Solved Information getter removal help

September 6, 2013 at 16:36:46
Specs: Windows 7
Information getter removal help
I have a issue I have words highlighted that are ads, I'm not being redirected yet, but I'd like to kill this before that happens, It's some Information getter thing, I'd like to know how to kill it, and I've tried hitmanpro, and have avast for AV software, If I could get some help on this it would be appreciated

See More: Information getter removal help

Report •


#1
September 6, 2013 at 16:54:32
✔ Best Answer
If you mean on webpages that cause little popups when you run the mouse over certain words they are quite commonplace and do not mean you are infected. Advertisers allow these on their webpages.

There are various ways of combatting them but if you are using Intenet Explorer this freebie will get shot of most of them and other nuisances besides:
https://adblockplus.org/en/internet...
You must either go to the above link from Internet Explorer or select the blue E icon if going there from another browser.

It works from IE > Tools > Tracking Protection. Use the EasyList filter, which is kept automatically updated.

Not to be confused with "Simple Adblock" which although free is crippled unless you buy it.


Always pop back and let us know the outcome - thanks

message edited by Derek


Report •

#2
September 6, 2013 at 17:00:26
I mean this, Here's a screen shot of it, It wasn't happeneing on any website Igo on before now, and It's on every website.
http://imageshack.us/content_round....

Report •

#3
September 6, 2013 at 17:05:58
They look very much like what I was imagining. Do they only popup when you run the mouse over them?

Note: I have edited my previous response.

If they have suddenly arrived maybe you have turned off the popup blocker (Tools > IE). Better confirm that you are using IE.

Always pop back and let us know the outcome - thanks

message edited by Derek


Report •

Related Solutions

#4
September 6, 2013 at 17:08:32
I don't use IE I use Firefox, I've used Firefox before and after this happened, they only pop up when I mouse over them, My question is, why suddenly, are they popping up now, instead of two days ago, and Why is there an Information getter, on some of them, and if this isn't a virus, is there any way to get rid of them.

Report •

#5
September 6, 2013 at 17:13:43
OK, you didn't say what browser you were using so I had to guess.

Are you using Adblock Plus in Firefox? If so maybe it has got disabled, see:
Firefox > Tools > Addons > Extensions.

Could you explain what you mean by an "information getter" please?

Always pop back and let us know the outcome - thanks

message edited by Derek


Report •

#6
September 6, 2013 at 17:16:22
If by "information getter" you mean a box that pops up referencing and advert company then it is exactly what I imagined. You need Adblock Plus in Firefox to get shot of them.

Always pop back and let us know the outcome - thanks


Report •

#7
September 6, 2013 at 17:16:50
It says Information Getter, Below some of the ads, Like there might be, a (Insert occupation here) hate him, kind of ad, and below it it says Information getter. Its one of those search assist thing ifd thats any help.

Report •

#8
September 6, 2013 at 17:19:30
A box that references saying Information Getter and search assist in the box?

Report •

#9
September 6, 2013 at 17:21:34
If you haven't got Adblock Plus then try it and see if it fixes them. If you have got it then see if it is enabled (see #5).

The problem with helping from afar is that I've no way to see "exactly" what you are seeing but from your description it sounds just like what I am imagining.

Always pop back and let us know the outcome - thanks


Report •

#10
September 6, 2013 at 17:25:06
I didn't have it I installed it, and it took me to a screen that let me choose to block more than ads, such as malware, social media bttons and tracking, how do I make sure those changes are aplies, As I don't see a apply button.

Report •

#11
September 6, 2013 at 17:26:16
See #5 BUT there is a possibility that what you are describing is one of those wicked toolbars. Download this file (free):
http://www.bleepingcomputer.com/dow...

Save the file somewhere rather than running it. To do the scan you just double click the downloaded file (it doesn't install in the normal sense of the word). You can then look at the log if you wish. It is safe to then run the Clean which removes any toolbar junk that you might have collected. Mostly if finds quite a bit.

Always pop back and let us know the outcome - thanks


Report •

#12
September 6, 2013 at 17:36:48
"I didn't have it I installed it"
OK so "Information Getter" is what you installed - sorry, wasn't clear to me in your original post so I went off at a tangent.

We'll start over. No harm trying ADWCleaner just the same.

Have you tried MalwareBytes freebie?:
http://www.filehippo.com/download_m...
If not install that and run it.

