AngelofMisrule

OK here it is.. Malware.txt

So how goes it? Much longer cause this thing is slower than molasses. Log2.txt

OK Last one that you asked for. log.txt

Didn't know that IOBit was a thief. Didn't know if you guys had an uninstaller since my games don't always want to come out all the way. I end up having to go in and hand delete things and then half the time they don't want to delete. So I went on-line ato find a program that would help with that. Will continue workingon the next part after church on Sunday.

OK Sorry it took so long. Took 2+ days to get all the scans done. Plus was gone over the weekend and hospital on Monday. AdwCleanerR2.txtAdwCleanerS1.txtESET.txtJRT.txtMWBscan.txtFRST.txt There are items on 2 of these scans that are not trojans or viruses that are being labeled as such. There are programs that were BOUGHT at the store that it is saying are...vTech is my son's handheld games not trojans. On ESET (a program I have used before..) it is saying that programs that are vital to my computer are trojans or unwanted. iTunes is not a trojan...Why is it giving so MANY false positives? FRST.txt

Scan done. Now awaiting your reply. RKreport_SCN_06282014_182604.log

Malwarebytes Anti-Malware www.malwarebytes.org Scan Date: 6/28/2014 Scan Time: 5:22:35 PM Logfile: Administrator: Yes Version: 2.00.2.1012 Malware Database: v2014.06.28.05 Rootkit Database: v2014.06.23.02 License: Premium Malware Protection: Enabled Malicious Website Protection: Enabled Self-protection: Disabled OS: Windows 7 Service Pack 1 CPU: x86 File System: NTFS User: Christy Scan Type: Threat Scan Result: Completed Objects Scanned: 324920 Time Elapsed: 39 min, 10 sec Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Enabled Deep Rootkit Scan: Enabled Heuristics: Enabled PUP: Enabled PUM: Enabled Processes: 0 (No malicious items detected) Modules: 0 (No malicious items detected) Registry Keys: 0 (No malicious items detected) Registry Values: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Folders: 2 PUP.Optional.FreeCauseTB.A, C:\Users\Christy\AppData\Roaming\Mozilla\Firefox\Profiles\y5n4fa9x.default\FCTB\{afe43e80-0abc-4df2-81a0-3fe44b74abe8}, Quarantined, [19d1b0cbc2b9bc7a734c0f8a7092fd03], PUP.Optional.FreeCauseTB.A, C:\Users\Christy\AppData\Roaming\Mozilla\Firefox\Profiles\y5n4fa9x.default\FCTB\{afe43e80-0abc-4df2-81a0-3fe44b74abe8}\62781, Quarantined, [19d1b0cbc2b9bc7a734c0f8a7092fd03], Files: 47 