This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Malware Removal Forums

Help with possible infection

8 min read

✨ The volunteers who helped with this thread aren't active anymore, but you can still get a personalized answer — click Ask AI below.

This thread's last reply is from August 14, 2014, 2:47 AM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

rmrrar
IT seems to be running better .

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 02-08-2014
Ran by [redacted] at 2014-08-04 11:24:03 Run:2
Running from C:\Users\[redacted]\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Reg: reg delete "HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\services\vToolbarUpdater15.4.0" /f
Reg: reg delete "HKEY_USERS\S-1-5-21-1876674280-98715098-3197743793-1001\Software\Trolltech" /f
*****************


========= reg delete "HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\services\vToolbarUpdater15.4.0" /f =========

The operation completed successfully.



========= End of Reg: =========


========= reg delete "HKEY_USERS\S-1-5-21-1876674280-98715098-3197743793-1001\Software\Trolltech" /f =========

The operation completed successfully.



========= End of Reg: =========


==== End of Fixlog ====
nunped MRU Honors Grad Emeritus
Hi rmrrar,

Hi user,

Good job! Your computer appears to be free from malware.

Now, some clean-up steps:

Delfix - Delete Fix Processes
  1. Please download delfix by Xplode and save it to your desktop.
  2. Right-click on delfix.exe and select " Run as administrator " to run it.
    An application window opens with check box options... The "Remove disinfection tools" option is checked by default.
  3. =================Check ALL the boxes... then press Run.
  4. Check the following boxes... then press Run:
    • Activate UAC
    • Remove disinfection tools --> keep this checked
    • Create registry backup
    • Purge system restore
    • Reset system settings

When finished, Notepad will open DelFix.txt. The log will be located at the root of the system drive, C:\DelFix.txt.

Stay informed.
To help minimize the chances of becoming re-infected, please read.
Computer Security - a short guide to staying safer online

If your computer is running slowly after your clean up, please read.
What to do if your Computer is running slowly

Please reply to this post so I know you have read it. If you don't have any further questions this thread will be closed.

Safe surfing! ;)
rmrrar
# DelFix v10.8 - Logfile created 06/08/2014 at 17:14:20
# Updated 29/07/2014 by Xplode
# Username : ROBERT - ROBERT-PC
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)

~ Activating UAC ... OK

~ Creating registry backup ... OK

~ Cleaning system restore ...

Deleted : RP #537 [Scheduled Checkpoint | 07/27/2014 07:54:28]
Deleted : RP #538 [Scheduled Checkpoint | 08/04/2014 05:01:12]

New restore point created !

~ Resetting system settings ... OK

########## - EOF - ##########
nunped MRU Honors Grad Emeritus
Hi rmrrar,

Any further questions/issues before we close this one? :)
rmrrar
No, that is all. Thank you for all your help and for your time . God Bless
rmrrar
Wait I do Have A question. lol. I think I might have allowed a program access thru my firewall a while back how do I remove its exclusion from my firewall settings ?
nunped MRU Honors Grad Emeritus
Hi rmrrar,

You can follow the instructions here: http://windows.microsoft.com/en-us/windows/risks-allowing-programs-through-firewall#1TC=windows-7
NonSuch Administrator
As this issue appears to be resolved,

✨ Ask AI about this thread

No ads, no affiliate links — generated on request from this thread's own archived content, not written by forum staff. Never run a scan/removal tool as a self-service step if the original thread describes it being done under a helper's direct supervision, and don't include your name, email, or other personal details in a follow-up question. See our privacy page for details on how this works.