Jump to content

PUP.Bundle.Installer.OI Found on PC

ZoSo

By ZoSo
in Resolved Malware Removal Logs

 Share

Recommended Posts

ZoSo

ZoSo

Posted
Posted

Hello, my Guild Wars 2 account was recently hacked and without me falling for some phishing email. It was very sudden and I think my email account was hacked as well so I changed the password on that. I ran Malwarebytes today and found PUP.Bundle.Installer.OI. Not sure what this does but I'm a bit paranoid now. Can you help me clean up my PC?

Malwarebytes Anti-Malware 1.62.0.1300

www.malwarebytes.org

Database version: v2012.08.31.02

Windows 7 Service Pack 1 x64 NTFS

Internet Explorer 8.0.7601.17514

ZoSo :: ZOSO-PC [administrator]

8/30/2012 9:02:30 PM

mbam-log-2012-08-30 (21-02-30).txt

Scan type: Quick scan

Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM

Scan options disabled: P2P

Objects scanned: 245600

Time elapsed: 9 minute(s), 8 second(s)

Memory Processes Detected: 0

(No malicious items detected)

Memory Modules Detected: 0

(No malicious items detected)

Registry Keys Detected: 0

(No malicious items detected)

Registry Values Detected: 0

(No malicious items detected)

Registry Data Items Detected: 0

(No malicious items detected)

Folders Detected: 0

(No malicious items detected)

Files Detected: 1

C:\Users\ZoSo\Downloads\mplayer_Setup.exe (PUP.Bundle.Installer.OI) -> Quarantined and deleted successfully.

(end)

.

DDS (Ver_2011-08-26.01) - NTFSAMD64

Internet Explorer: 8.0.7601.17514 BrowserJavaVersion: 10.5.1

Run by ZoSo at 21:36:17 on 2012-08-30

Microsoft Windows 7 Ultimate 6.1.7601.1.1252.1.1033.18.8169.6176 [GMT -7:00]

.

AV: Microsoft Security Essentials *Enabled/Updated* {9765EA51-0D3C-7DFB-6091-10E4E1F341F6}

SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

SP: Microsoft Security Essentials *Enabled/Updated* {2C040BB5-2B06-7275-5A21-2B969A740B4B}

.

============== Running Processes ===============

.

C:\Windows\system32\wininit.exe

C:\Windows\system32\lsm.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Windows\system32\nvvsvc.exe

C:\Windows\system32\svchost.exe -k RPCSS

C:\Program Files\Microsoft Security Client\MsMpEng.exe

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k LocalService

C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

C:\Windows\system32\nvvsvc.exe

C:\Windows\system32\WUDFHost.exe

C:\Windows\system32\WUDFHost.exe

C:\Windows\system32\svchost.exe -k NetworkService

C:\Windows\System32\spoolsv.exe

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

C:\Program Files (x86)\ASUS\AAHM\1.00.13\aaHMSvc.exe

C:\Windows\SysWOW64\PnkBstrA.exe

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

C:\Program Files (x86)\NETGEAR\WNDA3100v2\WifiSvc.exe

C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

C:\Windows\system32\Dwm.exe

C:\Windows\system32\taskhost.exe

C:\Windows\system32\taskeng.exe

C:\Program Files\Core Temp\Core Temp.exe

C:\Windows\Explorer.EXE

C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

C:\Program Files\Windows Media Player\WMPSideShowGadget.exe

C:\Program Files (x86)\Windows Media Player\wmplayer.exe

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

C:\Program Files\Logitech Gaming Software\LCore.exe

C:\Program Files\Logitech\SetPointP\SetPoint.exe

C:\Program Files\Microsoft Security Client\msseces.exe

C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe

C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

C:\Program Files\Windows Sidebar\sidebar.exe

C:\Users\ZoSo\AppData\Local\Akamai\netsession_win.exe

C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe

C:\Users\ZoSo\AppData\Local\Google\Chrome\Application\chrome.exe

C:\Windows\system32\taskhost.exe

C:\Users\ZoSo\AppData\Local\Akamai\netsession_win.exe

C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe

C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

C:\Program Files (x86)\NETGEAR\WNDA3100v2\WNDA3100v2.exe

C:\Windows\system32\SearchIndexer.exe

C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE

C:\Program Files\Windows Media Player\wmpnetwk.exe

C:\Users\ZoSo\AppData\Local\Google\Chrome\Application\chrome.exe

C:\Users\ZoSo\AppData\Local\Google\Chrome\Application\chrome.exe

C:\Users\ZoSo\AppData\Local\Google\Chrome\Application\chrome.exe

C:\Users\ZoSo\AppData\Local\Google\Chrome\Application\chrome.exe

C:\Users\ZoSo\AppData\Local\Google\Chrome\Application\chrome.exe

C:\Users\ZoSo\AppData\Local\Google\Chrome\Application\chrome.exe

C:\Users\ZoSo\AppData\Local\Google\Chrome\Application\chrome.exe

C:\Users\ZoSo\AppData\Local\Google\Chrome\Application\chrome.exe

C:\Program Files\Logitech Gaming Software\plugins\LCDAppletsMono-8.00.048\Applets\x86\LCDMedia.exe

