Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

Continuing the Fight Against PDF ConverTer 1.0

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

Re: Continuing the Fight Against PDF ConverTer 1.0

Unread postby Emmie » June 6th, 2014, 9:11 am

So in the meantime, I ran a boot-time scan and then checked my Chrome extensions - and PDF ConverTer 1.0 seems to have gone! I know this doesn't necessarily mean the all clear, so I created fresh DDS and Attach logs, pasted below:

DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 11.0.9600.17041
Run by usr at 23:04:44 on 2014-06-06
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.61.1033.18.3957.2647 [GMT 10:00]
.
AV: avast! Antivirus *Enabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: avast! Antivirus *Enabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\nvvsvc.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\Windows\system32\WLANExt.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Broadcom\BPowMon\BPowMon.exe
C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Users\usr\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\System32\StikyNot.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\sppsvc.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\System32\cscript.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = www.google.com
uSearch Bar = www.google.com
uSearch Page = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=
mStart Page = www.google.com
mWinlogon: Userinit = userinit.exe
BHO: avast! Online Security: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
uRun: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
uRun: [SkyDrive] "C:\Users\usr\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" /background
uRun: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
mRun: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
dRunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\MCAFEE~1.LNK - C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe
mPolicies-Explorer: NoActiveDesktop = dword:1
mPolicies-Explorer: NoActiveDesktopChanges = dword:1
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableUIADesktopToggle = dword:0
TCP: NameServer = 10.0.0.138
TCP: Interfaces\{318DAE8B-904D-4383-8C29-0B7C071F562B} : DHCPNameServer = 10.0.0.138
TCP: Interfaces\{318DAE8B-904D-4383-8C29-0B7C071F562B}\F416B63702055726C696360275962756C6563737 : DHCPNameServer = 10.100.0.1 139.130.4.4 203.50.2.71
TCP: Interfaces\{E07E7847-FF1F-47B8-B528-FB24BA46F268} : DHCPNameServer = 61.9.194.49 61.9.195.193
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll
AppInit_DLLs=
SSODL: WebCheck - <orphaned>
mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
x64-BHO: avast! Online Security: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll
x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
x64-Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
x64-Run: [AmIcoSinglun64] C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
x64-Run: [SynTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe
x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>
x64-SSODL: WebCheck - <orphaned>
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\usr\AppData\Roaming\Mozilla\Firefox\Profiles\wzxwi8ef.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.search.defaulturl - hxxps://www.google.com/search
FF - prefs.js: keyword.URL - hxxps://www.google.com/search
FF - prefs.js: browser.startup.homepage - www.google.com
FF - plugin: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
FF - plugin: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
FF - plugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll
FF - plugin: C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMSS.dll
.
============= SERVICES / DRIVERS ===============
.
R0 aswRvrt;avast! Revert;C:\Windows\System32\drivers\aswRvrt.sys [2014-6-6 65776]
R0 aswVmm;avast! VM Monitor;C:\Windows\System32\drivers\aswVmm.sys [2014-6-6 208416]
R1 aswSnx;aswSnx;C:\Windows\System32\drivers\aswsnx.sys [2014-6-6 1039096]
R1 aswSP;aswSP;C:\Windows\System32\drivers\aswsp.sys [2014-6-6 423240]
R2 aswHwid;avast! HardwareID;C:\Windows\System32\drivers\aswHwid.sys [2014-6-6 29208]
R2 aswMonFlt;aswMonFlt;C:\Windows\System32\drivers\aswMonFlt.sys [2014-6-6 79184]
R2 aswStm;aswStm;C:\Windows\System32\drivers\aswstm.sys [2014-6-6 85328]
R2 avast! Antivirus;avast! Antivirus;C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-6-6 50344]
R2 BPowMon;Broadcom Power monitoring service;C:\Program Files\Broadcom\BPowMon\BPowMon.exe [2009-10-28 117608]
R2 cvhsvc;Client Virtualization Handler;C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE [2013-4-22 822504]
R2 sftlist;Application Virtualization Client;C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2013-6-26 523944]
R3 HECIx64;Intel(R) Management Engine Interface;C:\Windows\System32\drivers\HECIx64.sys [2009-9-17 56344]
