Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

Stubborn malware

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

Stubborn malware

Unread postby nikir » October 27th, 2010, 12:30 pm

Please help me clean my system from a malware that keeps redirecting my yahoo and google searches and
doesn't let me do the automated Windows Update
I already used free versions of Avira, Lavasoft ad-aware8 , AVG, Spybot SD.
I also used Spyware Doctor and StopZilla and manually cleaned the results.
I then uninstalled all the above programs.

Currently I still have in active: IObit, Malwarebytes' Anti-Malware, WinPatrol and McAffee 2011 registered version.
They all achieved some cleaning but the main problem persists.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:06:27 AM, on 10/27/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v7.00 (7.00.6002.18005)
Boot mode: Normal

Running processes:
C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe
C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\WLTRYSVC.EXE
C:\Windows\system32\WLANExt.exe
C:\Windows\System32\bcmwltry.exe
C:\Windows\System32\LEXBCES.EXE
C:\Windows\System32\LEXPPS.EXE
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Windows\system32\svchost.exe
C:\Program Files\Macrium\Reflect\ReflectService.exe
C:\Program Files\Dell Support Center\bin\sprtsvc.exe
C:\Windows\system32\cryptainersrv.exe
C:\Windows\system32\STacSV.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\DRIVERS\xaudio.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Users\NR\Desktop\Utilities\Launchers\Tray Commander Lite\TC.exe
C:\Windows\System32\WLTRAY.EXE
C:\Program Files\BillP Studios\WinPatrol\WinPatrol.exe
C:\Program Files\McAfee Online Backup\MOBKbackup.exe
C:\Program Files\McAfee Online Backup\MOBKbackup.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
C:\Windows\system32\rundll32.exe
C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
C:\Windows\system32\mfevtps.exe
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe
C:\Windows\explorer.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Users\NR\Desktop\System utils\Security\HijackThis.exe
C:\Windows\system32\wbem\wmiprvse.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer provided by Dell
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\progra~1\mcafee\msk\mskapbho.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20101026201334.dll
O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\progra~1\mcafee\sitead~1\mcieplg.dll
O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\progra~1\mcafee\sitead~1\mcieplg.dll
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Tray Commander Lite] C:\Users\NR\Desktop\Utilities\Launchers\Tray Commander Lite\TC.exe
O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] C:\Windows\system32\WLTRAY.exe
O4 - HKLM\..\Run: [WinPatrol] C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe -expressboot
O4 - HKLM\..\Run: [IObit Security 360] "C:\Program Files\IObit\IObit Security 360\IS360tray.exe" /autostart
O4 - HKLM\..\Run: [dellsupportcenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P dellsupportcenter
O4 - HKLM\..\Run: [mcui_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-518830015-187905111-1791496615-501\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'Guest')
O8 - Extra context menu item: Open Link Target in Firefox - file://C:\Users\NR\AppData\Roaming\Mozilla\Firefox\Profiles\x0iug2fi.default\extensions\{5D558C43-550F-4b12-84AB-0D8ABDA9F975}\firefoxviewlink.html
O8 - Extra context menu item: Sothink SWF Catcher - C:\Program Files\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm
O8 - Extra context menu item: View This Page in Firefox - file://C:\Users\NR\AppData\Roaming\Mozilla\Firefox\Profiles\x0iug2fi.default\extensions\{5D558C43-550F-4b12-84AB-0D8ABDA9F975}\firefoxviewpage.html
O9 - Extra button: (no name) - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {64964764-1101-4bbd-8891-B56B1A53B9B3} - C:\Program Files\Classic Shell\ClassicExplorer32.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Flash Decompiler SWF Capture tool - {86B4FC19-8FA4-4FD3-B243-9AEDB42FA2D5} - C:\Program Files\Eltima Software\Flash Decompiler\iebt.dll (HKCU)
O9 - Extra 'Tools' menuitem: Flash Decompiler SWF Capture tool menu - {86B4FC19-8FA4-4FD3-B243-9AEDB42FA2D5} - C:\Program Files\Eltima Software\Flash Decompiler\iebt.dll (HKCU)
O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - http://pccheckup.dellfix.com/sdccommon/ ... gctlcm.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{1412F6DB-FC8E-4350-8963-8048958CB7C1}: NameServer = 10.8.64.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{1412F6DB-FC8E-4350-8963-8048958CB7C1}: NameServer = 10.9.24.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{1412F6DB-FC8E-4350-8963-8048958CB7C1}: NameServer = 10.8.64.1
O17 - HKLM\System\CS3\Services\Tcpip\..\{1412F6DB-FC8E-4350-8963-8048958CB7C1}: NameServer = 10.8.64.1
O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~1\mcafee\sitead~1\mcieplg.dll
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~1\mcafee\sitead~1\mcieplg.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: McAfee Application Installer Cleanup (0245181288138455) (0245181288138455mcinstcleanup) - McAfee, Inc. - C:\Users\NR\AppData\Local\Temp\024518~1.EXE
O23 - Service: Adobe Active File Monitor V7 (AdobeActiveFileMonitor7.0) - Adobe Systems Incorporated - C:\Program Files\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe
O23 - Service: DellAMBrokerService - Unknown owner - C:\Program Files\DellAutomatedPCTuneUp\brkrsvc.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: IS360service - IObit - C:\Program Files\IObit\IObit Security 360\IS360srv.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\Windows\System32\LEXBCES.EXE
O23 - Service: McAfee SiteAdvisor Service - McAfee, Inc. - C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
O23 - Service: McAfee Personal Firewall Service (McMPFSvc) - McAfee, Inc. - C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
O23 - Service: McAfee VirusScan Announcer (McNaiAnn) - McAfee, Inc. - C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
O23 - Service: McShield - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe
O23 - Service: McAfee Firewall Core Service (mfefire) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe
O23 - Service: McAfee Validation Trust Protection Service (mfevtp) - McAfee, Inc. - C:\Windows\system32\mfevtps.exe
O23 - Service: McAfee Online Backup (MOBKbackup) - McAfee, Inc. - C:\Program Files\McAfee Online Backup\MOBKbackup.exe
O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
O23 - Service: Macrium Reflect Image Mounting Service (ReflectService) - Unknown owner - C:\Program Files\Macrium\Reflect\ReflectService.exe
O23 - Service: Sandboxie Service (SbieSvc) - tzuk - C:\Program Files\Sandboxie\SbieSvc.exe
O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
O23 - Service: Cryptainer service (ssoftservice) - Cypherix Software (India) Pvt. Ltd. - C:\Windows\SYSTEM32\cryptainersrv.exe
O23 - Service: SigmaTel Audio Service (STacSV) - IDT, Inc. - C:\Windows\system32\STacSV.exe
O23 - Service: UPnPService - Magix AG - C:\Program Files\Common Files\MAGIX Shared\UPnPService\UPnPService.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\Windows\System32\WLTRYSVC.EXE
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--
End of file - 11328 bytes