Run the above and in the meantime I will check it out further. I'm in the UK and it's approaching 1.40am. If I don't get back shortly maybe someone else will pop by now the issue is crystal clear.

Always pop back and let us know the outcome - thanks

message edited by Derek


Report •

#13
September 6, 2013 at 17:53:23
No I installed the adblock, which took me to that screen with the ad-ons screen the Adwcleaner thing I did it came up with nothing and I have the adblock plus adblocking everything it didn't work, so finally, I just tried something possible risky, and I clicked on the question mark thing on them and opted out of them, it worked. I'm starting to think MAybe it wasn't a virus, why then though it just started I don't know, I've gone to several webpages to check it out, I don't know if there's mods on this site who can lock topics but If so If you could keep this topic open, so I can just check to make sure nothing else happens with this it would be appreciated.

Report •

#14
September 6, 2013 at 17:55:31
ESET online scanner is another possibility for this one. Hitman Pro has sorted it in the past but it might be a new variant.

I have to go now as it's approaching 2am. Have asked "Johnw" to join us but I've no idea if he is around or has the time to look at this post.

Keep all logs. Thx.

Always pop back and let us know the outcome - thanks

message edited by Derek


Report •

#15
September 6, 2013 at 18:00:46
Re #13

OK, our posts crossed. Good to hear the "symptoms" have stopped and sorry about the initial confusion. The threads are not closed for months so you are OK there. If Johnw does happen to join us he might still wish to run your computer through its paces to see if anything is still lurking.

Really must go now before I fall over LOL.