R3 k57nd;Broadcom NetLink Gigabit Ethernet;C:\Windows\System32\drivers\k57amd64.sys [2009-12-11 333864]
R3 Sftfs;Sftfs;C:\Windows\System32\drivers\Sftfswin7.sys [2013-6-26 768680]
R3 Sftplay;Sftplay;C:\Windows\System32\drivers\Sftplaywin7.sys [2013-6-26 273576]
R3 Sftredir;Sftredir;C:\Windows\System32\drivers\Sftredirwin7.sys [2013-6-26 29352]
R3 Sftvol;Sftvol;C:\Windows\System32\drivers\Sftvolwin7.sys [2013-6-26 23208]
R3 sftvsa;Application Virtualization Service Agent;C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2013-6-26 207528]
S2 ADExchange;ArcSoft Exchange Service;C:\Program Files (x86)\Common Files\ArcSoft\esinter\Bin\eservutil.exe --> C:\Program Files (x86)\Common Files\ArcSoft\esinter\Bin\eservutil.exe [?]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-9-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-9-11 124088]
S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-2-28 161384]
S3 IEEtwCollectorService;Internet Explorer ETW Collector Service;C:\Windows\System32\ieetwcollector.exe [2014-4-13 111616]
S3 McComponentHostService;McAfee Security Scan Component Host Service;C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe [2014-1-16 289256]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:\Windows\System32\drivers\rdpvideominiport.sys [2013-9-8 19456]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2013-9-8 57856]
S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\System32\drivers\usbaapl64.sys [2012-12-13 54784]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2013-8-12 1255736]
.
=============== Created Last 30 ================
.
2014-06-06 07:23:00 75888 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{4B9CF922-E759-4CEF-964F-A460A2E92DE1}\offreg.dll
2014-06-06 07:06:42 -------- d-----w- C:\_OTL
2014-06-06 06:47:08 -------- d-----w- C:\Users\usr\AppData\Roaming\DropboxMaster
2014-06-06 06:45:13 965232 ----a-w- C:\Program Files (x86)\Mozilla Firefox\icuuc52.dll
2014-06-06 06:45:13 1266800 ----a-w- C:\Program Files (x86)\Mozilla Firefox\icuin52.dll
2014-06-06 06:45:13 10594416 ----a-w- C:\Program Files (x86)\Mozilla Firefox\icudt52.dll
2014-06-06 06:43:49 -------- d-----w- C:\Users\usr\AppData\Roaming\Dropbox
2014-06-06 06:33:48 -------- d-----w- C:\Users\usr\AppData\Roaming\AVAST Software
2014-06-06 04:15:07 85328 ----a-w- C:\Windows\System32\drivers\aswstm.sys
2014-06-06 04:15:06 208416 ----a-w- C:\Windows\System32\drivers\aswVmm.sys
2014-06-06 04:15:05 423240 ----a-w- C:\Windows\System32\drivers\aswsp.sys.1402028555003
2014-06-06 04:15:05 1039096 ----a-w- C:\Windows\System32\drivers\aswsnx.sys.1402028555003
2014-06-06 04:15:05 1039096 ----a-w- C:\Windows\System32\drivers\aswsnx.sys
2014-06-06 04:15:04 65776 ----a-w- C:\Windows\System32\drivers\aswRvrt.sys
2014-06-06 04:15:03 79184 ----a-w- C:\Windows\System32\drivers\aswMonFlt.sys
2014-06-06 04:15:02 93568 ----a-w- C:\Windows\System32\drivers\aswRdr2.sys
2014-06-06 04:15:02 29208 ----a-w- C:\Windows\System32\drivers\aswHwid.sys
2014-06-06 04:14:52 43152 ----a-w- C:\Windows\avastSS.scr
2014-06-06 04:14:35 -------- d-----w- C:\Program Files\AVAST Software
2014-06-06 04:14:00 -------- d-----w- C:\ProgramData\AVAST Software
2014-06-04 12:34:08 -------- d-sh--w- C:\$RECYCLE.BIN
2014-06-04 12:25:02 24064 ----a-w- C:\Windows\zoek-delete.exe
2014-06-04 12:25:01 -------- d-----w- C:\Users\usr\AppData\Local\Temp
2014-06-04 12:11:47 -------- d-----w- C:\zoek_backup
2014-06-03 10:18:47 10702536 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{4B9CF922-E759-4CEF-964F-A460A2E92DE1}\mpengine.dll
2014-05-14 22:40:59 2724864 ----a-w- C:\Windows\System32\mshtml.tlb
2014-05-14 22:40:58 2724864 ----a-w- C:\Windows\SysWow64\mshtml.tlb
.
==================== Find3M ====================
.
2014-05-09 06:14:03 477184 ----a-w- C:\Windows\System32\aepdu.dll
2014-05-09 06:11:23 424448 ----a-w- C:\Windows\System32\aeinv.dll
2014-04-12 02:22:05 95680 ----a-w- C:\Windows\System32\drivers\ksecdd.sys
2014-04-12 02:22:05 155072 ----a-w- C:\Windows\System32\drivers\ksecpkg.sys
2014-04-12 02:19:38 29184 ----a-w- C:\Windows\System32\sspisrv.dll
2014-04-12 02:19:38 136192 ----a-w- C:\Windows\System32\sspicli.dll
2014-04-12 02:19:37 28160 ----a-w- C:\Windows\System32\secur32.dll
2014-04-12 02:19:32 1460736 ----a-w- C:\Windows\System32\lsasrv.dll
2014-04-12 02:19:05 31232 ----a-w- C:\Windows\System32\lsass.exe
2014-04-12 02:12:06 22016 ----a-w- C:\Windows\SysWow64\secur32.dll
2014-04-12 02:10:56 96768 ----a-w- C:\Windows\SysWow64\sspicli.dll
2014-03-30 23:35:08 270496 ------w- C:\Windows\System32\MpSigStub.exe
2014-03-27 08:59:36 6656 ----a-w- C:\Windows\System32\bcmwlrc.dll
2014-03-27 08:58:24 3896632 ----a-w- C:\Windows\System32\bcmihvsrv64.dll
2014-03-27 08:58:24 3561272 ----a-w- C:\Windows\System32\bcmihvui64.dll
2014-03-27 08:58:24 3058168 ----a-w- C:\Windows\System32\drivers\BCMWL664.SYS
.
============= FINISH: 23:05:27.38 ===============
Emmie
Regular Member
 