Uninstall list:
3D Text Commander 3.0.1 by Insofta Development
AAA Logo 1.22
AbiWord 2.8.6
AC3Filter (remove only)
Address Book 4.0.7
Address Book 7
AdesDesign eBook
Adobe AIR
Adobe AIR
Adobe Download Manager
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Help Center 2.1
Adobe Photoshop Elements 5.0
Adobe Photoshop Elements 5.0.2 Patcher
Adobe Photoshop Elements 7.0
Adobe Photoshop.com Inspiration Browser
Adobe Reader 7.0.9
Adobe Shockwave Player 11.5
Advanced Effect Maker Hobby Edition Version 2 (With VAC 2.0 B1)
Advanced Font Viewer 4.2
Aneesoft Flash Gallery Classic GOTD Edition
Anime Studio 5.6
Anim-FX
Antenna
Apple Application Support
Apple Software Update
ArcSoft Panorama Maker 3.5
ATI Catalyst Control Center Ex
ATI PCI Express (3GIO) Filter Driver
Atmosphere Lite Plus v6.0
AutoSave
Avanquest PerfectImage 11
Banner Maker Pro for Flash Version 2
Batch File Renamer 2.51
Batch Image Watermarker 3.5
BlueVoda Website Builder 11.4G
Broadcom Management Programs
Brother PC-FAX
BS1 General Ledger 2010.0
Bulk Image Downloader v1.34 (GiveAwayOfTheDay)
BusinessCardsMX 3.92
Canon RAW Image Task for ZoomBrowser EX
Canon Utilities CameraWindow
Canon Utilities CameraWindow DC_DV 6 for ZoomBrowser EX
Canon Utilities Digital Photo Professional 3.2
Canon Utilities EOS Utility
Canon Utilities MyCamera
Canon Utilities PhotoStitch
Canon Utilities Picture Style Editor
Canon Utilities RemoteCapture Task for ZoomBrowser EX
Canon Utilities WFT-E1/E2/E3 Utility
Canon Utilities ZoomBrowser EX
Canon ZoomBrowser EX Memory Card Utility
CCleaner (remove only)
Cisco EAP-FAST Module
Cisco LEAP Module
Cisco PEAP Module
Classic Shell
CoffeeCup Free FTP
Compatibility Pack for the 2007 Office system
Conexant HDA D110 MDC V.92 Modem
Corner-A ArtStudio
Cover Commander 2.91 by Insofta Development
Cryptainer LE
Daniusoft Video Converter(Build 2.3.2.0)
dbQwik CSS File Merger for dbQwikSite
dbQwikEdit Pro 3
dbQwikReport 1
dbQwikSite 5
dbQwikSite5 Help
dbQwikSyncPRO
Dell Automated PC TuneUp
Dell Support Center (Support Software)
Dell Wireless WLAN Card
DellSupport
Desktop Spider 3.0
DHTML Editing Component
EASEUS Data Recovery Wizard Professional 3.3.4
Easy Watermarker 2.0
EasyCleaner
Engage (v1.2.3.89)
EOS USB WIA Driver
EssentialPIM
Express Accounts
Express Burn Disc Burning Software
Express Rip
ffdshow [rev 1723] [2007-12-24]
File Shredder 2.0
FileZilla Client 3.3.3
Firebird SQL Server - MAGIX Edition
Firebird SQL Server - MAGIX Edition
Flash Decompiler
Flash Decompiler Trillix
Flash Optimizer 2
Flash Slideshow Maker Pro 4.74
Flash-Creator 1
Folder Size Shell Extension v3.2
FontHit Font Tools
Fortop SWF Resources Extractor 1.2
Foxit PDF Editor
Free Registry Defrag
Free Studio version 4.2
Free Video Dub version 1.4
Free Video to Flash Converter version 4.2
Free Video to JPG Converter version 1.3
FTP Commander
Goldfish 3.1
GOM Player
Google Toolbar for Internet Explorer
HashTab 3.0.0
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
iBizCard 2.1
iCare Data Recovery 3.8.1
Image Commander 1.00
Image Mender 1.1
ImageTasks
Incomedia WebSite X5 Evolution
Incomedia WebSite X5 v8 - Evolution
Inpaint 2.4
IObit Security 360
IZArc 3.81
Java(TM) 6 Update 17
JavaScript Collector 1.1.0.4
JPG2PDF 2.1
Macrium Reflect - Free Edition
MAGIX Goya burnR 1.3.1.3 (UK)
MAGIX Music Maker 15 15.0.0.20 (UK)
MAGIX Music Maker silver 15.0.1.9 (UK)
MAGIX Music Manager 2007 8.1.1.114 (US)
MAGIX PC Check & Tuning Free
MAGIX PC Check & Tuning Free
MAGIX Photo Manager 2007 4.1.1.77 (US)
MAGIX Screenshare
MAGIX Screenshare 4.3.6.1987 (UK)
MAGIX Xtreme Photo Designer 6 6.0.19.0 (US)
MAGIX Xtreme PhotoStory on CD & DVD 6 6.5.1.5 (US)
Malwarebytes' Anti-Malware
McAfee Online Backup
