[SOLVED] Win 10 Pro -ran WinDefender Threat Found & removed- PUA:Win32/AskToolbar,still comes back, request help permanently remove Also

[officomputer]

No did not

 

[officomputer]

last time ran it under user other this time under user marty and not in safe mode

 

[DR M]

Use only one profile while we are in this procedure.

Open Malwarebytes, go to the profile icon (upper right), click on it and choose My subscription. Choose Deactivate my subscription.

After that, sign in with Safe mode and run both, Malwarebytes and AdwCleaner, as instructed above.

 

[officomputer]

Am not clear.. deactivated mb. subscription
Am still in safe mode on computer
Do i reactivate subscription on MB to run it?
Do i sign out of safe mode and sign back in?

 

[DR M]

Do not reactivate the subscription. You have the free version now. Not the trial.

In safe mode, run the two tools as instructed.

 

[officomputer]

ok got it thank you

 

[officomputer]

btw, now in safemode, the sound volume on taskbar shows x out - when right clicked it said speaker settings (UNKNOWN), would not do anything when choose to troubleshoot, says no speakers or headphones plugged in, when open settings app -does not allow to troubleshoot and says no input or output found- hopefully this scan will fix that, thanks for helps

 

[DR M]

Please, stop using the computer for other things, and just let Malwarebytes run.

After that, run AdwCleaner.

I'll be waiting for the 2 logs.

 

[officomputer]

it is 637 pm MB is on the last part of scan, scanning file system, over 3 hours, at 125 778 files scanned. Last time when shut it down was at over 157,000. Should let it keep running? Only opened this window again to post for now. TY

 

[officomputer]

Shows one detection found thus far

 

[officomputer]

Good day,

MB did not stop, so finally shut it down. Then ran Adwcleaner. Both attached.
However- Histories still missing on two browsers now and Other User Account will not load up now, it does not show up in Task Manager, however, does show up on side bar on desktop.

 

[DR M]

Stay in Safe mode, so we can clean now.


1. AdwCleaner (Clean mode)

To proceed, please do the following:

• Double click AdwCleaner.exe on your Desktop, to run it as you did before.
• Click Scan Now.
• Once the scan completes, AdwCleaner shows you what it found on your computer. Check the boxes next to any items you want to quarantine and disable, then click Next.
• Now, AdwCleaner will show you any preinstalled software it found on your device. Again, check the boxes next to any items you want to quarantine and disable. If nothing found, you won't see this message. If you don't want to remove any preinstalled software, click Cancel and continue.
• Click Continue, then click Restart now, and you’re done.
• Once your computer has restarted:
  • Click the Log Files tab.
  • Click Skip Basic Repair to finish the cleaning process
  • Double click on the latest Clean log (Clean logs have a [C0*] suffix, where * is replaced by a number, the latest scan will have the largest number)[/*]
  • A Notepad file will open containing the results of the removal.
  • Please post the contents of the file in your next reply.

2. Malwarebytes (Clean mode)

THIS TIME DO NOT CANCEL THE SCAN. LET IT RUN UNTIL FINISH, NO MATTER HOW LONG IT WILL TAKE.

Run Malwarebytes as you did before, but this time, when the threats are found:

• Make sure that all threats are selected, and click on Quarantine/Remove selected.
• You may need to restart the computer.
• Open Malwarebytes again, click on the Scanner, and then on the Reports tab.
• Find the report with the most recent date and double click on it.
• Click on Export and then Copy to Clipboard.
• Paste its content here, in your next reply.

In your next reply please post:

1. The AdwCleaner[C0*].txt
2. The Malwarebytes report

 

[officomputer]

just finished Adware, however it it did not give option to restart computer
2 logs in folder - attached
should i restart computer in safe mode or continue to malware instructions? TY

 

[DR M]

Just continue with Malwarebytes instructions.

 

[officomputer]

ok running if like before over 6 hours ...

 

[officomputer]

Good day, update 171,00 items scanned (no detections so far) and still scanning since Saturday afternoon

 

[officomputer]

we need to get into accounting software program - it will not run in safe mode

 

[DR M]

Weird. Stop Malwarebytes and sign in with normal mode.

I can't think why this happens. I'll be back to you soon.

 

[officomputer]

ok thank you

 

[officomputer]

As of 08 /19 /2024 PM

few updates


When attempt to use browser Microsoft edge to look at Malwarebytes site some pages do not load - the same circle happens for example this link https://support.malwarebytes.com/hc...35-Run-and-schedule-scans-in-Desktop-Security

Video images and other pages on sites like Youtube, in chrome browsers firfox and brawe and google chrome- will open page but the images either take longest time to load or remain white spaces where video or image should load



Still unable to access, Primary User Account- name “other” – Administrator- local account

It will open to login then the circle just spins around and not open

Does not show up in Users in Task Manager

Am able to open up log in page, enter password and just goes in circles like attempting to sign in

The User – Other Administrator and the User Marty Administrator, as well as Administrator each show up in the Registry under Users



Backup ran 6 30 2024 and 8 19 2024 pm

Apps and Features Settings show Microsoft Edge webview2 runtime 8172024



Windows Recent Installed Updates

8/12/24 updated 07 2024 Cumulative Update for >NET Framework 3.5 4.8 and 4.8

2 for Wind 10 Version 22J2 for x64 (KB5041019)



Definition Updates: Sec Intelligence Update for Microsoft Defend Antivirus KB2267602 each

Date different version1.415.503.0, 1.415.491.0,,,

812

8 10

809

08 08

08 07 …

System restore shows

8 16, 8 17 8 19 as automatic restore dates