Removing McAfee and bootracer

Closed
sipke Posts 4 Registration date Wednesday March 5, 2014 Status Member Last seen March 7, 2014 - Mar 5, 2014 at 05:20 PM
2011N2 Posts 13352 Registration date Saturday January 29, 2011 Status Security contributor Last seen December 24, 2016 - Mar 23, 2014 at 10:20 AM
I have removed McAfee virus scanner and Bootracer umpteen times i.e with Revo uninstaller-windows uninstaller- from the registree etc.
It comes back every time.
In some cases Creating a restore point failed.
Am I hit with malware? What can I do about it?
sipke
Related:

58 responses

2011N2 Posts 13352 Registration date Saturday January 29, 2011 Status Security contributor Last seen December 24, 2016 39
Mar 10, 2014 at 06:58 PM
Hello,

Please disable Avast before running Shortcut_Module.

Gabriel.
0
Hello Gabriel,

A boatful of sour apples.

Did as you told. Dowmloaded the new version of AdwCleaner.
Ran Scan which was relatively short.
Pressed Clean
AdwCleaner darkened the screen- only showed the cursor
Waited for 20 minutes, then the cursor disappeared.
Waited for another 20 minutes.
I did a reboot.
After startup i got a message to startup again etc.
I chose for normal startup, after which I found no report.

I ran AdwCleaner again
Scan - Clean - dark screen - shutdown - reboot
No report.

Got a message (in Ductch)

Translation:

McAfee Security Scan is not available

Your securiy status cannot be checked
because your pc is not connected to the internet or because
McAfee Security Scan is temporarily unavailable.
Connect to the internet and click on again or try again later.


Cancel Again

-----------
Thank you again for trying!

Looks like a hopeless case.

Sipke
0
2011N2 Posts 13352 Registration date Saturday January 29, 2011 Status Security contributor Last seen December 24, 2016 39
Mar 11, 2014 at 11:37 AM
Hello,

It's okay for AdwCleaner, but did you run again Shortcut_Module with your Avast disabled ?

Gabriel.
0
Hello Gabriel

Ran the Shortcut_Module with Avast diasabled.

But no C:\Shortcut_Module_date_hour.txt

In C:\Windows\registration I found
{02D4B3F1-FD88-11D1-960D-00805FC79235}.{A4007EF2-DB3F-40D2-8170-F052AF1E0735}.crmlog 18:37 Mar 11, 2014

In C:\Windows\temp
MpSigStub.log 18:38 Mar 11, 2014

sipke
0

Didn't find the answer you are looking for?

Ask a question
2011N2 Posts 13352 Registration date Saturday January 29, 2011 Status Security contributor Last seen December 24, 2016 39
Mar 11, 2014 at 02:36 PM
Hello,

Open Shortcut_Module and click on the small "R" : the report should open.

Gabriel.
0
Hello Gabriel,

Coul not find any small "R"

sipke
0
2011N2 Posts 13352 Registration date Saturday January 29, 2011 Status Security contributor Last seen December 24, 2016 39
Mar 11, 2014 at 03:14 PM
Hi,

Never mind. ^^

Run again ZHPDiag and send the report.

Gabriel.
0
Hello Gabriel,

The link is

http://speedy.sh/7BV8t/ZHPDiag.txt

Sipke
0
2011N2 Posts 13352 Registration date Saturday January 29, 2011 Status Security contributor Last seen December 24, 2016 39
Mar 11, 2014 at 06:31 PM
Hello,

Good. :)

1. Close all applications

2. Select and copy all of the lines wich are in this link : https://dl.dropboxusercontent.com/u/32869654/For%20spike.txt

3. ZHPDiag created a short cut on your desktop called ZHP Fix, launch ZHPFix (For Windows 7 click right to run as admin. Answer yes if you get an enquiry as to weither you want to run it or not

4. Click on the the Import button and the lines will automatically paste themselves.

5. Click on the Go button to clean

6. Confirm by clicking OK

7. ZHP Fix will ask if you wish to empty the bin, click on your choice...it may take time

8. A report will appear on your desktop and on C:\ZHP\ZHPFix[R1].txt which you can copy and paste in your reply.

Gabriel.
0
Hello Gabriel,

I have done as you asked.

Everything went well, except at the end
no link appeared on my desktop.