C:\Program Files\Logitech Gaming Software\plugins\LCDAppletsMono-8.00.048\Applets\x64\LCDPop3.exe

C:\Program Files\Logitech Gaming Software\plugins\LCDAppletsMono-8.00.048\Applets\x64\LCDCountdown.exe

C:\Program Files\Logitech Gaming Software\plugins\LCDAppletsMono-8.00.048\Applets\x64\LCDRSS.exe

C:\Program Files\Logitech Gaming Software\plugins\LCDAppletsMono-8.00.048\Applets\x64\LCDClock.exe

C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

C:\Users\ZoSo\AppData\Local\Google\Chrome\Application\chrome.exe

C:\Windows\servicing\TrustedInstaller.exe

C:\Windows\System32\svchost.exe -k swprv

C:\Windows\SysWOW64\NOTEPAD.EXE

C:\Windows\system32\taskeng.exe

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\conhost.exe

C:\Windows\SysWOW64\cscript.exe

C:\Windows\system32\wbem\wmiprvse.exe

.

============== Pseudo HJT Report ===============

.

uStart Page = hxxp://www.google.com/

uInternet Settings,ProxyOverride = <local>

mWinlogon: Userinit=userinit.exe,

BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

BHO: DivX Plus Web Player HTML5 <video>: {326e768d-4182-46fd-9c16-1449a49795f4} - D:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll

BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll

BHO: Java Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll

BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.7.7529.1424\swg.dll

BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll

TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

uRun: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"

uRun: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

uRun: [Google Update] "C:\Users\ZoSo\AppData\Local\Google\Update\GoogleUpdate.exe" /c

uRun: [Xvid] C:\Program Files (x86)\Xvid\CheckUpdate.exe

uRun: [Akamai NetSession Interface] "C:\Users\ZoSo\AppData\Local\Akamai\netsession_win.exe"

uRun: [PlayNC Launcher]

uRun: [spybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe

uRun: [GoogleChromeAutoLaunch_B7435C77831D36078F37106511BF1E81] "C:\Users\ZoSo\AppData\Local\Google\Chrome\Application\chrome.exe" --no-startup-window

mRun: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW

mRun: [Ad-Aware Browsing Protection] "C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe"

mRun: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\NETGEA~1.LNK - C:\Program Files (x86)\NETGEAR\WNDA3100v2\WNDA3100v2.exe

mPolicies-explorer: NoActiveDesktop = 1 (0x1)

mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)

mPolicies-system: ConsentPromptBehaviorAdmin = 0 (0x0)

mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)

mPolicies-system: EnableLUA = 0 (0x0)

mPolicies-system: EnableUIADesktopToggle = 0 (0x0)

mPolicies-system: PromptOnSecureDesktop = 0 (0x0)

IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll

Trusted Zone: clonewarsadventures.com

Trusted Zone: freerealms.com

Trusted Zone: soe.com

Trusted Zone: sony.com

DPF: {0D41B8C5-2599-4893-8183-00195EC8D5F9} - hxxp://support.asus.com/select/asusTek_sys_ctrl3.cab

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab

DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

TCP: DhcpNameServer = 192.168.1.1

TCP: Interfaces\{26FA8182-7F28-4890-BE6A-CB5F421F43A7} : DhcpNameServer = 192.168.1.1

TCP: Interfaces\{2B8D0C61-E931-49D5-B694-B559EE113CDF} : DhcpNameServer = 192.168.42.129

TCP: Interfaces\{4901A2E8-EA24-4AD8-AD35-752EF630940B} : DhcpNameServer = 192.168.1.1

TCP: Interfaces\{EE49A0FB-0E35-4E29-A38C-93BB70259C4E} : DhcpNameServer = 192.168.1.1

TCP: Interfaces\{EE49A0FB-0E35-4E29-A38C-93BB70259C4E}\2427967686470516E64616D27657563747 : DhcpNameServer = 68.105.28.12 68.105.29.12 68.105.28.11

TCP: Interfaces\{EE49A0FB-0E35-4E29-A38C-93BB70259C4E}\A5F635F6 : DhcpNameServer = 192.168.1.1

BHO-X64: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

BHO-X64: AcroIEHelperStub - No File

BHO-X64: DivX Plus Web Player HTML5 <video>: {326E768D-4182-46FD-9C16-1449A49795F4} - D:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll

BHO-X64: Increase performance and video formats for your HTML5 <video> - No File

BHO-X64: Spybot-S&D IE Protection: {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll

BHO-X64: Java Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll

BHO-X64: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

BHO-X64: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

BHO-X64: Google Toolbar Notifier BHO: {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.7.7529.1424\swg.dll

BHO-X64: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll

TB-X64: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

mRun-x64: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW

mRun-x64: [Ad-Aware Browsing Protection] "C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe"

mRun-x64: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

mRun-x64: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

.

================= FIREFOX ===================

.

