[SOLVED] Win 10 Pro -ran WinDefender Threat Found & removed- PUA:Win32/AskToolbar,still comes back, request help permanently remove Also

DR M · Sep 5, 2024

4 The pup toolbar that still shows up, is that what is in the Shadow 3 image ?

Where do you see that?

In the Windows Defender detections, with a recent date?

officomputer · Sep 6, 2024

Meant to say the pup toolbar threat that is in settings windows security, when run virus and threat protection scan that copied the full line by line results on from earlier
the shadow 3 image is what part of it read and what you mentioned

file: C:\Users\other\AppData\Local\Temp\f85d6ca9-1669-4c9f-a328-f538a2b71753_Backup files 32.zip.753\C\Temp\CrystalClearShare\APNSetup.exe

file: \Device\HarddiskVolumeShadowCopy3\CrystalClearShare\APNSetup.exe

file: \Device\HarddiskVolumeShadowCopy3\Temp\CrystalClearShare\APNSetup.exe

file: \Device\HarddiskVolumeShadowCopy3\Temp\Marty\AppData\Local\AskPartnerNetwork\Toolbar\Updater\IDC\IdcLdr.exe

file: \Device\HarddiskVolumeShadowCopy3\Temp\Marty\AppData\Local\AskPartnerNetwork\Toolbar\Updater\IDC\IdcLdr_x64.exe

No new dates since 8/26/2024 however still shows up on page with option to remove or quarantine for several dates, but nothing happens when remove

DR M · Sep 6, 2024

You keep on insisting about things I already explained to you.

1. You have a disk that needs replacement.
2. The disk's condition makes everything run extremely slow. To run an FRST fix took 2 or 3 days?
3. There are some PUPs detected by Windows Defender in specific places in the computer.
4. I asked you to save your files (documents, pictures, music, videos) in an external, buy a new disk, replace the old one and make a fresh start, without transfer any previous system's backups.

Now, you want to clean the old disk. Why? It will be a dead disk soon. I will give you instructions to remove the shadow copies, but it is possible to take ages again. If you saved your files, just get ready to replace the disk. Everything else, is a waste of time.

I'll give you some last instructions. In case you won't be able to accomplish them, because of the disk's condition, then there is no reason to continue keeping this topic open.

1. Disc cleanup

Press the Windows icon on your keyboard, together with the letter R.
Type in the blank area cleanmgr and then press OK.
Select Drive C and press OK.
Select everything you don't need in the list that will appear. Actually, you can select everything there, but be careful if you need some files in the Downloads folder.
Press the button Clean up system files and wait a bit.
Again, select everything you don't need, including old Windows installations, if any.
Select the tab More options.
Under the title System Restore and Shadow Copies, press Clean up.
Press Delete and OK if you are asked to.
Wait some time (depending of the items that are deleted).
Make a restart when the process is finished.

2. FRST fix

Please do the following to run a FRST fix.

NOTICE: This script was written specifically for this user. Running it on another machine may cause damage to your operating system

Select the entire contents of the code box below, from the "Start::" line to "End::", including both lines. Right-click and select "Copy ". No need to paste anything to anywhere.

Code:

Start::
C:\Users\other\AppData\Local\Temp\f85d6ca9-1669-4c9f-a328-f538a2b71753_Backup files 32.zip.753
C:\ProgramData\Microsoft\Windows Defender\Scans\History\Service
End::

Right-click on FRST64 on your Desktop, to run it as administrator. When the tool opens, click "yes" to the disclaimer.
Press the Fix button once and wait.
FRST will process fixlist.txt
When finished, it will produce a log fixlog.txt on your Desktop.
Post the log in your next reply.

3. Check Windows Defender detections

Check if the specific detections are still shown in Windows Security settings.

officomputer · Sep 6, 2024

Perhaps communication thing coupled with not having knowledge on these things, not to insist ..

as to the previous post, was only clarifying what you had posted as do not know about Shadow images and such and wondered if

1 If the threats are in the temp folders and it was emptied - don't the threats get deleted also?

2 when you said not to save backups, was merely clarifying if that has to be all of the backups- including past years backups OR only whatever is in the shadow copy 3 image? If it can be separated and only not save the apparently corrupted shadow 3 image (As QuickBooks data is necessity)

as Do not have knowledge on how those work really.

4 The pup toolbar that still shows up with ones - dates - mentioned before that ran previously, no new ones,

looks like on threat detections ran previously, To clarify- is that what is in the Shadow 3 image, correct?

If so, was just wondering what happened - happens to them?

Before do anything to save to new external hard drive= also wondered if should uninstall
FRST and Adware cleaner and Malwarebytes before save over to new external drive.

As to your recent post, if read correctly it seems pointless to do more - correct?

Now, since your last post = if would clarify - in the event we decide to do those steps (or not)...

if would clarify about this part- it says:
Users 'other'
Does that mean the second user account called 'other; on windows as the primary user is Marty
and it says Backup files 32 zip does that mean it would only backup temp documents on the user, 'other' or is that for all windows previous Back up files, including Quickbooks?

Start::C:\Users\other\AppData\Local\Temp\f85d6ca9-1669-4c9f-a328-f538a2b71753_Backup files 32.zip.7

Sincerely appreciate your helps thank you

thank you

DR M · Sep 6, 2024

I'll keep it simple.

1. The temp folder was emptied, with everything in it.

2. Here you can take all the info you need about shadow copies. They are going to be deleted with the step 1 (if it completes successfully).

3. f85d6ca9-1669-4c9f-a328-f538a2b71753_Backup files 32.zip.753 in user "other" is going to be deleted.

4. Again: backup only documents, videos, pictures, music. Not programs, like Malwarebytes or Quickbooks. You will have to install again all of your programs in the new disk. That's why you need to take notes about the programs you want to install, and about license keys if you have paid programs.

officomputer · Sep 6, 2024

Eeks- Got it/

Will look at shadow copy info.
Thank you.

DR M · Oct 5, 2024

Since there is nothing else to be done here, I am closing this topic and marking it as Solved.

If you need this topic reopened, please contact a staff member, or send me a personal message (hoover with the mouse on my profile name and choose Start private message).

Search

Search

[SOLVED] Win 10 Pro -ran WinDefender Threat Found & removed- PUA:Win32/AskToolbar,still comes back, request help permanently remove Also

DR M

Sysnative Staff, Security Analyst

officomputer

Well-known member

DR M

Sysnative Staff, Security Analyst

officomputer

Well-known member

DR M

Sysnative Staff, Security Analyst

officomputer

Well-known member

DR M

Sysnative Staff, Security Analyst