Posts: 20
Joined: May 26th, 2014, 12:02 pm
Advertisement
Register to Remove

Re: Continuing the Fight Against PDF ConverTer 1.0

Unread postby Emmie » June 6th, 2014, 9:12 am

And the Attach log:

.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2012-11-20.01)
.
Microsoft Windows 7 Home Premium
Boot Device: \Device\HarddiskVolume1
Install Date: 1/08/2013 12:21:01 PM
System Uptime: 6/06/2014 9:38:27 PM (2 hours ago)
.
Motherboard: Acer | | Aspire 4741
Processor: Intel(R) Core(TM) i5 CPU M 430 @ 2.27GHz | CPU 1 | 2267/133mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 466 GiB total, 386.8 GiB free.
D: is CDROM ()
E: is CDROM (CDFS)
.
==== Disabled Device Manager Items =============
.
Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Description: ArcCtrl
Device ID: ROOT\LEGACY_ARCCTRL\0000
Manufacturer:
Name: ArcCtrl
PNP Device ID: ROOT\LEGACY_ARCCTRL\0000
Service: ArcCtrl
.
==== System Restore Points ===================
.
RP182: 29/05/2014 9:06:35 PM - Removed Acer Crystal Eye webcam
RP184: 30/05/2014 8:42:47 AM - Windows Update
RP185: 30/05/2014 11:44:54 PM - Windows Update
RP186: 31/05/2014 4:13:02 AM - Windows Update
RP187: 31/05/2014 10:18:20 PM - Windows Update
RP188: 31/05/2014 10:35:05 PM - Windows Update
RP191: 3/06/2014 10:17:31 PM - Windows Update
RP192: 4/06/2014 6:09:16 AM - Windows Update
RP193: 4/06/2014 9:54:55 PM - Emmie Restore Point 4 June 2014
RP194: 4/06/2014 10:14:51 PM - zoek.exe restore point
RP196: 5/06/2014 10:16:37 PM - Windows Update
RP197: 6/06/2014 2:14:23 PM - avast! antivirus system restore point
RP198: 6/06/2014 5:06:54 PM - OTL Restore Point - 6/06/2014 5:06:54 PM
.
==== Installed Programs ======================
.
Acer Crystal Eye webcam
Adobe Reader XI (11.0.07)
Alcor Micro USB Card Reader
Apple Application Support
Apple Mobile Device Support
Apple Software Update
avast! Free Antivirus
Bonjour
Broadcom 802.11 Network Adapter
Broadcom Management Programs
Cisco EAP-FAST Module
Cisco LEAP Module
Cisco PEAP Module
Compatibility Pack for the 2007 Office system
D3DX10
Dropbox
Google Chrome
Google Earth Plug-in
Google Update Helper
iTunes
Junk Mail filter update
McAfee Security Scan Plus
Microsoft .NET Framework 4.5.1
Microsoft Application Error Reporting
Microsoft Office Click-to-Run 2010
Microsoft Office Starter 2010 - English
Microsoft Office Word Viewer 2003
Microsoft OneDrive
Microsoft Visual C++ 2005 Redistributable (x64)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
Mozilla Firefox 29.0.1 (x86 en-US)
Mozilla Maintenance Service
MSVCRT
MSVCRT_amd64
MSVCRT110
MSVCRT110_amd64
NavDesk 7.50
Notepad++
NVIDIA Display Control Panel
NVIDIA Drivers
NVIDIA HD Audio Driver 1.3.18.0
NVIDIA Install Application
Photo Common
Realtek High Definition Audio Driver
Security Update for Microsoft .NET Framework 4.5.1 (KB2898869)
Security Update for Microsoft .NET Framework 4.5.1 (KB2901126)
Security Update for Microsoft .NET Framework 4.5.1 (KB2931368)
Skype™ 6.3
Synaptics Pointing Device Driver
VLC media player 2.1.3
Windows Live Communications Platform
Windows Live Essentials
Windows Live ID Sign-in Assistant
Windows Live Installer
Windows Live Mail
Windows Live MIME IFilter
Windows Live Photo Common
Windows Live PIMT Platform
Windows Live SOXE
Windows Live SOXE Definitions
Windows Live UX Platform
Windows Live UX Platform Language Pack
Windows Live Writer
Windows Live Writer Resources
.
==== Event Viewer Messages From Past Week ========
.
6/06/2014 5:06:42 PM, Error: Service Control Manager [7034] - The Adobe Acrobat Update Service service terminated unexpectedly. It has done this 1 time(s).
6/06/2014 10:59:10 PM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: ArcCtrl
5/06/2014 10:17:05 PM, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Update for Skype for Windows desktop 6.11 (KB2876229).
4/06/2014 10:21:54 PM, Error: Service Control Manager [7030] - The PEVSystemStart service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.
3/06/2014 7:03:20 AM, Error: volsnap [67] - The shadow copy of volume C: being created failed to install.
.
==== End Of File ===========================
You do not have the required permissions to view the files attached to this post.
Emmie
Regular Member
 