FF - ProfilePath - C:\Users\ZoSo\AppData\Roaming\Mozilla\Firefox\Profiles\mnn6p143.default\

FF - prefs.js: browser.search.selectedEngine - Blekko

FF - prefs.js: browser.startup.homepage - hxxp://safesearchr.lavasoft.com/?source=3336ca5f&tbp=homepage&toolbarid=adawaretb&v=2_0&u=___userid___

FF - plugin: C:\NetmarbleGlobal\GlbNMNPAPIPlugins\npGlbNMNetmarbleDownload.dll

FF - plugin: C:\NetmarbleGlobal\GlbNMNPAPIPlugins\npGlbNMNPAPIUpdater.dll

FF - plugin: C:\NetmarbleGlobal\GlbNMNPAPIPlugins\npNMSystemIDInfo.dll

FF - plugin: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll

FF - plugin: C:\Program Files (x86)\Battlelog Web Plugins\1.102.0\npesnlaunch.dll

FF - plugin: C:\Program Files (x86)\Battlelog Web Plugins\1.104.0\npesnlaunch.dll

FF - plugin: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll

FF - plugin: C:\Program Files (x86)\Google\Update\1.2.183.39\npGoogleOneClick8.dll

FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll

FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.65\npGoogleUpdate3.dll

FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll

FF - plugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll

FF - plugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npdeployJava1.dll

FF - plugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll

FF - plugin: C:\Program Files (x86)\Microsoft Silverlight\4.1.10111.0\npctrlui.dll

FF - plugin: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

FF - plugin: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

FF - plugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll

FF - plugin: C:\Program Files (x86)\WEBZEN\BrowserExtension\NPWZCmnCtrl.dll

FF - plugin: C:\Users\ZoSo\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll

FF - plugin: C:\Users\ZoSo\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll

FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_233.dll

FF - plugin: D:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll

FF - plugin: D:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll

FF - plugin: D:\Program Files (x86)\GameSpy\Comrade\npcomrade.dll

FF - plugin: D:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll

.

============= SERVICES / DRIVERS ===============

.

R0 MpFilter;Microsoft Malware Protection Driver;C:\Windows\system32\DRIVERS\MpFilter.sys --> C:\Windows\system32\DRIVERS\MpFilter.sys [?]

R0 SCMNdisP;General NDIS Protocol Driver;C:\Windows\system32\DRIVERS\scmndisp.sys --> C:\Windows\system32\DRIVERS\scmndisp.sys [?]

R1 SbFw;SbFw;C:\Windows\system32\drivers\SbFw.sys --> C:\Windows\system32\drivers\SbFw.sys [?]

R1 SbTis;SbTis;C:\Windows\system32\drivers\sbtis.sys --> C:\Windows\system32\drivers\sbtis.sys [?]

R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\system32\DRIVERS\vwififlt.sys --> C:\Windows\system32\DRIVERS\vwififlt.sys [?]

R2 AdobeARMservice;Adobe Acrobat Update Service;C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-7-27 63960]

R2 asHmComSvc;ASUS HM Com Service;C:\Program Files (x86)\ASUS\AAHM\1.00.13\aaHMSvc.exe [2011-6-12 915584]

R2 cpuz135;cpuz135;\??\C:\Windows\system32\drivers\cpuz135_x64.sys --> C:\Windows\system32\drivers\cpuz135_x64.sys [?]

R2 nvUpdatusService;NVIDIA Update Service Daemon;C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-7-6 1258856]

R2 SBSDWSCService;SBSD Security Center Service;C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2012-6-11 1153368]

R2 WSWNDA3100;WSWNDA3100;C:\Program Files (x86)\NETGEAR\WNDA3100v2\WifiSvc.exe [2011-6-11 272864]

R3 e1cexpress;Intel® PRO/1000 PCI Express Network Connection Driver C;C:\Windows\system32\DRIVERS\e1c62x64.sys --> C:\Windows\system32\DRIVERS\e1c62x64.sys [?]

R3 LEqdUsb;Logitech SetPoint Unifying KMDF USB Filter;C:\Windows\system32\DRIVERS\LEqdUsb.Sys --> C:\Windows\system32\DRIVERS\LEqdUsb.Sys [?]

R3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver;C:\Windows\system32\drivers\LGBusEnum.sys --> C:\Windows\system32\drivers\LGBusEnum.sys [?]

R3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver;C:\Windows\system32\drivers\LGVirHid.sys --> C:\Windows\system32\drivers\LGVirHid.sys [?]

R3 LHidEqd;Logitech SetPoint Unifying KMDF HID Filter;C:\Windows\system32\DRIVERS\LHidEqd.Sys --> C:\Windows\system32\DRIVERS\LHidEqd.Sys [?]

R3 MEIx64;Intel® Management Engine Interface;C:\Windows\system32\DRIVERS\HECIx64.sys --> C:\Windows\system32\DRIVERS\HECIx64.sys [?]

R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;C:\Windows\system32\DRIVERS\nusb3hub.sys --> C:\Windows\system32\DRIVERS\nusb3hub.sys [?]

R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;C:\Windows\system32\DRIVERS\nusb3xhc.sys --> C:\Windows\system32\DRIVERS\nusb3xhc.sys [?]