Always pop back and let us know the outcome - thanks

message edited by Derek


Report •

#16
September 6, 2013 at 18:05:12
Alright for any person with the lightbulb next to their name that sees this, maybe they can help, It just happened for me luckily that steam, Decided to ask me to take a survey, after I opened it and logged in, So I did, It's from steam, I didn't find it on a SITE, but here's what it said the list of my installed programs is, I'ver had some work done on this by Bestbuy so that is probably there stuff they put on there after they fix it I think, If there's anything harmful on there please tell me, and how to get rids of it, It's a long post I apologize.
Installed software:
AbiWord 2.8.6
Adobe Flash Player 11 ActiveX
Adobe Flash Player 11 Plugin
Adobe Reader XI (11.0.02)
Apple Application Support
Apple Mobile Device Support
Apple Software Update
ATI AVIVO64 Codecs
ATI Catalyst Install Manager
avast! Free Antivirus
Best Buy pc app
BioExcess
Bonjour
BucksBee Loyalty Plugin - 100884.rs
Canon MX330 series MP Drivers
Catalyst Control Center - Branding
Catalyst Control Center Graphics Previews Common
Catalyst Control Center InstallProxy
Catalyst Control Center Localization All
Catalyst Control Center Profiles Mobile
CCC Help Chinese Standard
CCC Help Chinese Traditional
CCC Help Czech
CCC Help Danish
CCC Help Dutch
CCC Help English
CCC Help Finnish
CCC Help French
CCC Help German
CCC Help Greek
CCC Help Hungarian
CCC Help Italian
CCC Help Japanese
CCC Help Korean
CCC Help Norwegian
CCC Help Polish
CCC Help Portuguese
CCC Help Russian
CCC Help Spanish
CCC Help Swedish
CCC Help Thai
CCC Help Turkish
ccc-core-static
ccc-utility64
Conexant HD Audio
CyberLink YouCam
D3DX10
Definition Update for Microsoft Office 2010 (KB982726) 64-Bit Edition
EgisTec ES603 WDM Driver
Energy Management
ES603 WDM Driver
Fallout: New Vegas
Google Chrome
Google Drive
Google Toolbar for Internet Explorer
Google Update Helper
HitmanPro 3.7
Internet TV for Windows Media Center
iTunes
Junk Mail filter update
Lenovo EasyCamera
Lenovo EE Boot Optimizer
Lenovo OneKey Recovery
Lenovo Security Suite
Mesh Runtime
Microsoft .NET Framework 4 Client Profile
Microsoft Application Error Reporting
Microsoft Office 2010
Microsoft Office 2010 Service Pack 1 (SP1)
Microsoft Office 365 Home Premium Preview - en-us
Microsoft Office Access MUI (English) 2010
Microsoft Office Access Setup Metadata MUI (English) 2010
Microsoft Office Excel MUI (English) 2010
Microsoft Office Home and Student 2010
Microsoft Office Office 32-bit Components 2010
Microsoft Office OneNote MUI (English) 2010
Microsoft Office Outlook MUI (English) 2010
Microsoft Office PowerPoint MUI (English) 2010
Microsoft Office PowerPoint Viewer 2007 (English)
Microsoft Office Proof (English) 2010
Microsoft Office Proof (French) 2010
Microsoft Office Proof (Spanish) 2010
Microsoft Office Proofing (English) 2010
Microsoft Office Publisher MUI (English) 2010
Microsoft Office Shared 32-bit MUI (English) 2010
Microsoft Office Shared MUI (English) 2010
Microsoft Office Shared Setup Metadata MUI (English) 2010
Microsoft Office Single Image 2010
Microsoft Office Word MUI (English) 2010
Microsoft Security Client
Microsoft Security Essentials
Microsoft Silverlight
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
Mozilla Firefox 23.0.1 (x86 en-US)
Mozilla Maintenance Service
MSVCRT
MSVCRT_amd64
Office 15 Click-to-Run Extensibility Component
Office 15 Click-to-Run Licensing Component
PDFCreator
Port Locker
Power2Go
PowerXpressHybrid
Ralink RT2860 Wireless LAN Card
Realtek Ethernet Controller Driver
Realtek USB 2.0 Reader Driver
Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2804576)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2835393)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2840628)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2840628v2)
Security Update for Microsoft Excel 2010 (KB2597126) 64-Bit Edition
Security Update for Microsoft Filter Pack 2.0 (KB2553501) 64-Bit Edition
Security Update for Microsoft InfoPath 2010 (KB2760406) 64-Bit Edition
Security Update for Microsoft Office 2010 (KB2553091)
Security Update for Microsoft Office 2010 (KB2553096)
Security Update for Microsoft Office 2010 (KB2553371) 64-Bit Edition
Security Update for Microsoft Office 2010 (KB2553447) 64-Bit Edition
Security Update for Microsoft Office 2010 (KB2589320) 64-Bit Edition
Security Update for Microsoft Office 2010 (KB2598243) 64-Bit Edition
Security Update for Microsoft Office 2010 (KB2687276) 64-Bit Edition
Security Update for Microsoft Office 2010 (KB2687501) 64-Bit Edition
Security Update for Microsoft Office 2010 (KB2687510) 64-Bit Edition
Security Update for Microsoft OneNote 2010 (KB2760600) 64-Bit Edition
Security Update for Microsoft Publisher 2010 (KB2553147) 64-Bit Edition
Security Update for Microsoft Visio 2010 (KB2810068) 64-Bit Edition
Security Update for Microsoft Visio Viewer 2010 (KB2687505) 64-Bit Edition
Security Update for Microsoft Word 2010 (KB2760410) 64-Bit Edition
Sendori
Shared C Run-time for x64
Skype™ 6.7
Skype Click to Call
Steam
Synaptics Pointing Device Driver
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217)
Update for Microsoft Office 2010 (KB2553065)
Update for Microsoft Office 2010 (KB2553181) 64-Bit Edition
Update for Microsoft Office 2010 (KB2553267) 64-Bit Edition
Update for Microsoft Office 2010 (KB2553310) 64-Bit Edition
Update for Microsoft Office 2010 (KB2553378) 64-Bit Edition
Update for Microsoft Office 2010 (KB2566458)
Update for Microsoft Office 2010 (KB2598242) 64-Bit Edition
Update for Microsoft Office 2010 (KB2687509) 64-Bit Edition
Update for Microsoft Office 2010 (KB2760631) 64-Bit Edition
Update for Microsoft Office 2010 (KB2767886) 64-Bit Edition
Update for Microsoft OneNote 2010 (KB2553290) 64-Bit Edition
Update for Microsoft Outlook 2010 (KB2597090) 64-Bit Edition
Update for Microsoft Outlook 2010 (KB2687623) 64-Bit Edition
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 64-Bit Edition
Update for Microsoft PowerPoint 2010 (KB2598240) 64-Bit Edition
Update for Microsoft SharePoint Workspace 2010 (KB2589371) 64-Bit Edition
UserGuide
VeriFace
Windows Driver Package - Lenovo (ACPIVPC) System (12/02/2010 6.1.0.1)
Windows Live Communications Platform
Windows Live Essentials
Windows Live ID Sign-in Assistant
Windows Live Installer
Windows Live Language Selector
Windows Live Mail
Windows Live Mesh
Windows Live Mesh ActiveX Control for Remote Connections
Windows Live Messenger
Windows Live MIME IFilter
Windows Live Movie Maker
Windows Live Photo Common
Windows Live Photo Gallery
Windows Live PIMT Platform
Windows Live Remote Client
Windows Live Remote Client Resources
Windows Live Remote Service
Windows Live Remote Service Resources
Windows Live SOXE
Windows Live SOXE Definitions
Windows Live UX Platform
Windows Live UX Platform Language Pack
Windows Live Writer
Windows Live Writer Resources
WinZip 17.0
WMV9/VC-1 Video Playback


