Odd thing with Norton power eraser and chrome

Broni is a removalist who I believe has his own removal site, as well as assisting with removal @ Bleeping Computer.

What I am saying is this thread creator turned up on my board with message 12 on page 2 as the first post with the same log.

 


Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Database version: v2014.01.15.10

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16476
Jared :: JAREDHOMEPC [administrator]

1/15/2014 6:46:55 PM
mbam-log-2014-01-15 (18-46-55).txt

Scan type: Full scan (C:\|D:\|E:\|F:\|G:\|H:\|I:\|Q:\|)
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 436193
Time elapsed: 54 minute(s), 29 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 1
HKCR\CLSID\{D824F0DE-3D60-4F57-9EB1-66033ECD8ABB} (PUP.Optional.WeCare.A) -> Quarantined and deleted successfully.

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 2
C:\Users\Jared\AppData\Roaming\OpenCandy (PUP.Optional.OpenCandy) -> Quarantined and deleted successfully.
C:\Users\Jared\AppData\Roaming\OpenCandy\4312B8FD2AF24B1FB92CBABD7D1E5777 (PUP.Optional.OpenCandy) -> Quarantined and deleted successfully.

Files Detected: 2
C:\Users\Jared\AppData\Roaming\OpenCandy\4312B8FD2AF24B1FB92CBABD7D1E5777\SliderCOTMv4.1.24.2_20131003.msi (PUP.Optional.WeCare.A) -> Quarantined and deleted successfully.
C:\Users\Jared\AppData\Roaming\OpenCandy\4312B8FD2AF24B1FB92CBABD7D1E5777\WeCare_COTM_ALL_p3v4.exe (PUP.Optional.OpenCandy) -> Quarantined and deleted successfully.

(end)


 

 

Then Message 13 SOLVED here with getting help, so the thread with me is useless, pointless as this thread is here.  So I deleted the other thread and posted here stating so.   

 

Other users have turned up on my thread  and it has been found that the user has a thread on  BC or other places I have told them to go back to the BC thread not here and why and notified BC of the fact I have stopped once I spotted it so they can carry on  with the BC (or other forum thread).  I get thanks so they know.  

But then again they can do what I do so understand.

 

The thread for this user that created this thread was useless so I deleted it,   If a thread I did steps and tools and realsied they had a thread like on BC but it has useful info for the other helper all I do is lock and not delete so the other helper can see if they so wish.

 

"Broni's instructions are essentially identical to what you've seen me give here-"

 

YES,  Broni and ither ranked MR's or advisors may tell a user to use Malwarebytes. That is up to them.  BUT there is a difference.  If MBAM screws up and for instance Windows won't boot properly then we go about fixing the problem.  So if the likes of Peterweb's thread problem occurs we can still use the tools we do even in recovery mode if need be to fix the problem.

 

Broni and other ranked MR's or advisors also tell users to use Combofix to (just like MBAM) and problems occurs with the tools or Windows after the use,  I have had it and so have others  (including on this board). and we have to then change our thought processes to fixing also what MBAM or Combofix etc has done..

 

But that becomes our problem as we told the user to run xxxxxxxx, But then remember we have also logged first to see what is going on with loggers before running tools and on protected boards just told a user to install and run a program with a link to the download.

and then OH the system has a problem on restart,  User can you send the log,  What log no log was created first.  SIGH, well I don't know what is going on.

 

Malware also changes and so do our tools.  back in 2008, 2009,  Run SAS, MBAM or Hijackthis, does not cut it no more for most stuff.  why do you think tools like FRST and listparts were created.  At times having to use both tools backwards and forwards to deal with Cidox, ZA, Pihar or MaxSS Ransomware (that if you remove the file Windows still won't boot properly) etc.

 

With users doing what is asked and following what is asked even if a thread takes 10 - 20 pages we get there slowly breaking down what was seen or confirmed in the first couple of LOGS  done while not hursting a users personal data or Windows where possible, Yes 10 -20 pages takes patience and some thought but that is the way it goes as long as users do what is asked and have the patience at the other end.

It's a matter of not just chucking programs at a system  (the nuclear bombs also) I know what some users reading are going to say but the tools are powerful like nuclear power,  Yes but the nuclear power is being controlled by a Neclear Physicists and so controlled with scripts (Temperture controls :smileyvery-happy:) if you like .

 

 

Quads

 

 

 

 

Yeah, sorry--I was only referring to Broni's instructions and mine concerning the importance of only working with the one removalist once a thread has been started. I'm not ever again going to be in the same category as Broni or you or the other ranked removalists; the last time I could pull something out by its roots myself was probably 15-20 years ago, before they were nearly this complex. So when somebody comes here with symptoms, but Norton telling them they're all clear, I ask them to run malwarebytes as a diagnostic, to see if it IDs anything Norton gives a pass to--and if it does, I refer them to delphinium's list, give them the requisite warning, and leave them to the experts until they're done.

