Beeping computer - Malwarebytes crashes.

MarshallE · November 2, 2013

Please help. PC is beeping and seeing diamond checkers when scrolling. Cant run a full Malwarebytes scan

DDS (Ver_2012-11-20.01) - NTFS_x86

Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 10.45.2

Run by Compaq_Administrator at 17:30:26 on 2013-11-02

Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1982.1024 [GMT 10:00]

.

AV: Microsoft Security Essentials *Enabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}

.

============== Running Processes ================

.

c:\Program Files\Microsoft Security Client\MsMpEng.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\SUPERAntiSpyware\SASCORE.EXE

C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

C:\WINDOWS\arservice.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\WINDOWS\eHome\ehRecvr.exe

C:\WINDOWS\eHome\ehSched.exe

C:\Program Files\Java\jre7\bin\jqs.exe

C:\Program Files\Common Files\LightScribe\LSSrvc.exe

C:\WINDOWS\ehome\ehtray.exe

C:\WINDOWS\ARPWRMSG.EXE

C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

C:\Program Files\Microsoft Security Client\msseces.exe

C:\WINDOWS\system32\HPZipm12.exe

C:\Program Files\iTunes\iTunesHelper.exe

C:\Program Files\Logitech\SetPointP\SetPoint.exe

C:\WINDOWS\RTHDCPL.EXE

C:\WINDOWS\ehome\mcrdsvc.exe

C:\Program Files\Common Files\Java\Java Update\jusched.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Documents and Settings\Compaq_Administrator.YOUR-C6B5E4EABC.000\Local Settings\Application Data\VNT\vntldr.exe

C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE

C:\WINDOWS\eHome\ehmsas.exe

C:\Program Files\iPod\bin\iPodService.exe

C:\WINDOWS\System32\alg.exe

C:\HP\KBD\KBD.EXE

c:\windows\system\hpsysdrv.exe

C:\Program Files\Common Files\Java\Java Update\jusched.exe

C:\WINDOWS\explorer.exe

C:\Program Files\Google\Chrome\Application\chrome.exe

C:\WINDOWS\system32\wbem\wmiprvse.exe

C:\WINDOWS\System32\svchost.exe -k netsvcs

C:\WINDOWS\system32\svchost.exe -k NetworkService

C:\WINDOWS\system32\svchost.exe -k LocalService

C:\WINDOWS\system32\svchost.exe -k imgsvc

C:\WINDOWS\System32\svchost.exe -k HTTPFilter

.

============== Pseudo HJT Report ===============

.

BHO: {5A55615B-11CE-7D05-DB0B-BAA108213D50} - <orphaned>

BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - <orphaned>

BHO: Java Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre7\bin\ssv.dll

BHO: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll

BHO: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre7\bin\jp2ssv.dll

TB: &Google: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll

TB: &Google: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll

uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe

uRun: [sUPERAntiSpyware] c:\program files\superantispyware\SUPERAntiSpyware.exe

mRun: [ehTray] c:\windows\ehome\ehtray.exe

mRun: [ftutil2] rundll32.exe ftutil2.dll,SetWriteCacheMode

mRun: [MSPY2002] c:\windows\system32\ime\pintlgnt\ImScInst.exe /SYNC

mRun: [AlwaysReady Power Message APP] ARPWRMSG.EXE

mRun: [Recguard] c:\windows\sminst\RECGUARD.EXE

mRun: [PCDrProfiler] <no file>

StartupFolder: c:\docume~1\compaq~1.000\startm~1\programs\startup\logitech . product registration.lnk - c:\program files\common files\logishrd\ereg\setpoint\eReg.exe

uPolicies-Explorer: NoDriveTypeAutoRun = dword:145

mPolicies-Explorer: NoFileAssociate = dword:0

mPolicies-Explorer: NoResolveTrack = dword:1

mPolicies-System: NoDispSettingsPage = dword:0

mPolicies-Windows\System: Allow-LogonScript-NetbiosDisabled = dword:1

mPolicies-Explorer: NoDriveTypeAutoRun = dword:145

IE: &Google Search - c:\program files\google\GoogleToolbar1.dll/cmsearch.html

IE: &Translate English Word - c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html

IE: Backward Links - c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html

IE: Cached Snapshot of Page - c:\program files\google\GoogleToolbar1.dll/cmcache.html

IE: Similar Pages - c:\program files\google\GoogleToolbar1.dll/cmsimilar.html

IE: Translate Page into English - c:\program files\google\GoogleToolbar1.dll/cmtrans.html

IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBC} - c:\program files\java\jre7\bin\ssv.dll

IE: {E2D4D26B-0180-43a4-B05F-462D6D54C789} - c:\windows\pchealth\helpctr\vendors\cn=hewlett-packard,l=cupertino,s=ca,c=us\iebutton\support.htm

IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe

IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe

TCP: NameServer = 61.9.211.1 61.9.194.49

TCP: Interfaces\{166D96EE-1C60-48E3-8D1D-B9A9E0614213} : DHCPNameServer = 61.9.211.1 61.9.194.49

TCP: Interfaces\{D1ED57DB-54BC-4A28-882E-3073C1B6101A} : DHCPNameServer = 16.92.3.242 16.92.3.243 16.81.3.243 16.118.3.243

Notify: LBTWlgn - c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll

SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

SEH: SABShellExecuteHook Class - {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - c:\program files\superantispyware\SASSEH.DLL

mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "c:\program files\google\chrome\application\30.0.1599.101\installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome

.

============= SERVICES / DRIVERS ===============

.

R0 MpFilter;Microsoft Malware Protection Driver;c:\windows\system32\drivers\MpFilter.sys [2011-4-18 211560]

R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2011-7-23 12880]

R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2011-7-13 67664]

R2 !SASCORE;SAS Core Service;c:\program files\superantispyware\SASCore.exe [2013-5-24 119056]

R2 LBeepKE;Logitech Beep Suppression Driver;c:\windows\system32\drivers\LBeepKE.sys [2013-6-24 12808]

R2 McrdSvc;Media Center Extender Service;c:\windows\ehome\mcrdsvc.exe [2005-8-5 99328]

R2 thdudf;TOSHIBA UDF2.5 Reader File System Driver;c:\windows\system32\drivers\thdudf.sys [2012-9-27 66944]

R3 LEqdUsb;Logitech SetPoint Unifying KMDF USB Filter;c:\windows\system32\drivers\LEqdUsb.sys [2013-1-3 44296]

R3 LHidEqd;Logitech SetPoint Unifying KMDF HID Filter;c:\windows\system32\drivers\LHidEqd.sys [2013-1-3 12808]

R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [2013-11-2 40776]

S0 hswlygbl;hswlygbl;c:\windows\system32\drivers\ehsof.sys --> c:\windows\system32\drivers\ehsof.sys [?]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]

S2 MBAMScheduler;MBAMScheduler;c:\program files\malwarebytes' anti-malware\mbamscheduler.exe [2013-10-31 418376]

S2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2013-10-31 701512]

S3 Apowersoft_AudioDevice;Apowersoft_AudioDevice;c:\windows\system32\drivers\Apowersoft_AudioDevice.sys [2012-10-3 16640]

S3 DtvAudio;DtvAudio;c:\windows\system32\drivers\DtvAudio.sys [2012-2-12 10330]

S3 DtvVideo;DtvVideo;c:\windows\system32\drivers\DtvVideo.sys [2012-2-12 25600]

S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2013-10-31 22856]

S3 pgusbmme;usb-audio.de MME-Adapter;c:\windows\system32\drivers\pgusbmm3.sys --> c:\windows\system32\drivers\pgusbmm3.sys [?]

S3 pgusbwdm;usb-audio.de driver (commercial 2.8.45);c:\windows\system32\drivers\pgusbwdm.sys --> c:\windows\system32\drivers\pgusbwdm.sys [?]

S3 USBPNPA;USB PnP Sound Device Interface;c:\windows\system32\drivers\cm108.sys --> c:\windows\system32\drivers\CM108.sys [?]

S3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\drivers\wdcsam.sys [2008-5-6 11520]

S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]

.

=============== Created Last 30 ================

.