R3 NVHDA;Service for NVIDIA High Definition Audio Driver;C:\Windows\system32\drivers\nvhda64v.sys --> C:\Windows\system32\drivers\nvhda64v.sys [?]

R3 SBFWIMCLMP;Sunbelt Software Firewall NDIS IM Filter Miniport;C:\Windows\system32\DRIVERS\SBFWIM.sys --> C:\Windows\system32\DRIVERS\SBFWIM.sys [?]

R3 WDC_SAM;WD SCSI Pass Thru driver;C:\Windows\system32\DRIVERS\wdcsam64.sys --> C:\Windows\system32\DRIVERS\wdcsam64.sys [?]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]

S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]

S2 gupdate;Google Update Service (gupdate);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-6-11 136176]

S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-4-10 250056]

S3 BCMH43XX;Broadcom 802.11 USB Network Adapter Driver;C:\Windows\system32\DRIVERS\bcmwlhigh664.sys --> C:\Windows\system32\DRIVERS\bcmwlhigh664.sys [?]

S3 dmvsc;dmvsc;C:\Windows\system32\drivers\dmvsc.sys --> C:\Windows\system32\drivers\dmvsc.sys [?]

S3 gupdatem;Google Update Service (gupdatem);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-6-11 136176]

S3 NisDrv;Microsoft Network Inspection System;C:\Windows\system32\DRIVERS\NisDrvWFP.sys --> C:\Windows\system32\DRIVERS\NisDrvWFP.sys [?]

S3 NisSrv;Microsoft Network Inspection;C:\Program Files\Microsoft Security Client\NisSrv.exe [2012-3-26 291696]

S3 npggsvc;nProtect GameGuard Service;C:\Windows\system32\GameMon.des -service --> C:\Windows\system32\GameMon.des -service [?]

S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:\Windows\system32\drivers\rdpvideominiport.sys --> C:\Windows\system32\drivers\rdpvideominiport.sys [?]

S3 SBFWIMCL;Sunbelt Software Firewall NDIS IM Filter Service;C:\Windows\system32\DRIVERS\sbfwim.sys --> C:\Windows\system32\DRIVERS\sbfwim.sys [?]

S3 sbhips;sbhips;C:\Windows\system32\drivers\sbhips.sys --> C:\Windows\system32\drivers\sbhips.sys [?]

S3 Synth3dVsc;Synth3dVsc;C:\Windows\system32\drivers\synth3dvsc.sys --> C:\Windows\system32\drivers\synth3dvsc.sys [?]

S3 terminpt;Microsoft Remote Desktop Input Driver;C:\Windows\system32\drivers\terminpt.sys --> C:\Windows\system32\drivers\terminpt.sys [?]

S3 TsUsbFlt;TsUsbFlt;C:\Windows\system32\drivers\tsusbflt.sys --> C:\Windows\system32\drivers\tsusbflt.sys [?]

S3 TsUsbGD;Remote Desktop Generic USB Device;C:\Windows\system32\drivers\TsUsbGD.sys --> C:\Windows\system32\drivers\TsUsbGD.sys [?]

S3 tsusbhub;tsusbhub;C:\Windows\system32\drivers\tsusbhub.sys --> C:\Windows\system32\drivers\tsusbhub.sys [?]

S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\system32\Wat\WatAdminSvc.exe --> C:\Windows\system32\Wat\WatAdminSvc.exe [?]

S3 xsherlock;xsherlock;C:\Windows\System32\xsherlock.xem [2012-4-15 670816]

.

=============== Created Last 30 ================

.

2012-08-31 03:56:13 9310152 ----a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{708B534B-5818-4D57-96C2-7EEA98FA4C31}\mpengine.dll

2012-08-30 21:41:51 -------- d-----w- C:\Users\ZoSo\AppData\Local\{0F7323F5-CF8A-45B9-A8FB-6D054BC8AA6F}

2012-08-30 09:41:39 -------- d-----w- C:\Users\ZoSo\AppData\Local\{570393D0-DBA5-40A5-AD29-20E91636D0B9}

2012-08-30 03:55:39 9310152 ----a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll

2012-08-29 21:41:15 -------- d-----w- C:\Users\ZoSo\AppData\Local\{E1080449-3571-4805-A795-E66FE6B17B18}

2012-08-29 07:23:43 -------- d-----w- C:\Users\ZoSo\AppData\Local\{25C1B8A9-AE56-496A-9BA2-88D6C0076BF2}

2012-08-27 18:10:59 -------- d-----w- C:\Users\ZoSo\AppData\Local\{7CEBD025-617E-4A8C-9156-A7B81969E4F0}

2012-08-26 06:34:02 -------- d-----w- C:\Users\ZoSo\AppData\Local\{C5C76668-B722-47CA-BCE9-A5BC99CFA6E4}

2012-08-25 11:44:58 -------- d-----w- C:\Users\ZoSo\AppData\Local\{2FC77B8C-7811-463D-8B37-AB4C155257D9}

