xmaria1412

My pleasure is all mine thanks a lot for everything for one more time Regards Maria

Thanks for all ur help and i know you are not staff and because you helped me a lot in the past and didnt have any problem thats why i reply to you and trust your advices. Also i know how to unistall a program i just couldnt find the program you asked me to unistall "Sophos AV scanner" i dont have any that kind inside my programs

i dont find any Sophos AV to unistall, also couple days ago i unistall eset because it was blocking my computer suddenly or at least i thought so, and i search for sth light because laptop is too old do you have any suggestion? also i would like to ask if that Yourtv.link can avoid with any programme for the future

i think is ok i made a restart and didnt open so probably is clear SALog.txt

Microsoft Windows Malicious Software Removal Tool v5.43, December 2016 (build 5.43.13300.0) Started On Sat Dec 17 18:06:07 2016 Engine: 1.1.13303.0 Signatures: 1.233.993.0 Run Mode: Interactive Graphical Mode Results Summary: ---------------- No infection found. Successfully Submitted Heartbeat Report Microsoft Windows Malicious Software Removal Tool Finished On Sat Dec 17 18:10:46 2016 Return code: 0 (0x0)

Malwarebytes Anti-Malware www.malwarebytes.org Scan Date: 17/12/2016 Scan Time: 5:12 μμ Logfile: Administrator: Yes Version: 2.2.1.1043 Malware Database: v2016.12.17.06 Rootkit Database: v2016.11.20.01 License: Free Malware Protection: Disabled Malicious Website Protection: Disabled Self-protection: Disabled OS: Windows 7 Service Pack 1 CPU: x86 File System: NTFS User: ser Scan Type: Threat Scan Result: Completed Objects Scanned: 263617 Time Elapsed: 21 min, 30 sec Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Enabled Heuristics: Enabled PUP: Enabled PUM: Enabled Processes: 0 (No malicious items detected) Modules: 0 (No malicious items detected) Registry Keys: 0 (No malicious items detected) Registry Values: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Folders: 0 (No malicious items detected) Files: 3 PUP.Optional.YourTV.YTVRev, C:\Users\ser\AppData\Roaming\Mozilla\Firefox\Profiles\pfkadv3u.default-1478705361421\searchplugins\Google .xml, Quarantined, [5515d018f9a1f145187845657d834fb1], PUP.Optional.YourTV.YTVRev, C:\Users\ser\AppData\Roaming\Mozilla\Firefox\Profiles\ykAiBmNQ.default\prefs.js, Good: (user_pref("browser.startup.homepage", "https://www.malwarebytes.org/restorebrowser/), Bad: (user_pref("browser.startup.homepage", "http://yourtv.link), Replaced,[5d0d86629dfd9f9778e9654667996997] PUP.Optional.YourTV.YTVRev, C:\Users\ser\AppData\Roaming\Mozilla\Firefox\Profiles\ykAiBmNQ.default\searchplugins\Google .xml, Quarantined, [f67494540d8de452d1bf53579c64da26], Physical Sectors: 0 (No malicious items detected) (end) AdwCleaner[C0].txt Fixlog.txt

Suddenly yourtv.link change my mozilla web page and cant delete it from laptop Addition.txt FRST.txt

i did clean like that and again is appearing after restart the laptop

should i follow the same steps?

Yes i had a different laptop.i only download mp4 player and maybe from there it came. Thanks

Hello, i have a problem that probably i caused with downloading a programme. Suddenly yourtv.link appear everywhere and all the time even if i am cleaning with malwarebytes and everything is ok after restart it is coming again anybody knows how i can totally get rid off? I tried to do everything that i found on internet but still is appearing. Pls if anybody knows help me. Thanks Maria

