CLOSED Infected with Trojan:Win32/Socelars

[Kevin Zoll 280]

2 minutes ago, AOH said:

Should I run new scans with EEK and FRST? Here's AdwCleaner' log

Yes.  I expect Simplitec to still be there.

[AOH 0]

Indeed. The file is still there.

scan_181019-032848.txt

FRST.txt

[Kevin Zoll 280]

Reset Google Chrome to its defaults.

Please run FRST again. Next, select and copy the following text, including the words Start::and End::. Switch back to the FRST program window, and click the Fix button. It should read the fix directly from the clipboard and run the fix. When it is finished, please attach the fixlog.txt file it created in the same folder the FRST program is in.

Start::
2018-10-18 05:00 - 2018-10-18 05:00 - 000000000 ____D C:\ProgramData\simplitec
End::

[AOH 0]

Reseted Chrome to default settings and ran the fix. Here you are:

Fixlog.txt

[Kevin Zoll 280]

Restart.

Run a fresh scan with FRST after the system has restarted.  Attach the new FRST scan log to your reply.

[AOH 0]

Here you go:

FRST.txt

[Kevin Zoll 280]

This is present in Chrome

CHR HomePage: Default -> hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=8095F07BCB282751&affID=121564&tl=50513&tsp=4960

Reset Chromes Search preferences.

Simplitec is still there. Since your logs aren't showing any malware, whitelist the detection.

[AOH 0]

How can I reset Chrome's Search preferences?
Should I whitelist the detection through EEK?

[Kevin Zoll 280]

3 minutes ago, AOH said:

How can I reset Chrome's Search preferences?

Yes, you can Chrome's search preferences.

3 minutes ago, AOH said:

Should I whitelist the detection through EEK?

No, whitelisting in EEK works a little differently.  Whitelist it in Windows Defender if Defender is detecting it.

[AOH 0]

Windows Defender does not detect the program. However, I do not know how to reset Chrome's Search preferences.

[Kevin Zoll 280]

See https://support.google.com/chrome/answer/95426?co=GENIE.Platform%3DDesktop&hl=en

[AOH 0]

Google's search engine was the default, I found the one you mentioned before and removed it from Chrome's suggested search engines. How should I proceed?

[Kevin Zoll 280]

Close Chrome.  Open it again and see it that search provider returns or not.

[AOH 0]

It didn't show up after I reopened Chrome.

[Kevin Zoll 280]

OK, that is good.

Everything should be good now.

[AOH 0]

Thank you for your being so helpful and patient with me through this whole process. A true professional in malware removal. Thank you yet again for your much appreciated help. 

[Kevin Zoll 280]

You are welcome and happy to help.

Now to remove most of the tools that we have used in fixing your machine:

Download Delfix from here and save it to your Desktop.

• Ensure Remove disinfection tools is checked.
• Also place a checkmark next to:
  • Create registry backup
  • Purge system restore
• Click the Run button.

When the tool is finished, a log will open in notepad. I do not need the log. You can close Notepad.

Empty the Recycle Bin

You can delete and uninstall any programs I had you download, that you do not wish to keep on the system.

To Remove EEK simple delete the EEK for in the of your System Drive, normally C:\EEK

Run Windows Update and update your Windows Operating System.

Articles to Read:
How to Protect Your Computer From Malware
How to keep you and your Windows PC happy
Web, email, chat, password and kids safety
How Did I Get Infected?

That should take care of everything.

Safe Surfing!

[AOH 0]

Thank you once again for all your help. You can close the thread if you wish.

[Kevin Zoll 280]

Thread Closed

Reason: Resolved

PM either Kevin, Elise, or Arthur to have this thread reopened.

All posters requesting Malware Removal assistance are required to follow all procedures in the thread titled START HERE if you don't we are just going to send you back to this thread