2012-08-24 18:40:41 -------- d-----w- C:\Program Files\Microsoft Xbox 360 Accessories

2012-08-24 13:40:43 -------- d-----w- C:\Users\ZoSo\AppData\Local\{3194C890-304E-446C-AAA8-AEF65732A8B4}

2012-08-24 03:27:15 -------- d-----w- C:\Users\ZoSo\AppData\Local\NBGI

2012-08-23 14:56:37 -------- d-----w- C:\Users\ZoSo\AppData\Local\{4F046CD9-03B6-46FE-B2AA-2635E5CC4E7F}

2012-08-23 02:56:25 -------- d-----w- C:\Users\ZoSo\AppData\Local\{D8B1D812-64FF-48C3-BD86-A26F30D605D8}

2012-08-22 14:56:14 -------- d-----w- C:\Users\ZoSo\AppData\Local\{D656BA1E-E4AB-473E-8ECC-3F79577F8F90}

2012-08-22 02:56:02 -------- d-----w- C:\Users\ZoSo\AppData\Local\{F1103681-0FD7-40B4-8C45-4F2D40342343}

2012-08-21 14:50:58 -------- d-----w- C:\Users\ZoSo\AppData\Local\{A8AFDF4C-77FB-4CE7-8F19-3B15EBC1A049}

2012-08-21 02:50:47 -------- d-----w- C:\Users\ZoSo\AppData\Local\{00F14C63-9104-45B3-B19F-DEACD38EB39F}

2012-08-20 14:50:22 -------- d-----w- C:\Users\ZoSo\AppData\Local\{1148C610-ADFC-467A-8BE5-003B44BF8F77}

2012-08-20 06:23:57 -------- d-----w- C:\Users\ZoSo\AppData\Local\Darksiders2

2012-08-20 02:49:57 -------- d-----w- C:\Users\ZoSo\AppData\Local\{628C5F74-5774-458C-A5BD-2C316C918FCD}

2012-08-19 12:28:04 -------- d-----w- C:\Users\ZoSo\AppData\Local\{131377F0-BCD3-4423-BE65-3DE55A2BABA9}

2012-08-18 18:38:33 -------- d-----w- C:\Users\ZoSo\AppData\Local\{04F5B209-C3B1-4B12-AD32-19E7E8C3DB3D}

2012-08-18 18:38:22 -------- d-----w- C:\Users\ZoSo\AppData\Local\{DB003297-6062-44C8-AB15-88BD111C0437}

2012-08-18 06:38:09 -------- d-----w- C:\Users\ZoSo\AppData\Local\{3D801EB7-7C75-4261-88EF-A32ACCD4B491}

2012-08-18 06:37:58 -------- d-----w- C:\Users\ZoSo\AppData\Local\{8DFB6C67-9484-4D2D-9D0C-7E322CD3F95C}

2012-08-17 18:37:46 -------- d-----w- C:\Users\ZoSo\AppData\Local\{1383613D-8C8C-4599-B963-A367BFA30BC4}

2012-08-17 18:37:35 -------- d-----w- C:\Users\ZoSo\AppData\Local\{E5D792E2-E9FA-4B81-96FB-4DA8DA36BFD3}

2012-08-17 06:37:22 -------- d-----w- C:\Users\ZoSo\AppData\Local\{D644AE46-946A-44F0-BDC3-42624DD764EA}

2012-08-17 06:37:11 -------- d-----w- C:\Users\ZoSo\AppData\Local\{23A42A84-E97E-40F3-A1A1-28608794500A}

2012-08-16 21:10:55 -------- d-----w- C:\Program Files (x86)\EVGA Precision X

2012-08-16 18:36:58 -------- d-----w- C:\Users\ZoSo\AppData\Local\{2C854635-579C-4683-8A6F-C88DB7660E21}

2012-08-16 18:36:47 -------- d-----w- C:\Users\ZoSo\AppData\Local\{CC7E50C0-3861-4AAA-8BFC-7F83CC16F9F7}

2012-08-16 02:25:44 -------- d-----w- C:\Users\ZoSo\AppData\Local\{5D57E3EE-A4E7-4719-BB42-4772324AB56F}

2012-08-16 02:25:33 -------- d-----w- C:\Users\ZoSo\AppData\Local\{53866ED3-F831-4D5D-BBE2-0BACBDCA9AE4}

2012-08-15 14:25:20 -------- d-----w- C:\Users\ZoSo\AppData\Local\{7F59F3BE-14F1-4E47-87FA-8815852B25FF}

2012-08-15 14:25:06 -------- d-----w- C:\Users\ZoSo\AppData\Local\{F9247147-B1B6-4FDF-B981-D5DD27A71F19}

2012-08-15 04:17:08 -------- d-----w- C:\Users\ZoSo\AppData\Local\DayZCommander

2012-08-15 02:24:53 -------- d-----w- C:\Users\ZoSo\AppData\Local\{3026B70A-20D9-4134-B99F-B1FB5491FDC2}

2012-08-15 02:24:41 -------- d-----w- C:\Users\ZoSo\AppData\Local\{837810E2-FC71-4E74-BBC7-CD3E3C9D3A42}

