JeanInMontana

OK I only see one thing of concern here and it's not malware. O18 - Protocol: qbwc - {FC598A64-626C-4447-85B8-53150405FD57} - mscoree.dll (file missing) <=========== probably need to reinstall QuickBooks to fix that. Otherwise how is it running?

OK, some of the sites were red rated. Yours is green Remove the line below with HJT R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file) What if any symptoms are you still having?

OK, please run HJT in scan only and place a check next to the items below, then click fix. O2 - BHO: DrFlex IE Helper - {8EEB2711-9D21-4f9c-99A1-B7FC5A8CA56A} - C:\Program Files\QdrDrive\QdrDrive20.dll (file missing) O23 - Service: OracleDBConsoleinfra - Unknown owner - C:\oracle\product\infra\bin\nmesrvc.exe (file missing) O23 - Service: OracleDBConsoletest - Unknown owner - C:\oracle\product\10.2.0\10g\bin\nmesrvc.exe (file missing) O23 - Service: OracleOraDb10g_home2iSQL*Plus - Unknown owner - C:\oracle\products\10.2.0\db_2\bin\isqlplussvc.exe (file missing) O23 - Service: OracleOraDb10g_home2TNSListener - Unknown owner - C:\oracle\products\10.2.0\db_2\BIN\TNSLSNR.exe (file missing) Your running an outdated and unsafe version of Adobe Acrobat Reader latest version. Or get the alternative faster lighter on resources Foxit PDF Reader and Editor Look at the Downloads tab here or Downloads if you don't want to see the features etc. Install one of those two. Update MBAM scan again, post that log and a new HJT log.

She is getting help in the proper forum and yes it's always a good plan to update MBAM often. The program is often updated 3 to 4 times a day.

Hi dark_messenger and welcome! If you would like to be given Trusted Advisor status here shoot me a PM.

Hi Jim and welcome to Malwarebytes! Just wait til the next version comes out, it's even better.

Since this issue is resolved I will close the thread to prevent others from posting into it. If you need assistance please start your own topic and someone will be happy to assist you. The fixes and advice in this thread are for this machine only. Do not apply to your machine. Please start a thread of your own and someone will be happy to help you.

Since this issue is resolved I will close the thread to prevent others from posting into it. If you need assistance please start your own topic and someone will be happy to assist you. The fixes and advice in this thread are for this machine only. Do not apply to your machine. Please start a thread of your own and someone will be happy to help you.

Since this issue is resolved I will close the thread to prevent others from posting into it. If you need assistance please start your own topic and someone will be happy to assist you. The fixes and advice in this thread are for this machine only. Do not apply to your machine. Please start a thread of your own and someone will be happy to help you.

Since this topic has had no reply for over 5 days it will be closed to prevent other from posting into it. Should you decide to resume with your assistance PM any staff member and we will be happy to reopen the topic. Note: the fixes in this topic are for this system only. Applying them to your system can cause severe damage and result in utter system failure. If you need help start your own topic and someone will be happy to assist you.

Since this topic has had no reply for over 5 days it will be closed to prevent other from posting into it. Should you decide to resume with your assistance PM any staff member and we will be happy to reopen the topic. Note: the fixes in this topic are for this system only. Applying them to your system can cause severe damage and result in utter system failure. If you need help start your own topic and someone will be happy to assist you.

Since this issue is resolved I will close the thread to prevent others from posting into it. If you need assistance please start your own topic and someone will be happy to assist you. The fixes and advice in this thread are for this machine only. Do not apply to your machine. Please start a thread of your own and someone will be happy to help you.

Since this topic has had no reply for over 5 days it will be closed to prevent other from posting into it. Should you decide to resume with your assistance PM any staff member and we will be happy to reopen the topic. Note: the fixes in this topic are for this system only. Applying them to your system can cause severe damage and result in utter system failure. If you need help start your own topic and someone will be happy to assist you.

Since this topic has had no reply for over 5 days it will be closed to prevent other from posting into it. Should you decide to resume with your assistance PM any staff member and we will be happy to reopen the topic. Note: the fixes in this topic are for this system only. Applying them to your system can cause severe damage and result in utter system failure. If you need help start your own topic and someone will be happy to assist you.

Since this issue is resolved I will close the thread to prevent others from posting into it. If you need assistance please start your own topic and someone will be happy to assist you. The fixes and advice in this thread are for this machine only. Do not apply to your machine. Please start a thread of your own and someone will be happy to help you.

Since this issue is resolved I will close the thread to prevent others from posting into it. If you need assistance please start your own topic and someone will be happy to assist you. The fixes and advice in this thread are for this machine only. Do not apply to your machine. Please start a thread of your own and someone will be happy to help you.

I'd like to see a new updated MBAM scan log and HJT please.

Hi sjc1919 and welcome to Malwarbytes. First turnoff TeaTimer. Open SB S&D Make sure you are in Advanced Mode. Click on the Mode link at the top of the program and then Advanced Mode. Click on the Tools section and then Resident. You will see two items. 1. Resident "SD helper" (Internet Explorer bad download blocker.) active 2. Resident "Tea Timer" (Protection of over-all system settings.) active. Uncheck number 2.. Leave number 1 checked always. You can enable Tea Timer again if you wish once all special fixes have been done. Now please make sure you have all files and folders set to show. Please set your system to show all files; Click Start. Open My Computer. Select the Tools menu and click Folder Options. Select the View Tab. Under the Hidden files and folders heading select Show hidden files and folders. Uncheck the Hide protected operating system files (recommended) option. Click Yes to confirm. Click OK. Reboot to Safe Mode by continually tapping the F8 key. Using Windows Explorer navigate to the following files and copy them to a folder you name malware. Zip that folder by right clicking on it and choosing send to zipped folder. Attach the zipped folder to your next reply and delete all files and folders with these file names in them. C:\Windows\system32\otohmnkp.exe C:\Windows\system32\zyjwdopy.exe Now boot into normal mode. Update MBAM and run a quick scan post that log and a new HJT log please.

If you downloaded a cracked version using Ares it's highly possible it was bundled with malware. If you got a legal copy it's probably clean. Google search for Brickopack comes up with mixed site rating via SiteAdvisor, from green to red.

Shut down all other programs that are running and just do the scan.

Arrgg I just noticed your running HJT from D. Please move it to C and post a new log. Svhost can be good or bad the amount running is determined by the amount of other stuff running. It's a valid Windows service. Bit Defender is low end protection, better stuff is available free.

Hi darkwolf46 and welcome to Malwarebytes. Please follow the instructions here http://www.malwarebytes.org/forums/index.php?showtopic=2936 and start your own topic.

Hi LEN and welcome to Malwarebytes. Can you be a bit more specific? What do you mean by new "china" hardware? China the country is a known area of the world to be heavily involved in all sorts of avenues of infection. It is certainly not alone in this distinction. More details are needed to give an intelligent and comprehensive reply.

We don't know of any conflicts MBAM has with any other security apps. If your wanting to buy it you can use the link in my signature.

What symptoms if any are you still having? Please get CCleaner Install the program run the scan. If you have any queries or comments then please use the Forum or contact us via this form.. NOTE: You may wish to save your cookies for sites you use often and have saved the passwords or use auto logon. Also Saved form information. BUT since this is a malware issue, starting over is always a good plan. You will be amazed at the amount of space on the HD you gain and probably notice improved performance. Run HJT in scan mode only and place a check next to the following items and click fix. R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file) Now reboot, update MBAM run a quick scan and post that log and a new HJT log please.