[RESOLVED AND CLOSED]Problems with removing windows processes accelerator

[malwarekiller]

RE: Problems with removing windows processes accelerator

u have to copy paste it in notepad.

Open the file menu

select save as

choose your desktop

save it as cfscript.txt

 

[Igorica]

RE: Problems with removing windows processes accelerator

When I started to copy CFScript to ComboFix I got the message is "It appears that the name CFScript is incorrectly spelt", and then the mozilla disappears and nothing happens. Can I get more help?

 

[malwarekiller]

RE: Problems with removing windows processes accelerator

save it as CFScript and not cfscript.txt

choose the file type in save as window as all files.

 

[Igorica]

RE: Problems with removing windows processes accelerator

I did it. Here is the log...

 

[malwarekiller]

RE: Problems with removing windows processes accelerator

OK now save this as CFscript and run it in the same way and attach the log

Folder::
e:\Program Files\ConduitEngine
e:\Program Files\BabylonToolbar
e:\Program Files\ToggleEN
e:\Program Files\AskBarDis
e:\Program Files\Brothersoft
e:\Program Files\PHPNukeEN
e:\Program Files\iMesh Applications
e:\Program Files\uTorrent

 

[Igorica]

RE: Problems with removing windows processes accelerator

OK now save this as CFscript and run it in the same way and attach the log

Folder::
e:\Program Files\ConduitEngine
e:\Program Files\BabylonToolbar
e:\Program Files\ToggleEN
e:\Program Files\AskBarDis
e:\Program Files\Brothersoft
e:\Program Files\PHPNukeEN
e:\Program Files\iMesh Applications
e:\Program Files\uTorrent

Done!

 

[malwarekiller]

RE: Problems with removing windows processes accelerator

what are your current problems?

 

[Igorica]

RE: Problems with removing windows processes accelerator

There is windows security alert on my taskbar, and I cannot turn on my Avira AntiVirus protection. In the security center virus protection is not found. What should I do about it? And also some programs like iMesh shows the message that I need to re-install them, when I click ok to do that nothing happens.

 

[malwarekiller]

RE: Problems with removing windows processes accelerator

Hi Imesh are the applications we removed...

go to control panel>add remove programs>select Imesh and select uninstall.

U will have to re-install Avira.

Use the avira uninstaller tool that can be found here:
http://singularlabs.com/uninstallers/security-software/

now reinstall avira...download installer from here:
http://www.avira.com/en/for-home

Launch it and go follow the on screen prompts and your avira will be back

 

[malwarekiller]

RE: Problems with removing windows processes accelerator

P.S. This is a reply to your PM...u have reached the PM limit so here is the answer....

I wouldnt recommend u to re-install I-Mesh

but if u want u can :blush:

As i saind earlier they can become a reason for u becoming infected

 

[malwarekiller]

RE: Problems with removing windows processes accelerator

Via PM u asked whether we are done or not? yep! we are done....

Subject to no further problems

I will remove my tools now and give some recommendations, but, I would like you to run for 24 hours or so and come back if you have any problems

Now the best part of the day ----- Your log now appears clean :thumbsup:

A good workman always cleans up after himself so..The following will implement some cleanup procedures as well as reset System Restore points:

Remove ComboFix

• Hold down the Windows key + R on your keyboard. This will display the Run dialogue box
• In the Run box, type in ComboFix /Uninstall
   (Notice the space between the "x" and "/") 
  then click OK
• Follow the prompts on the screen
• A message should appear confirming that ComboFix was uninstalled

Run OTL

• Under the Custom Scans/Fixes box at the bottom, paste in the following
  

  :Commands
  [resethosts]
  [emptytemp]
  [CLEARALLRESTOREPOINTS]
  [Reboot]

• Then click the Run Fix button at the top
• Let the program run unhindered, reboot the PC when it is done

Run OTL and hit the cleanup button. It will remove all the programmes we have used plus itself.

We will now confirm that your hidden files are set to that, as some of the tools I use will change that

• Click Start.
• Open My Computer.
• Select the Tools menu and click Folder Options.
• Select the View Tab.
• Under the Hidden files and folders heading select Do not show hidden files and folders.
• Click Yes to confirm.
• Click OK.

Your Java is out of date.
Older versions have vulnerabilities that malware can use to infect your system.
Please follow these steps to remove older version of Java components and upgrade the application.

Upgrading Java:

• Go to this site and click Do I have Java
• It will check your current version and then offer to update to the latest version

Now that you are clean, to help protect your computer in the future I recommend that you get the following free programmes:

Malwarebytes.

Update and run weekly to keep your system clean

Download and install FileHippo update checker and run it monthly it will show you which programmes on your system need updating and give a download link

It is critical to have both a firewall and anti virus to protect your system and to keep them updated. To keep your operating system up to date visit

• Microsoft Windows Update

To learn more about how to protect yourself while on the internet read our little guide How did I get infected in the first place ?Keep safe :wave:

If u appreciate my help,then dont forget to give me kudos

 

[Igorica]

RE: Problems with removing windows processes accelerator

Thank you very much Sir, thank you!

I reinstalled ComboFix and started to run OTL but OTL couldn't work because of Avira protection. Do I have to turn off AntiVirus protection and then run OTL? Is it safe to do that?

 

[malwarekiller]

RE: Problems with removing windows processes accelerator

u mean u removed combofix right??

just remove one of the lines from OTL fix that i gave and it should be ok.

 

[Igorica]

RE: Problems with removing windows processes accelerator

u mean u removed combofix right??

just remove one of the lines from OTL fix that i gave and it should be ok.

Yes, I removed it, but now I have problems with OTL running. I removed one of the lines but it didn't work again.

 

[malwarekiller]

RE: Problems with removing windows processes accelerator

OK...try this

ATF-Cleaner

Please download ATF Cleaner by Atribune.

• Save it to your desktop
• Double-click ATF-Cleaner.exe to run the program.
• Under Main choose: Select All
• Click the Empty Selected button.
  
  If you use Firefox browser
• Click Firefox at the top and choose: Select All
• Click the Empty Selected button.
  
  NOTE: If you would like to keep your saved passwords
  please click No at the prompt.
  
  If you use Opera browser
• Click Opera at the top and choose: Select All
• Click the Empty Selected button.
  
  NOTE: If you would like to keep your saved passwords
  please click No at the prompt.
  
• Click Exit on the Main menu to close the program.

 

[Igorica]

RE: Problems with removing windows processes accelerator

I did it with ATF cleaner. Thanks again!