2012-08-14 07:42:06 -------- d-----w- C:\Users\ZoSo\AppData\Local\{439D72EE-F1DC-4896-B8D4-2D660C3937E2}

2012-08-14 07:41:55 -------- d-----w- C:\Users\ZoSo\AppData\Local\{B95EDBEF-DADB-4D61-AD2D-7AF414F60F05}

2012-08-13 19:41:42 -------- d-----w- C:\Users\ZoSo\AppData\Local\{67E7C4CC-4FEC-4DB3-901B-BA219C0574BC}

2012-08-13 19:41:31 -------- d-----w- C:\Users\ZoSo\AppData\Local\{F6FA84B5-2D63-4706-BC63-644B32B11BFB}

2012-08-13 07:41:05 -------- d-----w- C:\Users\ZoSo\AppData\Local\{5F64D482-CD8A-44B1-8A19-CDE0813C2EFA}

2012-08-13 07:40:54 -------- d-----w- C:\Users\ZoSo\AppData\Local\{E36E098F-4A00-4C88-A51A-A94E74FB063E}

2012-08-12 15:03:21 -------- d-----w- C:\Users\ZoSo\AppData\Local\{82B91400-2CF1-4054-B90E-7F32F6D1C162}

2012-08-12 15:03:10 -------- d-----w- C:\Users\ZoSo\AppData\Local\{C96C1793-A44E-40A9-B03F-44F7AD7A54FB}

2012-08-12 03:02:57 -------- d-----w- C:\Users\ZoSo\AppData\Local\{B4860C72-0ADE-49B1-9815-907B9BC8FD26}

2012-08-12 03:02:46 -------- d-----w- C:\Users\ZoSo\AppData\Local\{41FFA3D9-8AAE-49BD-8856-B9DD890C21BE}

2012-08-11 15:02:33 -------- d-----w- C:\Users\ZoSo\AppData\Local\{672631CE-754B-4101-9595-E7A2DA39D3BE}

2012-08-11 15:02:22 -------- d-----w- C:\Users\ZoSo\AppData\Local\{07A3F6EB-B54F-40FB-A13C-3FF66BBB9120}

2012-08-10 19:31:34 -------- d-----w- C:\Users\ZoSo\AppData\Local\{351940C2-8F6A-4504-9A91-E264165A6521}

2012-08-10 19:31:23 -------- d-----w- C:\Users\ZoSo\AppData\Local\{F414DF38-F7C8-486A-B4D1-846DF583F431}

2012-08-10 07:31:09 -------- d-----w- C:\Users\ZoSo\AppData\Local\{DD0EFF79-A6BA-420B-9EBC-76929084EA7A}

2012-08-10 07:30:55 -------- d-----w- C:\Users\ZoSo\AppData\Local\{5B9769EE-BEAF-43E7-9C0F-4021DCBF6A1C}

2012-08-10 03:41:12 -------- d-----w- C:\Users\ZoSo\AppData\Local\PMB Files

2012-08-10 03:41:12 -------- d-----w- C:\ProgramData\PMB Files

2012-08-09 19:30:27 -------- d-----w- C:\Users\ZoSo\AppData\Local\{393872A3-A42B-4603-A655-ECBB5AA323B7}

2012-08-09 19:30:15 -------- d-----w- C:\Users\ZoSo\AppData\Local\{144A179A-DD80-4291-A97F-2804DEA162DE}

2012-08-09 07:17:07 -------- d-----w- C:\Users\ZoSo\AppData\Local\{D3E791EA-6A95-45E2-803E-6EDF9B8125DF}

2012-08-09 07:16:56 -------- d-----w- C:\Users\ZoSo\AppData\Local\{1DF5F1B0-8438-4FFE-9FB9-C3215BBE94EE}

2012-08-08 19:16:43 -------- d-----w- C:\Users\ZoSo\AppData\Local\{112AF068-B8D9-419E-A50F-0E5680540EFC}

2012-08-08 19:16:32 -------- d-----w- C:\Users\ZoSo\AppData\Local\{3786FD6F-B1D6-464F-9509-E613879DE834}

2012-08-08 07:16:19 -------- d-----w- C:\Users\ZoSo\AppData\Local\{7751138E-A2D1-4CEC-9FA3-D174E3092CD9}

2012-08-08 07:16:08 -------- d-----w- C:\Users\ZoSo\AppData\Local\{39E2D2C4-8001-4076-96B2-C093023EED94}

2012-08-08 04:03:14 -------- d-----w- C:\Users\ZoSo\AppData\Roaming\.minecraft

2012-08-07 19:15:55 -------- d-----w- C:\Users\ZoSo\AppData\Local\{F793D46F-27B4-438E-B349-2193F6CD3C24}

2012-08-07 19:15:44 -------- d-----w- C:\Users\ZoSo\AppData\Local\{DA2363AF-65CD-49B6-B4AB-6F6AA3FAFDDD}

2012-08-07 06:34:20 -------- d-----w- C:\Users\ZoSo\AppData\Local\{144343DD-B7D0-468C-AC05-920993FE21C0}