2013-11-02 07:24:00 7796464 ----a-w- c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{87262e1a-a55b-432c-b880-06a5fc942870}\mpengine.dll

2013-11-02 07:04:09 -------- d-----w- C:\FRST

2013-11-02 04:42:43 40776 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys

2013-11-02 03:41:28 -------- d-----w- c:\windows\ERUNT

2013-11-01 13:22:23 7796464 ------w- c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\backup\mpengine.dll

2013-10-31 12:59:54 26624 ----a-w- c:\windows\system32\TrueSight.sys

2013-10-31 05:27:36 -------- d-----w- C:\AdwCleaner

2013-10-31 04:22:10 22856 ----a-w- c:\windows\system32\drivers\mbam.sys

2013-10-31 04:22:10 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware

2013-10-30 01:14:01 -------- d-----w- c:\documents and settings\compaq_administrator.your-c6b5e4eabc.000\local settings\application data\VNT

2013-10-30 01:12:27 -------- d-----w- c:\program files\VNT

2013-10-28 13:01:35 28160 ----a-w- c:\windows\system32\DfSdkBt.exe

2013-10-28 13:01:30 -------- d-----w- c:\program files\Ashampoo

2013-10-18 00:42:42 -------- d-----w- c:\documents and settings\compaq_administrator.your-c6b5e4eabc.000\application data\PhotoScape

2013-10-18 00:38:33 -------- d-----w- c:\documents and settings\compaq_administrator.your-c6b5e4eabc.000\local settings\application data\cache

2013-10-18 00:38:29 -------- d-----w- c:\documents and settings\compaq_administrator.your-c6b5e4eabc.000\local settings\application data\Mobogenie

2013-10-18 00:37:53 -------- d-----w- c:\documents and settings\compaq_administrator.your-c6b5e4eabc.000\application data\0F0W0T1V0D0L0M

2013-10-18 00:36:43 -------- d-----w- c:\program files\Mobogenie

2013-10-17 03:24:08 94632 ----a-w- c:\windows\system32\WindowsAccessBridge.dll

.

==================== Find3M ====================

.

2013-10-09 18:33:00 71048 -c--a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

2013-10-09 18:33:00 692616 -c--a-w- c:\windows\system32\FlashPlayerApp.exe

2013-10-07 21:51:05 873384 -c--a-w- c:\windows\system32\npdeployJava1.dll

2013-10-07 21:51:00 796072 -c--a-w- c:\windows\system32\deployJava1.dll

2013-10-07 21:29:36 145408 ----a-w- c:\windows\system32\javacpl.cpl

2013-09-23 18:33:58 920064 ----a-w- c:\windows\system32\wininet.dll

2013-09-23 18:33:57 43520 ------w- c:\windows\system32\licmgr10.dll

2013-09-23 18:33:57 1469440 ------w- c:\windows\system32\inetcpl.cpl

2013-09-23 18:33:56 18944 ----a-w- c:\windows\system32\corpol.dll

2013-09-23 18:06:48 385024 ------w- c:\windows\system32\html.iec

2013-08-29 01:31:44 1878656 ----a-w- c:\windows\system32\win32k.sys

2013-08-09 01:56:45 386560 ----a-w- c:\windows\system32\themeui.dll

2013-08-09 00:55:08 144128 ----a-w- c:\windows\system32\drivers\usbport.sys

2013-08-09 00:55:07 32384 ----a-w- c:\windows\system32\drivers\usbccgp.sys

2013-08-09 00:55:06 5376 ----a-w- c:\windows\system32\drivers\usbd.sys

2013-08-05 13:30:32 1289728 ----a-w- c:\windows\system32\ole32.dll

2009-05-10 18:17:14 2562048 -c--a-w- c:\program files\tsMuxerGUI.exe

2008-05-21 02:18:24 131072 -c--a-w- c:\program files\TsRemux.exe

.

============= FINISH: 17:31:52.73 ===============

.

DDS (Ver_2012-11-20.01)

.

Microsoft Windows XP Professional

Boot Device: \Device\HarddiskVolume1

Install Date: 9/02/2012 11:37:03 PM

System Uptime: 2/11/2013 1:27:10 PM (4 hours ago)

.

Motherboard: ASUSTek Computer INC. | | NODUSM3

Processor: AMD Athlon 64 Processor 3500+ | Socket AM2 | 2204/200mhz

.

==== Disk Partitions =========================

.

C: is FIXED (NTFS) - 141 GiB total, 37.722 GiB free.

D: is FIXED (FAT32) - 8 GiB total, 0.767 GiB free.

E: is CDROM ()

F: is CDROM ()

H: is Removable

I: is Removable

J: is Removable

K: is Removable

.

==== Disabled Device Manager Items =============

.

Class GUID: {4D36E96C-E325-11CE-BFC1-08002BE10318}

Description: Multimedia Video Controller

Device ID: PCI\VEN_109E&DEV_036E&SUBSYS_00000000&REV_11\4&DC268A3&0&4080

Manufacturer:

Name: Multimedia Video Controller

PNP Device ID: PCI\VEN_109E&DEV_036E&SUBSYS_00000000&REV_11\4&DC268A3&0&4080

Service:

.

Class GUID: {4D36E96C-E325-11CE-BFC1-08002BE10318}

Description: Multimedia Controller

Device ID: PCI\VEN_109E&DEV_0878&SUBSYS_00000000&REV_11\4&DC268A3&0&4180

Manufacturer:

Name: Multimedia Controller

PNP Device ID: PCI\VEN_109E&DEV_0878&SUBSYS_00000000&REV_11\4&DC268A3&0&4180

Service:

.

==== System Restore Points ===================

.