Report •

#17
September 6, 2013 at 19:09:38
And now it's popping back up, but only on this site, and only for one ad.

message edited by mg121


Report •

#18
September 6, 2013 at 20:49:39
" Have asked "Johnw" to join us but I've no idea if he is around or has the time to look at this post"
Ok. I'm here Derek, but tied up for about 3 hours.

Will get back ASAP.


Report •

#19
September 7, 2013 at 00:13:19
1: Download & run Unhide
http://www.bleepingcomputer.com/for...
http://download.bleepingcomputer.co...
To run Unhide, simply download it to your desktop and then double-click on the Unhide icon. The program will open a black box and start making the files on your fixed disks visible again. Please note, that this program will not unhide removable drives like flash cards and usb drives as the FakeHDD rogues do not target these types of drives. Once it has finished, the program will display a Windows alert stating that your files have been restored. You should then reboot your computer for all of the settings to go into effect.
Copy & Paste the contents of the log. Let me know if it doesn't produce a log please.

2: Reboot

3: Run RogueKiller
http://www.softpedia.com/get/Securi...
http://www.softpedia.com/progScreen...
http://majorgeeks.com/RogueKiller_d...
http://www.geekstogo.com/forum/file...
http://tigzy.geekstogo.com/roguekil...
http://www.sur-la-toile.com/RogueKi...
Official tutorial
http://tigzyrk.blogspot.com.au/2012...
Download & SAVE to your Desktop.
Quit all programs that you may have started.
Please disconnect any USB or external drives from the computer before you run this scan!
For Vista or Windows 7/8, right-click and select "Run as Administrator to start"
For Windows XP, double-click to start.
Wait until Prescan has finished ...
Then Click on "Scan" button
Wait until the Status box shows "Scan Finished"
click on "delete"
Wait until the Status box shows "Deleting Finished"
Click on "Report" and Copy & Paste the content of the Notepad into your next reply.
The log should be found in RKreport[1].txt on your Desktop
Exit/Close RogueKiller.


Report •

#20
September 7, 2013 at 07:27:59
Johnw
Thank you for joining us.

mg121
Re your #16. Consider removing these if they remain after Johnw has finished looking at your computer:

Best Buy pc app is seen as junkware or bloatware by many.
BucksBee Loyalty Plugin - unnecessary toolbar (could cause redirects).
Sendori - malware/spyware.

I didn't spot anything else that looked unsafe or dubious.

Always pop back and let us know the outcome - thanks


Report •

#21
September 7, 2013 at 11:42:46
Unhide by Lawrence Abrams (Grinler)
http://www.bleepingcomputer.com/
Copyright 2008-2013 BleepingComputer.com
More Information about Unhide.exe can be found at this link:
http://www.bleepingcomputer.com/for...

Program started at: 09/07/2013 11:33:27 AM
Windows Version: Windows 7

Please be patient while your files are made visible again.

Processing the C:\ drive
Finished processing the C:\ drive. 154220 files processed.

Processing the D:\ drive
Finished processing the D:\ drive. 2010 files processed.

The C:\Users\rikki\AppData\Local\Temp\smtmp\ folder does not exist!!
Unhide cannot restore your missing shortcuts!!
Please see this topic in order to learn how to restore default
Start Menu shortcuts: http://www.bleepingcomputer.com/for...

Searching for Windows Registry changes made by FakeHDD rogues.
- Checking HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
- Checking HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
- Checking HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
* Start_ShowSearch was set to 0! It was set back to 1!
* Start_ShowSetProgramAccessAndDefaults was set to 0! It was set back to 1!