2012-08-07 06:34:09 -------- d-----w- C:\Users\ZoSo\AppData\Local\{AFCF2655-A0EE-4FB6-8CA1-DB43D4EB3196}

2012-08-06 18:33:43 -------- d-----w- C:\Users\ZoSo\AppData\Local\{7DD64AC0-8FC2-4F2C-A282-E93DC9083F0A}

2012-08-06 18:33:32 -------- d-----w- C:\Users\ZoSo\AppData\Local\{691B3E0F-185B-48E0-8E1A-726E2E986ADC}

2012-08-06 05:49:12 -------- d-----w- C:\Users\ZoSo\AppData\Local\{5D5EE68B-2784-47ED-B854-07279A837C51}

2012-08-06 05:49:00 -------- d-----w- C:\Users\ZoSo\AppData\Local\{F5CE09D4-CC8B-43F1-9ED9-0CA3BFCD97E6}

2012-08-05 16:43:30 -------- d-----w- C:\Users\ZoSo\AppData\Local\{263A705E-598E-4437-B701-2055697FFE18}

2012-08-05 16:43:18 -------- d-----w- C:\Users\ZoSo\AppData\Local\{921634EB-0B2A-49B6-B384-C36451CC2224}

2012-08-04 17:29:14 -------- d-----w- C:\Users\ZoSo\AppData\Local\{CEA3545C-B3EA-46EB-9C46-1EE897862D58}

2012-08-04 17:29:02 -------- d-----w- C:\Users\ZoSo\AppData\Local\{C9A29068-6E99-491F-BE7A-4E0647A1087C}

2012-08-02 13:38:29 -------- d-----w- C:\Users\ZoSo\AppData\Local\{1827E7D2-F78E-4B59-9E92-ADDC26EBF4C4}

2012-08-01 18:15:07 -------- d-----w- C:\Users\ZoSo\AppData\Local\{86F6F0C0-9ACD-421A-95A3-EFA8B65A6B15}

2012-08-01 18:14:56 -------- d-----w- C:\Users\ZoSo\AppData\Local\{FB489ACA-B089-47E2-9F14-DC5BBD75CD02}

.

==================== Find3M ====================

.

2012-08-15 02:26:16 70344 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl

2012-08-15 02:26:16 426184 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe

2012-07-18 18:15:06 3148800 ----a-w- C:\Windows\System32\win32k.sys

2012-07-04 22:13:27 59392 ----a-w- C:\Windows\System32\browcli.dll

2012-07-04 22:13:27 136704 ----a-w- C:\Windows\System32\browser.dll

2012-07-04 21:14:34 41984 ----a-w- C:\Windows\SysWow64\browcli.dll

2012-07-03 20:46:44 24904 ----a-w- C:\Windows\System32\drivers\mbam.sys

2012-06-27 07:06:53 1188864 ----a-w- C:\Windows\System32\wininet.dll

2012-06-27 05:53:07 981504 ----a-w- C:\Windows\SysWow64\wininet.dll

2012-06-27 04:53:10 1638912 ----a-w- C:\Windows\System32\mshtml.tlb

2012-06-27 04:10:55 1638912 ----a-w- C:\Windows\SysWow64\mshtml.tlb

2012-06-16 05:16:04 609792 ----a-w- C:\Windows\System32\vbscript.dll

2012-06-16 04:26:57 428032 ----a-w- C:\Windows\SysWow64\vbscript.dll

2012-06-12 02:30:01 2653573 ----a-w- C:\Windows\System32\nvcoproc.bin

2012-06-12 02:29:20 3264360 ----a-w- C:\Windows\System32\nvsvc64.dll

2012-06-12 02:29:19 6189928 ----a-w- C:\Windows\System32\nvcpl.dll

2012-06-12 02:28:59 891240 ----a-w- C:\Windows\System32\nvvsvc.exe

2012-06-12 02:28:59 63336 ----a-w- C:\Windows\System32\nvshext.dll

2012-06-12 02:28:59 118120 ----a-w- C:\Windows\System32\nvmctray.dll

2012-06-06 06:06:16 2004480 ----a-w- C:\Windows\System32\msxml6.dll

2012-06-06 06:06:16 1881600 ----a-w- C:\Windows\System32\msxml3.dll

2012-06-06 06:02:54 1133568 ----a-w- C:\Windows\System32\cdosys.dll

2012-06-06 05:05:52 1390080 ----a-w- C:\Windows\SysWow64\msxml6.dll

2012-06-06 05:05:52 1236992 ----a-w- C:\Windows\SysWow64\msxml3.dll

2012-06-06 05:03:06 805376 ----a-w- C:\Windows\SysWow64\cdosys.dll

2012-06-02 22:19:42 186752 ----a-w- C:\Windows\System32\wuwebv.dll

2012-06-02 22:15:31 2622464 ----a-w- C:\Windows\System32\wucltux.dll

2012-06-02 22:15:12 36864 ----a-w- C:\Windows\System32\wuapp.exe

2012-06-02 22:15:08 99840 ----a-w- C:\Windows\System32\wudriver.dll

2012-06-02 05:50:10 458704 ----a-w- C:\Windows\System32\drivers\cng.sys

2012-06-02 05:48:16 95600 ----a-w- C:\Windows\System32\drivers\ksecdd.sys

2012-06-02 05:48:16 151920 ----a-w- C:\Windows\System32\drivers\ksecpkg.sys

2012-06-02 05:45:31 340992 ----a-w- C:\Windows\System32\schannel.dll

2012-06-02 05:44:21 307200 ----a-w- C:\Windows\System32\ncrypt.dll

2012-06-02 04:40:42 22016 ----a-w- C:\Windows\SysWow64\secur32.dll

2012-06-02 04:40:39 225280 ----a-w- C:\Windows\SysWow64\schannel.dll

2012-06-02 04:39:10 219136 ----a-w- C:\Windows\SysWow64\ncrypt.dll

.

============= FINISH: 21:36:38.13 ===============

Link to post
Share on other sites
TheDarkKnight

TheDarkKnight

Posted
Posted

:welcome: I am TheDarkKnight and will be assisting you. Please ask questions if anything is unclear. :)

Please follow these instructions to run ComboFix.exe. Please visit this webpage for download links and instructions for running this tool:

http://www.bleepingc...to-use-combofix

* Ensure you have disabled all anti virus and anti malware programs so they do not interfere with the running of ComboFix (CF).

Please go here to see a list of programs that need to be disabled.

**Note: Do not mouseclick ComboFix's window while it's running. That may cause it to stall.**

**Note 2: If you get a message saying "Illegal operation attempted on a registry key that has been marked for deletion", please restart your computer.**

Please include the C:\ComboFix.txt in your next reply for further review.

===========

Next, please download to your Desktop:

  • TDSSKiller.zip from here and extract it (right click on it => "Extract here").

>>> TDSSKiller: Double-click on TDSSKiller.exe to run the application.

  • Click on the Start Scan button and wait for the scan and disinfection process to be over.
  • If an infected file is detected, the default action will be Cure. Instead, choose SKIP, then click on Continue tdsskiller2.png
  • If a suspicious file is detected, the default action will be Skip, click on Continue tdsskiller3.png
  • If you are asked to reboot the computer to complete the process, click on the Reboot Now button. A report will be automatically saved at the root of the System drive ((usually C:\) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt" (for example, C:\TDSSKiller.2.2.0_20.12.2009_15.31.43_log.txt). Please copy and paste the contents of that file here.

Finally, please download MBRCheck by a_d_13 to your Desktop from one of these locations:

http://ad13.geekstogo.com/MBRCheck.exe

http://download.blee...al/MBRCheck.exe

http://www.kernelmod...fo/MBRCheck.exe

Close all opened programs/ windows and double-click on MBRCheck.exe.

It will produce a log file saved automatically on your Desktop as "MBRCheck_[Date]_[Time].txt".

Press the "Enter" key to close the MBRCheck window and post the contents of the log file.

===========

In your reply please provide the following:

  • ComboFix.txt.
  • TDSSKiller log.
  • MBRCheck log.

How is your computer currently running?

Link to post
Share on other sites
TheDarkKnight

TheDarkKnight

Posted
Posted

Good evening ZoSo. :)

How does everything look?

Your logs do not show anything concerning. Please run this tool instead.

Please download the latest version of the Kaspersky Virus Removal Tool.

  • Close all other applications and double-click and run the installer.
  • When the Kaspersky Virus Removal Tool starts, to the right of Security Level click Recommended, and select Settings.
  • In the window that opens (Autoscan), in the Scope tab place a checkmark to the left of Parse email formats.
  • Click the Additional tab and click to place a checkmark to the left of Deep scan, and click OK.
  • Select all the scanable items except for CD-ROM drives and click the Start scan button.
    6zvqld.gif
  • If malware is detected, place a checkmark in the Apply to all box, and click the Delete button (or Disinfect if the button is active).
  • After the scan finishes, if any threat remains in the Scan window (Red exclamation point), click the Neutralize all button.
  • In the window that opens, place a checkmark in the Apply to all box, and click the Delete button (or Disinfect if the button is active).
  • If advised that a special disinfection procedure is required which demands system reboot: click the Ok button to close the window.
  • In the Scan window click the Reports button and select Save to file.
  • Name the report AVPT.txt, and save it to the Desktop.
  • Close the AVPTool.
  • You will be prompted if you want to uninstall the program; click Yes.
  • You will then be prompted that to complete the uninstallation, the computer must be restarted. Select Yes to restart the system.
  • Copy and paste the first part of the report (Detected) that you saved in your next reply.

Link to post
Share on other sites
TheDarkKnight

TheDarkKnight

Posted
Posted

Hello ZoSo. :)

Hey DarkKnight. Is it normal for this Scan to only be at 32%, duration 8 hrs 22mins, estimated to be finished in 16 hours?

This is a pretty in-depth scan and can sometimes take a very long time. Please let me know if it appears to stall or stop progressing.

Link to post
Share on other sites
  • 2 weeks later...
Maurice Naggar

Maurice Naggar

Posted
Posted

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.