PUP.Optional.CrossRider.A, C:\Users\Faith\AppData\Roaming\Mozilla\Firefox\Profiles\fgvpi0nr.default\searchplugins\search-the-web.xml, Quarantined, [de0c92e99be053e3831d6264e81a7789], PUP.Optional.FreeCauseTB.A, C:\Users\Christy\AppData\Roaming\Mozilla\Firefox\Profiles\y5n4fa9x.default\FCTB\{afe43e80-0abc-4df2-81a0-3fe44b74abe8}\62781\023aa17ac9b4d4508214460a057f2270, Quarantined, [19d1b0cbc2b9bc7a734c0f8a7092fd03], PUP.Optional.FreeCauseTB.A, C:\Users\Christy\AppData\Roaming\Mozilla\Firefox\Profiles\y5n4fa9x.default\FCTB\{afe43e80-0abc-4df2-81a0-3fe44b74abe8}\62781\059d0773476e585aaab0cb05f2d35011, Quarantined, [19d1b0cbc2b9bc7a734c0f8a7092fd03], PUP.Optional.FreeCauseTB.A, C:\Users\Christy\AppData\Roaming\Mozilla\Firefox\Profiles\y5n4fa9x.default\FCTB\{afe43e80-0abc-4df2-81a0-3fe44b74abe8}\62781\0b12654c5711f7cde49ae8c25f3da38c.0, Quarantined, [19d1b0cbc2b9bc7a734c0f8a7092fd03], PUP.Optional.FreeCauseTB.A, C:\Users\Christy\AppData\Roaming\Mozilla\Firefox\Profiles\y5n4fa9x.default\FCTB\{afe43e80-0abc-4df2-81a0-3fe44b74abe8}\62781\0c82e5b864501f211be07075dc4be877, Quarantined, [19d1b0cbc2b9bc7a734c0f8a7092fd03], PUP.Optional.FreeCauseTB.A, C:\Users\Christy\AppData\Roaming\Mozilla\Firefox\Profiles\y5n4fa9x.default\FCTB\{afe43e80-0abc-4df2-81a0-3fe44b74abe8}\62781\163418f233affe8a749c669e663c7388, Quarantined, [19d1b0cbc2b9bc7a734c0f8a7092fd03], PUP.Optional.FreeCauseTB.A, C:\Users\Christy\AppData\Roaming\Mozilla\Firefox\Profiles\y5n4fa9x.default\FCTB\{afe43e80-0abc-4df2-81a0-3fe44b74abe8}\62781\1c78e139180d5495e3e9d918bd0491ed, Quarantined, [19d1b0cbc2b9bc7a734c0f8a7092fd03], PUP.Optional.FreeCauseTB.A, C:\Users\Christy\AppData\Roaming\Mozilla\Firefox\Profiles\y5n4fa9x.default\FCTB\{afe43e80-0abc-4df2-81a0-3fe44b74abe8}\62781\1d8668b7112e25597794b7cebaef26b4, Quarantined, [19d1b0cbc2b9bc7a734c0f8a7092fd03], PUP.Optional.FreeCauseTB.A, C:\Users\Christy\AppData\Roaming\Mozilla\Firefox\Profiles\y5n4fa9x.default\FCTB\{afe43e80-0abc-4df2-81a0-3fe44b74abe8}\62781\2307328ea5b85f50ab61208ede74b646, Quarantined, [19d1b0cbc2b9bc7a734c0f8a7092fd03], PUP.Optional.FreeCauseTB.A, C:\Users\Christy\AppData\Roaming\Mozilla\Firefox\Profiles\y5n4fa9x.default\FCTB\{afe43e80-0abc-4df2-81a0-3fe44b74abe8}\62781\28dca5044d0a6441e2038be08cb826f7, Quarantined, [19d1b0cbc2b9bc7a734c0f8a7092fd03], PUP.Optional.FreeCauseTB.A, C:\Users\Christy\AppData\Roaming\Mozilla\Firefox\Profiles\y5n4fa9x.default\FCTB\{afe43e80-0abc-4df2-81a0-3fe44b74abe8}\62781\2eff0691e1573f5c0d873e9db3696c18, Quarantined, [19d1b0cbc2b9bc7a734c0f8a7092fd03], PUP.Optional.FreeCauseTB.A, C:\Users\Christy\AppData\Roaming\Mozilla\Firefox\Profiles\y5n4fa9x.default\FCTB\{afe43e80-0abc-4df2-81a0-3fe44b74abe8}\62781\313c238dc888c75cb26d7ff7a7f4b20d.0, Quarantined, [19d1b0cbc2b9bc7a734c0f8a7092fd03], PUP.Optional.FreeCauseTB.A, C:\Users\Christy\AppData\Roaming\Mozilla\Firefox\Profiles\y5n4fa9x.default\FCTB\{afe43e80-0abc-4df2-81a0-3fe44b74abe8}\62781\38e57055c77d685cb6a4002b23e54fc3, Quarantined, [19d1b0cbc2b9bc7a734c0f8a7092fd03], PUP.Optional.FreeCauseTB.A, C:\Users\Christy\AppData\Roaming\Mozilla\Firefox\Profiles\y5n4fa9x.default\FCTB\{afe43e80-0abc-4df2-81a0-3fe44b74abe8}\62781\863244884c13f5f32b09296c582fbdd7.0, Quarantined, [19d1b0cbc2b9bc7a734c0f8a7092fd03], PUP.Optional.FreeCauseTB.A, C:\Users\Christy\AppData\Roaming\Mozilla\Firefox\Profiles\y5n4fa9x.default\FCTB\{afe43e80-0abc-4df2-81a0-3fe44b74abe8}\62781\8ac482009c24f4e3c08ceab6ad53837b, Quarantined, [19d1b0cbc2b9bc7a734c0f8a7092fd03], PUP.Optional.FreeCauseTB.A, C:\Users\Christy\AppData\Roaming\Mozilla\Firefox\Profiles\y5n4fa9x.default\FCTB\{afe43e80-0abc-4df2-81a0-3fe44b74abe8}\62781\8eed144f6a4e4ce370c9de76f135c12e, Quarantined, [19d1b0cbc2b9bc7a734c0f8a7092fd03], PUP.Optional.FreeCauseTB.A, C:\Users\Christy\AppData\Roaming\Mozilla\Firefox\Profiles\y5n4fa9x.default\FCTB\{afe43e80-0abc-4df2-81a0-3fe44b74abe8}\62781\8f772f0c22d7db43c8a98c303bd323d5, Quarantined, [19d1b0cbc2b9bc7a734c0f8a7092fd03], PUP.Optional.FreeCauseTB.A, C:\Users\Christy\AppData\Roaming\Mozilla\Firefox\Profiles\y5n4fa9x.default\FCTB\{afe43e80-0abc-4df2-81a0-3fe44b74abe8}\62781\9352ecaa75d0c7bc633b4ae4a37a3006, Quarantined, [19d1b0cbc2b9bc7a734c0f8a7092fd03], PUP.Optional.FreeCauseTB.A, C:\Users\Christy\AppData\Roaming\Mozilla\Firefox\Profiles\y5n4fa9x.default\FCTB\{afe43e80-0abc-4df2-81a0-3fe44b74abe8}\62781\95375a3decec3d0dea72412c01a8b6c2, Quarantined, [19d1b0cbc2b9bc7a734c0f8a7092fd03], PUP.Optional.FreeCauseTB.A, C:\Users\Christy\AppData\Roaming\Mozilla\Firefox\Profiles\y5n4fa9x.default\FCTB\{afe43e80-0abc-4df2-81a0-3fe44b74abe8}\62781\9d79a4bcf66a9569af94bfb1e9d9fffc, Quarantined, [19d1b0cbc2b9bc7a734c0f8a7092fd03], PUP.Optional.FreeCauseTB.A, C:\Users\Christy\AppData\Roaming\Mozilla\Firefox\Profiles\y5n4fa9x.default\FCTB\{afe43e80-0abc-4df2-81a0-3fe44b74abe8}\62781\acce5aa2be65b345e7dc70e069bdddb5, Quarantined, [19d1b0cbc2b9bc7a734c0f8a7092fd03], PUP.Optional.FreeCauseTB.A, C:\Users\Christy\AppData\Roaming\Mozilla\Firefox\Profiles\y5n4fa9x.default\FCTB\{afe43e80-0abc-4df2-81a0-3fe44b74abe8}\62781\b0d04a379326cc971538f3ecc6e4945d.0, Quarantined, [19d1b0cbc2b9bc7a734c0f8a7092fd03], PUP.Optional.FreeCauseTB.A, C:\Users\Christy\AppData\Roaming\Mozilla\Firefox\Profiles\y5n4fa9x.default\FCTB\{afe43e80-0abc-4df2-81a0-3fe44b74abe8}\62781\b1f765a691d33d70d825b5ee4d82a00a, Quarantined, [19d1b0cbc2b9bc7a734c0f8a7092fd03], PUP.Optional.FreeCauseTB.A, C:\Users\Christy\AppData\Roaming\Mozilla\Firefox\Profiles\y5n4fa9x.default\FCTB\{afe43e80-0abc-4df2-81a0-3fe44b74abe8}\62781\b4fc19616a211ba1ce6fdeb987d83986, Quarantined, [19d1b0cbc2b9bc7a734c0f8a7092fd03], PUP.Optional.FreeCauseTB.A, C:\Users\Christy\AppData\Roaming\