Solved Win 10 Startup RunDLL error "Bootperformace.bin" issue help

[cgboy]

Hi guys, I have already used the malware scanner and it says it is clean, however everytime I start the computer I would get a RunDll error on Bootperformace.bin and the Malwarebytes software would also popup saying it has found a problem a block it. But how can I just remove it so I don't see the error every time in my windows startup screen?

Here is the log from Malwarebytes:

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 5/18/18
Protection Event Time: 3:12 PM
Log File: 9200a66c-5ae8-11e8-837b-c8d3ffd16c2f.json
Administrator: Yes

-Software Information-
Version: 3.5.1.2522
Components Version: 1.0.365
Update Package Version: 1.0.5164
License: Trial

-System Information-
OS: Windows 10 (Build 16299.431)
CPU: x64
File System: NTFS
User: System

-Blocked Malware Details-
File: 1
Adware.FileTour, C:\Users\HP\AppData\Local\Temp\{DCBBEB33-0EE3-4926-91F5-E3A7FB2371B5}\BootPerformance.bin, Quarantined, [396], [515370],1.0.5164


(end)


Thanks

 

[cgboy]

Oh, I also get some random ad popups out of nowhere every now and then maybe 10 min into starting a browser window is that related to the same issue? Any way to fix these issues for good?

Here is the log:

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 5/18/18
Protection Event Time: 3:33 PM
Log File: 6d623c96-5aeb-11e8-a97b-c8d3ffd16c2f.json
Administrator: Yes

-Software Information-
Version: 3.5.1.2522
Components Version: 1.0.365
Update Package Version: 1.0.5164
License: Trial

-System Information-
OS: Windows 10 (Build 16299.431)
CPU: x64
File System: NTFS
User: System

-Blocked Website Details-
Malicious Website: 1
, , Blocked, [-1], [-1],0.0.0

-Website Data-
Category: Malvertising
Domain: go.oclasrv.com
IP Address: 78.140.191.84
Port: [50796]
Type: Outbound
File: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe



(end)

 

[cgboy]

Sorry, I forgot to look at the rule and here are the report files from the FRST scan.

Thanks.

 

[cgboy]

I have tried using AutoRuns and search for Bootperformace.bin but can't find anything, also look into the startup list and nothing there, where is this Bootperformace.bin hiding? I have found it in the temp folder and remove the content within the folder already but every time I restart the message would show up again and the item would show up in the temp folder, can anyone here help?

Thanks

 

[TwinHeadedEagle]

Hello,

Fix with Farbar Recovery Scan Tool

This fix was created for this user for use on that particular machine.

Running it on another one may cause damage and render the system unstable.

​

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• Press the Fix button just once and wait.
• If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
• When finishes FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.

 

[cgboy]

Hi, thanks for the response so you ask the system to remove all of the temp folder files and reset all of the chrome browser settings for the fix? I think it is fixed now, here is the log file, let me know if I need to do anything else thanks : )

 

[TwinHeadedEagle]

Yes, the part of the fix is to remove temporary files and clean Chrome cache. Is everything okay now?

 

[cgboy]

I think so, the pop up is gone now.

Thanks for everything!