Posts: 20
Joined: May 26th, 2014, 12:02 pm

Re: Continuing the Fight Against PDF ConverTer 1.0

Unread postby pgmigg » June 7th, 2014, 2:21 am

Hello Emmie,

First, I installed "Avast! Free Antivirus" but it is unable to update my version of Google Chrome (please see screenshot i] attached).
It is OK for now. We will discuss it later when I state that your computer is free of any infections...

Second, when following Step 1, I could not uninstall appwiz.cpl because it could not be found under programs in the control panel. When I located it in a local folder and tried to delete it, it would not delete (screenshot ii] attached in next post)
Sorry that my instruction was not clear enough - you were lucky that you could not delete it! ;)
Actually I asked you to uninstall the McAfee Security Scan Plus instead of appwiz.cpl which is system utility allows to open Uninstall or change a program list - it may be possible to do via Control Panel and Programs and Features. I placed here corrected instruction which you need to run:

Step 1.
Remove Program
  1. Click on Start, then click the Start Search box on the Start Menu.
  2. Copy and paste the value below into the open text entry box:
    (Do not include the the first line with ' Code: Select all' - instead of it please click the Select all button next to Code: to select the entire script.)
    Code: Select all
     appwiz.cpl 
    and press Enter - the Unistall or change a program list will be opened.
  3. Please find and click on the red entry below if it exists, choose Uninstall, and give permission to Continue:
    McAfee Security Scan Plus
  4. Take extra care in answering questions posed by any Uninstaller.
  5. When the program have been uninstalled, please close Control Panel.

Then,
Please tell me for what reason did you run DDS scan again?
I did not ask you to do it and would like to note again (please see my entry welcome post) that you should be very careful when you run the helper's instructions...

OK! Let continue our treatment...

Step 2.
OTL - Run Fix Script
You should still have OTL.exe on your desktop.
Important! Close all applications and windows so that you have nothing open and are at your Desktop.
  1. Right click on OTL.exe, select "Run As Administrator..." to run it. If prompted by UAC, please allow it.
  2. Underneath Output at the top, make sure Standard Output is selected.
  3. Highlight and copy the following entries: into the Image text box.
    (Do not include the words Code: Select all - instead of it please click the Select all button next to Code: to select the entire script.)
    Code: Select all
    :Commands
    [createrestorepoint]
    
    :Reg
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CA070F40-44E4-4780-8264-2E71D9D9BBA9}]
    "Path"=-
    [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\BrowserSafeguard Update Task]
    [-HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Browsersafeguard]
    [-HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\Browsersafeguard_RASAPI32]
    [-HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\Browsersafeguard_RASMANCS]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F00A2D21-AD4C-F128-8F43-94F7C466B31E}]
    @=""
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F00A2D21-AD4C-F128-8F43-94F7C466B31E}\InprocServer32]
    @=""
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PDFCoNverrter.PDFCoNverrter]
    @=""
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PDFCoNverrter.PDFCoNverrter.1.0]
    @=""
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{F00A2D21-AD4C-F128-8F43-94F7C466B31E}]
    @=""
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{F00A2D21-AD4C-F128-8F43-94F7C466B31E}\InprocServer32]
    @=""
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\CLSID\{F00A2D21-AD4C-F128-8F43-94F7C466B31E}]
    @=""
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\CLSID\{F00A2D21-AD4C-F128-8F43-94F7C466B31E}\InprocServer32]
    @=""
    
