svchost.exe process and a bunch of PUM (and other stuffs)

[Curson]

Hi Heantrad,

Also, I found this http://answers.microsoft.com/en-us/windows/forum/windows_7-pictures/volume-mixer-does-not-retain-settings-for/558434e7-fe84-48e0-9385-474594c52e50 , could any of those solutions work if the volume mixer keeps resetting?

You can try those solutions but don't use the "System Restore" one. It will revert your computer to an earlier state, so Ron work will be useless.

RogueKiller did detect something, I'll leave here the log (I haven't deleted anything yet).
The home page of IE seems to be this (Safeweb Norton and VirusTotal say it's safe) https://www.google.es/?gfe_rd=cr&ei=7UUMVrreAs2q8wed_L0g&gws_rd=ssl

PUM stands for Potentially Unwanted Modification. In your case, thoses entries are perfectly legit and necessary to access Internet.
For more information, please read RogueKiller Documentation.

Also, it's me or there's now more DNS entries than before?

The "CurrentControlSet" keys are the ones that matter.

Regards.

[Heantrad]

Hi Heantrad,

Also, I found this http://answers.microsoft.com/en-us/windows/forum/windows_7-pictures/volume-mixer-does-not-retain-settings-for/558434e7-fe84-48e0-9385-474594c52e50 , could any of those solutions work if the volume mixer keeps resetting?

You can try those solutions but don't use the "System Restore" one. It will revert your computer to an earlier state, so Ron work will be useless.

RogueKiller did detect something, I'll leave here the log (I haven't deleted anything yet).
The home page of IE seems to be this (Safeweb Norton and VirusTotal say it's safe) https://www.google.es/?gfe_rd=cr&ei=7UUMVrreAs2q8wed_L0g&gws_rd=ssl

PUM stands for Potentially Unwanted Modification. In your case, thoses entries are perfectly legit and necessary to access Internet.
For more information, please read RogueKiller Documentation.

Also, it's me or there's now more DNS entries than before?

The "CurrentControlSet" keys are the ones that matter.

Regards.

Then I should leave the PUMs there right? (they probably appeared because Ron told me to reset all my browsers).
Also, should I delete any of those DNS entries?
And Ron told me to delete all the system restores I had, it's because the infection can pass from a restoration to my PC again or just to avoid using them by mistake?
Does Steam's browser reset along Internet Explorer?, as they use the same engine.
Does Java still install adware? As I needed to unistall it during Ron's cleanup and not I'm doubting about installing it again.
Well, the sound problem happened again, this time the general volume went up to the max.
Is puush.me a bad webpage? VirusTotal says it has two positive results, but Norton Safeweb says it's safe.
Now, after that I think there's only left the Program Files folder and the Nvidia Drivers.

[Curson]

Hi Heantrad,

Then I should leave the PUMs there right? (they probably appeared because Ron told me to reset all my browsers).

Yes.

Also, should I delete any of those DNS entries?

No, you need them to access Internet.

And Ron told me to delete all the system restores I had, it's because the infection can pass from a restoration to my PC again or just to avoid using them by mistake?

If you use a restore point were your computer was infected, the infection will indeed pass to your computer again.

Does Steam's browser reset along Internet Explorer?, as they use the same engine.

Not anymore. Steam's browser uses WebKit now.

Does Java still install adware? As I needed to unistall it during Ron's cleanup and not I'm doubting about installing it again.

Java doesn't install adwares. Ron makes you uninstall old and flawed versions of Java.

Well, the sound problem happened again, this time the general volume went up to the max.

Sorry, I still have no clue.

Is puush.me a bad webpage? VirusTotal says it has two positive results, but Norton Safeweb says it's safe.

It's safe.

Regards.

[Heantrad]

Hi Heantrad,

Then I should leave the PUMs there right? (they probably appeared because Ron told me to reset all my browsers).

Yes.

Also, should I delete any of those DNS entries?

No, you need them to access Internet.

And Ron told me to delete all the system restores I had, it's because the infection can pass from a restoration to my PC again or just to avoid using them by mistake?

If you use a restore point were your computer was infected, the infection will indeed pass to your computer again.