RP1074: 4/08/2013 7:34:01 PM - Software Distribution Service 3.0

RP1075: 6/08/2013 9:27:56 AM - Software Distribution Service 3.0

RP1076: 7/08/2013 9:16:32 AM - Software Distribution Service 3.0

RP1077: 7/08/2013 10:16:52 AM - Software Distribution Service 3.0

RP1078: 8/08/2013 9:25:30 AM - Software Distribution Service 3.0

RP1079: 9/08/2013 9:15:11 AM - Software Distribution Service 3.0

RP1080: 10/08/2013 12:50:30 AM - Software Distribution Service 3.0

RP1081: 10/08/2013 9:15:33 AM - Software Distribution Service 3.0

RP1082: 11/08/2013 2:14:20 AM - Software Distribution Service 3.0

RP1083: 11/08/2013 9:15:23 AM - Software Distribution Service 3.0

RP1084: 11/08/2013 2:52:06 PM - Software Distribution Service 3.0

RP1085: 12/08/2013 9:14:16 AM - Software Distribution Service 3.0

RP1086: 13/08/2013 9:14:25 AM - Software Distribution Service 3.0

RP1087: 14/08/2013 9:15:21 AM - Software Distribution Service 3.0

RP1088: 15/08/2013 1:12:04 AM - Software Distribution Service 3.0

RP1089: 15/08/2013 3:40:34 PM - Software Distribution Service 3.0

RP1090: 16/08/2013 2:33:10 PM - Software Distribution Service 3.0

RP1091: 17/08/2013 5:58:32 PM - System Checkpoint

RP1092: 17/08/2013 7:58:52 PM - Software Distribution Service 3.0

RP1093: 18/08/2013 1:59:44 AM - Software Distribution Service 3.0

RP1094: 19/08/2013 2:40:21 AM - System Checkpoint

RP1095: 20/08/2013 3:39:17 AM - System Checkpoint

RP1096: 21/08/2013 3:52:19 AM - System Checkpoint

RP1097: 22/08/2013 4:39:17 AM - System Checkpoint

RP1098: 22/08/2013 11:47:01 AM - Software Distribution Service 3.0

RP1099: 23/08/2013 12:15:59 PM - Software Distribution Service 3.0

RP1100: 24/08/2013 11:50:54 AM - Software Distribution Service 3.0

RP1101: 25/08/2013 1:33:46 AM - Software Distribution Service 3.0

RP1102: 26/08/2013 2:43:02 AM - System Checkpoint

RP1103: 26/08/2013 11:50:32 AM - Software Distribution Service 3.0

RP1104: 26/08/2013 10:22:06 PM - Software Distribution Service 3.0

RP1105: 27/08/2013 12:36:19 AM - Software Distribution Service 3.0

RP1106: 27/08/2013 10:44:05 PM - Software Distribution Service 3.0

RP1107: 28/08/2013 11:56:50 AM - Software Distribution Service 3.0

RP1108: 29/08/2013 12:24:46 PM - System Checkpoint

RP1109: 29/08/2013 12:55:13 PM - Software Distribution Service 3.0

RP1110: 29/08/2013 9:03:13 PM - Software Distribution Service 3.0

RP1111: 30/08/2013 12:05:30 PM - Software Distribution Service 3.0

RP1112: 30/08/2013 12:49:30 PM - Software Distribution Service 3.0

RP1113: 31/08/2013 5:53:46 PM - System Checkpoint

RP1114: 1/09/2013 2:07:41 AM - Software Distribution Service 3.0

RP1115: 2/09/2013 4:28:10 AM - System Checkpoint

RP1116: 2/09/2013 10:01:52 PM - Software Distribution Service 3.0

RP1117: 3/09/2013 5:34:07 PM - Software Distribution Service 3.0

RP1118: 3/09/2013 10:01:04 PM - Software Distribution Service 3.0

RP1119: 4/09/2013 10:00:10 PM - Software Distribution Service 3.0

RP1120: 5/09/2013 10:13:58 PM - System Checkpoint

RP1121: 6/09/2013 5:15:28 PM - Software Distribution Service 3.0

RP1122: 6/09/2013 8:50:20 PM - Software Distribution Service 3.0

RP1123: 7/09/2013 9:40:21 PM - System Checkpoint

RP1124: 7/09/2013 11:46:22 PM - Software Distribution Service 3.0

RP1125: 8/09/2013 2:13:41 AM - Software Distribution Service 3.0

RP1126: 9/09/2013 2:49:58 AM - System Checkpoint

RP1127: 9/09/2013 3:45:48 PM - Software Distribution Service 3.0

RP1128: 10/09/2013 4:17:24 PM - System Checkpoint

RP1129: 10/09/2013 5:02:16 PM - Software Distribution Service 3.0

RP1130: 10/09/2013 11:49:18 PM - Software Distribution Service 3.0

RP1131: 12/09/2013 1:05:40 AM - Software Distribution Service 3.0

RP1132: 12/09/2013 11:51:59 AM - Software Distribution Service 3.0

RP1133: 13/09/2013 11:33:39 AM - Software Distribution Service 3.0

RP1134: 13/09/2013 10:16:20 PM - Software Distribution Service 3.0

RP1135: 14/09/2013 11:31:43 AM - Software Distribution Service 3.0

RP1136: 15/09/2013 1:42:33 AM - Software Distribution Service 3.0

RP1137: 15/09/2013 11:29:40 AM - Software Distribution Service 3.0

RP1138: 16/09/2013 10:40:39 AM - Software Distribution Service 3.0

RP1139: 16/09/2013 10:57:49 AM - Software Distribution Service 3.0

RP1140: 17/09/2013 10:59:25 AM - Software Distribution Service 3.0

RP1141: 18/09/2013 10:56:46 AM - Software Distribution Service 3.0

RP1142: 19/09/2013 10:56:54 AM - Software Distribution Service 3.0

RP1143: 20/09/2013 10:56:07 AM - Software Distribution Service 3.0

RP1144: 21/09/2013 10:56:05 AM - Software Distribution Service 3.0

RP1145: 21/09/2013 10:27:15 PM - Software Distribution Service 3.0

RP1146: 22/09/2013 2:12:36 AM - Software Distribution Service 3.0

RP1147: 22/09/2013 11:31:23 AM - Software Distribution Service 3.0

RP1148: 23/09/2013 12:01:34 PM - System Checkpoint

RP1149: 23/09/2013 1:08:40 PM - Software Distribution Service 3.0

RP1150: 24/09/2013 1:57:50 PM - System Checkpoint

RP1151: 24/09/2013 4:16:46 PM - Software Distribution Service 3.0

RP1152: 24/09/2013 7:33:47 PM - Software Distribution Service 3.0

RP1153: 25/09/2013 7:54:39 PM - System Checkpoint

RP1154: 25/09/2013 9:02:26 PM - Software Distribution Service 3.0

RP1155: 26/09/2013 9:56:40 PM - System Checkpoint

RP1156: 27/09/2013 8:02:42 AM - Software Distribution Service 3.0

RP1157: 28/09/2013 8:01:20 AM - Software Distribution Service 3.0

RP1158: 29/09/2013 12:15:24 AM - Software Distribution Service 3.0

RP1159: 29/09/2013 2:07:05 AM - Software Distribution Service 3.0

RP1160: 29/09/2013 7:58:08 AM - Software Distribution Service 3.0

RP1161: 30/09/2013 7:56:14 AM - Software Distribution Service 3.0

RP1162: 1/10/2013 7:55:55 AM - Software Distribution Service 3.0

RP1163: 1/10/2013 8:39:35 PM - Software Distribution Service 3.0

RP1164: 2/10/2013 4:38:27 PM - Software Distribution Service 3.0

RP1165: 3/10/2013 9:51:31 PM - Software Distribution Service 3.0

RP1166: 4/10/2013 1:06:28 AM - Software Distribution Service 3.0

RP1167: 4/10/2013 9:46:20 PM - Software Distribution Service 3.0

RP1168: 5/10/2013 9:45:51 PM - Software Distribution Service 3.0

RP1169: 6/10/2013 2:06:32 AM - Software Distribution Service 3.0

RP1170: 6/10/2013 12:12:38 PM - Software Distribution Service 3.0

RP1171: 7/10/2013 12:04:35 PM - Software Distribution Service 3.0

RP1172: 7/10/2013 10:31:27 PM - Software Distribution Service 3.0

RP1173: 8/10/2013 12:05:22 PM - Software Distribution Service 3.0

RP1174: 9/10/2013 12:14:13 PM - Software Distribution Service 3.0

RP1175: 9/10/2013 9:56:57 PM - Software Distribution Service 3.0

RP1176: 10/10/2013 9:15:38 PM - Software Distribution Service 3.0

RP1177: 11/10/2013 3:00:42 AM - Software Distribution Service 3.0

RP1178: 11/10/2013 9:57:30 PM - Software Distribution Service 3.0

RP1179: 12/10/2013 9:56:40 PM - Software Distribution Service 3.0

RP1180: 13/10/2013 1:45:25 AM - Software Distribution Service 3.0

RP1181: 14/10/2013 2:44:38 AM - System Checkpoint

RP1182: 14/10/2013 10:47:03 AM - Software Distribution Service 3.0

RP1183: 15/10/2013 3:00:42 AM - Software Distribution Service 3.0

RP1184: 15/10/2013 11:37:30 AM - Software Distribution Service 3.0

RP1185: 16/10/2013 11:37:20 AM - Software Distribution Service 3.0

RP1186: 16/10/2013 2:02:19 PM - Software Distribution Service 3.0

RP1187: 16/10/2013 2:09:27 PM - Software Distribution Service 3.0

RP1188: 17/10/2013 1:23:06 PM - Installed Java 7 Update 45

RP1189: 17/10/2013 2:13:58 PM - Software Distribution Service 3.0

RP1190: 18/10/2013 2:39:56 PM - System Checkpoint

RP1191: 18/10/2013 11:46:20 PM - Software Distribution Service 3.0

RP1192: 19/10/2013 8:50:16 PM - Software Distribution Service 3.0

RP1193: 19/10/2013 11:44:44 PM - Software Distribution Service 3.0

RP1194: 20/10/2013 2:10:31 AM - Software Distribution Service 3.0

RP1195: 20/10/2013 9:52:01 PM - Software Distribution Service 3.0

RP1196: 20/10/2013 11:03:34 PM - Software Distribution Service 3.0

RP1197: 21/10/2013 10:08:55 PM - Software Distribution Service 3.0

RP1198: 22/10/2013 11:30:26 PM - System Checkpoint

RP1199: 23/10/2013 8:53:22 PM - Software Distribution Service 3.0

RP1200: 24/10/2013 12:30:00 AM - Software Distribution Service 3.0

RP1201: 24/10/2013 8:55:25 PM - Software Distribution Service 3.0

RP1202: 25/10/2013 10:57:04 PM - Software Distribution Service 3.0

RP1203: 26/10/2013 10:57:16 PM - Software Distribution Service 3.0

RP1204: 27/10/2013 2:02:01 AM - Software Distribution Service 3.0

RP1205: 27/10/2013 11:26:22 PM - Software Distribution Service 3.0

RP1206: 28/10/2013 10:38:18 PM - Software Distribution Service 3.0

RP1207: 29/10/2013 6:30:03 PM - Software Distribution Service 3.0

RP1208: 30/10/2013 7:14:27 PM - System Checkpoint

RP1209: 31/10/2013 11:22:04 AM - Software Distribution Service 3.0

RP1210: 31/10/2013 11:14:05 PM - Software Distribution Service 3.0

RP1211: 1/11/2013 11:22:20 PM - Software Distribution Service 3.0

RP1212: 2/11/2013 5:23:53 PM - Software Distribution Service 3.0

.