Mozilla\Firefox\Profiles\y5n4fa9x.default\FCTB\{afe43e80-0abc-4df2-81a0-3fe44b74abe8}\62781\b8e645a1ae03d886b6e4e6abf4921392.0, Quarantined, [19d1b0cbc2b9bc7a734c0f8a7092fd03], PUP.Optional.FreeCauseTB.A, C:\Users\Christy\AppData\Roaming\Mozilla\Firefox\Profiles\y5n4fa9x.default\FCTB\{afe43e80-0abc-4df2-81a0-3fe44b74abe8}\62781\ca778d8032bff8589c9ea58165547209, Quarantined, [19d1b0cbc2b9bc7a734c0f8a7092fd03], PUP.Optional.FreeCauseTB.A, C:\Users\Christy\AppData\Roaming\Mozilla\Firefox\Profiles\y5n4fa9x.default\FCTB\{afe43e80-0abc-4df2-81a0-3fe44b74abe8}\62781\3f10c0f0b60ea2b5efa2d3278e712442, Quarantined, [19d1b0cbc2b9bc7a734c0f8a7092fd03], PUP.Optional.FreeCauseTB.A, C:\Users\Christy\AppData\Roaming\Mozilla\Firefox\Profiles\y5n4fa9x.default\FCTB\{afe43e80-0abc-4df2-81a0-3fe44b74abe8}\62781\4c1f3f3747cfa11598d3169672dc7b78, Quarantined, [19d1b0cbc2b9bc7a734c0f8a7092fd03], PUP.Optional.FreeCauseTB.A, C:\Users\Christy\AppData\Roaming\Mozilla\Firefox\Profiles\y5n4fa9x.default\FCTB\{afe43e80-0abc-4df2-81a0-3fe44b74abe8}\62781\4d03df8bfdede597b47e63f6714f6aa5, Quarantined, [19d1b0cbc2b9bc7a734c0f8a7092fd03], PUP.Optional.FreeCauseTB.A, C:\Users\Christy\AppData\Roaming\Mozilla\Firefox\Profiles\y5n4fa9x.default\FCTB\{afe43e80-0abc-4df2-81a0-3fe44b74abe8}\62781\4d112a27a725b7d2d9e7487c4c114214.0, Quarantined, [19d1b0cbc2b9bc7a734c0f8a7092fd03], PUP.Optional.FreeCauseTB.A, C:\Users\Christy\AppData\Roaming\Mozilla\Firefox\Profiles\y5n4fa9x.default\FCTB\{afe43e80-0abc-4df2-81a0-3fe44b74abe8}\62781\54163d2b972b1a98884456b0b38c4ca3, Quarantined, [19d1b0cbc2b9bc7a734c0f8a7092fd03], PUP.Optional.FreeCauseTB.A, C:\Users\Christy\AppData\Roaming\Mozilla\Firefox\Profiles\y5n4fa9x.default\FCTB\{afe43e80-0abc-4df2-81a0-3fe44b74abe8}\62781\56a07e742e7ea8910b7c8cc21a4429fc, Quarantined, [19d1b0cbc2b9bc7a734c0f8a7092fd03], PUP.Optional.FreeCauseTB.A, C:\Users\Christy\AppData\Roaming\Mozilla\Firefox\Profiles\y5n4fa9x.default\FCTB\{afe43e80-0abc-4df2-81a0-3fe44b74abe8}\62781\5d5ae10d9dbf6c32b9e724ee97183bb1.0, Quarantined, [19d1b0cbc2b9bc7a734c0f8a7092fd03], PUP.Optional.FreeCauseTB.A, C:\Users\Christy\AppData\Roaming\Mozilla\Firefox\Profiles\y5n4fa9x.default\FCTB\{afe43e80-0abc-4df2-81a0-3fe44b74abe8}\62781\612dc44b76ebf053257ba62b314ae79c, Quarantined, [19d1b0cbc2b9bc7a734c0f8a7092fd03], PUP.Optional.FreeCauseTB.A, C:\Users\Christy\AppData\Roaming\Mozilla\Firefox\Profiles\y5n4fa9x.default\FCTB\{afe43e80-0abc-4df2-81a0-3fe44b74abe8}\62781\76f7a8b58c0f3555093caf4d120d7b09, Quarantined, [19d1b0cbc2b9bc7a734c0f8a7092fd03], PUP.Optional.FreeCauseTB.A, C:\Users\Christy\AppData\Roaming\Mozilla\Firefox\Profiles\y5n4fa9x.default\FCTB\{afe43e80-0abc-4df2-81a0-3fe44b74abe8}\62781\78529f8901b92