O.T. - Temporary firewall problem at boot up:

  • Thread starter Thread starter magineer02
  • Start date Start date
Ok Paul,

This has gotten really serious,

I decided to go into my Administrators account
to see if I could delete the CW Reminder from there
versus the User Account (the computer lets me type
in my Admin password so I don't have to go back
and forth). However, after clicking on the Administrator
Account and entering the password I got a black screen
with the exception of two Windferno Registry Power
Cleaner pop-ups that appeared.

I closed them and nothing. So I pushed the power button
to reset/restart the computer hoping it would take me
back here.

Now I can't even use my Administrator Account !! The
screen is totally blacked out!

I was able to remove Window Registry Cleaner on the User
Side. I tried removing CWA Reminder by We-Care.com
again but I got the same messages as before and could not
remove it.

What am I suppose to do now?

Thoughts/Suggestions?
Robert
Click to expand...

OMG :-)

You're a fast worker.

I found a copy of the msi file. But a fat lot of good it's
going to do now. You save this, then upload to Virustotal.com
and verify it's the same file. I.e. That it's clean.

http://dl5.v24installer.com/lm/bundles/wecare/cleanwater/W3iSliderCWAv4.1.24.3_20131003.msi

And when I test that one, it takes me back here. Since we can't trust
a site like that, I recommend testing the downloaded file when
you get it, and verify the Virustotal.com scan of it is clean.
(Note - Virustotal was bought by Google, so it's actually run by
Google now.)

https://www.virustotal.com/en/file/...77939b20875f9b3357d3bdc577a82d9710e/analysis/

So that would be a copy of the file, if you needed one.
You would move it back to where ever the dialog box said it should be.

W3iSliderCWAv4.1.24.3_20131003.msi
4,521,984 bytes
Signed: ‎Thursday, ‎October ‎3, ‎2013 8:47:56 AM (Comodo)
MD5SUM 514ab618b7806440a61f6a481a128b33

*******

If your user account is a member of the Administrators group,
then you don't need an Administrator account as such. You should
be able to do what's needed from the User account.

If you're in Windows 7, and use System Image, it will overwrite
the last copy. To stop that, when the System Image operation is
completed, you *move* the System Image folder created,
out of the way, rename the folder in a descriptive way. Then,
the next System Image you make, won't be able to overwrite
the renamed folder. That's basically how you keep multiple
Windows 7 System Images alive.

And if that remaining System Image is not damaged, you can
restore that System Image and bring your Administrator
account "back to life".

I know you're a fast worker, and you can undoubtedly brick the
machine before long, and all I can do on this end, is "pray for you" :-)

Paul
 
Hello Paul,

Here's what I did:

I was finally able to download and install
AdwCleaner and ran all the scans. I tried to
set up the Pup hosts under tools but it was
all in French.

After running all the scans and cleaning afterwards
I then tried to delete CWA Reminder and
this time I was successful!

I then ran a full scan with Malwarebytes which
came up with (2) objects found which were in
AdwCleaner quarantine. So I uninstalled AdwCleaner
which seemed to be the only way to clear the quarantine
and the system is clean once more.

Just to make sure, I tried to logon to the Administrator
Account and it 'seems' everything is back to normal.

Thoughts/suggestions,
Robert
 
Hello Paul,

Here's what I did:

I was finally able to download and install
AdwCleaner and ran all the scans. I tried to
set up the Pup hosts under tools but it was
all in French.

After running all the scans and cleaning afterwards
I then tried to delete CWA Reminder and
this time I was successful!

I then ran a full scan with Malwarebytes which
came up with (2) objects found which were in
AdwCleaner quarantine. So I uninstalled AdwCleaner
which seemed to be the only way to clear the quarantine
and the system is clean once more.

Just to make sure, I tried to logon to the Administrator
Account and it 'seems' everything is back to normal.

Thoughts/suggestions,
Robert
Click to expand...

Move your good System Image somewhere, so you have it
for future consideration.

Otherwise, it sounds like you were successful :-)

Paul
 
Back
Top