==== Installed Programs ======================

.

7 Wonders of the Ancient World

Adobe Flash Player 11 ActiveX

Adobe Flash Player 11 Plugin

Adobe Reader X (10.1.8)

AiO_Scan_CDA

AiOSoftwareNPI

Apple Application Support

Apple Mobile Device Support

Apple Software Update

Ashampoo WinOptimizer 10 v.10.2.5

Ashampoo WinOptimizer Free v.1.0.0

ASIO4ALL

Avidemux 2.5 (32-bit)

AviSynth

Bejeweled 2 Deluxe

Bengal - Game of Gods

BeTrapped!

Bonjour

Bookworm Deluxe

Bricks of Atlantis

Bricks of Egypt

BufferChm

Cake Mania

CCleaner

Chuzzle

Compaq Connections (remove only)

CP_AtenaShokunin1Config

CP_CalendarTemplates1

cp_LightScribeConfig

cp_OnlineProjectsConfig

CP_Package_Basic1

CP_Package_Variety1

CP_Package_Variety2

CP_Package_Variety3

CP_Panorama1Config

cp_PosterPrintConfig

cp_UpdateProjectsConfig

CueTour

Customer Experience Enhancement

CustomerResearchQFolder

Data Fax SoftModem with SmartCP

dBpoweramp m4a Nero AAC Encoder

Destinations

DocProc

DocProcQFolder

DocumentViewer

DocumentViewerQFolder

Driver Checker v2.7.5

DVDFab 9.0.3.8 (29/04/2013)

Easy Internet Sign-up

Enhanced Multimedia Keyboard Solution

eReg

eSupportQFolder

Fax_CDA

foobar2000 v1.2.9

Foxtel GO

Free Video to iPhone Converter version 5.0.13.608

Frostwire Toolbar

FullDPAppQFolder

Gem Shop

GemMaster Mystic

Google Chrome

Google Toolbar for Internet Explorer

Google Update Helper

Hexic

High Definition Audio Driver Package - KB888111

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)

Hotfix for Windows Media Player 10 (KB903157)

Hotfix for Windows Media Player 10 (KB910393)

Hotfix for Windows XP (KB2633952)

Hotfix for Windows XP (KB2756822)

Hotfix for Windows XP (KB2779562)

Hotfix for Windows XP (KB932716-v2)

Hotfix for Windows XP (KB942288-v3)

Hotfix for Windows XP (KB952287)

Hotfix for Windows XP (KB954550-v5)

Hotfix for Windows XP (KB958655-v2)

Hotfix for Windows XP (KB961118)

Hotfix for Windows XP (KB981793)

HP Boot Optimizer

HP Customer Participation Program 7.0

HP Document Viewer 7.0

HP Imaging Device Functions 7.0

HP Photosmart Premier Software 6.5

HP Photosmart, Officejet and Deskjet 7.0.A

HP Software Update

HP Solution Center 7.0

HPPhotoSmartExpress

HPProductAssistant

HpSdpAppCoreApp

IncrediMail

IncrediMail 2.0

Insaniquarium Deluxe

InstantShareDevices

InstantShareDevicesMFC

iTunes

J2SE Runtime Environment 5.0 Update 6

Java 7 Update 45

Java Auto Updater

Jewel of Atlantis

Jewel Quest

Jigsaw 365

LightScribe 1.4.105.1

Logitech SetPoint 6.52

Macromedia Shockwave Player

Magic Ball 2

Magic Match

Mahjong Match

MakeMKV v1.7.9

Malwarebytes Anti-Malware version 1.75.0.1300

MarketResearch

MediaInfo 0.7.64

Microsoft .NET Framework 1.0 Hotfix (KB2572066)

Microsoft .NET Framework 1.0 Hotfix (KB2604042)

Microsoft .NET Framework 1.0 Hotfix (KB2656378)

Microsoft .NET Framework 1.0 Security Update (KB2698035)

Microsoft .NET Framework 1.0 Security Update (KB2742607)

Microsoft .NET Framework 1.0 Security Update (KB2833951)

Microsoft .NET Framework 2.0 Service Pack 2

Microsoft .NET Framework 3.0 Service Pack 2

Microsoft .NET Framework 3.5 SP1

Microsoft .NET Framework 4 Client Profile

Microsoft .NET Framework 4 Extended

Microsoft Application Error Reporting

Microsoft Away Mode

Microsoft Choice Guard

Microsoft Corporation

Microsoft Kernel-Mode Driver Framework Feature Pack 1.9

Microsoft Money

Microsoft Security Client

Microsoft Security Essentials

Microsoft Silverlight

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319

Microsoft Works

Mosiac - Tomb of Mystery

Mozaki Blocks

Mp3tag v2.57

MSVCRT

MSXML 4.0 SP2 (KB954430)

MSXML 4.0 SP2 (KB973688)

MSXML 4.0 SP2 Parser and SDK

Mystery Case Files - Huntsville

NewCopy_CDA

NVIDIA Control Panel 301.42

NVIDIA Display Control Panel

NVIDIA Drivers

NVIDIA Install Application

NVIDIA nView 136.27

NVIDIA nView Desktop Manager

NVIDIA Update 1.8.15

NVIDIA Update Components

Ocean Express

OCR Software by I.R.I.S 7.0

OptionalContentQFolder

Otto

PanoStandAlone

Pat Sajak’s Lucky Letters

PC-Doctor 5 for Windows

PhotoGallery

Photoscape Packages

Poker Superstars 2

ProductContextNPI

Python 2.2 pywin32 extensions (build 203)

Python 2.2.3

QuickTime

Rainbow Web

RandMap

Readme

Realtek High Definition Audio Driver

Ricochet Lost Worlds

Scan

ScannerCopy

Security Update for CAPICOM (KB931906)

Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111)

Security Update for Microsoft .NET Framework 3.5 SP1 (KB2736416)

Security Update for Microsoft .NET Framework 3.5 SP1 (KB2840629)

Security Update for Microsoft .NET Framework 3.5 SP1 (KB2861697)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)

Security Update for Microsoft .NET Framework 4 Extended (KB2487367)

Security Update for Microsoft .NET Framework 4 Extended (KB2656351)

Security Update for Microsoft Windows (KB2564958)

Security Update for Step By Step Interactive Training (KB923723)

Security Update for Windows Internet Explorer 8 (KB2510531)

Security Update for Windows Internet Explorer 8 (KB2544521)

Security Update for Windows Internet Explorer 8 (KB2618444)

Security Update for Windows Internet Explorer 8 (KB2647516)

Security Update for Windows Internet Explorer 8 (KB2675157)

Security Update for Windows Internet Explorer 8 (KB2699988)

Security Update for Windows Internet Explorer 8 (KB2722913)

Security Update for Windows Internet Explorer 8 (KB2744842)

Security Update for Windows Internet Explorer 8 (KB2761465)

Security Update for Windows Internet Explorer 8 (KB2792100)

Security Update for Windows Internet Explorer 8 (KB2797052)

Security Update for Windows Internet Explorer 8 (KB2799329)

Security Update for Windows Internet Explorer 8 (KB2809289)

Security Update for Windows Internet Explorer 8 (KB2817183)

Security Update for Windows Internet Explorer 8 (KB2829530)

Security Update for Windows Internet Explorer 8 (KB2838727)

Security Update for Windows Internet Explorer 8 (KB2846071)

Security Update for Windows Internet Explorer 8 (KB2847204)

Security Update for Windows Internet Explorer 8 (KB2862772)

Security Update for Windows Internet Explorer 8 (KB2870699)

Security Update for Windows Internet Explorer 8 (KB2879017)

Security Update for Windows Internet Explorer 8 (KB982381)

Security Update for Windows Media Player (KB2378111)

Security Update for Windows Media Player (KB952069)

Security Update for Windows Media Player (KB954155)

Security Update for Windows Media Player (KB973540)

Security Update for Windows Media Player (KB975558)

Security Update for Windows Media Player (KB978695)

Security Update for Windows Media Player 10 (KB911565)

Security Update for Windows Media Player 6.4 (KB925398)

Security Update for Windows XP (KB2079403)

Security Update for Windows XP (KB2115168)

Security Update for Windows XP (KB2124261)

Security Update for Windows XP (KB2229593)

Security Update for Windows XP (KB2290570)

Security Update for Windows XP (KB2296011)

Security Update for Windows XP (KB2347290)

Security Update for Windows XP (KB2360937)

