I have LOTS of programs and processes running, and I just re-did my entire machine. I found many things in IE 11 (Add-Ons) that are labeled as 'run without permission'. How do I at least see if it's good or not good? I tried the 'DDS' link above, and it won't run with my operating system. What do I do?
Malware Removal Forums
Lots of programs and processes running
4 min read
Download OTL by OldTimer to your Desktop.
If you can't download it on the machine you're having problems with, then download it on another computer and transfer it to the problem machine using a USB drive.
If you already have a copy of OTL delete it and use this version.
If you can't download it on the machine you're having problems with, then download it on another computer and transfer it to the problem machine using a USB drive.
If you already have a copy of OTL delete it and use this version.
- Double click OTL.exe to launch the programme.
- Check the following.
- Scan all users.
- Standard Output.
- Lop check.
- Purity check.
- Under Extra Registry section, select Use SafeList
- Click the Run Scan button and wait for the scan to finish (usually about 10-15 mins).
- When finished it will produce two logs.
- OTL.txt (open on your desktop).
- Extras.txt (minimised in your taskbar)
- Please post me both logs.
See attached.
Thank you so very much for at least trying to assist me. I really do appreciate it.
Thank you so very much for at least trying to assist me. I really do appreciate it.
See attached.
I may have to run to lunch, but I will check this as soon as I get back. Thank you again.
Not a whole lot showing in your logs, however there are what looks like remnants of a "funmoods infection", so I'd like to run some further scans to make sure we've found everything.
QUESTION .... are you using Windows 8 or Windows 8.1 ???? Please let me know.
Next ....
Please download AdwCleaner and save it to your desktop.
DO NOT - attempt to fix anything that ADWCleaner may find at this time.
Next ...
Please download SystemLook from the link below and save it to your Desktop.
For 64 bit Systems
QUESTION .... are you using Windows 8 or Windows 8.1 ???? Please let me know.
Next ....
Please download AdwCleaner and save it to your desktop.
- Double click AdwCleaner.exe to run it.
- Click Scan.
- A logfile will automatically open after the scan has finished.
- Close the adwCleaner window, click ok to the prompt.
- Please post the contents of that logfile with your next reply.
- You can also find the logfile at C:\AdwCleaner[R1].txt.
DO NOT - attempt to fix anything that ADWCleaner may find at this time.
Next ...
Please download SystemLook from the link below and save it to your Desktop.
For 64 bit Systems
- Double-click SystemLook.exe to run it.
- Copy the content of the following codebox into the main textfield: (do not include the words Code: Select all)
:regfind
funmoods
fun moods- Click the Look button to start the scan.
- When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.
I am running Windows 8.1 I have done so many things now that you may just tell me to start over. I will follow your instructions above.
AdwCleaner v3.016 - Report created 01/01/2014 at 20:31:11
# Updated 23/12/2013 by Xplode
# Operating System : Windows 8.1 (64 bits)
# Username : [removed] - HP-WIN81
# Running from : C:\Users\Friend1\AppData\Local\Microsoft\Windows\INetCache\IE\TBWYKWZ7\adwcleaner.exe
# Option : Scan
***** [ Services ] *****
***** [ Files / Folders ] *****
***** [ Shortcuts ] *****
***** [ Registry ] *****
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{42D79B50-CC4A-4A8E-860F-BE674AF053A2}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{42D79B50-CC4A-4A8E-860F-BE674AF053A2}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{42D79B50-CC4A-4A8E-860F-BE674AF053A2}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{42D79B50-CC4A-4A8E-860F-BE674AF053A2}
***** [ Browsers ] *****
-\\ Internet Explorer v11.0.9600.16384
*************************
AdwCleaner[R0].txt - [967 octets] - [01/01/2014 20:31:11]
########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [1026 octets] ##########
# Updated 23/12/2013 by Xplode
# Operating System : Windows 8.1 (64 bits)
# Username : [removed] - HP-WIN81
# Running from : C:\Users\Friend1\AppData\Local\Microsoft\Windows\INetCache\IE\TBWYKWZ7\adwcleaner.exe
# Option : Scan
***** [ Services ] *****
***** [ Files / Folders ] *****
***** [ Shortcuts ] *****
***** [ Registry ] *****
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{42D79B50-CC4A-4A8E-860F-BE674AF053A2}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{42D79B50-CC4A-4A8E-860F-BE674AF053A2}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{42D79B50-CC4A-4A8E-860F-BE674AF053A2}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{42D79B50-CC4A-4A8E-860F-BE674AF053A2}
***** [ Browsers ] *****
-\\ Internet Explorer v11.0.9600.16384
*************************
AdwCleaner[R0].txt - [967 octets] - [01/01/2014 20:31:11]
########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [1026 octets] ##########
SystemLook 04.09.10 by jpshortstuff
Log created at 20:34 on 01/01/2014 by [removed]
Administrator - Elevation successful
========== regfind ==========
Searching for "funmoods"
No data found.
Searching for "fun moods"
No data found.
-= EOF =-
Log created at 20:34 on 01/01/2014 by [removed]
Administrator - Elevation successful
========== regfind ==========
Searching for "funmoods"
No data found.
Searching for "fun moods"
No data found.
-= EOF =-
Went ahead and ran these again, too.
OK, ADWCleaner didn't find anything of concern, the entries flagged in its log are legitimate, also the "suspicious" entries for IE11 are no longer present in your latest OTL log.
What problems exactly are you experiencing with your computer.
What problems exactly are you experiencing with your computer.
I really, really appreciate you taking the time to look at those and tell me what to do. I had installed a VPN software that I think got me all confused. If you say I'm good, i'll trust you. Thank you.
Yes I saw the VPN program (HMA! Pro VPN) in your earlier logs, and I notice it's not present in your current logs, so presumably you've uninstalled it (along with Dropbox which too is no longer present).
As long as you're happy that your machine is behaving itself, there's no signs in any of the logs you've submitted that would give me any concern, and I think we can close this topic.
Before we do that, you'll need to remove ADWCleaner, to do that ...
Note: If AdwCleaner prompts you an update is available, click Cancel and continue to uninstall.
Any problems please let me know, if not ...
This topic is closed
As long as you're happy that your machine is behaving itself, there's no signs in any of the logs you've submitted that would give me any concern, and I think we can close this topic.
Before we do that, you'll need to remove ADWCleaner, to do that ...
- Double click AdwCleaner.exe to run it.
- Click Uninstall.
- Click Yes to the prompt.
- AdwCleaner will close and uninstall itself
Note: If AdwCleaner prompts you an update is available, click Cancel and continue to uninstall.
Any problems please let me know, if not ...
This topic is closed