The link is ht t p://speedy.sh/g 7m4d/ZHPDiag.txt

I noticed that Bootracer and McAfee are still there
0
2011N2 Posts 13352 Registration date Saturday January 29, 2011 Status Security contributor Last seen December 24, 2016 39
Mar 12, 2014 at 01:03 PM
Hello,

Can you run again ZHPDiag by clicking on the magnifying glass rightmost and answering Yes to the message that appears ?

Thanks,

Gabriel.
0
Hello Gabriel,

Ran ZHPDiag


The link is:

http://speedy.sh/YV52b/ZHPDiag.txt

sipke
0
2011N2 Posts 13352 Registration date Saturday January 29, 2011 Status Security contributor Last seen December 24, 2016 39
Mar 12, 2014 at 04:59 PM
Hello,

You ran as i said ?
Because the white list is activate.

Gabriel.
0
Hello Gabriel,

Is this the file you mean?

The link is:
http://speedy.sh/zs7QF/ZHPFix-R1.txt

Sipke
0
2011N2 Posts 13352 Registration date Saturday January 29, 2011 Status Security contributor Last seen December 24, 2016 39
Mar 13, 2014 at 05:27 PM
Hello,

No it is ZHPFix's report but in wanted it before so it's good. ^^

Please, in order to help you correctly as fast as possible, you must follow my instructions to the letter without omitting a step. If you have a question before proceeding, please ask.

Now, delete all ZHPDiag's report you have.
After :
1- Double Click on the shortcut ZHPDiag on your desktop.
2- Click on Configure button.
3- Click on the rightmost magnifying glass.
4- Answer Yes to the message that appears.
5- Wait...
6- At the end, upload the report and post the link.

Good luck.

Gabriel.
0
Hello Gabriel,

The link is:

http://speedy.sh/cbmys/ZHPDiag.txt

I don't have a question, but I have noticed, that
programmes I have uninstalled are back the following day.
I have used the Windows uninstaller. the Ccleanet uninstaller
and the Revo uninstaller. No luck.

The same applies to my private emails that I have deleted.
Also back the following day.

Thank you for your patience!

Sipke
0
2011N2 Posts 13352 Registration date Saturday January 29, 2011 Status Security contributor Last seen December 24, 2016 39
Mar 14, 2014 at 08:39 AM
Hello,

OK, bravo. :)

1. Close all applications

2. Select and copy all of lines which are in this link : https://dl.dropboxusercontent.com/u/32869654/For%20spike2.txt

3. ZHP Diag created a short cut on your desktop called ZHP Fix, launch ZHP Fix (For Windows 7 click right to run as admin. Answer yes if you get an enquiry as to weither you want to run it or not

4. Click on the the Import button and the lines will automatically paste themselves.

5. Click on the Go button to clean

6. Confirm by clicking OK

7. ZHP Fix will ask if you wish to empty the bin, click on your choice...it may take time

8. A report will appear on your desktop and on C:\ZHP\ZHPFix[R1].txt which you can copy and paste in your reply.

Gabriel.
0
Hello Gabriel,

At item 6 when I pressed OK:
instead of item 7
2 windows appeared on my screen.


First window:
Welcome to the Toolbar Cleaner 1.1 Uninstall Wizard

This wizard will guide you through the uninstallation of
Toolbar Cleaner 1.1
Before starting the uninstallation, make sure Toolbar
Cleaner 1.1. is not running
(I checked: not running)

Click Uninstall to start the uninstallation.

Second window:
Bootracer Setup giving me 3 options:
Modify, Repair and Remove

What shall I do?

sipke
0
2011N2 Posts 13352 Registration date Saturday January 29, 2011 Status Security contributor Last seen December 24, 2016 39
Mar 14, 2014 at 01:10 PM
Hello,

First :
Click on Uninstall.

Second :
Click on Remove.

Gabriel.
0
Hello Gabriel,

Uploaded report.

The link is:

http://speedy.sh/E65C9/ZHPFixReport.txt

sipke
0
Ambucias Posts 47356 Registration date Monday February 1, 2010 Status Moderator Last seen February 15, 2023 11,168
Mar 14, 2014 at 05:55 PM
Sipke

Gabriel will be interested to know how your system is performing now after this huge clean-up.

What about McAfee and Bootracer?
0
2011N2 Posts 13352 Registration date Saturday January 29, 2011 Status Security contributor Last seen December 24, 2016 39
Mar 14, 2014 at 07:07 PM
Exactly. :)

Gabriel.
0