MBAM stop working, PC possibily infected

[ideias]

Hello, everybody.

I'm using MBAM for a long time, and currently I've my PC protected with an anti-malware, MBAM Pro, and an anti-virus, MSEssentials.

Today, suddenly, MBAM stopped working. Something wrong happened:

- First, I've got a normal message on the screen indicating that the MB had found a trojan - but the statement suggested that the trojan would be a file of MBAM itself!

- When I tryed to run MBAM, it says that one specific file was needed to iniciate the program.

- At the same time, Firefox was mysteriously deleted from the computer - as if it was self-uninstalled, as it happened in the old Mission Impossible serials :-)

- And the MSE also crashed, with the some indication of a missing file.

So I had to uninstall and reinstall MSE, and the same for MBAM. And also I had to reinstall Firefox, of course. At this time, the MSE appears to be working properly. I scanned the PC, and not detected any problem. But there is a problem, I'm sure - and I really don't like the reports os DDS... :-(

But MB, although reinstalled, still does not work. A message appears saying that is not possible to launch the program because the file MSVBVM60.dll does not exist.

I don't know how to solve the problem. And, worse, I do not know where it was originated. Nor why Firefox disappeared and my safety programs, MBAM and MSE, were affected.

By the way: just right now, I realise that my .zip files also don't open...

As indicated in the notes of the forum, here goes the current log of DDS.txt. (ATT: the automatic system of this forum informed me that the post with also the attach.txt log was too long. So, I can send it in attactment or try to copy and post it later, as you prefer)

DDS.txt log

DDS (Ver_2012-11-20.01) - NTFS_x86

Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 10.9.2

Run by Viriato Teles at 22:35:35 on 2013-04-11

Microsoft Windows XP Professional 5.1.2600.3.1252.351.2070.18.2046.1188 [GMT 1:00]

.

AV: Microsoft Security Essentials *Disabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}

FW: ActiveArmor Firewall *Enabled*

.

============== Running Processes ================

.

C:\WINDOWS\system32\Ati2evxx.exe

c:\Programas\Microsoft Security Client\MsMpEng.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\Programas\HitmanPro\hmpsched.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\Explorer.EXE

C:\Programas\Ficheiros comuns\Apple\Mobile Device Support\AppleMobileDeviceService.exe

C:\WINDOWS\ATKKBService.exe

C:\Programas\Bonjour\mDNSResponder.exe

C:\Programas\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe

C:\Programas\Java\jre7\bin\jqs.exe

C:\Programas\Ficheiros comuns\LightScribe\LSSrvc.exe

C:\Programas\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe

C:\Programas\Ficheiros comuns\Microsoft Shared\VS7Debug\mdm.exe

C:\Programas\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe

C:\Programas\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe

C:\Programas\CyberLink\Shared files\RichVideo.exe

C:\Programas\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe

C:\WINDOWS\System32\alg.exe

C:\Programas\Malwarebytes' Anti-Malware\mbamscheduler.exe

C:\Programas\Malwarebytes' Anti-Malware\mbamservice.exe

C:\Programas\Malwarebytes' Anti-Malware\mbamgui.exe

C:\Programas\NVIDIA Corporation\NetworkAccessManager\bin\nTrayFw.exe

C:\Programas\ScanSoft\OmniPageSE2.0\OpwareSE2.exe

C:\Programas\Microsoft IntelliType Pro\itype.exe

C:\Programas\Microsoft IntelliPoint\ipoint.exe

C:\WINDOWS\RTHDCPL.EXE

C:\Programas\ACD Systems\ACDSee Pro\6.0\ACDSeePro6InTouch2.exe

C:\Programas\iTunes\iTunesHelper.exe

C:\Programas\Microsoft Security Client\msseces.exe

C:\Programas\Ficheiros comuns\Ahead\Lib\NMBgMonitor.exe

C:\Programas\RamBooster 2.0\Rambooster.exe

C:\Programas\iPod\bin\iPodService.exe

C:\Programas\Ficheiros comuns\Ahead\Lib\NMIndexingService.exe

C:\Programas\Ficheiros comuns\Ahead\Lib\NMIndexStoreSvr.exe

C:\Programas\Mozilla Firefox\firefox.exe

C:\Programas\Mozilla Firefox\plugin-container.exe

C:\WINDOWS\system32\wscntfy.exe

C:\WINDOWS\system32\wbem\wmiprvse.exe

C:\WINDOWS\system32\svchost.exe -k rpcss

C:\WINDOWS\System32\svchost.exe -k netsvcs

C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup

C:\WINDOWS\system32\svchost.exe -k NetworkService

C:\WINDOWS\system32\svchost.exe -k LocalService

C:\WINDOWS\system32\svchost.exe -k LocalService

C:\WINDOWS\system32\svchost.exe -k imgsvc

.