Security Update for Windows XP (KB2387149)

Security Update for Windows XP (KB2393802)

Security Update for Windows XP (KB2412687)

Security Update for Windows XP (KB2419632)

Security Update for Windows XP (KB2423089)

Security Update for Windows XP (KB2440591)

Security Update for Windows XP (KB2443105)

Security Update for Windows XP (KB2476490)

Security Update for Windows XP (KB2478960)

Security Update for Windows XP (KB2478971)

Security Update for Windows XP (KB2481109)

Security Update for Windows XP (KB2483185)

Security Update for Windows XP (KB2485663)

Security Update for Windows XP (KB2491683)

Security Update for Windows XP (KB2506212)

Security Update for Windows XP (KB2507618)

Security Update for Windows XP (KB2507938)

Security Update for Windows XP (KB2508429)

Security Update for Windows XP (KB2509553)

Security Update for Windows XP (KB2510581)

Security Update for Windows XP (KB2535512)

Security Update for Windows XP (KB2536276-v2)

Security Update for Windows XP (KB2544521)

Security Update for Windows XP (KB2544893-v2)

Security Update for Windows XP (KB2566454)

Security Update for Windows XP (KB2570222)

Security Update for Windows XP (KB2570947)

Security Update for Windows XP (KB2584146)

Security Update for Windows XP (KB2585542)

Security Update for Windows XP (KB2592799)

Security Update for Windows XP (KB2598479)

Security Update for Windows XP (KB2603381)

Security Update for Windows XP (KB2618444)

Security Update for Windows XP (KB2618451)

Security Update for Windows XP (KB2620712)

Security Update for Windows XP (KB2621440)

Security Update for Windows XP (KB2624667)

Security Update for Windows XP (KB2631813)

Security Update for Windows XP (KB2633171)

Security Update for Windows XP (KB2639417)

Security Update for Windows XP (KB2641653)

Security Update for Windows XP (KB2646524)

Security Update for Windows XP (KB2647518)

Security Update for Windows XP (KB2653956)

Security Update for Windows XP (KB2655992)

Security Update for Windows XP (KB2659262)

Security Update for Windows XP (KB2660465)

Security Update for Windows XP (KB2661637)

Security Update for Windows XP (KB2676562)

Security Update for Windows XP (KB2685939)

Security Update for Windows XP (KB2686509)

Security Update for Windows XP (KB2691442)

Security Update for Windows XP (KB2695962)

Security Update for Windows XP (KB2698365)

Security Update for Windows XP (KB2705219)

Security Update for Windows XP (KB2707511)

Security Update for Windows XP (KB2709162)

Security Update for Windows XP (KB2712808)

Security Update for Windows XP (KB2718523)

Security Update for Windows XP (KB2719985)

Security Update for Windows XP (KB2723135)

Security Update for Windows XP (KB2724197)

Security Update for Windows XP (KB2727528)

Security Update for Windows XP (KB2731847)

Security Update for Windows XP (KB2753842-v2)

Security Update for Windows XP (KB2753842)

Security Update for Windows XP (KB2757638)

Security Update for Windows XP (KB2758857)

Security Update for Windows XP (KB2761226)

Security Update for Windows XP (KB2770660)

Security Update for Windows XP (KB2778344)

Security Update for Windows XP (KB2779030)

Security Update for Windows XP (KB2780091)

Security Update for Windows XP (KB2799494)

Security Update for Windows XP (KB2802968)

Security Update for Windows XP (KB2807986)

Security Update for Windows XP (KB2808735)

Security Update for Windows XP (KB2813170)

Security Update for Windows XP (KB2813345)

Security Update for Windows XP (KB2820197)

Security Update for Windows XP (KB2820917)

Security Update for Windows XP (KB2829361)

Security Update for Windows XP (KB2834886)

Security Update for Windows XP (KB2839229)

Security Update for Windows XP (KB2845187)

Security Update for Windows XP (KB2847311)

Security Update for Windows XP (KB2849470)

Security Update for Windows XP (KB2850851)

Security Update for Windows XP (KB2850869)

Security Update for Windows XP (KB2859537)

Security Update for Windows XP (KB2862330)

Security Update for Windows XP (KB2862335)

Security Update for Windows XP (KB2864063)

Security Update for Windows XP (KB2868038)

Security Update for Windows XP (KB2876217)

Security Update for Windows XP (KB2876315)

Security Update for Windows XP (KB2883150)

Security Update for Windows XP (KB923561)

Security Update for Windows XP (KB941569)

Security Update for Windows XP (KB946648)

Security Update for Windows XP (KB950762)

Security Update for Windows XP (KB950974)

Security Update for Windows XP (KB951376-v2)

Security Update for Windows XP (KB951748)

Security Update for Windows XP (KB952004)

Security Update for Windows XP (KB952954)

Security Update for Windows XP (KB953155)

Security Update for Windows XP (KB955069)

Security Update for Windows XP (KB956572)

Security Update for Windows XP (KB956744)

Security Update for Windows XP (KB956802)

Security Update for Windows XP (KB956803)

Security Update for Windows XP (KB956844)

Security Update for Windows XP (KB958644)

Security Update for Windows XP (KB958869)

Security Update for Windows XP (KB959426)

Security Update for Windows XP (KB960225)

Security Update for Windows XP (KB960803)

Security Update for Windows XP (KB960859)

Security Update for Windows XP (KB961501)

Security Update for Windows XP (KB969059)

Security Update for Windows XP (KB970238)

Security Update for Windows XP (KB970430)

Security Update for Windows XP (KB970483)

Security Update for Windows XP (KB971468)

Security Update for Windows XP (KB971657)

Security Update for Windows XP (KB972270)

Security Update for Windows XP (KB973507)

Security Update for Windows XP (KB973869)

Security Update for Windows XP (KB973904)

Security Update for Windows XP (KB974112)

Security Update for Windows XP (KB974318)

Security Update for Windows XP (KB974392)

Security Update for Windows XP (KB974571)

Security Update for Windows XP (KB975025)

Security Update for Windows XP (KB975467)

Security Update for Windows XP (KB975560)

Security Update for Windows XP (KB975561)

Security Update for Windows XP (KB975562)

Security Update for Windows XP (KB975713)

Security Update for Windows XP (KB977816)

Security Update for Windows XP (KB977914)

Security Update for Windows XP (KB978037)

Security Update for Windows XP (KB978338)

Security Update for Windows XP (KB978542)

Security Update for Windows XP (KB978601)

Security Update for Windows XP (KB978706)

Security Update for Windows XP (KB979309)

Security Update for Windows XP (KB979482)

Security Update for Windows XP (KB979559)

Security Update for Windows XP (KB979683)

Security Update for Windows XP (KB979687)

Security Update for Windows XP (KB980195)

Security Update for Windows XP (KB980218)

Security Update for Windows XP (KB980232)

Security Update for Windows XP (KB981322)

Security Update for Windows XP (KB981997)

Security Update for Windows XP (KB982132)

Security Update for Windows XP (KB982381)

Security Update for Windows XP (KB982665)

Segoe UI

SkinsHP1

SlideShow

SlideShowMusic

Slingo

SolutionCenter

Sonic Express Labeler

Sonic MyDVD Plus

Sonic RecordNow Audio

Sonic RecordNow Copy

Sonic RecordNow Data

Sonic Update Manager

Sonic_PrimoSDK

Status

SUPERAntiSpyware

Tiks Texas Hold em

Toolbox

TrayApp

TwinhanDTV

Universal Media Server

Unload

Update for Microsoft .NET Framework 3.5 SP1 (KB963707)

Update for Windows Internet Explorer 8 (KB2598845)

Update for Windows Media Player 10 (KB913800)

Update for Windows Media Player 10 (KB926251)

Update for Windows XP (KB2345886)

Update for Windows XP (KB2467659)

Update for Windows XP (KB2641690)

Update for Windows XP (KB2661254-v2)

Update for Windows XP (KB2718704)

Update for Windows XP (KB2736233)

Update for Windows XP (KB2749655)

Update for Windows XP (KB2863058)

Update for Windows XP (KB951978)

Update for Windows XP (KB953356)

Update for Windows XP (KB955759)

Update for Windows XP (KB961503)

Update for Windows XP (KB967715)

Update for Windows XP (KB968389)

Update for Windows XP (KB971029)

Update for Windows XP (KB971737)

Update for Windows XP (KB973687)

Update for Windows XP (KB973815)

Update Rollup 2 for Windows XP Media Center Edition 2005

UrlScan 2.5

VC80CRTRedist - 8.0.50727.6195

VLC media player 2.0.8

WebFldrs XP

WebReg

Windows Driver Package - Advanced Micro Devices, Inc. (USB28xxBGA) Media (08/31/2007 5.7.0831.0)

Windows Driver Package - eMPIA Technology Inc, (emAudio) MEDIA (08/31/2007 5.7.0831.0)

Windows Genuine Advantage Validation Tool (KB892130)

Windows Internet Explorer 8

Windows Live Call

Windows Live Communications Platform

Windows Live Essentials

Windows Live Messenger

Windows Live Upload Tool

Windows Media Format 11 runtime

Windows XP Media Center Edition 2005 KB2502898

Windows XP Media Center Edition 2005 KB2619340

Windows XP Media Center Edition 2005 KB2628259

Windows XP Media Center Edition 2005 KB912067

Windows XP Media Center Edition 2005 KB973768

Windows XP Service Pack 3

WinSCP 5.0.8 RC

Wonderland - Secret Worlds

XMedia Recode version 3.1.5.5

Zuma Deluxe

.