Yesterday morning i open firefox and in web site that i am subsicribe for watching tv Eset nod32 found a threat and block it JS/TrojanDownloader.Agent.ONB trojan i cleaned up with malwarebytes is anything else to do? I already contact with the website and told me that their page is clean but to me is still continuing having this message and doesnt let me open it unless i deactivate nod32. What to do? Thanks Malwarebytes Anti-Malware www.malwarebytes.org Ημερομηνία Σάρωσης: 13/6/2016 Ώρα Σάρωσης: 2:35:56 μμ Αρχείο καταγραφής: Διαχειριστής: Ναι Έκδοση: 2.2.1.1043 Βάση Δεδομένων Κακόβουλου Λογισμικού: v2016.06.13.03 Βάση Δεδομένων Rootkit: v2016.05.27.01 Άδεια Χρήσης: Premium Προστασία από Κακόβουλο Λογισμικό: Ενεργοποιημένο Προστασία από Κακόβουλο Ιστότοπο: Ενεργοποιημένο Αυτοπροστασία: Απενεργοποιημένο ΛΣ: Windows XP Service Pack 3 Επεξεργαστής: x86 Σύστημα Αρχείων: NTFS Χρήστης: user Τύπος Σάρωσης: Σάρωση για Απειλές Αποτέλεσμα: Ολοκληρώθηκε Αντικείμενα που σαρώθηκαν: 302524 Χρόνος που πέρασε: 43 λεπ, 15 δευτ Μνήμη: Ενεργοποιημένο Εκκίνηση: Ενεργοποιημένο Σύστημα αρχείων: Ενεργοποιημένο Συμπιεσμένα αρχεία: Ενεργοποιημένο Rootkits: Ενεργοποιημένο Ευρετική: Ενεργοποιημένο ΠΑΠ: Ενεργοποιημένο ΠΑΤ: Ενεργοποιημένο Διεργασίες: 0 (Δεν εντοπίστηκαν επιβλαβή αντικείμενα) Μονάδες: 0 (Δεν εντοπίστηκαν επιβλαβή αντικείμενα) Κλειδιά Μητρώου: 2 Trojan.ProxyHijacker, HKLM\SOFTWARE\CLASSES\CLSID\{C379EAD1-CB34-4B09-AF6B-7E587F8BCD80}, Απομονώθηκε, [35421be1c3d6c76f2d99711804fe3ec2], Trojan.ProxyHijacker, HKLM\SOFTWARE\CLASSES\SpyHunter 4 Email and Password Crack Free Download.DynamicNS, Απομονώθηκε, [35421be1c3d6c76f2d99711804fe3ec2], Τιμές Μητρώου: 0 (Δεν εντοπίστηκαν επιβλαβή αντικείμενα) Δεδομένα Μητρώου: 0 (Δεν εντοπίστηκαν επιβλαβή αντικείμενα) Φάκελοι: 0 (Δεν εντοπίστηκαν επιβλαβή αντικείμενα) Αρχεία: 1 PUP.Optional.Amonetize, C:\Documents and Settings\user\Local Settings\Temp\amipixel.cfg, Απομονώθηκε, [f38401fb3c5d68ce8f20e1a8cd376e92], Φυσικοί Τομείς: 0 (Δεν εντοπίστηκαν επιβλαβή αντικείμενα) (end)

yes it fixed you are perfect thank you a lot

I am sorry i bother you again but i think something we did when fixing the problems today i tried to open the "search " from start menu but doesnt exist it is opening a blank window. the only thing i did on my own was to replace avast with eset because it was blocking my internet.If you could help i would be gratefull Thanks a lot Maria

Everything is fine thanks to you i am gratefull Eset it unistall except Java that needs another system than xp to make upgrade but i think its not that much important right?? All my issues until now was solved thanks one more time Maria

To inform you that before you text me i was trying to find antivirus and at last manage to download AVAST i hope its trustfull, but still shows eset inside and dont let me do anything. Anyway i am senting you the file you ask and again thanks for your help SALog.txt

Actually i would like to make one more question if it is possible about antivirius i dont know if you from here you can help me . when all these problems started i had eset nod32 and i tried to unistall to put kaspersky thinking that wasnt working but nothing at the end worked now i am trying to download again eset and having error that "ei_1E.msi " is not in the right path and cant find and of could is stopping the installation of eset Any opinion from you or where i can ask? thanks in advance

I think that finally has totally clean, thanks a lot for your help and your patient.!!! Keep the good work!!! Maria

also after the last procedure and the restart of pc Zemana antimalware open and find sth i am senting that to you also. And yourtv.link didnt appear when i open firefox 2016.05.18-18.37.34-i2-t92-d1.txt

zoek-results.txt

this is my last scan i think we still have problem even when i open my explorer the start page was mine but after a scan appear again to the threats.