McAfee Online Backup
McAfee Total Protection
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Security Update (KB979906)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 4 Client Profile
Microsoft .NET Framework 4 Client Profile
Microsoft Office Excel Viewer 2003
Microsoft Office Small Business Edition 2003
Microsoft Office Word Viewer 2003
Microsoft Silverlight
Microsoft Virtual PC 2007
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Web Publishing Wizard 1.52
Microsoft Windows Media Video 9 VCM
Microsoft Works
Mix-FX
Modem Diagnostic Tool
MotionArtist 4
Moyea FLV Editor Lite version: 1.1.1.846
Mozilla Firefox (3.6.11)
Mp3 Music Editor v4.5.1
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB941833)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
MyLogoMaker 2.0
MyProfessionalBusinessCards
MySoftware Fonts
MySQL Connector/ODBC 3.51
Nature Illusion Studio
Ncesoft Flip Book Maker 2.3.1
NCH Toolbox
nCleaner second 2.3.4.0
NetWaiting
NetZero Internet and Voice Offer
No Right Click version 1.01
NoWires Plugin v1.5
PDF OCR 4.0
Perfect Website Creator
Photo Frame Show - AIR desktop application
Photo Frame Show - AIR desktop application
Photo Stamp Remover 1.3
PhotoImpact Pro
PhotoshopdotcomInspirationBrowser
Picture Collage Maker Pro 2.2.8
Piky Basket 2.0
Portfolio Browser
PowerDVD
PowerTools Lite
Print Perfect Clip Art Deluxe DVD
Print Perfect Fonts Deluxe
PrintMaster Platinum 18
PRODUCT_NAME
Professional Website Promoter
ProtectDisc Driver, Version 11
QuickSet
QuickTime
RealPlayer
RealUpgrade 1.0
Sandboxie 3.42
Scrapbook Factory Deluxe
Security Update for CAPICOM (KB931906)
Security Update for CAPICOM (KB931906)
Send To Toys v2.6
Serif 100k Deluxe Graphics Pack
Serif AlbumPlus SE PRO
Serif DrawPlus X2
Serif DrawPlus X2 Resources
Serif PagePlus X2
Serif PagePlus X2 Resources
Serif PhotoPlus X2
Serif PhotoPlus X3
Serif Premium Image Collection 3
Serif WebPlus 10
Serif WebPlus 10 Resources
Serif WebPlus X2
Serif WebPlus X2 Resources
Serif WebPlus X2 Template Pack: Business & Commerce
Serif WebPlus X2 Template Pack: Home & Hobby
Serif WebPlus X4
Serif WebPlus X4 Bonus Content Pack
Serif WebPlus X4 Resources
SigmaTel Audio
Simpo PDF Creator 2.0.0
Simpo PDF Merge & Split 2.0.0.5
Simpo PDF to Word 2.1.1.0
Simpo Word to PDF 2.0.0.5
Skype web features
Skype™ 4.1
SlimComputer
SocuSoft Web Video Player 1.10
Soluto
Sonic Activation Module
Sothink DHTML Menu 9
Sothink FLV Player
Sothink JWScroller
Sothink Photo Album Maker
Sothink SWF Catcher for Internet Explorer
Sothink SWF Decompiler
Sothink SWF Quicker
Sothink Video Converter
Sothink Video Encoder for Adobe Flash
SoundCheck
Startup Defender 2.2
Startup Manager 2.4.2
SWF Printer Pro
SWFText
Synaptics Pointing Device Driver
Text-To-Speech-Runtime
The Font Thing
The Print Shop 22
Topaz Moment
TopStyle Lite (Version 3.0)
Uninstall 1.0.0.1
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
VB Runtime
Vectorian Giotto 2.3.1
Visual C++ 2008 x86 Runtime - (v9.0.30729)
Visual C++ 2008 x86 Runtime - v9.0.30729.01
VLC media player 1.0.5
VoipBuster
VoipDiscount
Watermark
Watermark Factory 2
Web Easy Professional 8
Web Page Maker V3.21
Web Update Builder 3.2
Web-Based Email Tools
WebFormDesigner
webStore Builder Premium 7.5
wGXe Data Recovery Professional
Windows Media Player Firefox Plugin
Windows Resource Kit Tools - SubInAcl.exe
WinPatrol
WinUtilities 9.86 Free Edition
Wise Registry Cleaner 4 Free 4.83
Wondershare Flash Slideshow Builder Giveaway Edition (4.6.0)
WordWeb
Xara Webster 2
Xara3D 5
XHeader
XHeader Bonus Download
XnView 1.97.8
XnView Shell Extension 1.6.0
Zoner Draw 5
Zoner GIF Animator 5
Zoner Photo Studio 9
ZSMC USB PC Camera (ZS0211)

