Issues with slow windows explorer and malicious websites blocked warnings

[TomSchaedler]

Files attached.

 

[argus]

Helllo,

Before we begin, please note the following:

• I will working be on your Malware issues, this may or may not, solve other issues you have with your machine.
• The logs can take some time to research, so please be patient with me.
• Stay with the topic until I tell you that your system is clean. Missing symptoms does not mean that everything is okay.
• Instructions that I give are for your system only!
• Please do not run any tools until requested ! The reason for this is so I know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.
• Please perform all steps in the order received. If you can't understand something don't hesitate to ask.
• Again I would like to remind you to make no further changes to your computer unless I direct you to do so. I will not help you if you do not follow my instructions.

=====================================




Download

Malwarebytes Anti-Rootkit to your desktop.

• Double-click the icon to start the tool.
• It will ask you where to extract it, then it will start.
• Warning! Malwarebytes Anti-Rootkit needs to be run from an account with administrator rights.
• Click in the introduction screen "next" to continue.
• Click in the following screen "Update" to obtain the latest malware definitions.
• Once the update is complete select "Next" and click "Scan".
• When the scan is finished and no malware has been found select "Exit".
• If malware was detected, make sure to check all the items and click "Cleanup". Reboot your computer.
• Open the MBAR folder and paste the content of the following files in your next reply:
  • "mbar-log-{date} (xx-xx-xx).txt"
  • "system-log.txt"

Scan with Farbar Recovery Scan Tool
Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• Make sure that Addition option is checked.
• Press Scan button and wait.
• The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.

Please include their content into your next reply.

 

[TomSchaedler]

Thanks for your help!!

The malwarebytes anti-rootkit tool removed a registry entry.

Log files are attached.

 

[argus]

Is everything ok now?

 

[TomSchaedler]

Its improved. I'm no longer seeing malicious website connection warnings.

But not everything is OK.
Windows Explorer is still very slow to open, and when I try to download a file from a website, I still get the security warning I uploaded a picture of in my initial post.

 

[argus]

Re-enable downloads in Internet Explorer

1. Close all Internet Explorer windows.
2. Press the Windows key
   
   + R.
3. Type inetcpl.cpl into the Open field and click OK. This will open Internet Properties (otherwise known as Internet Options).
   
   
   
   
   Figure 1-1
   
   
4. Click the Security tab
   
   Reset all zones to default level.
   
   
   
   
   Figure 1-2
   
   
5. When you are finished, click OK to save your changes.

 

[TomSchaedler]

Thanks, that stopped the unable to download file message.

I have found a few other symptoms,
1. My internet history was set to save 0 days. So the malware changed that setting. I reset it to 7.
2. I run a macro that sends an email from Excel. Today I'm getting a popup from Outlook that says another program is trying to send an email on my behalf. A google search sent me to (in Outlook) File - Options - Trust Center - Trust Center Settings - Programmatic Access.
It says there my Antivirus status is Invalid.
I have ESET installed and working. Any idea how to correct the Invalid status?

Also, windows explorer is still very slow to open.