Re-Markit: Can't get rid of this thing..

[Mosely22]

i just tried copying it to the clipboard and the same things happened, i had to close it... anything else i can do?

 

[johnb35]

Reboot the pc and see if you can do it then.

 

[Mosely22]

ok, ill do it right now and post in a few minutes. hopefully this works

 

[Mosely22]

rebooted and the same thing happened, got the "stopped working" box again

what should i do now? how do the other logs look?

 

[johnb35]

OK. lets continue. Open OTL again and copy and paste the following into the custom scan/fixes box at the bottom.

:OTL
PRC - C:\Program Files (x86)\Re-markit Corp\Re-markit_wd.exe ()
MOD - C:\Program Files (x86)\Re-markit Corp\Re-markit_wd.exe ()
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensi ons\\{8c46fde2-8f22-4b77-9d6b-47daa604b639}: C:\Program Files (x86)\Re-markit Corp\158.xpi
O8:64bit: - Extra context menu item: &Leave a note for Been users - res://C:\Program Files (x86)\GoodShop\Basement\BackgroundEngine.exe/205 File not found
O8:64bit: - Extra context menu item: &Remove from Been Clickstream - res://C:\Program Files (x86)\GoodShop\Basement\BackgroundEngine.exe/206 File not found
O8:64bit: - Extra context menu item: &Save as Been Favorite - res://C:\Program Files (x86)\GoodShop\Basement\BackgroundEngine.exe/204 File not found
O8:64bit: - Extra context menu item: &Thumbs Down - res://C:\Program Files (x86)\GoodShop\Basement\BackgroundEngine.exe/202 File not found
O8:64bit: - Extra context menu item: &Thumbs Up - res://C:\Program Files (x86)\GoodShop\Basement\BackgroundEngine.exe/201 File not found
O8 - Extra context menu item: &Leave a note for Been users - res://C:\Program Files (x86)\GoodShop\Basement\BackgroundEngine.exe/205 File not found
O8 - Extra context menu item: &Remove from Been Clickstream - res://C:\Program Files (x86)\GoodShop\Basement\BackgroundEngine.exe/206 File not found
O8 - Extra context menu item: &Save as Been Favorite - res://C:\Program Files (x86)\GoodShop\Basement\BackgroundEngine.exe/204 File not found
O8 - Extra context menu item: &Thumbs Down - res://C:\Program Files (x86)\GoodShop\Basement\BackgroundEngine.exe/202 File not found
O8 - Extra context menu item: &Thumbs Up - res://C:\Program Files (x86)\GoodShop\Basement\BackgroundEngine.exe/201 File not found
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O20 - AppInit_DLLs: (c:\progra~3\weblig~1\weblight.dll) - File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
[2014/04/09 21:30:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Re-markit Corp
@Alternate Data Stream - 118 bytes -> C:\ProgramData\Temp:373E1720

:Commands
[emptytemp]
[Reboot]

Then click on the run fix button up top. post the log that it displays if you can.

 

[Mosely22]

ok, let me give this a try..

 

[Mosely22]