Program finished at: 09/07/2013 11:41:44 AM
Execution time: 0 hours(s), 8 minute(s), and 16 seconds(s)

Here's the log, I'll get the second part in a minute,.


Report •

#22
September 7, 2013 at 12:13:56
RogueKiller V8.6.9 _x64_ [Sep 3 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Feedback : http://www.adlice.com/forum/
Website : http://www.adlice.com/softwares/rog...
Blog : http://tigzyrk.blogspot.com/

Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Started in : Normal mode
User : rikki [Admin rights]
Mode : Remove -- Date : 09/07/2013 12:12:44
| ARK || FAK || MBR |

¤¤¤ Bad processes : 0 ¤¤¤

¤¤¤ Registry Entries : 2 ¤¤¤
[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REPLACED (0)
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0)

¤¤¤ Scheduled tasks : 0 ¤¤¤

¤¤¤ Startup Entries : 2 ¤¤¤
[Default][SUSP PATH] Best Buy pc app.lnk : C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Best Buy pc app.lnk @C:\ProgramData\Best Buy pc app\ClickOnceSetup.exe "C:\ProgramData\Best Buy pc app\Best Buy pc app.application" [-][7][-] -> DELETED
[Default User][SUSP PATH] Best Buy pc app.lnk : C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Best Buy pc app.lnk @C:\ProgramData\Best Buy pc app\ClickOnceSetup.exe "C:\ProgramData\Best Buy pc app\Best Buy pc app.application" [-][7][-] -> [0x2] The system cannot find the file specified.

¤¤¤ Web browsers : 0 ¤¤¤

¤¤¤ Particular Files / Folders: ¤¤¤

¤¤¤ Driver : [NOT LOADED 0x0] ¤¤¤

¤¤¤ External Hives: ¤¤¤

¤¤¤ Infection : ¤¤¤
Second report.


Report •

#23
September 7, 2013 at 12:17:41
and now there's a 7-zip I don't want It says version 9.21 and when I try to uninstall it, instead of just uninstsalling it, its saying are you sure you want to uninstall, Is this normal, and if not how the heck do I get this out.

message edited by mg121


Report •

#24
September 7, 2013 at 12:18:34
Sorry didn't get all of the second report last time, Here's the whole thing.
RogueKiller V8.6.9 _x64_ [Sep 3 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Feedback : http://www.adlice.com/forum/
Website : http://www.adlice.com/softwares/rog...
Blog : http://tigzyrk.blogspot.com/

Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Started in : Normal mode
User : rikki [Admin rights]
Mode : Remove -- Date : 09/07/2013 12:12:44
| ARK || FAK || MBR |

¤¤¤ Bad processes : 0 ¤¤¤

¤¤¤ Registry Entries : 2 ¤¤¤
[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REPLACED (0)
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0)

¤¤¤ Scheduled tasks : 0 ¤¤¤

¤¤¤ Startup Entries : 2 ¤¤¤
[Default][SUSP PATH] Best Buy pc app.lnk : C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Best Buy pc app.lnk @C:\ProgramData\Best Buy pc app\ClickOnceSetup.exe "C:\ProgramData\Best Buy pc app\Best Buy pc app.application" [-][7][-] -> DELETED
[Default User][SUSP PATH] Best Buy pc app.lnk : C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Best Buy pc app.lnk @C:\ProgramData\Best Buy pc app\ClickOnceSetup.exe "C:\ProgramData\Best Buy pc app\Best Buy pc app.application" [-][7][-] -> [0x2] The system cannot find the file specified.

¤¤¤ Web browsers : 0 ¤¤¤

¤¤¤ Particular Files / Folders: ¤¤¤

¤¤¤ Driver : [NOT LOADED 0x0] ¤¤¤

¤¤¤ External Hives: ¤¤¤

¤¤¤ Infection : ¤¤¤

¤¤¤ HOSTS File: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts


¤¤¤ MBR Check: ¤¤¤

+++++ PhysicalDrive0: ST925031 5AS SATA Disk Device +++++
--- User ---
[MBR] c983999b9f617ee63eb69a268fa09f6b
[BSP] 721caaf3a1a8fcbb0439b111feead370 : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 200 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 411648 | Size: 193473 Mo
2 - [XXXXXX] EXTEN-LBA (0x0f) [VISIBLE] Offset (sectors): 396644352 | Size: 29692 Mo
3 - [XXXXXX] COMPAQ (0x12) [VISIBLE] Offset (sectors): 457453568 | Size: 15109 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Finished : << RKreport[0]_D_09072013_121244.txt >>
RKreport[0]_S_09072013_121237.txt


Report •

#25
September 7, 2013 at 12:59:04
Re #23

Strange, usually there is a means to uninstall after it says do you want to...etc. Often, but not always, there are two places to uninstall programs - the control Panel and a provided uninstall in the Start Menu. If that happens to be the case then maybe the other one will work for you.