Malwarebytes Anti-Malware www.malwarebytes.org Scan Date: 18/5/2016 Scan Time: 3:26:07 μμ Logfile: Administrator: Yes Version: 2.2.1.1043 Malware Database: v2016.05.18.04 Rootkit Database: v2016.05.06.01 License: Free Malware Protection: Disabled Malicious Website Protection: Disabled Self-protection: Disabled OS: Windows XP Service Pack 3 CPU: x86 File System: NTFS User: user Scan Type: Threat Scan Result: Completed Objects Scanned: 296262 Time Elapsed: 19 min, 50 sec Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Enabled Heuristics: Enabled PUP: Enabled PUM: Enabled Processes: 0 (No malicious items detected) Modules: 0 (No malicious items detected) Registry Keys: 0 (No malicious items detected) Registry Values: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Folders: 0 (No malicious items detected) Files: 1 PUP.Optional.YourTV, C:\Documents and Settings\user\Start Menu\Προγράμματα\Εκκίνηση\user.lnk, Quarantined, [8fcdac2bdabf72c4d2e703d623e03fc1], Physical Sectors: 0 (No malicious items detected) (end)

2016.05.18-02.37.31-i2-t92-d1.txt

AdwCleaner[C2].txt JRT.txt

LAST SCAN FROM MALWAREBYTES Malwarebytes Anti-Malware www.malwarebytes.org Scan Date: 18/5/2016 Scan Time: 1:51:34 πμ Logfile: Administrator: Yes Version: 2.2.1.1043 Malware Database: v2016.05.17.07 Rootkit Database: v2016.05.06.01 License: Free Malware Protection: Disabled Malicious Website Protection: Disabled Self-protection: Disabled OS: Windows XP Service Pack 3 CPU: x86 File System: NTFS User: user Scan Type: Threat Scan Result: Completed Objects Scanned: 296106 Time Elapsed: 19 min, 2 sec Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Enabled Heuristics: Enabled PUP: Enabled PUM: Enabled Processes: 0 (No malicious items detected) Modules: 0 (No malicious items detected) Registry Keys: 1 PUP.Optional.YourTV.ChrPRST, HKU\S-1-5-21-1390067357-1645522239-1547161642-1004\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}, Quarantined, [8279b521bcdd13238e8976f6bc475ca4], Registry Values: 1 PUP.Optional.YourTV.ChrPRST, HKU\S-1-5-21-1390067357-1645522239-1547161642-1004\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|URL, http://www.google.com/cse?cx=partner-pub-8036109189802438[8279b521bcdd13238e8976f6bc475ca4]A7790813904&ie=UTF-8&q={searchTerms}&sa=Search&siteurl=yourtv.linkQuarantinedF, %4, %5 Registry Data: 0 (No malicious items detected) Folders: 0 (No malicious items detected) Files: 2 PUP.Optional.YourTV, C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\GJIYWYIX.DEFAULT-1463236452656\prefs.js, Good: (user_pref("browser.startup.homepage", "https://www.malwarebytes.org/restorebrowser/), Bad: (user_pref("browser.startup.homepage", "http://yourtv.link), Replaced,[8774e3f3613892a4f81d5717b1537b85] PUP.Optional.YourTV, C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\XACPS0YU.DEFAULT-1461255158218\prefs.js, Good: (user_pref("browser.startup.homepage", "https://www.malwarebytes.org/restorebrowser/), Bad: (user_pref("browser.startup.homepage", "http://yourtv.link), Replaced,[da217363dfba86b0d342a4ca788cca36] Physical Sectors: 0 (No malicious items detected) (end)