 

Thanks for the wonderful, detailed explanation of why the rules are as they are. It confirms a lot of what I've intuited and conjectured out there on the Boards in defense of the rules--and hopefully will help avoid more misunderstandings in the future.

 

V/R,

--DistEd2

Wait I was never on bleeping computer just the site you were on. That's odd maybe someone ahd a similar problem, but sense you are sure it is fixed I will leave it be. Invovling the other thread it was more of just a malwerebytes question more than anything.

It is just people not reading

 

 

I said:-

 

 

Other users have turned up on my thread  and it has been found that the user has a thread on  BC or other places I have told them to go back to the BC thread not here and why and notified BC of the fact I have stopped once I spotted it so they can carry on  with the BC (or other forum thread).  I get thanks so they know.  

But then again they can do what I do so understand.

 

 

Other users = plural  not a single user or thread.

 

 

Quads

oh okay my bad sorry. thank you.

Ahhh; no, I'm thoroughly confused, at this point! :smileyfrustrated:

 

I am pretty sure, from what Quads said, that it is not fixed, and that you need the one-on-one help of a removalist to get it fixed. But I am not a malware removal expert, so I could be misreading his posts: it just looks to me like you've got something--and he knows what it is and has dealt with it a few times--but he's considering your continuing to engage about it on these forums to constitute the kind of outside advice I warned you about, that can lead to serious problems during removal.

 

What I would recommend at this point unless Quads says otherwise is that we take this as a reset, close this thread here (especially since you have already marked it Solved), and you go back to the list I referred you to and go to bleepingcomputer. Open a thread there, follow their instructions--and only their instructions--exactly, and do not return here to post on this or any other thread until they tell you you're done.

 

I could be being overly cautious, but in my judgment it's best to be sure.

 

Please do let us know how it turns out, so we can better advise other users in the future (and avert these kinds of missteps), but only after the removalist you're assigned tells you you're done.

 

V/R,

--DistEd2

Well I tired to post on the fourm their again but it was removed.

Darigan222 (aka Jay)

 

This is your thread(s) forum nad helpers NOT me or the other forum.   I have stated why above.

 

Whether you are fixed for not  I have not stated,  as I am not dealing with the system, it is up to this forum and the helpers here not me.

 

If helpers are confused about your system, it is not my problem but theirs  just like when I start on a system and instructions are followed to the finish is a specific order.

 

If hjelpers are still confused cos they don't understand, more than 2 people on the thread,  etc.   Well then that can still deal with it and can maybe see why we do things in a certian way or have certian guidelines.

If it is because they don't know really if the system is clean or not, well  it is still their problem  they had a user run programs and steps and maybe don't understand wht they are looking at.   With malware that is what this forum is all about  and one of the reason I will NOT deal with what we do here and then I will not have to deal with the Abuse or any other remarks, including a long time ago about how basically we can all do malware. How the rules are strict, the instructions are tough, the MR is tough (has to be).

 

I don't have to worry about that here anymore,  

 

Bye

 

Quads

This is the first time here that Quads has stated anything that is not accurate, and it is this: this is not a malware removal forum, and has never, while I've been here, pretended to be (except while Quads had his board here, and that was solely out of the goodness of his heart and his expertise).

 

This is a forum to help you get the most out of your Norton product, which has as one of its many functions an industry-leading track record at keeping malware off your computer. However, sometimes a nasty will sneak through--whether because the user invited it through, or because it's a new piece of malware that hasn't been identified and protected against yet. When this happens, we cannot deal with it here. I have to take Quads at his word that there was a time here, "a  long time ago," when somebody said something to the effect of "anyone can do malware removal," but that simply isn't true. Only people like him, with special training, certifications, and tools, are properly equipped to safely and effectively pull modern malware out by the roots and give you your system back; that is why his friend and my Guru mentor, delphinium, created the list of recommended removalist forums I referred you to.

 

So this is not your thread to deal with what I think you may have. We don't have that capability here. If Quads won't work with you anymore, I think that is...unfortunate...but it is his right, and he's not just being rude and inflexible, as he's explained. So that is why I recommend you return to delphinium's list, and try to get help on one of the other forums where there are people qualified to do what you need done. We are not willing to write you off by saying your thread is on a forum that is not a malware removal board, and cannot do what you need done.

 

Again, good luck--and  please do check back after the removalist you get assigned has said you're done.

 

V/R,

--DistEd2