============== Pseudo HJT Report ===============

.

uStart Page = hxxp://www.google.com

BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\programas\ficheiros comuns\adobe\acrobat\activex\AcroIEHelperShim.dll

BHO: Java™ Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\programas\java\jre7\bin\ssv.dll

BHO: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\programas\java\jre7\bin\jp2ssv.dll

BHO: BrowserHelper Class: {EDF48A39-1442-463F-9F4E-F376A78D034A} - c:\programas\livedrive\LivedriveExplorerExtensions.dll

EB: MBNet: {4E592651-4590-11d6-BC20-00C095EEAD5D} - c:\windows\system32\shdocvw.dll

uRun: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "c:\programas\ficheiros comuns\ahead\lib\NMBgMonitor.exe"

uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe

uRun: [updateMgr] "c:\programas\adobe\acrobat 7.0\acrobat\AdobeUpdateManager.exe" AcPro7_0_7 -reboot 1

uRun: [RamBooster] c:\programas\rambooster 2.0\Rambooster.exe

mRun: [ATICCC] "c:\programas\ati technologies\ati.ace\CLIStart.exe"

mRun: [nTrayFw] c:\programas\nvidia corporation\networkaccessmanager\bin\nTrayFw.exe

mRun: [JMB36X IDE Setup] c:\windows\jm\JMInsIDE.exe

mRun: [JMB36X Configure] c:\windows\system32\JMRaidSetup.exe boot

mRun: [OpwareSE2] "c:\programas\scansoft\omnipagese2.0\OpwareSE2.exe"

mRun: [itype] "c:\programas\microsoft intellitype pro\itype.exe"

mRun: [intelliPoint] "c:\programas\microsoft intellipoint\ipoint.exe"

mRun: [RTHDCPL] RTHDCPL.EXE

mRun: [QuickTime Task] "c:\programas\quicktime\qttask.exe" -atboottime

mRun: [APSDaemon] "c:\programas\ficheiros comuns\apple\apple application support\APSDaemon.exe"

mRun: [ACPW06EN] "c:\programas\acd systems\acdsee pro\6.0\ACDSeePro6InTouch2.exe" /pid ACPW06EN

mRun: [Adobe ARM] "c:\programas\ficheiros comuns\adobe\arm\1.0\AdobeARM.exe"

mRun: [iTunesHelper] "c:\programas\itunes\iTunesHelper.exe"

mRun: [MSC] "c:\programas\microsoft security client\msseces.exe" -hide -runkey

dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE

uPolicies-Explorer: NoDriveTypeAutoRun = dword:145

uPolicies-Explorer: NoDriveAutoRun = dword:67108863

uPolicies-Explorer: NoDrives = dword:0

mPolicies-Explorer: NoDriveAutoRun = dword:67108863

mPolicies-Explorer: NoDriveTypeAutoRun = dword:323

mPolicies-Explorer: NoDrives = dword:0

mPolicies-Windows\System: Allow-LogonScript-NetbiosDisabled = dword:1

mPolicies-Explorer: NoDriveTypeAutoRun = dword:323

mPolicies-Explorer: NoDriveAutoRun = dword:67108863

IE: {C014B140-3835-11d6-BC1D-00C095EEAD5D} - {4E592651-4590-11d6-BC20-00C095EEAD5D}

IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe

IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\programas\messenger\msmsgs.exe

DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} - hxxp://download.microsoft.com/download/e/4/9/e494c802-dd90-4c6b-a074-469358f075a6/OGAControl.cab

DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab

DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} - hxxp://www.nvidia.com/content/DriverDownload/srl/3.0.0.4/srl_bin/sysreqlab_nvd.cab

DPF: {4E592651-4590-11D6-BC20-00C095EEAD5D} - hxxps://www.mbnet.pt/sidebar/mbnetsidebar.cab

DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1219082665390

DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1354568416062

DPF: {74DBCB52-F298-4110-951D-AD2FF67BC8AB} - hxxp://www.nvidia.com/content/DriverDownload/nforce/NvidiaSmartScan.cab

DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab

DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

TCP: NameServer = 192.168.1.254 192.168.1.254

TCP: Interfaces\{2606D6A9-6DDC-4CA0-B526-03D7C068A738} : DHCPNameServer = 192.168.1.1