Does Steam's browser reset along Internet Explorer?, as they use the same engine.

Not anymore. Steam's browser uses WebKit now.

Does Java still install adware? As I needed to unistall it during Ron's cleanup and not I'm doubting about installing it again.

Java doesn't install adwares. Ron makes you uninstall old and flawed versions of Java.

Well, the sound problem happened again, this time the general volume went up to the max.

Sorry, I still have no clue.

Is puush.me a bad webpage? VirusTotal says it has two positive results, but Norton Safeweb says it's safe.

It's safe.

Regards.

So, how can I reset Steam's browser?
Also, when I reseted all the browsers Steam's one algo got kind of reset I think, as for example the 'Watched' videos got reseted.

[Curson]

Hi Heantrad,

Please try to delete the following directories content :

C:\Program Files\Steam\config\Cookies
C:\Program Files\Steam\config\Overlay Cookies
C:\Program Files\Steam\config\HTML Cache
C:\Program Files\Steam\config\Overlay HTML Cache

Regards.

[Heantrad]

Hi Heantrad,

Please try to delete the following directories content :

C:\Program Files\Steam\config\Cookies
C:\Program Files\Steam\config\Overlay Cookies
C:\Program Files\Steam\config\HTML Cache
C:\Program Files\Steam\config\Overlay HTML Cache

Regards.

Before I delete them, will Steam create the folders again (after using the his browser, opening Steam again...) or will I need to create the folders again or reinstall Steam?

[Curson]

Hi Heantrad,

Don't delete these folders, only their contents.

Regards.

[Heantrad]

Hi Heantrad,

Don't delete these folders, only their contents.

Regards.

Inside the Overlay HTML Cache folder there's a folder called AppCache, should I delete it too (it's empty)?
Also, the cookies folders are empty and the HTML Cache folder doesn't even exist.

[Curson]

Hi Heantrad,

Yes, you should.
For more information, I suggest you to open a new thread on the Steam Forum.

Regards.

[Heantrad]

Hi Heantrad,

Yes, you should.
For more information, I suggest you to open a new thread on the Steam Forum.

Regards.

Alright, I opened a thread on the Steam forums for more information.
Meanwhile, I have a pair of questions.
CCleaner has detected some registry keys that can be deleted, should I delete any of those? (I have all of the search options actived)
Also, it's normal that I can freely acces to Windows' folder?, I mean, I can freely enter System32, I thought those folders were protected.
Alright, I got a responde alredy, in the images below I show them to you, the guy sended me to another thread and the folders he says I must delete are diferent (probably because it's outdated, it's from 2014), but he tells me to directly delete the folders, as I thought I should do the first time, I shouldn't do that right?
Also, now that I remember, Steam let's you reset your cookies directly from the parameters.

[Curson]

Hi Heantrad,

CCleaner has detected some registry keys that can be deleted, should I delete any of those? (I have all of the search options actived)

I strongly advice you not to use CCleaner "Registry Cleaner. It could cause harm to your system.

Also, it's normal that I can freely acces to Windows' folder?, I mean, I can freely enter System32, I thought those folders were protected.

It's perfectly normal. The system files and folders are protected again modification/deletion, not browsing.

Alright, I got a responde alredy, in the images below I show them to you, the guy sended me to another thread and the folders he says I must delete are diferent (probably because it's outdated, it's from 2014), but he tells me to directly delete the folders, as I thought I should do the first time, I shouldn't do that right?
Also, now that I remember, Steam let's you reset your cookies directly from the parameters.

I don't really known Steam Browser so I assume the folders will be recreated. You can go ahead.

Regards.

[Heantrad]

Hi Heantrad,

CCleaner has detected some registry keys that can be deleted, should I delete any of those? (I have all of the search options actived)

I strongly advice you not to use CCleaner "Registry Cleaner. It could cause harm to your system.

Also, it's normal that I can freely acces to Windows' folder?, I mean, I can freely enter System32, I thought those folders were protected.

It's perfectly normal. The system files and folders are protected again modification/deletion, not browsing.

Alright, I got a responde alredy, in the images below I show them to you, the guy sended me to another thread and the folders he says I must delete are diferent (probably because it's outdated, it's from 2014), but he tells me to directly delete the folders, as I thought I should do the first time, I shouldn't do that right?
Also, now that I remember, Steam let's you reset your cookies directly from the parameters.

I don't really known Steam Browser so I assume the folders will be recreated. You can go ahead.

Regards.

Then I should delete the folders you told me to right?
I checked the directions that the old thread had and they exist, and some of the folders are full, should I just delete all of them? (or copy them out of Steam, in case Steam doesn't create them again).
Also, as Steam utilizes webkit, resetting Chrome (and unistalling it) should reset Steam's browser too right?
Just thought of it, could it be that the proxy server you helped me to delete was Mozilla's update server?, as now I've seen that the version I have is really old and in the update tab it says that the update server hasn't been found.

[Curson]

Hi Heantrad,

Then I should delete the folders you told me to right?
I checked the directions that the old thread had and they exist, and some of the folders are full, should I just delete all of them? (or copy them out of Steam, in case Steam doesn't create them again).
Also, as Steam utilizes webkit, resetting Chrome (and unistalling it) should reset Steam's browser too right?

I don't really know Steam Browser myself, so I advice you to follow the advice posted in Steam forum and to ask relating questions there as well.

Just thought of it, could it be that the proxy server you helped me to delete was Mozilla's update server?, as now I've seen that the version I have is really old and in the update tab it says that the update server hasn't been found.

Firefox don't need a proxy to update,  so no.

Regards.

[Heantrad]

Hi Heantrad,

Then I should delete the folders you told me to right?
I checked the directions that the old thread had and they exist, and some of the folders are full, should I just delete all of them? (or copy them out of Steam, in case Steam doesn't create them again).
Also, as Steam utilizes webkit, resetting Chrome (and unistalling it) should reset Steam's browser too right?

I don't really know Steam Browser myself, so I advice you to follow the advice posted in Steam forum and to ask relating questions there as well.

Just thought of it, could it be that the proxy server you helped me to delete was Mozilla's update server?, as now I've seen that the version I have is really old and in the update tab it says that the update server hasn't been found.

Firefox don't need a proxy to update,  so no.

Regards.

I'll make a post asking for every folder that I need for resetting Steam's browser.
Meanwhile, I remembered that in CCleaner there's an option to clean Steam, do you think it will clean up the browser too or just temporary files Steam creates?
So, I used Delfix as Ron told me for cleaning all the tools used, and I think it didn't work, this is what happened.

So, I used the Delfix tool (sorry that it took me so long) and it didn't do anything I think.
I runned the program, and it detected some programs, however, I didn't read the intruction of rebooting the sistem and I runned the tool again, then I restarted the PC and nothing got deleted, at least that's what seems, FRST stills there, Javara stills there and I think everything that showed on the log stills there.
I can't send you the log, because I didn't know I messed it up and I didn't do it right, so I didn't save it.
When I run the tool again, the log appears blank (I mean, it doesn't detect any programs installed).
Is possible to delete all the programs I installed during the malware removal manually or I needed the tool?
I've alredy replied to my post on Malwarebytes' forum with the same explanation, but I asked you too in case this error could harm the computer.

[Curson]

Hi Heantrad

Meanwhile, I remembered that in CCleaner there's an option to clean Steam, do you think it will clean up the browser too or just temporary files Steam creates?

I have really no idea. You could always try.

So, I used the Delfix tool (sorry that it took me so long) and it didn't do anything I think.
I runned the program, and it detected some programs, however, I didn't read the intruction of rebooting the sistem and I runned the tool again, then I restarted the PC and nothing got deleted, at least that's what seems, FRST stills there, Javara stills there and I think everything that showed on the log stills there.
I can't send you the log, because I didn't know I messed it up and I didn't do it right, so I didn't save it.
When I run the tool again, the log appears blank (I mean, it doesn't detect any programs installed).
Is possible to delete all the programs I installed during the malware removal manually or I needed the tool?
I've alredy replied to my post on Malwarebytes' forum with the same explanation, but I asked you too in case this error could harm the computer.

DelFix won't harm your computer in any case.

Regards.