.gif
Running it on another one may cause damage and render the system unstable.
icon_exclaim.gif
​

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

  • Right-click on
    FRST.gif
    icon and select
    RunAsAdmin.jpg
    Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • Press the Fix button just once and wait.
  • If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
  • When finished FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.



adwcleaner_new.png
Fix with AdwCleaner

Please download AdwCleaner by Xplode and save the file to your Desktop.
  • Right-click on
    adwcleaner_new.png
    icon and select
    RunAsAdmin.jpg
    Run as Administrator to start the tool.
  • Wait until the database is updated.
  • Accept the Terms of use and click Scan.
  • When finished, please click Clean.
  • Upon completion, click Report. A log (AdwCleaner[S*].txt) will open.

Please include the contents of that file in your reply.

Note: Reports will be saved in your system partition, usually at C:\Adwcleaner
 

Attachments

I think it worked! Cautiously optimistic, lol.

The adwcleaner log:


# AdwCleaner v4.203 - Logfile created 03/06/2015 at 17:20:59
# Updated 30/04/2015 by Xplode
# Database : 2015-06-01.1 [Server]
# Operating system : Windows 7 Home Premium Service Pack 1 (x64)
# Username : Eleanor - ELEANOR-PC
# Running from : C:\Users\Eleanor\Desktop\adwcleaner_4.203.exe
# Option : Scan

***** [ Services ] *****


***** [ Files / Folders ] *****

File Found : C:\Users\Eleanor\AppData\Roaming\Mozilla\Firefox\Profiles\nj9gnlw5.default\user.js
File Found : C:\Users\Eleanor\AppData\Roaming\Opera Software\Opera Stable\Local Extension Settings\cigiagpbkapepgklncnajbakkpkopmam

***** [ Scheduled tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Found : HKCU\Software\AppDataLow\Software\SmartWeb
Key Found : HKLM\SOFTWARE\ORBTR
Key Found : HKLM\SOFTWARE\Universal

***** [ Web browsers ] *****

-\\ Internet Explorer v11.0.9600.17801


-\\ Mozilla Firefox v34.0.5 (x86 en-GB)


-\\ Google Chrome v43.0.2357.81

[C:\Users\Eleanor\AppData\Local\Google\Chrome\User Data\Default\Preferences] - Found [Extension] : fjfiaeaopgmgbenipljajjipecobmbni
[C:\Users\Eleanor\AppData\Local\Google\Chrome\User Data\Default\Preferences] - Found [Default_Search_Provider_Data] : hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3333887&octid=EB_ORIGINAL_CTID&ISID=ISID_ID&SearchSource=58&CUI=&UM=8&UP=SPC2E70748-4931-4CEA-8EEB-1707E92897AE&D=060315&q={searchTerms}&SSPV=SPJSBT2A_sp_ch
[C:\Users\Eleanor\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Found [Homepage] : hxxp://www.trovi.com/?gd=&ctid=CT3333887&octid=EB_ORIGINAL_CTID&ISID=ISID_ID&SearchSource=55&CUI=&UM=8&UP=SPC2E70748-4931-4CEA-8EEB-1707E92897AE&D=060315&SSPV=SPJSBT2A_sp_ch

-\\ Opera v29.0.1795.60


*************************

AdwCleaner[R0].txt - [28416 bytes] - [08/03/2015 22:32:48]
AdwCleaner[R10].txt - [5378 bytes] - [31/03/2015 16:16:52]
AdwCleaner[R11].txt - [314 bytes] - [08/04/2015 10:32:49]
AdwCleaner[R12].txt - [5917 bytes] - [08/04/2015 10:39:44]
AdwCleaner[R13].txt - [6243 bytes] - [11/05/2015 20:49:37]
AdwCleaner[R14].txt - [21227 bytes] - [02/06/2015 19:25:49]
AdwCleaner[R15].txt - [3341 bytes] - [02/06/2015 19:35:15]
AdwCleaner[R16].txt - [3331 bytes] - [02/06/2015 19:45:32]
AdwCleaner[R17].txt - [7712 bytes] - [02/06/2015 20:51:59]
AdwCleaner[R18].txt - [3116 bytes] - [03/06/2015 17:19:46]
AdwCleaner[R19].txt - [2385 bytes] - [03/06/2015 17:20:59]
AdwCleaner[R1].txt - [1081 bytes] - [09/03/2015 07:53:31]
AdwCleaner[R2].txt - [1140 bytes] - [09/03/2015 19:44:30]
AdwCleaner[R3].txt - [1466 bytes] - [10/03/2015 14:11:43]
AdwCleaner[R4].txt - [1261 bytes] - [11/03/2015 10:40:58]
AdwCleaner[R5].txt - [1579 bytes] - [12/03/2015 16:30:35]
AdwCleaner[R6].txt - [1638 bytes] - [14/03/2015 11:47:04]
AdwCleaner[R7].txt - [3380 bytes] - [22/03/2015 18:01:16]
AdwCleaner[R8].txt - [3283 bytes] - [26/03/2015 21:15:37]
AdwCleaner[R9].txt - [5317 bytes] - [31/03/2015 16:07:44]
AdwCleaner[S0].txt - [32189 bytes] - [08/03/2015 22:34:51]
AdwCleaner[S1].txt - [20774 bytes] - [02/06/2015 19:27:23]

########## EOF - C:\AdwCleaner\AdwCleaner[R19].txt - [3096 bytes] ##########
 

Attachments

Yep. Loading nice and fast, no ads. Now can you help me unblock my toilet? LOL Kidding!
 
FRST.gif
Scan with Farbar Recovery Scan Tool

Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.
  • Right-click on
    FRST.gif
    icon and select
    RunAsAdmin.jpg
    Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • Make sure that Addition option is checked.
  • Press Scan button and wait.
  • The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.
Please include their content into your next reply.
 

You may also like...