TCP: Interfaces\{44F7B515-DB72-4ABE-8060-06ADD864AC0A} : DHCPNameServer = 192.168.1.254 192.168.1.254

Notify: AtiExtEvent - Ati2evxx.dll

SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - c:\windows\system32\CbFsMntNtf3.dll

STS: Virtual Storage Mount Notification - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - c:\windows\system32\CbFsMntNtf3.dll

SEH: Microsoft AntiMalware ShellExecuteHook - {091EB208-39DD-417D-A5DD-7E2C2D8FB9CB} - c:\programas\windows defender\MpShHook.dll

mASetup: {10880D85-AAD9-4558-ABDC-2AB1552D831F} - "c:\programas\ficheiros comuns\lightscribe\LSRunOnce.exe"

mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "c:\programas\google\chrome\application\26.0.1410.64\installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome

.

================= FIREFOX ===================

.

FF - ProfilePath - c:\documents and settings\viriato teles\application data\mozilla\firefox\profiles\3irlmrgv.default-1362429154781\

FF - prefs.js: browser.startup.homepage - about:home

FF - plugin: c:\programas\adobe\reader 11.0\reader\air\nppdf32.dll

FF - plugin: c:\programas\google\update\1.3.21.135\npGoogleUpdate3.dll

FF - plugin: c:\programas\java\jre7\bin\dtplugin\npdeployJava1.dll

FF - plugin: c:\programas\java\jre7\bin\plugin2\npjp2.dll

FF - plugin: c:\programas\microsoft silverlight\5.1.20125.0\npctrlui.dll

FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_6_602_180.dll

FF - ExtSQL: 2013-03-07 00:10; {c45c406e-ab73-11d8-be73-000a95be3b12}; c:\documents and settings\viriato teles\application data\mozilla\firefox\profiles\3irlmrgv.default-1362429154781\extensions\{c45c406e-ab73-11d8-be73-000a95be3b12}.xpi

FF - ExtSQL: 2013-03-16 19:21; {8F6A6FD9-0619-459f-B9D0-81DE065D4E21}; c:\documents and settings\viriato teles\application data\mozilla\firefox\profiles\3irlmrgv.default-1362429154781\extensions\{8F6A6FD9-0619-459f-B9D0-81DE065D4E21}.xpi

.

============= SERVICES / DRIVERS ===============

.

R0 MpFilter;Microsoft Malware Protection Driver;c:\windows\system32\drivers\MpFilter.sys [2013-1-20 195296]

R1 CbFs;CbFs;c:\windows\system32\drivers\cbfs.sys [2012-11-12 146904]

R1 cbfs3;cbfs3;c:\windows\system32\drivers\cbfs3.sys [2012-11-17 299144]

R1 MpKsl2a7ae7f9;MpKsl2a7ae7f9;c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{6a92bd8c-d401-44db-9c59-5dd7c9cf0b27}\MpKsl2a7ae7f9.sys [2013-4-11 29904]

R2 HitmanProScheduler;HitmanPro Scheduler;c:\programas\hitmanpro\hmpsched.exe [2013-3-4 106280]

R2 MBAMScheduler;MBAMScheduler;c:\programas\malwarebytes' anti-malware\mbamscheduler.exe [2013-4-11 418376]

R2 MBAMService;MBAMService;c:\programas\malwarebytes' anti-malware\mbamservice.exe [2013-4-11 701512]

R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2013-4-11 22856]

S0 agkwtecl;agkwtecl;c:\windows\system32\drivers\gltfhrxs.sys --> c:\windows\system32\drivers\gltfhrxs.sys [?]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]

S2 LivedriveVSSService;Livedrive VSS Service;c:\programas\livedrive\VSSService.exe [2012-11-14 154848]

S2 WinDefend;Windows Defender;c:\programas\windows defender\MsMpEng.exe [2006-11-3 13592]

S3 esgiguard;esgiguard;\??\c:\programas\enigma software group\spyhunter\esgiguard.sys --> c:\programas\enigma software group\spyhunter\esgiguard.sys [?]

S3 MBAMSwissArmy;MBAMSwissArmy;\??\c:\windows\system32\drivers\mbamswissarmy.sys --> c:\windows\system32\drivers\mbamswissarmy.sys [?]

S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]

.

=============== Created Last 30 ================

.

2013-04-11 21:13:29 29904 -c--a-w- c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{6a92bd8c-d401-44db-9c59-5dd7c9cf0b27}\MpKsl2a7ae7f9.sys

2013-04-11 19:54:40 920472 -c--a-w- c:\programas\mozilla firefox\firefox.exe

2013-04-11 19:54:40 26520 -c--a-w- c:\programas\mozilla firefox\plugin-hang-ui.exe

2013-04-11 19:52:21 22856 -c--a-w- c:\windows\system32\drivers\mbam.sys

2013-04-11 19:52:21 -------- dc----w- c:\programas\Malwarebytes' Anti-Malware

2013-04-11 19:30:34 7108640 -c--a-w- c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{6a92bd8c-d401-44db-9c59-5dd7c9cf0b27}\mpengine.dll

2013-04-11 19:29:16 -------- dc----w- c:\programas\Microsoft Security Client

2013-04-02 19:53:57 -------- dc----w- c:\programas\iPod

2013-04-02 19:53:52 -------- dc----w- c:\programas\iTunes

2013-04-02 19:53:52 -------- dc----w- c:\documents and settings\all users\application data\188F1432-103A-4ffb-80F1-36B633C5C9E1

2013-03-25 20:39:01 -------- dc----w- c:\programas\ficheiros comuns\DVDVideoSoft

2013-03-25 20:39:00 -------- dc----w- c:\programas\DVDVideoSoft

2013-03-25 20:39:00 -------- dc----w- c:\documents and settings\viriato teles\application data\DVDVideoSoft

2013-03-25 16:15:59 443752 -c--a-w- c:\windows\system32\d3dx10_33.dll

2013-03-25 16:15:59 261480 -c--a-w- c:\windows\system32\xactengine2_7.dll

2013-03-25 16:15:59 1123696 -c--a-w- c:\windows\system32\D3DCompiler_33.dll

2013-03-25 16:15:58 3495784 -c--a-w- c:\windows\system32\d3dx9_33.dll

2013-03-25 16:15:58 255848 -c--a-w- c:\windows\system32\xactengine2_6.dll

2013-03-25 16:15:57 3426072 -c--a-w- c:\windows\system32\d3dx9_32.dll

2013-03-25 16:15:57 251672 -c--a-w- c:\windows\system32\xactengine2_5.dll

2013-03-25 16:15:56 2414360 -c--a-w- c:\windows\system32\d3dx9_31.dll

2013-03-25 16:15:56 237848 -c--a-w- c:\windows\system32\xactengine2_4.dll

2013-03-25 16:15:56 15128 -c--a-w- c:\windows\system32\x3daudio1_1.dll

2013-03-25 16:14:38 -------- dc-h--w- c:\windows\msdownld.tmp

2013-03-25 16:14:21 -------- dc----w- c:\windows\Logs

2013-03-24 18:18:27 -------- dc----w- c:\documents and settings\viriato teles\definições locais\application data\CRE

2013-03-24 18:06:04 -------- dc----w- c:\documents and settings\viriato teles\application data\TuneUp Software

2013-03-24 18:05:23 -------- dc----w- c:\programas\TuneUp Utilities 2013

2013-03-24 18:05:15 -------- dc----w- c:\documents and settings\all users\application data\TuneUp Software

2013-03-24 18:04:59 -------- dcsh--w- c:\documents and settings\all users\application data\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}

2013-03-24 18:04:59 -------- dc-h--w- c:\documents and settings\all users\application data\Common Files

.

==================== Find3M ====================

.

2013-04-07 14:36:32 196608 -c--a-w- c:\windows\system32\drivers\aStandard.bin

2013-03-13 19:22:27 73432 -c--a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

2013-03-13 19:22:27 693976 -c--a-w- c:\windows\system32\FlashPlayerApp.exe

2013-03-12 00:10:56 237088 -c----w- c:\windows\system32\MpSigStub.exe

2013-03-08 08:36:14 293888 -c--a-w- c:\windows\system32\winsrv.dll

2013-03-07 15:56:55 2153984 -c--a-w- c:\windows\system32\ntoskrnl.exe

2013-03-07 15:56:54 2032640 -c--a-w- c:\windows\system32\ntkrnlpa.exe

2013-03-04 21:33:32 12872 -c--a-w- c:\windows\system32\bootdelete.exe

2013-03-02 01:57:47 1867392 -c----w- c:\windows\system32\win32k.sys

2013-03-02 01:53:47 916480 -c--a-w- c:\windows\system32\wininet.dll

2013-03-02 01:53:44 43520 -c----w- c:\windows\system32\licmgr10.dll

2013-03-02 01:53:44 1469440 -c----w- c:\windows\system32\inetcpl.cpl

2013-03-02 01:08:47 385024 -c--a-w- c:\windows\system32\html.iec

2013-02-27 07:56:44 2067456 -c--a-w- c:\windows\system32\mstscax.dll

2013-02-12 00:32:23 12928 -c--a-w- c:\windows\system32\drivers\usb8023.sys

2013-02-12 00:32:23 12928 -c----w- c:\windows\system32\drivers\usb8023x.sys

2013-01-26 03:55:38 552448 -c----w- c:\windows\system32\oleaut32.dll

2013-01-20 14:59:04 195296 -c--a-w- c:\windows\system32\drivers\MpFilter.sys

.