==== Event Viewer Messages From Past Week ========

.

28/10/2013 2:28:43 PM, error: SideBySide [59] - Resolve Partial Assembly failed for Microsoft.VC80.MFCLOC. Reference error message: The referenced assembly is not installed on your system. .

28/10/2013 2:28:43 PM, error: SideBySide [59] - Generate Activation Context failed for C:\Program Files\IncrediMail\Bin\MFC80U.DLL. Reference error message: The operation completed successfully. .

28/10/2013 2:28:43 PM, error: SideBySide [32] - Dependent Assembly Microsoft.VC80.MFCLOC could not be found and Last Error was The referenced assembly is not installed on your system.

.

==== End Of File ===========================

Maniac · November 2, 2013

Hello MarshallE and :welcome: ! My name is Borislav and I will be glad to help you solve your malware problem.

Please note:

If you are a paying customer, you have the privilege to contact the help desk at Consumer Support. If you choose this option to get help, please let me know.
I recommend you to keep the instructions I will be giving you so that they are available to you at any time. You can save them in a text file or print them.
Make sure you read all of the instructions and fixes thoroughly before continuing with them.
Follow my instructions strictly and don’t hesitate to stop and ask me if you have any questions.
Post your log files, don't attach them. Every log file should be copy/pasted in your next reply.
Do not perform any kind of scanning and fixing without my instructions. If you want to proceed on your own, please let me know.

Step 1

Please uninstall this application: Frostwire Toolbar

Step 2

Please follow the instructions here:

https://forums.malwarebytes.org/index.php?showtopic=10138&page=1entry181018

Next here:

https://forums.malwarebytes.org/index.php?showtopic=10138&page=1entry417944

Step 3

Please download Junkware Removal Tool to your desktop.

Shut down your protection software now to avoid potential conflicts.
Run the tool by double-clicking it. If you are using Windows Vista or Seven, right-mouse click it and select Run as Administrator.
The tool will open and start scanning your system.
Please be patient as this can take a while to complete depending on your system's specifications.
On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
Post the contents of JRT.txt into your next message.
Step 4
Please download AdwCleaner by Xplode onto your desktop.
- Close all open programs and internet browsers.
- Double click on AdwCleaner.exe to run the tool.
- Click on Clean.
- Confirm each time with Ok.
- Your computer will be rebooted automatically. A text file will open after the restart.
- Please post the content of that logfile with your next answer.
- You can find the logfile at C:\AdwCleaner[s1].txt as well.
Step 5
- Launch Malwarebytes' Anti-Malware
- Go to Update tab and select Check for Updates. If an update is found, it will download and install the latest version.
- Go to Scanner tab and select Perform Quick Scan, then click Scan.
- The scan may take some time to finish,so please be patient.
- When the scan is complete, click OK, then Show Results to view the results.
- Make sure that everything is checked, and click Remove Selected.
- When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Extra Note)
- The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
- Copy&Paste the entire report in your next reply.
Extra Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process, if asked to restart the computer,please do so immediately.
In your next reply, post the following log files:
- Junkware Removal Tool log
- AdwCleaner log
- Malwarebytes' Anti-Malware log

MarshallE · November 3, 2013

Hi Borislav

Thank you for your help.

I have uninstalled Frostwire toolbar.

I followed your instructions and set exclusions for MCE and did the error checking and defrag.

I did run a scan of AdwCleaner prior to asking for help - Sorry (I have copy and pasted the first scan log [R0] and the [s1].txt you requested)

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.0.7 (10.15.2013:3)

OS: Microsoft Windows XP x86

Ran by Compaq_Administrator on Sun 03/11/2013 at 22:00:21.04

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Registry Values

~~~ Registry Keys

~~~ Files

~~~ Folders

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on Sun 03/11/2013 at 22:04:20.18

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

# AdwCleaner v3.010 - Report created 31/10/2013 at 15:27:40

# Updated 20/10/2013 by Xplode

# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)

# Username : Compaq_Administrator - YOUR-C6B5E4EABC

# Running from : C:\Documents and Settings\Compaq_Administrator.YOUR-C6B5E4EABC.000\My Documents\Downloads\AdwCleaner.exe

# Option : Scan

***** [ Services ] *****

Service Found : APNMCP

***** [ Files / Folders ] *****

Folder Found C:\DOCUME~1\COMPAQ~1.000\LOCALS~1\Temp\apn

Folder Found C:\Documents and Settings\All Users\Application Data\apn

Folder Found C:\Documents and Settings\All Users\Application Data\AskPartnerNetwork

Folder Found C:\Documents and Settings\All Users\Application Data\Babylon

Folder Found C:\Documents and Settings\All Users\Application Data\BetterSoft

Folder Found C:\Documents and Settings\All Users\Application Data\boost_interprocess

Folder Found C:\Documents and Settings\All Users\Application Data\ClickIT

Folder Found C:\Documents and Settings\All Users\Application Data\DriverCure

Folder Found C:\Documents and Settings\All Users\Application Data\SaveAs

Folder Found C:\Documents and Settings\All Users\Application Data\SoftSafe

Folder Found C:\Documents and Settings\All Users\Application Data\Trymedia

Folder Found C:\Documents and Settings\All Users\Start Menu\Programs\Filesubmit

Folder Found C:\Program Files\AskPartnerNetwork

Folder Found C:\Program Files\Conduit

***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Found : HKCU\Software\APN PIP

Key Found : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}

Key Found : HKCU\Software\AskPartnerNetwork

Key Found : HKCU\Software\Conduit

Key Found : HKCU\Software\IM

Key Found : HKCU\Software\ImInstaller

Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}

Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}

Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}

Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47C0-9269-B4C6572FD61A}

Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{24AE5778-7C0A-40D2-AD87-A16F5B9E3125}

Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1631550F-191D-4826-B069-D9439253D926}

Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{24AE5778-7C0A-40D2-AD87-A16F5B9E3125}

Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BF0118D4-63FF-4138-9327-F3028FB1A578}

Key Found : HKCU\Software\smartbar

Key Found : HKCU\Software\Softonic

Key Found : HKCU\Software\YahooPartnerToolbar

Key Found : HKLM\Software\AskPartnerNetwork

Key Found : HKLM\Software\Babylon

Key Found : HKLM\SOFTWARE\Classes\AppID\{18B9B16E-716F-43DF-A6AD-512C7D2EB983}

Key Found : HKLM\SOFTWARE\Classes\AppID\PropertySync.EXE

Key Found : HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{BF0118D4-63FF-4138-9327-F3028FB1A578}

Key Found : HKLM\SOFTWARE\Classes\Interface\{C815E3DA-0823-49B0-9270-D1771D58B317}

Key Found : HKLM\SOFTWARE\Classes\Prod.cap

Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT2481032

Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT2724386

Key Found : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}

Key Found : HKLM\Software\Conduit

Key Found : HKLM\Software\DataMngr

Key Found : HKLM\Software\ImInstaller

Key Found : HKLM\Software\InstalledThirdPartyPrograms

Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}

Key Found : HKLM\Software\PIP

Key Found : HKLM\Software\SP Global

Key Found : HKLM\Software\SProtector

Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnTbMon]

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.6001.18702

-\\ Mozilla Firefox v

-\\ Google Chrome v30.0.1599.101

*************************

AdwCleaner[R0].txt - [4608 octets] - [31/10/2013 15:27:40]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [4668 octets] ##########

# AdwCleaner v3.010 - Report created 02/11/2013 at 13:26:18

# Updated 20/10/2013 by Xplode

# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)

# Username : Compaq_Administrator - YOUR-C6B5E4EABC

# Running from : C:\Documents and Settings\Compaq_Administrator.YOUR-C6B5E4EABC.000\My Documents\Downloads\AdwCleaner (1).exe

# Option : Clean

***** [ Services ] *****

***** [ Files / Folders ] *****

***** [ Shortcuts ] *****

***** [ Registry ] *****

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.6001.18702

-\\ Mozilla Firefox v

-\\ Google Chrome v30.0.1599.101

*************************

AdwCleaner[R0].txt - [4748 octets] - [31/10/2013 15:27:40]

AdwCleaner[R1].txt - [907 octets] - [02/11/2013 13:25:33]

AdwCleaner[s0].txt - [4562 octets] - [31/10/2013 15:28:29]

AdwCleaner[s1].txt - [829 octets] - [02/11/2013 13:26:18]

########## EOF - C:\AdwCleaner\AdwCleaner[s1].txt - [888 octets] ##########

Malwarebytes Anti-Malware 1.75.0.1300

www.malwarebytes.org

Database version: v2013.11.03.01

Windows XP Service Pack 3 x86 NTFS

Internet Explorer 8.0.6001.18702

Compaq_Administrator :: YOUR-C6B5E4EABC [administrator]

3/11/2013 10:16:53 PM

mbam-log-2013-11-03 (22-16-53).txt

Scan type: Quick scan

Scan options disabled: P2P

Objects scanned: 262019

Time elapsed: 36 minute(s), 31 second(s)

Memory Processes Detected: 0

(No malicious items detected)

Memory Modules Detected: 0

(No malicious items detected)

Registry Keys Detected: 0

(No malicious items detected)

Registry Values Detected: 0

(No malicious items detected)

Registry Data Items Detected: 0

(No malicious items detected)

Folders Detected: 0

(No malicious items detected)

Files Detected: 0

(No malicious items detected)

(end)

MarshallE · November 3, 2013

sorry here is [s0].txt from AdwCleaner incase yo require that

# AdwCleaner v3.010 - Report created 31/10/2013 at 15:28:29

# Updated 20/10/2013 by Xplode

# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)

# Username : Compaq_Administrator - YOUR-C6B5E4EABC

# Running from : C:\Documents and Settings\Compaq_Administrator.YOUR-C6B5E4EABC.000\My Documents\Downloads\AdwCleaner.exe

# Option : Clean

***** [ Services ] *****

Service Deleted : APNMCP

***** [ Files / Folders ] *****

Folder Deleted : C:\Documents and Settings\All Users\Application Data\apn

Folder Deleted : C:\Documents and Settings\All Users\Application Data\AskPartnerNetwork

Folder Deleted : C:\Documents and Settings\All Users\Application Data\Babylon

Folder Deleted : C:\Documents and Settings\All Users\Application Data\BetterSoft

Folder Deleted : C:\Documents and Settings\All Users\Application Data\boost_interprocess

Folder Deleted : C:\Documents and Settings\All Users\Application Data\ClickIT

Folder Deleted : C:\Documents and Settings\All Users\Application Data\DriverCure

Folder Deleted : C:\Documents and Settings\All Users\Application Data\SaveAs

Folder Deleted : C:\Documents and Settings\All Users\Application Data\SoftSafe

Folder Deleted : C:\Documents and Settings\All Users\Application Data\Trymedia

Folder Deleted : C:\Documents and Settings\All Users\Start Menu\Programs\Filesubmit

Folder Deleted : C:\Program Files\AskPartnerNetwork

Folder Deleted : C:\Program Files\Conduit

Folder Deleted : C:\DOCUME~1\COMPAQ~1.000\LOCALS~1\Temp\apn

***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\AppID\PropertySync.EXE

Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap

Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnTbMon]

Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2481032

Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2724386

Key Deleted : HKLM\SOFTWARE\Classes\AppID\{18B9B16E-716F-43DF-A6AD-512C7D2EB983}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{BF0118D4-63FF-4138-9327-F3028FB1A578}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C815E3DA-0823-49B0-9270-D1771D58B317}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1631550F-191D-4826-B069-D9439253D926}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{24AE5778-7C0A-40D2-AD87-A16F5B9E3125}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BF0118D4-63FF-4138-9327-F3028FB1A578}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{24AE5778-7C0A-40D2-AD87-A16F5B9E3125}

Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}

Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}

Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}

Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47C0-9269-B4C6572FD61A}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}

Key Deleted : HKCU\Software\APN PIP

Key Deleted : HKCU\Software\AskPartnerNetwork

Key Deleted : HKCU\Software\Conduit

Key Deleted : HKCU\Software\IM

Key Deleted : HKCU\Software\ImInstaller

Key Deleted : HKCU\Software\smartbar

Key Deleted : HKCU\Software\Softonic

Key Deleted : HKCU\Software\YahooPartnerToolbar

Key Deleted : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}

Key Deleted : HKLM\Software\AskPartnerNetwork

Key Deleted : HKLM\Software\Babylon

Key Deleted : HKLM\Software\Conduit

Key Deleted : HKLM\Software\DataMngr

Key Deleted : HKLM\Software\ImInstaller

Key Deleted : HKLM\Software\InstalledThirdPartyPrograms

Key Deleted : HKLM\Software\PIP

Key Deleted : HKLM\Software\SP Global

Key Deleted : HKLM\Software\SProtector

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.6001.18702

-\\ Mozilla Firefox v

-\\ Google Chrome v30.0.1599.101

*************************

AdwCleaner[R0].txt - [4748 octets] - [31/10/2013 15:27:40]

AdwCleaner[s0].txt - [4422 octets] - [31/10/2013 15:28:29]

########## EOF - C:\AdwCleaner\AdwCleaner[s0].txt - [4482 octets] ##########

Maniac · November 4, 2013

How are things now?

MarshallE · November 5, 2013

Speed has improved slightly when opening and closing applications/programs but I am still experiencing slow loading/freezing web pages and the computer beeps and show diamonds when scrolling.

Maniac · November 5, 2013

Which browser exactly is the problem or you have experience it with all of them?

MarshallE · November 6, 2013

Chrome. I have tried uninstalling/reinstalling but its still the same. The others seem to freeze/ load slow as well.

