All Activity

This stream auto-updates     

  1. Today
  2. CeciliaB started following Reports
  3. CeciliaB

    Reports

    CeciliaB replied to Andersyn's question in adaware antivirus 12

    Hi Andersyn, Yes, see here: https://www.adaware.com/user-guide/scan_reports
  4. Yesterday
  5. Andersyn started following Reports
  6. Andersyn

    Reports

    Andersyn posted a question in adaware antivirus 12

    Is it possible to view reports on virus and/or malware that have been removed?
  7. Andersyn Andersyn joined the community
  8. CeciliaB started following Adaware total
  9. CeciliaB
    Hi Peter, Please see this topic: https://forum.adaware.com/index.php?/topic/35079-problem-with-activation-of-paid-versions-of-adaware-antivirus-12/
  10. Peter Boij started following Adaware total
  11. Peter Boij
    Hello... Onely adaware free is working even if adaware total is purchased for? Order number:xxx Renewal date: 2020/11/20 Peter Boij
  12. CeciliaB
    You're welcome and I'm glad the problem is gone. You renamed two Chrome Extensions called Google Translate and Chrome Media Router since they were changed during the same day as your problem started. It's common to have those extensions but in your case they might have been changed in a bad way. If you've another computer you can copy those two folders from the other computer. You can also ask a friend to send them to you. At the end of the week you can delete those renamed files and folders and uninstall FRST in this way: Rename FRST/FRST64.exe to uninstall.exe and run it.
  13. hRc
    The problem seemed to have stopped. I will continue to check for awhile. Thanks for the help! Fix result of Farbar Recovery Scan Tool (x64) Version: 29-11-2020 Ran by micecom (01-12-2020 14:11:11) Run:1 Running from C:\Users\micecom\Downloads Loaded Profiles: micecom Boot Mode: Normal ============================================== fixlist content: ***************** CreateRestorePoint: CloseProcesses: AV: Norton Security (Enabled - Up to date) {A2708B76-6835-6565-CB96-694212954A75} FW: Norton Security (Enabled) {9A4B0A53-225A-643D-E0C9-C077EC460D0E} Norton Online Backup (HKLM-x32\...\NARA) (Version: 4.6.0.12 - Symantec Corporation) Hidden ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File BHO-x32: No Name -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> No File HKLM-x32\...\Run: [] => [X] HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION S3 np_ck64s; C:\WINDOWS\syswow64\np_ck64s.sys [108976 2019-07-01] (INCA Internet Co.,Ltd. -> INCA Internet Co.,Ltd.) S3 TKCtrl; C:\WINDOWS\SysWOW64\TKCtrl2k64.sys [147240 2019-01-15] (INCA Internet Co.,Ltd. -> INCA Internet Co., Ltd.) <==== ATTENTION S3 TKFsAvM; C:\WINDOWS\SysWOW64\TKFsAv64.sys [198808 2019-01-15] (INCA Internet Co.,Ltd. -> INCA Internet Co., Ltd.) <==== ATTENTION S3 TKFsFtM; C:\WINDOWS\SysWOW64\TKFsFt64.sys [28824 2019-01-15] (INCA Internet Co.,Ltd. -> INCA Internet Co., Ltd.) <==== ATTENTION S3 TKPcFt; C:\WINDOWS\SysWOW64\TKPcFtCb64.sys [54504 2019-01-15] (INCA Internet Co.,Ltd. -> INCA Internet Co., Ltd.) <==== ATTENTION S3 TKRgAc; C:\WINDOWS\SysWOW64\TKRgAc2k64.sys [115760 2019-01-15] (INCA Internet Co.,Ltd. -> INCA Internet Co., Ltd.) <==== ATTENTION S3 TKRgFt; C:\WINDOWS\SysWOW64\TKRgFtXp64.sys [68968 2019-01-15] (INCA Internet Co.,Ltd. -> INCA Internet Co., Ltd.) <==== ATTENTION S3 TKTool; C:\WINDOWS\system32\TKTool2k64.sys [32496 2019-01-15] (INCA Internet Co.,Ltd. -> INCA Internet Co., Ltd.) <==== ATTENTION U1 avgbdisk; no ImagePath Reboot: ***************** Restore point was successfully created. Processes closed successfully. "AV: Norton Security (Enabled - Up to date) {A2708B76-6835-6565-CB96-694212954A75}" => removed successfully "FW: Norton Security (Enabled) {9A4B0A53-225A-643D-E0C9-C077EC460D0E}" => removed successfully "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\NARA\\SystemComponent" => removed successfully HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00avg => removed successfully HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF} => removed successfully HKLM\Software\Wow6432Node\Classes\CLSID\{B4F3A835-0E21-4959-BA22-42B3008E02FF} => removed successfully "HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\" => removed successfully HKLM\SOFTWARE\Policies\Mozilla => removed successfully HKLM\SOFTWARE\Policies\Google => removed successfully HKLM\System\CurrentControlSet\Services\np_ck64s => removed successfully np_ck64s => service removed successfully HKLM\System\CurrentControlSet\Services\TKCtrl => removed successfully TKCtrl => service removed successfully HKLM\System\CurrentControlSet\Services\TKFsAvM => removed successfully TKFsAvM => service removed successfully HKLM\System\CurrentControlSet\Services\TKFsFtM => removed successfully TKFsFtM => service removed successfully HKLM\System\CurrentControlSet\Services\TKPcFt => removed successfully TKPcFt => service removed successfully HKLM\System\CurrentControlSet\Services\TKRgAc => removed successfully TKRgAc => service removed successfully HKLM\System\CurrentControlSet\Services\TKRgFt => removed successfully TKRgFt => service removed successfully HKLM\System\CurrentControlSet\Services\TKTool => removed successfully TKTool => service removed successfully HKLM\System\CurrentControlSet\Services\avgbdisk => removed successfully avgbdisk => service removed successfully The system needed a reboot. ==== End of Fixlog 14:11:24 ====
  14. Last week
  15. Pierre67
    Cecilia, sorry my bad - I should have mentioned SYNC in CHROME.
  16. CeciliaB
    1. You should change to another antivirus program since it's important to always have the realtime scanning running. But not now. 2. Please, start Notepad. Copy all text that is in the box: CreateRestorePoint: CloseProcesses: AV: Norton Security (Enabled - Up to date) {A2708B76-6835-6565-CB96-694212954A75} FW: Norton Security (Enabled) {9A4B0A53-225A-643D-E0C9-C077EC460D0E} Norton Online Backup (HKLM-x32\...\NARA) (Version: 4.6.0.12 - Symantec Corporation) Hidden ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File BHO-x32: No Name -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> No File HKLM-x32\...\Run: [] => [X] HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION S3 np_ck64s; C:\WINDOWS\syswow64\np_ck64s.sys [108976 2019-07-01] (INCA Internet Co.,Ltd. -> INCA Internet Co.,Ltd.) S3 TKCtrl; C:\WINDOWS\SysWOW64\TKCtrl2k64.sys [147240 2019-01-15] (INCA Internet Co.,Ltd. -> INCA Internet Co., Ltd.) <==== ATTENTION S3 TKFsAvM; C:\WINDOWS\SysWOW64\TKFsAv64.sys [198808 2019-01-15] (INCA Internet Co.,Ltd. -> INCA Internet Co., Ltd.) <==== ATTENTION S3 TKFsFtM; C:\WINDOWS\SysWOW64\TKFsFt64.sys [28824 2019-01-15] (INCA Internet Co.,Ltd. -> INCA Internet Co., Ltd.) <==== ATTENTION S3 TKPcFt; C:\WINDOWS\SysWOW64\TKPcFtCb64.sys [54504 2019-01-15] (INCA Internet Co.,Ltd. -> INCA Internet Co., Ltd.) <==== ATTENTION S3 TKRgAc; C:\WINDOWS\SysWOW64\TKRgAc2k64.sys [115760 2019-01-15] (INCA Internet Co.,Ltd. -> INCA Internet Co., Ltd.) <==== ATTENTION S3 TKRgFt; C:\WINDOWS\SysWOW64\TKRgFtXp64.sys [68968 2019-01-15] (INCA Internet Co.,Ltd. -> INCA Internet Co., Ltd.) <==== ATTENTION S3 TKTool; C:\WINDOWS\system32\TKTool2k64.sys [32496 2019-01-15] (INCA Internet Co.,Ltd. -> INCA Internet Co., Ltd.) <==== ATTENTION U1 avgbdisk; no ImagePath Reboot: and paste in Notepad. Check that no files have been split on two lines. Save the file as fixlist.txt on the desktop. Exit all programs. Start FRST, please. Click the Fix button. Wait until the tool has finished. It creates a log file, called Fixlog.txt, on the desktop. Please, paste the content of that file in your reply. 