Pmropn.exe

[Serashina]

this premier opinion program suddenly inserted itself into my programs/processes list, system restore was unsuccessful, the process restarts itself if i try to kill it, and none of the files can be deleted. malware bytes and super antispyware did not pick it up.

any help would be appreciated, thanks in advance

 

[Serashina]

ran combofix as well, here is the log for that

 

[mflynn]

Hi Serashina

Start MBAM again do not scan but do below modified config first

When it opens do not scan first UPDATE (even again) then click settings and confirm all checked if not check them.

Then click Scaner Tab chose Full scan then confirm your windows drive (usually c is selected/checked then click start Scan.

We need a totally clean log and I want to see it so post it.

Next run SAS but do not Scan do the Modifications below.

Before clicking Scan, UPDATEthen click Preferences then Scanning Control.
Check all items except the 3rd item (Ignore System Restore......)
Click Close button to exit control center.
On main screen, Scan for Harmful Software click Scan your computer.
On the left check C:\Fixed Drive.
On the right, under Complete Scan, choose Perform Complete Scan.
Click Next to start the scan.

Again we need a totally clean log and I want to see it so post it.

Mike

 

[Serashina]

here's the mbam log, SAS is coming up, slow computer and alot of files

 

[mflynn]

OK that makes me happy!:grinthumb

Now reboot and post 1st a new ComboFix log and another HJT log and perhaps depending on what I see we may be through.

But you tell me how is computer running now? Anything more we need to address?


Mike

 

[Serashina]

SAS log, clean excepting cookies, will do combofix and a new HJT scan now

 

[mflynn]

Well those are tracking cookies and not the best ones and too many!

D/L install and run ATF-Cleaner clear all except passwords in all browsers you have. Run repeatedly until no more found.

http://www.majorgeeks.com/ATF_Cleaner_d4949.html

Then reboot and run CCleaner Run both (temp and registry) repeatedly until no more found.

Run sas and see if tracking cookies are gone!

Mike

 

[Serashina]

issue seems to be resolved, thank you for the time and help