Otherwise Revo Uninstaller free should get shot of it:
http://www.revouninstaller.com/revo...
.

Always pop back and let us know the outcome - thanks


Report •

#26
September 7, 2013 at 13:12:13
That fixed it, thank you.

Report •

#27
September 7, 2013 at 15:39:40
"That fixed it, thank you"
We now need to do another check for remnants.

Run Junkware Removal Tool
http://www.softpedia.com/get/Securi...
http://www.softpedia.com/progScreen...
http://www.bleepingcomputer.com/dow...
http://thisisudax.blogspot.com.au/2...
Download Junkware Removal Tool to your desktop.
Warning! Once the scan is complete JRT will shut down your browser with NO warning.
Shut down your protection software now to avoid potential conflicts.
Temporarily disable your antivirus and any antispyware real time protection before performing a scan. Click this link to see a list of security programs that should be disabled and how to disable them.
http://www.bleepingcomputer.com/for...
http://www.techsupportforum.com/for...
Run the tool by double-clicking it. If you are using Windows Vista or Windows 7/8, right-click JRT and select Run as Administrator
The tool will open and start scanning your system.
Please be patient as this can take a while to complete depending on your system's specifications.
On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
Copy and Paste the contents of the JRT.txt log please.


Report •

#28
September 7, 2013 at 18:39:07
unkware Removal Tool (JRT) by Thisisu
Version: 5.5.8 (09.05.2013:1)
OS: Windows 7 Home Premium x64
Ran by rikki on Sat 09/07/2013 at 18:03:27.39
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


~~~ Services

~~~ Registry Values

~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\freecause
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-4147915552-3947443527-3961044401-1001\Software\IB Updater

~~~ Files

Successfully deleted: [File] "C:\Users\rikki\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\driverscanner.lnk"

~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\best buy pc app"
Successfully deleted: [Folder] "C:\Users\rikki\appdata\local\best buy pc app"
Successfully deleted: [Folder] "C:\Program Files (x86)\bucksbee loyalty plugin - 100884.rs"
Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\uniblue"

~~~ FireFox

Successfully deleted: [File] C:\user.js
Emptied folder: C:\Users\rikki\AppData\Roaming\mozilla\firefox\profiles\1qvk77l0.default-1375766792890\minidumps [7 files]

~~~ Chrome

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\niogeckbkdcabhnapjbkeiklablhjoca

~~~ Event Viewer Logs were cleared

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Sat 09/07/2013 at 18:37:24.46
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Here's the log.


Report •

#29
September 7, 2013 at 19:50:47
Is the comp still Ok?

Report •

#30
September 7, 2013 at 21:14:16
My PC's doing fine.

Report •

#31
September 7, 2013 at 21:21:04
As you can see, you have a lot of stuff installed, that you did not know had been installed.
A lot of programs, now give you the choice to install toolbars & other during the install. Either uncheck these items during install, or use Custom install. No more click, click during an install, you have to read after each click.

You sholud be right now.


Report •

#32
September 8, 2013 at 12:53:16
Nice one Johnw and mg121

mg121
If you feel sure all is OK now, choose a Best Answer, which will mark this post as Solved. It doesn't prevent you coming back to this thread if you should need to - they remain open for months.

Always pop back and let us know the outcome - thanks


Report •

#33
September 8, 2013 at 13:57:44
alright, thank you to you both.

Report •

#34
September 8, 2013 at 15:07:35
Gotta feeling Johnw deserved Best Answer on this one. Whatever, I'm sure we are both pleased that you are now out of trouble. Johnw is away right now.

Always pop back and let us know the outcome - thanks


Report •

#35
September 12, 2013 at 00:08:27
"Whatever, I'm sure we are both pleased that you are now out of trouble"
Yep, that's main thing for me.

Report •


Ask Question