============= FINISH: 22:36:39,00 ===============

Thank you very much for your attention.

[Maurice Naggar]

Hello ideias,

Let me suggest, if you're an MBAM PRO customer, you contact the consumer help desk here.

If you are in an organization or a corporate customer, contact Corporate Support for assistance.

Please advise me if you have resolved your MBAM issue.

Step 1

1. Go >> Here << and download ERUNT

(ERUNT (Emergency Recovery Utility NT) is a free program that allows you to keep a complete backup of your registry and restore it when needed.)

2. Install ERUNT by following the prompts

(use the default install settings but say no to the portion that asks you to add ERUNT to the start-up folder, if you like you can enable this option later)

3. Start ERUNT

(either by double clicking on the desktop icon or choosing to start the program at the end of the setup)

4. Choose a location for the backup

(the default location is C:\WINDOWS\ERDNT which is acceptable).

5. Make sure that at least the first two check boxes are ticked

6. Press OK

7. Press YES to create the folder.

Step 2

Set Windows to show all files and all folders.

On your Desktop, double click My Computer, from the menu options, select tools, then Folder Options, and then select VIEW Tab and look at all of settings listed.

"CHECK" (turn on) Display the contents of system folders.

Under column, Hidden files and folders----choose ( *select* ) Show hidden files and folders.

Next, un-check Hide extensions for known file types.

Next un-check Hide protected operating system files.

Step 3

Download Random's System Information Tool (RSIT) by random/random from here and save it to your desktop.

• Double click on RSIT.exe to run RSIT.
  
• Click Continue at the disclaimer screen.
  
• Once it has finished, two logs will open. Please post the contents of both log.txt (<<will be maximized) and info.txt (<<will be minimized)

Step 4

Download Security Check by screen317 and save it to your Desktop: here

• Run Security Check
• Follow the onscreen instructions inside of the command window.
• A Notepad document should open automatically called checkup.txt; close Notepad. We will need this log, too, so remember where you've saved it!

Step 5
Close all open browsers at this point.
Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools
For directions on how, see How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs
Do NOT turn off the firewall
Start Internet Explorer
Using Internet Explorer browser only, go to BitDefender Quickscan website:
http://quickscan.bitdefender.com
and click "Start Scan".
Observe your browser in case it shows a notice/message bar to allow download and installation of a tool.
Allow the download and install of qsax.cab from BitDefender. Right-click the IE info bar and select Install to install the BitDefender quick scan module.
If prompted, reply yes to allow it to run.
Press the Allow button and follow prompts.
Press the "Start Scan" once more.
You'll see the EULA in a pop-up window. Click the I accept & then the OK button
Note: The FAQ is here --> http://quickscan.bitdefender.com/faq/
and that QuickScan has no removal capability.
The site boasts a 60-second scan. Do have patience as it likely will take longer.
It may seem to stall at moments, but have patience; it will move on.
You'll see a progress bar at top right of window.
Hopefully you will see a No infections found in the bar-winddow. Press the View Log button.
The log report will show in your text editor. Save the log.
Do a Select ALL, Copy. Then paste contents into your next reply.
Step 6

• Download & SAVE to your Desktop >> Tigzy's RogueKillerfrom here << or
  >> from here <<
  
• Quit all programs that you may have started.
  
• Please disconnect any USB or external drives from the computer before you run this scan!
  
• For Vista or Windows 7, do a right-click on the program, select Run as Administrator to start, & when prompted Allow to run.
  For Windows XP, double-click to start.
  
• Wait until Prescan has finished ...
  
• Click on Scan.
  
• Click on Report and copy/paste the content of the notepad into your next reply.

Step 7

RE-Enable your antivirus program.

Copy & Paste contents of Log.txt & Info.txt & Checkup.txt & log from Bitdefender & RogueKiller log.

Use separate replies as needed if logs do not fit into one reply box.

[Maurice Naggar]

How is it going ? Do you still need help? I need to hear back from you, otherwise I will begin to think that this is abandoned by you.

[Maurice Naggar]

No response. This is Closed.