    :Files
    C:\Users\usr\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_browsersafeguard.com_0.localstorage
    C:\Users\usr\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_browsersafeguard.com_0.localstorage-journal
    C:\ProgramData\PDFConverTer
    
    :Commands
    [emptytemp]
    
  4. Click under the Custom Scan/Fixes box and paste the copied text.
  5. Click the Run Fix button. If prompted... click OK.
  6. OTL may ask to reboot the machine. Please do so if asked.
  7. Let the program run unhindered and reboot the PC when it is done.
    When the computer reboots, and you start your usual account, a Notepad text file will appear.
  8. Copy the contents of that file and post it in your next reply. The log can also be found, based on the date/time it was created, as C:\_OTL\MovedFiles\MMDDYYYY_HHMMSS.log

Step 3.
ESET NOD32 Online Scan
  1. Firstly please Disable any Antivirus you have active, as shown in This topic. If active, it could impact the online scan.
    Do NOT use the computer while the scan is running!
    Make sure all other programs and windows are closed!
  2. You need to right-click on the Internet Explorer or Firefox icons on the Start Menu or Quick Launch Bar on the Taskbar and select "Run as Administrator" from the context menu.
  3. Go to ESET Online Scanner - © ESET All Rights Reserved, to run an online scan.
  4. Click the dark blue Run ESET Online Scanner button:
    • If you using Google Chrome or Mozilla Firefox you will need to download "esetsmartinstaller_enu.exe" when prompted. Then double click on it to install.
    • If you using Internet Explorer please read the End User License Agreement and check the box: Yes, I accept the terms of use. Then click the green Start button.
  5. Accept any security warnings from your browser and allow the download/installation of any required files.
    If your browser blocks or halts a download, please allow it to download any required files.
  6. Under scan settings:
    • Check "Scan archives"
    • UNCHECK "Remove found threats"
  7. Click Advanced settings and select the following:
    • Scan potentially unwanted applications
    • Scan for potentially unsafe applications
    • Enable Anti-Stealth technology
  8. Click the Start button.
    ESET will install itself, download virus signature database updates and begin scanning your computer.
    The scan will take a while so please be patient - it may take a few hours. Do NOT use the computer while the scan is running!
  9. When the scan completes, please press the text: Image
  10. Press the text: Image, then save the file to your desktop as ESETScan.txt.
  11. Press the Back button, then press the Finish button.
  12. Copy and paste the contents of ESETScan.txt in your next reply.
    Note: If no threats are found, there is no option to create a log. Just report back to me there was nothing found.

Please post each log separately to prevent it being cut off by the forum post size limiter.
Check each after you've posted it to make sure it's all present, if any log is cut off you'll have to post it in sections....

Please include in your next reply:
  1. Do you have any problems executing the instructions?
  2. Contents of the C:\_OTL\MovedFiles\MMDDYYYY_HHMMSS.log log file after OTL FixScript run
  3. Contents of the ESETScan.txt log file
  4. Do you see any changes in computer behavior?

Thanks,
pgmigg

Failure to post replies within 72 hours will result in this thread being closed
User avatar
pgmigg
MRU Teacher
MRU Teacher
 
Posts: 3175
Joined: July 8th, 2008, 1:25 pm
Location: GMT-05:00

Re: Continuing the Fight Against PDF ConverTer 1.0

Unread postby Emmie » June 8th, 2014, 5:48 pm

Hi pgmigg,

A. No problems executing the instructions - I understood you correctly this time and successfully uninstalled McAfee Security Scan Plus. Apologies for running that additional DDS, I think I just got excited that the extension appeared to have gone and thought the DDS results would tell you something about that. Will ensure to follow your instructions exactly from now on and not do anything additional or different.


B. Latest log file after OTL FixScript Run below:

All processes killed
========== COMMANDS ==========
Restore point Set: OTL Restore Point
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CA070F40-44E4-4780-8264-2E71D9D9BBA9} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\BrowserSafeguard Update Task\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Browsersafeguard\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\Browsersafeguard_RASAPI32\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\Browsersafeguard_RASMANCS\ deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F00A2D21-AD4C-F128-8F43-94F7C466B31E}\\@|"" /E : value set successfully!
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F00A2D21-AD4C-F128-8F43-94F7C466B31E}\InprocServer32\\@|"" /E : value set successfully!
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PDFCoNverrter.PDFCoNverrter\\@|"" /E : value set successfully!
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PDFCoNverrter.PDFCoNverrter.1.0\\@|"" /E : value set successfully!
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{F00A2D21-AD4C-F128-8F43-94F7C466B31E}\\@|"" /E : value set successfully!
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{F00A2D21-AD4C-F128-8F43-94F7C466B31E}\InprocServer32\\@|"" /E : value set successfully!
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\CLSID\{F00A2D21-AD4C-F128-8F43-94F7C466B31E}\\@|"" /E : value set successfully!
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\CLSID\{F00A2D21-AD4C-F128-8F43-94F7C466B31E}\InprocServer32\\@|"" /E : value set successfully!
========== FILES ==========
File\Folder C:\Users\usr\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_browsersafeguard.com_0.localstorage not found.
File\Folder C:\Users\usr\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_browsersafeguard.com_0.localstorage-journal not found.
File\Folder C:\ProgramData\PDFConverTer not found.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Public

User: usr
->Temp folder emptied: 8115989 bytes
->Temporary Internet Files folder emptied: 3156580 bytes
->FireFox cache emptied: 0 bytes
->Google Chrome cache emptied: 304769288 bytes
->Flash cache emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 1614768 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 333406101 bytes

Total Files Cleaned = 621.00 mb


OTL by OldTimer - Version 3.2.69.0 log created on 06082014_235356

Files\Folders moved on Reboot...
C:\Users\usr\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Users\usr\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat moved successfully.
File move failed. C:\Windows\temp\_avast_\AvastLock.txt scheduled to be moved on reboot.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...
Emmie
Regular Member
 