f0cd38ca25e572561b4.0, Quarantined, [19d1b0cbc2b9bc7a734c0f8a7092fd03], PUP.Optional.FreeCauseTB.A, C:\Users\Christy\AppData\Roaming\Mozilla\Firefox\Profiles\y5n4fa9x.default\FCTB\{afe43e80-0abc-4df2-81a0-3fe44b74abe8}\62781\7f26d2753138a5ebec0c48f6ece74ecb.0, Quarantined, [19d1b0cbc2b9bc7a734c0f8a7092fd03], PUP.Optional.FreeCauseTB.A, C:\Users\Christy\AppData\Roaming\Mozilla\Firefox\Profiles\y5n4fa9x.default\FCTB\{afe43e80-0abc-4df2-81a0-3fe44b74abe8}\62781\8605190db1a4b0b68eaec697f0ccabca, Quarantined, [19d1b0cbc2b9bc7a734c0f8a7092fd03], PUP.Optional.FreeCauseTB.A, C:\Users\Christy\AppData\Roaming\Mozilla\Firefox\Profiles\y5n4fa9x.default\FCTB\{afe43e80-0abc-4df2-81a0-3fe44b74abe8}\62781\cc1cadc55dcfeab42c71ddc651b9fe75.0, Quarantined, [19d1b0cbc2b9bc7a734c0f8a7092fd03], PUP.Optional.FreeCauseTB.A, C:\Users\Christy\AppData\Roaming\Mozilla\Firefox\Profiles\y5n4fa9x.default\FCTB\{afe43e80-0abc-4df2-81a0-3fe44b74abe8}\62781\cfbf9dd3ed978b23c1976cf9c7fe11bc, Quarantined, [19d1b0cbc2b9bc7a734c0f8a7092fd03], PUP.Optional.FreeCauseTB.A, C:\Users\Christy\AppData\Roaming\Mozilla\Firefox\Profiles\y5n4fa9x.default\FCTB\{afe43e80-0abc-4df2-81a0-3fe44b74abe8}\62781\d46deb45f2b0c6145a71d5ed76b9c1b3, Quarantined, [19d1b0cbc2b9bc7a734c0f8a7092fd03], PUP.Optional.FreeCauseTB.A, C:\Users\Christy\AppData\Roaming\Mozilla\Firefox\Profiles\y5n4fa9x.default\FCTB\{afe43e80-0abc-4df2-81a0-3fe44b74abe8}\62781\e451021fc5c21df4aac3dabe09e5aa56.0, Quarantined, [19d1b0cbc2b9bc7a734c0f8a7092fd03], PUP.Optional.FreeCauseTB.A, C:\Users\Christy\AppData\Roaming\Mozilla\Firefox\Profiles\y5n4fa9x.default\FCTB\{afe43e80-0abc-4df2-81a0-3fe44b74abe8}\62781\ec48a6da50c248b5e7b4f7a1665181ba, Quarantined, [19d1b0cbc2b9bc7a734c0f8a7092fd03], PUP.Optional.FreeCauseTB.A, C:\Users\Christy\AppData\Roaming\Mozilla\Firefox\Profiles\y5n4fa9x.default\FCTB\{afe43e80-0abc-4df2-81a0-3fe44b74abe8}\62781\ec933e0432b5461997a2523f42e1a674, Quarantined, [19d1b0cbc2b9bc7a734c0f8a7092fd03], PUP.Optional.FreeCauseTB.A, C:\Users\Christy\AppData\Roaming\Mozilla\Firefox\Profiles\y5n4fa9x.default\FCTB\{afe43e80-0abc-4df2-81a0-3fe44b74abe8}\62781\f27443640b9d518de03b5040b1aee086, Quarantined, [19d1b0cbc2b9bc7a734c0f8a7092fd03], PUP.Optional.FreeCauseTB.A, C:\Users\Christy\AppData\Roaming\Mozilla\Firefox\Profiles\y5n4fa9x.default\FCTB\{afe43e80-0abc-4df2-81a0-3fe44b74abe8}\62781\fb278845d49896d2b3b87fdcb5103ab7, Quarantined, [19d1b0cbc2b9bc7a734c0f8a7092fd03], PUP.Optional.FreeCauseTB.A, C:\Users\Christy\AppData\Roaming\Mozilla\Firefox\Profiles\y5n4fa9x.default\FCTB\{afe43e80-0abc-4df2-81a0-3fe44b74abe8}\62781\tb.xml, Quarantined, [19d1b0cbc2b9bc7a734c0f8a7092fd03], Physical Sectors: 0 (No malicious items detected) (end)

00,01 Done working on 02.

Sorry was off-line due to net upsets. Will start this in my AM. It is late night for me here.

So no replies just views. thanks for the help.

I had posted in the regular forum and was told in a round about way to post here. I did the farbar and the other one yesterday and posted them. Firefox said "There is a lot more going on with this computer that we can fix in this section of the forum, you will have to seek help on a one on one basis with one of our experts to get this computer cleaned up. Being that you are probably infected, feel free to follow the instructions below to receive free, one-on-one expert assistance in checking your system and clearing out any infections and correcting any damage done by the malware. Please see the following pinned topic which has information on how to get help with this: Available Assistance for Possibly Infected Computers Thank you " I use Windows Defender and Microsoft Security Essentials. I also use Tuneup Utilitties 2012, CCleaner, and WinSysClean X2 occationally. I do have BitLord, but is not working unless I specifically open it, as it is just for the games I beta. They have taken to posting them there for me since I can't seem to DL in my browser for the past couple months now. This has gotten so bad that I can't play ANY games on-line and the MBAM is constantly today telling me that it has closed/crashed. Here are the results from yesterday. Addition.txt 45.51KB 0 downloads CheckResults.txt 1.2MB 1 downloads FRST.txt 690.63KB 1 downloads Browser wise Iuse Fire fox, Chrome, and I have IE7 or 8. I hate upgrading what I don't use... Please let me know if I need to do a new scan.

FINALLY got the DL. Had to try 4X to get it to go through. Hope this helps. Addition.txt FRST.txt

Started MBAM quits. Thanks.

Since I upgraded to the new version I have been having the MBAM quit on me. It freezes the browser and the whole computer when it does this. It really messes with Chrome! Computer will unfreeze, but the browser is dead. I am a beta game tester and so when it does that and I am testing a game I have to start over as I can't be sure that it wasn't the game or the MBAM. I also play games on Chrome and it's now to the point where Chrome shuts down from the MBAM crashing, so I can't really play. I just know that with the older version, I didn't have teh shut downs and the crashing. PLEASE help. Can't seem to get the Farbar Recovery Scan Tool, as it is just sitting there saying it is DLing, but nothing is going on. BUT, I did manage to get the other tool, results attached. This is what came up when MBAM crashed a bit ago: Problem signature: Problem Event Name: APPCRASH Application Name: mbam.exe Application Version: 1.0.0.532 Application Timestamp: 53518532 Fault Module Name: mbamcore.dll Fault Module Version: 1.0.11.0 Fault Module Timestamp: 536d8027 Exception Code: c0000005 Exception Offset: 0005c70b OS Version: 6.1.7601.2.1.0.256.1 Locale ID: 1033 Additional Information 1: 0a9e Additional Information 2: 0a9e372d3b4ad19135b953a78882e789 Additional Information 3: 0a9e Additional Information 4: 0a9e372d3b4ad19135b953a78882e789 CheckResults.txt

Problem signature: Problem Event Name: APPCRASH Application Name: mbam.exe Application Version: 1.0.0.532 Application Timestamp: 53518532 Fault Module Name: mbamcore.dll Fault Module Version: 1.0.11.0 Fault Module Timestamp: 536d8027 Exception Code: c0000005 Exception Offset: 0005c70b OS Version: 6.1.7601.2.1.0.256.1 Locale ID: 1033 Additional Information 1: 0a9e Additional Information 2: 0a9e372d3b4ad19135b953a78882e789 Additional Information 3: 0a9e Additional Information 4: 0a9e372d3b4ad19135b953a78882e789 This is what I got when it just crashed again.

So it IS a known bug? Cause I was going to post about it till I saw adelphia's post here. I have not been able to get any log files about my MBAM cause every time it does that it closes EVERYTHING on my computer and I have to restart. Didn't have this problem with my first version. Very upset that it does this as I am a beta tester for games and it freezes them up too! I also play Facebook games and it freezes them up and closes my browser. Please fix.