Thks a lot
nikir
nikir
Active Member
 
Posts: 4
Joined: October 27th, 2010, 11:21 am
Advertisement
Register to Remove

Re: Stubborn malware

Unread postby deltalima » October 31st, 2010, 9:32 am

Checking your log - back soon.
User avatar
deltalima
Admin/Teacher
Admin/Teacher
 
Posts: 7614
Joined: February 28th, 2009, 4:38 pm
Location: UK

Re: Stubborn malware

Unread postby deltalima » October 31st, 2010, 9:43 am

Hi nikir,

Welcome to the forum.

My nickname is deltalima and I will be helping you with your computer problems.

The logs can take some time to research, so please be patient with me.

Please be aware that removing Malware is a potentially hazardous undertaking. I will take care not to knowingly suggest courses of action that might damage your computer. However it is impossible for me to foresee all interactions that may happen between the software on your computer and those we'll use to clear you of infection, and I cannot guarantee the safety of your system. It is possible that we might encounter situations where the only recourse is to re-format and re-install your operating system, or to necessitate you taking your computer to a repair shop.


Please note the following:
  • I will be working on your Malware issues, this may or may not, solve other issues you have with your machine.
  • The fixes are specific to your problem and should only be used for this issue on this machine.
  • Please continue to review my answers until I tell you your machine appears to be clear. Absence of symptoms does not mean that everything is clear.
  • If after 3 days you have not responded to this topic, it will be closed, and you will need to start a new one.
  • It's often worth reading through these instructions and printing them for ease of reference.
  • If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry.
  • Please reply to this thread. Do not start a new topic.

Please Note:
The programs I ask you to run need to be run in Administrator Mode by... Right clicking the program file and selecting: Run as Administrator.
Additionally, the built-in User Account Control (UAC) utility, if enabled, may prompt you for permission to run the program.
When prompted, please select: Allow. Reference: User Account Control (UAC) and Running as Administrator

Please let me know if this computer is used for business
User avatar
deltalima
Admin/Teacher
Admin/Teacher
 
Posts: 7614
Joined: February 28th, 2009, 4:38 pm
Location: UK

Re: Stubborn malware

Unread postby nikir » October 31st, 2010, 10:50 am

deltalima wrote:Hi nikir,

Welcome to the forum.

My nickname is deltalima and I will be helping you with your computer problems.

The logs can take some time to research, so please be patient with me.

Please be aware that removing Malware is a potentially hazardous undertaking. I will take care not to knowingly suggest courses of action that might damage your computer. However it is impossible for me to foresee all interactions that may happen between the software on your computer and those we'll use to clear you of infection, and I cannot guarantee the safety of your system. It is possible that we might encounter situations where the only recourse is to re-format and re-install your operating system, or to necessitate you taking your computer to a repair shop.


Please note the following:
  • I will be working on your Malware issues, this may or may not, solve other issues you have with your machine.
  • The fixes are specific to your problem and should only be used for this issue on this machine.
  • Please continue to review my answers until I tell you your machine appears to be clear. Absence of symptoms does not mean that everything is clear.
  • If after 3 days you have not responded to this topic, it will be closed, and you will need to start a new one.
  • It's often worth reading through these instructions and printing them for ease of reference.
  • If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry.
  • Please reply to this thread. Do not start a new topic.

Please Note:
The programs I ask you to run need to be run in Administrator Mode by... Right clicking the program file and selecting: Run as Administrator.
Additionally, the built-in User Account Control (UAC) utility, if enabled, may prompt you for permission to run the program.
When prompted, please select: Allow. Reference: User Account Control (UAC) and Running as Administrator

Please let me know if this computer is used for business


Thank you Deltalima for taking interest in my case and I accept your responsability disclamer
I use the computer mainly for personal use, but keep backups of working applications.
Ready to start ...
nikir
Active Member
 
Posts: 4
Joined: October 27th, 2010, 11:21 am

Re: Stubborn malware

Unread postby deltalima » October 31st, 2010, 11:03 am

Hi nikir,

I use the computer mainly for personal use


Please see here.

We can only help with computers that are used solely for Home use

I will ask to have this topic closed, thank you for understanding.
User avatar
deltalima
Admin/Teacher
Admin/Teacher
 
Posts: 7614
Joined: February 28th, 2009, 4:38 pm
Location: UK

Re: Stubborn malware

Unread postby nikir » October 31st, 2010, 11:17 am

deltalima wrote:Hi nikir,

I use the computer mainly for personal use


Please see here.

We can only help with computers that are used solely for Home use

I will ask to have this topic closed, thank you for understanding.


No, I don't understand why it takes yuo five days to say that!
nikir
Active Member
 
Posts: 4
Joined: October 27th, 2010, 11:21 am

Re: Stubborn malware

Unread postby Wingman » October 31st, 2010, 1:24 pm

Business Use Computer

May I draw your attention to the topic: ALL USERS OF THIS FORUM MUST READ THIS FIRST, which you should have read before posting for help.

The section here explains why we do not offer help for such computers. Thank you for your understanding.

This topic is now closed.
User avatar
Wingman
Admin/Teacher
Admin/Teacher
 
Posts: 14347
Joined: July 1st, 2008, 1:34 pm
Location: East Coast, USA
Advertisement
Register to Remove


  • Similar Topics
    Replies
    Views
    Last post

Return to Infected? Virus, malware, adware, ransomware, oh my!



Who is online

Users browsing this forum: No registered users and 527 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware