Defender found malware, defender now won't run (page 2)

askjacob · 2016-07-04T22:45:32+00:00

Hi there, -- Having been rightly chastised by Gary R for "Bumping" (I was putting in more info that I omitted in the original post, and I can't see where you can edit a post), I humbly shall try again and hope for help. The response was brutal and swift, but I get it and understand. I even promise I read all the pre-post information, but I must be like a lot of people and assume it does not apply to me - and I made a few blunders anyway... -- I have a newish (less than 2 months old) Windows 10 laptop that had an as supplied trial of Macafee installed, once that expired after 30 days I decided what the heck I will try out MS's Defender, and what do you know, a lot of malware had gone under the radar. I should have known better, but I thought I'd use it during the free trial, but now I am paying the price. Anyway, Defender said it had "fixed" the problems, but I digress, here we are: After rebooting the laptod seemed rougher than ever. I tried to run Defender to gets the message " This A

July 17, 2016, 4:46 AM UTC

Hello Jacob

Please run the following fix. We will start trying to troubleshoot Defender once this is cleaned up.

FRST Fix

You should still have FRST64.exe in your Downloads folder. If not please download it HERE.
Press the Windows Key + R.
Type notepad.exe into the text box and click OK.

A blank Notepad page should open.

Copy and Paste the following script into Notepad, Do not include the words Code: Select all.
(Click the Select all button next to Code: to select the entire script).

CreateRestorePoint:

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\Layers\VC32Ldr]



Reg: reg delete "HKEY_USERS\S-1-5-21-1000113554-1559343911-2160561676-1001\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store" /v "C:\Program Files (x86)\SearchProtect\Main\bin\uninstall.exe" /f

Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Svchost" /v "ORBTR" /f



EmptyTemp:

CMD: ipconfig /flushdns

Save it next to FRST64.exe as fixlist.txt.
Important! fixlist.txt must be saved in the same directory as FRST64.exe to work.
Right click on FRST64.exe and select Run as administrator.
Press the Fix button one time only and wait.
When FRST finishes you will be prompted to reboot your computer. Click OK.
Your computer should now restart. On reboot navigate to your Desktop where you should find Fixlog.txt. Copy and paste the contents in your reply.

Please post each log separately to prevent it being cut off by the forum post size limiter.
Check each after you've posted it to make sure it's all present, if any log is cut off you'll have to post it in sections...

In your next reply please include:

Did you have any problems with the instructions?
Fixlog.txt
Are there any changes in computer behavior?