I have the svchost.exe...
Location is greyed out, i cannot remove internet explorer 11 addon after virus removal
I am running Windows 10 64 bit
After removing a virus using windows defender and malwarebytes, I could no longer...
A. remove these internet explorer add ons, to wit:
- Ó¦Óñ¦Ò»¼ü°²×°²å¼þ npQQPhoneManagerExt.dll
- 电脑管家网页防火墙 TSWebMon64.dat
B. activate Location in Notification since it is always greyed out now
Windows for home | Windows 10 | Security and privacy
Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.
157 answers
Sort by: Newest
-
Anonymous
2015-10-10T02:55:23+00:00 -
Anonymous
2015-10-10T02:53:30+00:00 Do you often go to odd sites & click for downloads or updates? I did have a list of PUPs when I first ran Malwarebytes on 6/20/15. I was still Win 8.1. Since then, I've never seen it again. But I don't really browse all that much, & I don't take any download I haven't researched. OK, fine, I did do that 3 or so times - but I survived & have sworn never to do it again!
Malwarebytes Anti-Malware
Scan Date: 6/20/2015
Registry Keys: 20
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS@ei.PackageTracer_69.com/Plugin, Quarantined, [c430ad0f1b6fd264ca51b8d7e91cfc04],
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID{1597a7ab-ca69-4edb-9fdf-ab7fcc41fa1e}, Quarantined, [0ce858642b5f9b9b6f353a8fd72cd32d],
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\TYPELIB{9ab606fa-e03a-46fe-8b65-e1d4f782164f}, Quarantined, [0ce858642b5f9b9b6f353a8fd72cd32d],
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\INTERFACE{04E05A18-CF68-4000-96B7-71145567A710}, Quarantined, [0ce858642b5f9b9b6f353a8fd72cd32d],
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\INTERFACE{6385AF71-263B-4C6B-AD1C-82D753599074}, Quarantined, [0ce858642b5f9b9b6f353a8fd72cd32d],
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE{04E05A18-CF68-4000-96B7-71145567A710}, Quarantined, [0ce858642b5f9b9b6f353a8fd72cd32d],
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE{6385AF71-263B-4C6B-AD1C-82D753599074}, Quarantined, [0ce858642b5f9b9b6f353a8fd72cd32d],
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE{04E05A18-CF68-4000-96B7-71145567A710}, Quarantined, [0ce858642b5f9b9b6f353a8fd72cd32d],
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE{6385AF71-263B-4C6B-AD1C-82D753599074}, Quarantined, [0ce858642b5f9b9b6f353a8fd72cd32d],
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB{9ab606fa-e03a-46fe-8b65-e1d4f782164f}, Quarantined, [0ce858642b5f9b9b6f353a8fd72cd32d],
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB{9ab606fa-e03a-46fe-8b65-e1d4f782164f}, Quarantined, [0ce858642b5f9b9b6f353a8fd72cd32d],
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\PackageTracer_69Installer.Start.1, Quarantined, [0ce858642b5f9b9b6f353a8fd72cd32d],
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\PackageTracer_69Installer.Start, Quarantined, [0ce858642b5f9b9b6f353a8fd72cd32d],
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PackageTracer_69Installer.Start, Quarantined, [0ce858642b5f9b9b6f353a8fd72cd32d],
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\PackageTracer_69Installer.Start, Quarantined, [0ce858642b5f9b9b6f353a8fd72cd32d],
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PackageTracer_69Installer.Start.1, Quarantined, [0ce858642b5f9b9b6f353a8fd72cd32d],
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\PackageTracer_69Installer.Start.1, Quarantined, [0ce858642b5f9b9b6f353a8fd72cd32d],
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID{1597A7AB-CA69-4EDB-9FDF-AB7FCC41FA1E}, Quarantined, [0ce858642b5f9b9b6f353a8fd72cd32d],
PUP.Optional.Mindspark.A, HKU\S-1-5-21-2198903816-82641904-1847958298-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS{1597A7AB-CA69-4EDB-9FDF-AB7FCC41FA1E}, Quarantined, [0ce858642b5f9b9b6f353a8fd72cd32d],
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED{1597A7AB-CA69-4EDB-9FDF-AB7FCC41FA1E}, Quarantined, [0ce858642b5f9b9b6f353a8fd72cd32d],