Posts: 20
Joined: May 26th, 2014, 12:02 pm

Re: Continuing the Fight Against PDF ConverTer 1.0

Unread postby Emmie » June 8th, 2014, 5:49 pm

C. Contents of ESETScan log file (22 infected files found):

C:\zoek_backup\C_PROGRA~2_Browsersafeguard\uninstall.browsersafeguard.exe a variant of MSIL/Adware.iBryte.D application
C:\zoek_backup\C_Users_usr_AppData_Local_Smartbar\Application\SmartbarInternetExplorerExtension.dll a variant of MSIL/Toolbar.Linkury.D potentially unwanted application
C:\zoek_backup\C_Users_usr_AppData_Local_Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\GoogleChromeRemotePlugin.dll Win32/Toolbar.Linkury.D potentially unwanted application
C:\zoek_backup\C_Users_usr_AppData_Local_Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_22.dll a variant of Win32/Toolbar.Linkury.D potentially unwanted application
C:\zoek_backup\C_Users_usr_AppData_Local_Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_23.dll a variant of Win32/Toolbar.Linkury.D potentially unwanted application
C:\zoek_backup\C_Users_usr_AppData_Local_Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_24.dll a variant of Win32/Toolbar.Linkury.D potentially unwanted application
C:\zoek_backup\C_Users_usr_AppData_Local_Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_25.dll a variant of Win32/Toolbar.Linkury.D potentially unwanted application
C:\zoek_backup\C_Users_usr_AppData_Local_Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_26.dll a variant of Win32/Toolbar.Linkury.D potentially unwanted application
C:\zoek_backup\C_Users_usr_AppData_Local_Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_27.dll a variant of Win32/Toolbar.Linkury.D potentially unwanted application
C:\zoek_backup\C_Users_usr_AppData_Roaming_Mozilla_Firefox_Profiles_wzxwi8ef.default_extensions_staged\{b6d670bf-a70b-f0b2-feb1-724899e26cde}\components\SmartbarFireFoxRemotePlugin_22.dll a variant of Win32/Toolbar.Linkury.D potentially unwanted application
C:\zoek_backup\C_Users_usr_AppData_Roaming_Mozilla_Firefox_Profiles_wzxwi8ef.default_extensions_staged\{b6d670bf-a70b-f0b2-feb1-724899e26cde}\components\SmartbarFireFoxRemotePlugin_23.dll a variant of Win32/Toolbar.Linkury.D potentially unwanted application
C:\zoek_backup\C_Users_usr_AppData_Roaming_Mozilla_Firefox_Profiles_wzxwi8ef.default_extensions_staged\{b6d670bf-a70b-f0b2-feb1-724899e26cde}\components\SmartbarFireFoxRemotePlugin_24.dll a variant of Win32/Toolbar.Linkury.D potentially unwanted application
C:\zoek_backup\C_Users_usr_AppData_Roaming_Mozilla_Firefox_Profiles_wzxwi8ef.default_extensions_staged\{b6d670bf-a70b-f0b2-feb1-724899e26cde}\components\SmartbarFireFoxRemotePlugin_25.dll a variant of Win32/Toolbar.Linkury.D potentially unwanted application
C:\zoek_backup\C_Users_usr_AppData_Roaming_Mozilla_Firefox_Profiles_wzxwi8ef.default_extensions_staged\{b6d670bf-a70b-f0b2-feb1-724899e26cde}\components\SmartbarFireFoxRemotePlugin_26.dll a variant of Win32/Toolbar.Linkury.D potentially unwanted application
C:\zoek_backup\C_Users_usr_AppData_Roaming_Mozilla_Firefox_Profiles_wzxwi8ef.default_extensions_staged\{b6d670bf-a70b-f0b2-feb1-724899e26cde}\components\SmartbarFireFoxRemotePlugin_27.dll a variant of Win32/Toolbar.Linkury.D potentially unwanted application
C:\zoek_backup\C_Users_usr_AppData_Roaming_Mozilla_Firefox_Profiles_wzxwi8ef.default_extensions_{b6d670bf-a70b-f0b2-feb1-724899e26cde}\components\SmartbarFireFoxRemotePlugin_22.dll a variant of Win32/Toolbar.Linkury.D potentially unwanted application
C:\zoek_backup\C_Users_usr_AppData_Roaming_Mozilla_Firefox_Profiles_wzxwi8ef.default_extensions_{b6d670bf-a70b-f0b2-feb1-724899e26cde}\components\SmartbarFireFoxRemotePlugin_23.dll a variant of Win32/Toolbar.Linkury.D potentially unwanted application
C:\zoek_backup\C_Users_usr_AppData_Roaming_Mozilla_Firefox_Profiles_wzxwi8ef.default_extensions_{b6d670bf-a70b-f0b2-feb1-724899e26cde}\components\SmartbarFireFoxRemotePlugin_24.dll a variant of Win32/Toolbar.Linkury.D potentially unwanted application
C:\zoek_backup\C_Users_usr_AppData_Roaming_Mozilla_Firefox_Profiles_wzxwi8ef.default_extensions_{b6d670bf-a70b-f0b2-feb1-724899e26cde}\components\SmartbarFireFoxRemotePlugin_25.dll a variant of Win32/Toolbar.Linkury.D potentially unwanted application
C:\zoek_backup\C_Users_usr_AppData_Roaming_Mozilla_Firefox_Profiles_wzxwi8ef.default_extensions_{b6d670bf-a70b-f0b2-feb1-724899e26cde}\components\SmartbarFireFoxRemotePlugin_26.dll a variant of Win32/Toolbar.Linkury.D potentially unwanted application
C:\zoek_backup\C_Users_usr_AppData_Roaming_Mozilla_Firefox_Profiles_wzxwi8ef.default_extensions_{b6d670bf-a70b-f0b2-feb1-724899e26cde}\components\SmartbarFireFoxRemotePlugin_27.dll a variant of Win32/Toolbar.Linkury.D potentially unwanted application
C:\zoek_backup\C_Windows_sysWoW64_config_systemprofile_AppData_Local_Google_Chrome_User Data_Default_Extensions_mphpbdjcljebbcnfopfngmfdackbbdgf\3.5.0.0_0\background.js Win32/DealPly.J potentially unwanted application
Emmie
Regular Member
 
Posts: 20
Joined: May 26th, 2014, 12:02 pm

Re: Continuing the Fight Against PDF ConverTer 1.0

Unread postby Emmie » June 8th, 2014, 5:51 pm

D. I temporarily disabled Avast! AV software prior to executing the ESET Online Scanner. I chose the option to re-enable Avast! AV shields upon reboot but have not rebooted my computer yet. Is it ok to reboot, or to re-enable Avast! AV software now?

Many thanks,
Emmie
Emmie
Regular Member
 
Posts: 20
Joined: May 26th, 2014, 12:02 pm

Re: Continuing the Fight Against PDF ConverTer 1.0

Unread postby pgmigg » June 8th, 2014, 9:58 pm

Hello Emmie,

PDF ConverTer 1.0 no longer shows up as an extension!
I am glad to read about it! :D
I temporarily disabled Avast! AV software prior to executing the ESET Online Scanner. I chose the option to re-enable Avast! AV shields upon reboot but have not rebooted my computer yet. Is it ok to reboot, or to re-enable Avast! AV software now?
It does not matter - you can reboot your machine any time or simply re-enable Avast. All three selections (Disable for 10 minutes, for 1 hour, or until computer restarted) are events only and disabling period may be interrupted by your will whatever you would like to do it.

Your latest set of logs appear to be clean! :cheers:
This is my general post for when your logs show no more signs of malware.
Before I give you instructions how to keep your computer clean and secure, you need to make a few additional steps.

Step 1.
Latest Java Installation Needed!

Attention: Print these instructions or copy them. You will be closing your browser!!

DOWNLOAD LATEST VERSION
  1. Get the latest version (8u5) of Java Runtime Environment (JRE)... © Sun Microsystems, Inc.
  2. Check "Accept License Agreement"
  3. Locate the .exe entry for Windows x64, click on the associated file name, and save the jre-8u5-windows-x64.exe file to your Desktop.

INSTALL Java
  1. Close all open applications (standard), especially your browser.
  2. From desktop please double-click on jre-8u5-windows-x64.exe to install the newest version.
  3. Follow the on-screen directions and when installation is completed successfully, reboot your computer normally.
  4. Once the computer has been restarted, you can delete the "downloaded" installation file from your desktop.

Step 2.
OTL - Run Safe Script
You should still have OTL on your desktop.
Important! Close all applications and windows so that you have nothing open and are at your Desktop.
  1. Right click on OTL.exe, select "Run As Administrator..." to run it. If prompted by UAC, please allow it.
  2. Copy and Paste the following code into the Image text box.
    (Do not include the words Code: Select all - instead of it please click the Select all button next to Code: to select the entire script.)
    Code: Select all
    :Commands
    [CREATERESTOREPOINT]
    
    :Commands
    [EMPTYTEMP]
    [CLEARALLRESTOREPOINTS]
    
  3. Click under the Custom Scan/Fixes box and paste the copied text.
  4. Click the Run Fix button. If prompted... click OK.
  5. OTL may ask to reboot the machine. Please do so if asked.

Step 3.
OTL-Cleanup
You should still have OTL on your desktop.
  1. Right click on OTL.exe, select "Run As Administrator..." to run it. If prompted by UAC, please allow it.
  2. Press the CleanUp button.
  3. When done, you will be prompted to reboot your system to finish file removal, please select OK to reboot your computer.

Step 4.
Remove all used tools and their log files not removed by OTL if they remain on your desktop.
  • DDS
  • SystemLook
  • ZOEK

Then:
Please don't forget to enable and update all your defense software!

Optional:
A few replays ago you noted that the Avast could not update your version of Google Chrome. Firstly, the Avast is anti-virus program - very good one! Secondary - it is spyware, addware, and-other-ware defender which can check browsers, websites, e-mails, etc. And after all the Avast trying to do some other actions which are not the first goals - for example, to keep many of your programs up to date. Unfortunately, it is not doing properly sometimes...
If you would like you can update your software manually or by programs specifically prepared for it such as Secunia Online Software Inspector

If you decide to use special program for software updates you will need to
Disable Avast Software Updater
  1. Please right-click on Avast icon in system tray and select Open avast! user interface
  2. Select Settings tab on the left vertical menu
  3. There please select Tools tab on the left vertical menu
  4. Then click on Customize link to the right of label Software Updater
  5. Uncheck Enable Software Updater check box and press OK button
  6. Then press OK button again and close avast! user interface

Finally:
Please click HERE to find a short guide to staying safer online.

Please don't hesitate to ask any additional questions.

Stay Safe! ;)
pgmigg
User avatar
pgmigg
MRU Teacher
MRU Teacher
 
Posts: 3175
Joined: July 8th, 2008, 1:25 pm
Location: GMT-05:00

Re: Continuing the Fight Against PDF ConverTer 1.0

Unread postby Emmie » June 11th, 2014, 6:41 am

Dear pgmigg,

Thank you so very much for your assistance!! What a generous and open-hearted thing to offer help to a complete stranger, and to follow up with consistent advice and instructions.

I will be in touch if I run into any issues with your final steps above.

Emmie
Emmie
Regular Member
 
Posts: 20
Joined: May 26th, 2014, 12:02 pm

Re: Continuing the Fight Against PDF ConverTer 1.0

Unread postby pgmigg » June 11th, 2014, 11:51 am

Dear Emmie,

You are very welcome! :D

Stay Safe! ;)
pgmigg
User avatar
pgmigg
MRU Teacher
MRU Teacher
 
Posts: 3175
Joined: July 8th, 2008, 1:25 pm
Location: GMT-05:00

Re: Continuing the Fight Against PDF ConverTer 1.0

Unread postby Wingman » June 11th, 2014, 1:04 pm

As your problems appear to have been resolved, this topic is now closed.

We are pleased we could help you resolve your computer's issues.

If you would like to make a comment or leave a compliment regarding the help you have received, please see Feedback for Our Helpers - Say "Thanks" Here.
User avatar
Wingman
Admin/Teacher
Admin/Teacher
 
Posts: 14108
Joined: July 1st, 2008, 1:34 pm
Location: East Coast, USA
Advertisement
Register to Remove

Previous

Return to Infected? Virus, malware, adware, ransomware, oh my!



Who is online

Users browsing this forum: random/random and 37 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware