Solved Undesired Applications, Files and Folders are written in C:\ automatically

[Arslan Guzel]

I am annoyed by the undesired behavior of my computer. I run windows 7 64-bit platform. Problems noticed by me are described as follows.
Folders like background_fault, bookness, Dayglad, Dribckdreruward, PunkBuster, Zoohair. Files with random names are observed in the C:\ directory eventhough I have deleted them earlier. Some applications like City Vice.exe are installed without notification. When I use Internet for more than one or two hours the homepage, search engine also get changed by itself. Like trotrux.com or luckysite123.com becomes the homepage and search engine. Eventually, pop-up ads also irritated me.
For the homepage problem I denied all permissions fro cookies, javascript, microphone etc. the I started removing the randomly named files and also uninstalled applications like city vice or so. But even then after a couple of days all things start reverting to the earlier status. I have to follow the same steps over and over again. Later i installed Avira free antivirus and Avira scout browser which reduced the problem considerably, however, the remaining problem was signinficant. Now Scout browser has been discontinued by Avira Co. so i have installed Chrome with Avira extension in it.

 

[TwinHeadedEagle]

Hello,

Scan with Malwarebytes' Anti-Malware

Please download Malwarebytes Anti-Malware and save it to your desktop.

• Install the progam.
• Click the Settings tab, in the left panel choose Protection and tick Scan for rootkits.
• Click the Scan tab, choose Threat Scan is checked and click Start Scan.
• If threats are detected, click the Apply Actions button. You will now be prompted to reboot. Click Yes.
• Upon completion of the scan (or after the reboot), click the Reports tab.
• Double-click the Scan Log.
• At the bottom click Export and choose Text file.

Save the file to your desktop and include its content in your next reply.

 

[Arslan Guzel]

I scanned my PC with malwarebytes application. The scan result has been saved as .txt file and is attached herewith. Also eversince the install of this application, I am noticing continuous pop-ups by Malwarebytes notifying, "Website blocked", and svchost.exe is also written there. I have checked in the task manager and i see that svchost.exe is absent. Kindly tell me why this is shown and whether this is a bad or a good sign.
Awaiting your response.
Have a nice day!

 

[TwinHeadedEagle]

Yes, there is still more malware on your computer. Did you quarantine threats with MalwareBytes successfully? Can you run one more or two scans until it shows no threats detected?

 

[Arslan Guzel]

Yes. I scanned the computer two more times just after I sent you the report. And now there are only 5 threats which are not being quarantined. I left the PC for an hour. I am attaching the results. Now what should I do?

 

[TwinHeadedEagle]

Scan with Farbar Recovery Scan Tool

Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• Make sure that Addition.txt option is checked.
  
  
  
  
  
• Press Scan button and wait.
• The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.

Please attach report into your next reply.

 

[Arslan Guzel]

I have scanned again as per your mention.
The '.txt' files have been attached herewith.

 

[TwinHeadedEagle]

Please download Zemana AntiMalware and save it to your Desktop.

• Install the program and once the installation is complete it will start automatically.
• Without changing any options, press Scan to begin.
• After the short scan is finished, if threats are detected press Next to remove them.

Note: If restart is required to finish the cleaning process, you should click Reboot. If reboot isn't required, please restart your computer manually.​

• Open Zemana AntiMalware again.
• Click on
  
  icon and double click the latest report.
• Now click File > Save As and choose your Desktop before pressing Save.
• The only left thing is to attach saved report in your next message.

Fix with AdwCleaner

Please download AdwCleaner by Xplode and save the file to your Desktop.

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
• Accept the Terms of use.
• Wait until the database is updated.
• Click Scan.
• When finished, please click Clean.
• Your PC should reboot now.
• After reboot, logfile will be opened. Copy its content into your next reply.

Note: Reports will be saved in your system partition, usually at C:\Adwcleaner

 

[Arslan Guzel]

i have scanned as per your mention. Here are the reports Mr. Genius.

 

[TwinHeadedEagle]

How is your computer behaving now?

 

[Arslan Guzel]

The computer is behaving totally fine.
Also could you tell me if the problem arises again in the future, then how will I use the Malwarebytes application because it gave only 15 days trial.

 

[TwinHeadedEagle]

You can end MalwareBytes trial at any time and continue with Free version.