Registry Values: 0
(No malicious items detected)
Registry Data: 0
(No malicious items detected)
Folders: 10
PUP.Optional.Mindspark.A, C:\Program Files (x86)\PackageTracer_69EI, Quarantined, [0ce858642b5f9b9b6f353a8fd72cd32d],
PUP.Optional.Mindspark.A, C:\Program Files (x86)\PackageTracer_69EI\Installr, Quarantined, [0ce858642b5f9b9b6f353a8fd72cd32d],
PUP.Optional.Mindspark.A, C:\Program Files (x86)\PackageTracer_69EI\Installr\1.bin, Quarantined, [0ce858642b5f9b9b6f353a8fd72cd32d],
PUP.Optional.Mindspark.A, C:\Program Files (x86)\PackageTracer_69EI\Installr\setups, Quarantined, [0ce858642b5f9b9b6f353a8fd72cd32d],
PUP.Optional.Mindspark.A, C:\Users\PCR\AppData\LocalLow\OnlineMapFinder_9pEI, Quarantined, [aa4a2f8daae0ed49f346ca052ad99b65],
PUP.Optional.Mindspark.A, C:\Users\PCR\AppData\LocalLow\OnlineMapFinder_9pEI\Installr, Quarantined, [aa4a2f8daae0ed49f346ca052ad99b65],
PUP.Optional.Mindspark.A, C:\Users\PCR\AppData\LocalLow\OnlineMapFinder_9pEI\Installr\Cache, Quarantined, [aa4a2f8daae0ed49f346ca052ad99b65],
PUP.Optional.Mindspark.A, C:\Users\PCR\AppData\LocalLow\PackageTracer_69EI, Quarantined, [a153348817739e98f44696390df61ce4],
PUP.Optional.Mindspark.A, C:\Users\PCR\AppData\LocalLow\PackageTracer_69EI\Installr, Quarantined, [a153348817739e98f44696390df61ce4],
PUP.Optional.Mindspark.A, C:\Users\PCR\AppData\LocalLow\PackageTracer_69EI\Installr\Cache, Quarantined, [a153348817739e98f44696390df61ce4],
Files: 7
PUP.Optional.Mindspark.A, C:\Program Files (x86)\PackageTracer_69EI\Installr\1.bin\69EIPlug.dll, Quarantined, [0ce858642b5f9b9b6f353a8fd72cd32d],
PUP.Optional.Mindspark.A, C:\Program Files (x86)\PackageTracer_69EI\Installr\1.bin\69EZSETP.dll, Quarantined, [0ce858642b5f9b9b6f353a8fd72cd32d],
PUP.Optional.Mindspark.A, C:\Program Files (x86)\PackageTracer_69EI\Installr\1.bin\NP69EISb.dll, Quarantined, [0ce858642b5f9b9b6f353a8fd72cd32d],
PUP.Optional.Mindspark.A, C:\Users\PCR\AppData\LocalLow\OnlineMapFinder_9pEI\Installr\Cache\0448E164.exe, Quarantined, [aa4a2f8daae0ed49f346ca052ad99b65],
PUP.Optional.Mindspark.A, C:\Users\PCR\AppData\LocalLow\OnlineMapFinder_9pEI\Installr\Cache\files.ini, Quarantined, [aa4a2f8daae0ed49f346ca052ad99b65],
PUP.Optional.Mindspark.A, C:\Users\PCR\AppData\LocalLow\PackageTracer_69EI\Installr\Cache\0A472703.exe, Quarantined, [a153348817739e98f44696390df61ce4],
PUP.Optional.Mindspark.A, C:\Users\PCR\AppData\LocalLow\PackageTracer_69EI\Installr\Cache\files.ini, Quarantined, [a153348817739e98f44696390df61ce4],
Physical Sectors: 0
(No malicious items detected)
(end)
-
Anonymous
2015-10-10T00:22:41+00:00 I see you found & posted them elsewhere. I've responded there.
(1) What about TAOFrame? Did you see my post about that to make a restore point, delete them all from the left pane. When it shows in just the RIGHT frame - just post a picture.
(2) And what about the MS Safety Scanner at the "more information" site showing in Defender's History tab, All Detected Items? Did you download/run that? It may do something more Defender couldn't do.
-
Anonymous
2015-10-10T00:19:08+00:00 Those files look good to me. You've got every one I've got, same sizes, minor difference in some dates. And your registry already looked good. Now I see in your picture (copied from above)...
...It appears to be complaining about "C:\Windows\System32\SVCHost.exe". Do you have that one, & does it look like mine (R-Clk, & select "Properties", Details tab)...?...
I'm at or near the end of my usefulness in this matter of Location. Soon we must pray for a double genius to fall out of the sky & into this thread. Look up now/then to catch him lest he/she break a bone or fall on your head.
-
Anonymous
2015-10-09T08:58:26+00:00 I did not take any of these...
One is unchecked coz I made it a marker when I lowered the frames.... to make sure you have a picture of the entire result of the scan of Malwarebytes..