Getting rid of findingdiscount.exe
I'm trying to get rid of findingdiscount.exe It is annoying malware that causes numerous annoying pop-ups.
Ad Aware pro security does not pick it up.
Kaspersky does not pick it up.
I was able to uninstall it in "control panel" in safe mode, but I cannot stop it from running in task manager as "findingdiscount.exe*32" (it says the program is running) and it still throws up pop-ups.
Please Help
Thanks
-
Hi 442xx,
1. Please uninstall Kaspersky, since having two antivirus programs and two firewalls will cause strange behaviour, conflicts and maybe a less secure computer. It'll also be more difficult to remove malware and adware. If you install Ad-Aware in compatible mode without real-time protection etc., it's possible to have it together with another antivirusprogram, but that isn't the case in your computer.
2. Please, start Notepad.
Copy all text that is in the box:CreateRestorePoint:
and paste in Notepad. Check that no files have been split on two lines.
CloseProcesses:
ProxyEnable: [.DEFAULT] => Proxy is enabled.
ProxyServer: [.DEFAULT] => http=127.0.0.1:47574
ProxyEnable: [S-1-5-21-2677425893-3187432021-3708057545-1000] => Proxy is enabled.
ProxyServer: [S-1-5-21-2677425893-3187432021-3708057545-1000] => http=127.0.0.1:47574
CMD: ipconfig /flushdns
Reboot:
Save the file as fixlist.txt on the desktop.
Exit all programs.
Start FRST, please.
Click the Fix button.
Wait until the tool has finished.
It creates a log file, called Fixlog.txt, on the desktop.
Please, paste the content of that file in your reply.3. Please, save AdwCleaner by Xplode on the desktop: https://toolslib.net/downloads/viewdownload/1-adwcleaner/
Turn off all programs, including browsers.
Double-click on AdwCleaner to start the program.
Click on the Scan button.
Wait until the search has finished.
Click on the Log file button.
A report will be displayed, copy its content and paste into your reply.
If the report isn't displayed, it's available as C:\AdwCleaner\AdwCleaner[R0].txt.4. Please uninstall "Java 7 Update 45" since it's a very old version with many known vulnerabilitis and can be exploited by a web page to infect the computer.
0 -
You're welcome
Have you deleted the proxy server setting?
It's part of the infection but I don't if Malwarebytes Anti-Malware removes it, and you didn't specify that you changed it..
0 -
Thanks for your help. Before I read your reply, I used Malwarebytes to remove most of the findingdiscount crap (malwarebytes stopped it from running in the task manager). I then went into safe mode and deleted the rest of the findingdiscount crap.
Thanks,
442
0 -
Due to lack of feedback, this topic has been closed.
If you need this topic reopened, please contact a staff member. This applies only to the original topic starter.
Everyone else please begin a New Topic.
Thank You !0
Please sign in to leave a comment.
Comments
4 comments