ok i got this. let me know if this is good or if i should do something next

All processes killed
========== OTL ==========
No active process named Program Files was found!
Registry key HKEY_CURRENT_USER\software\mozilla\Firefox\Extensi ons not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8c46fde2-8f22-4b77-9d6b-47daa604b639}\ not found.
File C:\Program Files (x86)\Re-markit Corp\158.xpi not found.
64bit-Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\&Leave a note for Been users\ deleted successfully.
64bit-Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\&Remove from Been Clickstream\ deleted successfully.
64bit-Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\&Save as Been Favorite\ deleted successfully.
64bit-Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\&Thumbs Down\ deleted successfully.
64bit-Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\&Thumbs Up\ deleted successfully.
Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\&Leave a note for Been users\ not found.
Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\&Remove from Been Clickstream\ not found.
Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\&Save as Been Favorite\ not found.
Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\&Thumbs Down\ not found.
Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\&Thumbs Up\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\livecall\ deleted successfully.
File Protocol\Handler\livecall - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\msnim\ deleted successfully.
File Protocol\Handler\msnim - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\wlmailhtml\ deleted successfully.
File Protocol\Handler\wlmailhtml - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\wlpg\ deleted successfully.
File Protocol\Handler\wlpg - No CLSID value found not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls:c:\progra~3\weblig~1\weblight.dll deleted successfully.
64bit-Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
C:\Program Files (x86)\Re-markit Corp folder moved successfully.
ADS C:\ProgramData\Temp:373E1720 deleted successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Paul D. Aslanian
->Temp folder emptied: 122651668 bytes
->Temporary Internet Files folder emptied: 1657842 bytes
->Java cache emptied: 295448 bytes
->FireFox cache emptied: 186447307 bytes
->Google Chrome cache emptied: 12878061 bytes
->Flash cache emptied: 634 bytes

User: Public

User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 26142 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 78039 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 309.00 mb


OTL by OldTimer - Version 3.2.69.0 log created on 04112014_104226

Files\Folders moved on Reboot...
C:\Users\Paul D. Aslanian\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

 

[johnb35]

Can you try posting the malwarebytes log now?

 

[Mosely22]

Can you try posting the malwarebytes log now?

i'll try it right now. if i can't what should i do? rkill?

 

[johnb35]

No, rkill won't do anything for that. At what point does it freeze? See if you can email it to yourself, if it works then i'll just have you email me the log.

 

[Mosely22]

No, rkill won't do anything for that. At what point does it freeze? See if you can email it to yourself, if it works then i'll just have you email me the log.

didn't work. it freezes right after i go to save the file (for the .txt). when i click on "copy to clipboard" the mouse arrow turns into a circle like its loading and then i get the same message

when i just went to try and do that i noticed another file in the quaratine section (i already deleted all the files after the log) idk if that means anything, my pc is running good but i just want to get rid of everything

 

[Mosely22]

i cant email it john, i cant even bring the log up lol

what do you think i should do now? try another program?

 

[johnb35]

Not sure whats going on. Since you were able to copy and paste adwcleaner, junkware and otl logs it can't be anything with notepad. I'm about ready to leave for work for the day so I can't help until later tonight. You can check the event viewer for any signs of errors. Do this first though. Download and run Ccleaner

http://www.filehippo.com/download_ccleaner/

click up top right where it says download latest version. Download and install the program. Open it and don't change any options, click on run cleaner at the bottom right. Then try the malwarebytes log again. I'm leaving in 5 minutes but will be able to check in a couple times while at work on my phone.

 

[Mosely22]

Not sure whats going on. Since you were able to copy and paste adwcleaner, junkware and otl logs it can't be anything with notepad. I'm about ready to leave for work for the day so I can't help until later tonight. You can check the event viewer for any signs of errors. Do this first though. Download and run Ccleaner

http://www.filehippo.com/download_ccleaner/

click up top right where it says download latest version. Download and install the program. Open it and don't change any options, click on run cleaner at the bottom right. Then try the malwarebytes log again. I'm leaving in 5 minutes but will be able to check in a couple times while at work on my phone.

just did everything and couldn't get the log from malwarebytes. same thing happened, it froze for a couple seconds and then then the close program box came up. ughhhhh

what do you think i should do now? how did my other logs look?

 

[johnb35]

I've been thinking that this just may be an issue with the new version of malwarebytes. As long as everything else works fine I think we are done.

 

[Mosely22]

I've been thinking that this just may be an issue with the new version of malwarebytes. As long as everything else works fine I think we are done.

hopefully that's just what it is. do i should keep all these programs right? and how often should i run these programs even if everything seems fine? once per week?

 

[johnb35]

Ccleaner and malwarebytes every couple weeks. Adwcleaner and junkware removal tool would have to be re-downloaded as it updates frequently.

 

[Mosely22]

Hey john, please message me back when you have a minute!

 

[johnb35]

I replied to your PM.