3. Please, locate these files or folders and change their names, e.g. by adding the text _bad. 2020-11-18 14:32 - 2020-11-18 14:32 - 000000024 _____ C:\ProgramData\33764.bat 2020-11-18 14:29 - 2020-11-18 22:03 - 000000000 ___HD C:\ProgramData\Windows Host 2020-11-18 14:29 - 2020-11-18 14:29 - 000000024 _____ C:\ProgramData\64657.bat 2020-11-18 14:28 - 2020-11-29 17:39 - 000000000 ____D C:\Users\micecom\Documents\VlcpVideoV1.0.1 2020-12-01 02:07 - 2019-04-20 10:24 - 000000000 ____D C:\Program Files (x86)\INCAInternet CHR Extension: (Google Translate) - C:\Users\micecom\AppData\Local\Google\Chrome\User Data\Default\Extensions\fnfhfpkmpnmlmlgfeabpegnfpdnmokco [2020-11-18] CHR Extension: (Chrome Media Router) - C:\Users\micecom\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-11-18] Some of these files and folders are hidden and you need to change a setting to be able to see them: https://support.microsoft.com/en-us/windows/view-hidden-files-and-folders-in-windows-10-97fbc472-c603-9d90-91d0-1166d1d9f4b5 I suggest a name change since it's difficult to know if something will stop working or give you a lot of error messages when the files/folders get a new name or are deleted. If you get any such problems you can change the names back to the original names. Please tell me if something happens. Restart the computer and check how Chrome works. 4. I'll soon leave the computer for maybe 14 hours.
  17. hRc
    My Mcafee's scanning is disabled as it keeps intefering with my synpos program even after whitelisting it. Addition.txt FRST.txt
  18. CeciliaB
    Can you disable the sync feature in Chrome? It's possible that something you do in Chrome to prevent e.g. addons is changed back by the sync feature. McAfee hasn't registered in Windows as an antivirus program, only as a firewall. Can you see that the antivirus part is working? Can you uninstall nProtect Online Security? Please restart the computer afterwards. Please upload new FRST logs since you've uninstalled the Norton programs and hopefully nProtect.
  19. hRc
    Yes im using the sync feature in Chrome. No i have not installed it I have uninstalled both Im currently using Mcafee Yes it was created on November 18th
  20. CeciliaB
    Are you using the synchronization feature in Chrome? Have you installed nProtect Online Security by INCA Internet yourself? Are you using Norton Online Backup (program) or Norton Studio (app from Microsoft Store? If not, please uninstall. Which antivirusprogram are you using? Did you install the adware November 18th (strange .bat files are created at that date as well as the folder C:\Users\micecom\Documents\VlcpVideoV1.0.1)?
  21. hRc
    Addition.txt FRST.txt
  22. CeciliaB
    Sync in Chrome?
  23. CeciliaB
    Thanks. Sorry, still only the last part of FRST.txt. Do you get any error messages while running FRST? Try to delete FRST.txt and Addition.txt before running FRST again.
  24. hRc
    There are no problems with my microsoft edge. The program should be one called data.exe which i ran. Addition.txt FRST.txt
  25. CeciliaB
  26. CeciliaB
    That isn't the complete FRST.txt, please try again.
  27. hRc
    FRST.txt Addition.txt
  28. CeciliaB
    You've to uninstall more of it. Follow this: https://support.norton.com/sp/en/us/home/current/solutions/v15972972 Restart the computer. Run FRST and upload new log files.
  29. hRc
    Norton should have already expired. I dont use it anymore.
  30. CeciliaB
    You've firewalls from Norton and McAfee according to Addition.txt. The recommendation is to have only one firewall and one antivirusprogram. Having two can cause conflicts and lower security. Which program do you want to use? Are there any problems with adware in Edge or Firefox? Which program do you think installed the adware and when did that happen?
  31. CeciliaB
    I can see that you're using Norton. Can't they help you? But I'll continue to go through the log files.
  32. hRc
    Addition.txt FRST.txt
  33. CeciliaB
    Please see this topic: https://forum.adaware.com/index.php?/topic/30823-read-this-before-you-post/
  1. Load more activity