I ran spybot s&d rootkit scan and it found " zero char in key name " with red flags. Is this something I should be deleting?

Thanks for the help

Maniac · November 6, 2013

Please follow the instructions here and then restart your computer.

https://support.google.com/chrome/answer/3296214

About your SpyBot detection. Please give me more details about it.

MarshallE · November 9, 2013

Thanks. I had done that already - it made no difference. I tried again re your instructions and still it made no difference. I have now uninstalled chrome and are using firefox.

I cannot seem to get any more details about the "zero char in key name" in the registery - when I click on it there's no info. Here is what it reads >

RegyKey:"Zero char in key name","HKEY_LOCAL_MACHINE","\SYSTEM\CurrentControlSet\Control\DeviceClasses\","{D7346738-AD2C-150C-B0DE-BD71A139D65F}<0x00>"
RegyKey:"Zero char in key name","HKEY_LOCAL_MACHINE","\SYSTEM\ControlSet002\Control\DeviceClasses\","{D7346738-AD2C-150C-B0DE-BD71A139D65F}<0x00>"
RegyKey:"Zero char in key name","HKEY_LOCAL_MACHINE","\SYSTEM\ControlSet001\Control\DeviceClasses\","{D7346738-AD2C-150C-B0DE-BD71A139D65F}<0x00>"

Is thee a log I can post for you?

Also Malware Bytes still seems to be hanging on a FULL scan. I tried running it last night and went to bed. When I woke the duration was 8.5 hours and no files scanned. When I tried to close it it said not responding. A quick scan seems to work though.

Maniac · November 10, 2013

Download OTL to your Desktop

Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
Please tick the Scan All users. Next, click the Quick Scan button. The scan wont take long.
- When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
- Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time and post them in your topic.

MarshallE · November 11, 2013

It wont let me open it. Just crashes...

"OTL has encounted a problem and needs to close. We are sorry for the inconvenience."

I tried in safe mode and same result.

Maniac · November 11, 2013

Note: Please do not run this tool without special supervision and instructions of someone authorized to do so. Otherwise, you could end up with serious problems. For more details, read this article: ComboFix usage, Questions, Help? - Look here

Please visit this webpage and read the ComboFix User's Guide:

Once you've read the article and are ready to use the program you can download it directly from the link below.
Important! - Please make sure you save combofix to your desktop and do not run it from your browser
Direct download link for: ComboFix.exe
Please make sure you disable your security applications before running ComboFix.
Once Combofix has completed it will produce and open a log file. Please be patient as it can take some time to load.
Please copy/paste the contents or attach that log file to your next reply.
If needed the file can be located here: C:\combofix.txt
NOTE: If you receive the message "illegal operation has been attempted on a registry key that has been marked for deletion", just reboot the computer.

MarshallE · November 11, 2013

ComboFix 13-11-10.02 - Compaq_Administrator 11/11/2013 21:58:20.2.1 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1982.1380 [GMT 10:00]
Running from: c:\documents and settings\Compaq_Administrator.YOUR-C6B5E4EABC.000\My Documents\Downloads\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}
.
.
(((((((((((((((((((((((((   Files Created from 2013-10-11 to 2013-11-11 )))))))))))))))))))))))))))))))
.
.
2013-11-11 11:46 . 2013-10-14 06:39   7796464   ----a-w-   c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{AE57321E-2D92-4B03-A0E1-6E0F5052BE2F}\mpengine.dll
2013-11-11 02:13 . 2013-11-11 11:41   --------   d-----w-   c:\documents and settings\All Users\Application Data\Malwarebytes' Anti-Malware (portable)
2013-11-11 02:13 . 2013-11-11 02:13   105176   ----a-w-   c:\windows\system32\drivers\MBAMSwissArmy.sys
2013-11-11 02:11 . 2013-11-11 02:11   47064   ----a-w-   c:\windows\system32\drivers\mbamchameleon.sys
2013-11-10 00:59 . 2013-10-14 06:39   7796464   ----a-w-   c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2013-11-03 04:56 . 2013-04-04 04:50   22856   ----a-w-   c:\windows\system32\drivers\mbam.sys
2013-11-03 04:56 . 2013-11-03 04:56   --------   d-----w-   c:\program files\Malwarebytes' Anti-Malware
2013-11-02 11:11 . 2013-09-20 00:49   18968   ----a-w-   c:\windows\system32\sdnclean.exe
2013-11-02 11:11 . 2013-11-05 14:40   --------   d-----w-   c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2013-11-02 11:10 . 2013-11-02 11:11   --------   d-----w-   c:\program files\Spybot - Search & Destroy 2
2013-11-02 07:04 . 2013-11-02 07:04   --------   d-----w-   C:\FRST
2013-11-02 03:41 . 2013-11-02 03:41   --------   d-----w-   c:\windows\ERUNT
2013-10-31 05:27 . 2013-11-06 04:16   --------   d-----w-   C:\AdwCleaner
2013-10-28 13:01 . 2013-10-28 13:07   --------   d-----w-   c:\program files\Ashampoo
2013-10-18 00:42 . 2013-10-18 01:10   --------   d-----w-   c:\documents and settings\Compaq_Administrator.YOUR-C6B5E4EABC.000\Application Data\PhotoScape
2013-10-18 00:38 . 2013-10-18 00:38   --------   d-----w-   c:\documents and settings\Compaq_Administrator.YOUR-C6B5E4EABC.000\Local Settings\Application Data\cache
2013-10-18 00:38 . 2013-10-18 00:53   --------   d-----w-   c:\documents and settings\Compaq_Administrator.YOUR-C6B5E4EABC.000\Local Settings\Application Data\Mobogenie
2013-10-18 00:37 . 2013-10-18 00:37   --------   d-----w-   c:\documents and settings\Compaq_Administrator.YOUR-C6B5E4EABC.000\Application Data\0F0W0T1V0D0L0M
2013-10-18 00:36 . 2013-10-18 01:08   --------   d-----w-   c:\program files\Mobogenie
2013-10-17 03:24 . 2013-10-07 21:50   94632   ----a-w-   c:\windows\system32\WindowsAccessBridge.dll
.
.
.
((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-10-09 18:33 . 2012-06-21 12:13   692616   -c--a-w-   c:\windows\system32\FlashPlayerApp.exe
2013-10-09 18:33 . 2012-02-09 16:57   71048   -c--a-w-   c:\windows\system32\FlashPlayerCPLApp.cpl
2013-10-07 21:51 . 2012-05-21 05:58   873384   -c--a-w-   c:\windows\system32\npdeployJava1.dll
2013-10-07 21:51 . 2012-02-10 08:39   796072   -c--a-w-   c:\windows\system32\deployJava1.dll
2013-10-07 21:29 . 2013-02-23 12:40   145408   ----a-w-   c:\windows\system32\javacpl.cpl
2013-09-23 18:33 . 2004-08-10 04:00   920064   ----a-w-   c:\windows\system32\wininet.dll
2013-09-23 18:33 . 2004-08-10 04:00   43520   ------w-   c:\windows\system32\licmgr10.dll
2013-09-23 18:33 . 2004-08-10 04:00   1469440   ------w-   c:\windows\system32\inetcpl.cpl
2013-09-23 18:33 . 2004-08-10 04:00   18944   ----a-w-   c:\windows\system32\corpol.dll
2013-09-23 18:06 . 2004-08-10 04:00   385024   ------w-   c:\windows\system32\html.iec
2013-08-29 01:31 . 2004-08-10 04:00   1878656   ----a-w-   c:\windows\system32\win32k.sys
2009-05-10 18:17 . 2012-05-13 02:45   2562048   -c--a-w-   c:\program files\tsMuxerGUI.exe
2008-05-21 02:18 . 2008-11-26 13:03   131072   -c--a-w-   c:\program files\TsRemux.exe
2008-06-30 03:44 . 2008-07-21 06:36   324976   -c--a-w-   c:\program files\mozilla firefox\components\coFFPlgn.dll
.
.
(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2013-11-10 5717272]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray"="c:\windows\ehome\ehtray.exe" [2005-08-05 64512]
"ftutil2"="ftutil2.dll" [2004-06-07 106496]
"MSPY2002"="c:\windows\system32\IME\PINTLGNT\ImScInst.exe" [2004-08-10 59392]
"AlwaysReady Power Message APP"="ARPWRMSG.EXE" [2005-08-02 77312]
"Recguard"="c:\windows\SMINST\RECGUARD.EXE" [2005-07-22 237568]
"HPBootOp"="c:\program files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" [2006-02-15 249856]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2006-02-18 49152]
"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-01-28 59720]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2013-08-12 995176]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2013-02-20 152392]
"DriverChecker.exe"="c:\program files\Driver Checker\DriverChecker.exe" [2012-11-08 11707336]
"EvtMgr6"="c:\program files\Logitech\SetPointP\SetPoint.exe" [2013-02-21 2238704]
"RTHDCPL"="RTHDCPL.EXE" [2012-06-06 20065936]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2013-04-30 421888]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2013-07-01 254336]
"SDTray"="c:\program files\Spybot - Search & Destroy 2\SDTray.exe" [2013-07-25 5624784]
.
c:\documents and settings\Compaq_Administrator\Start Menu\Programs\Startup\
OpenOffice.org 3.2.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2010-5-20 1195008]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoFileAssociate"= 0 (0x0)
"NoResolveTrack"= 1 (0x1)
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2013-05-07 115440]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LBTWlgn]
2013-02-08 18:30   66800   -c--a-w-   c:\program files\Common Files\Logishrd\Bluetooth\LBTWLgn.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IMJPMIG8.1]
2004-08-10 04:00   208952   -c--a-w-   c:\windows\ime\imjp8_1\imjpmig.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2013-02-20 02:35   152392   ----a-w-   c:\program files\iTunes\iTunesHelper.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes' Anti-Malware]
2013-04-04 04:50   532040   ----a-w-   c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]
2010-04-16 12:12   3872080   -c--a-w-   c:\program files\Windows Live\Messenger\msnmsgr.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
2012-05-15 09:40   15504192   ----a-w-   c:\windows\system32\nvcpl.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SUPERAntiSpyware]
2013-11-10 00:58   5717272   ----a-w-   c:\program files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Compaq Connections\\5577497\\Program\\Compaq Connections.exe"=
"c:\\Program Files\\IncrediMail\\bin\\IncMail.exe"=
"c:\\Program Files\\IncrediMail\\bin\\ImApp.exe"=
"c:\\Program Files\\IncrediMail\\bin\\ImpCnt.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\WINDOWS\\system32\\IPCamera.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\VideoLAN\\VLC\\vlc.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Common Files\\Apple\\Apple Application Support\\WebKit2WebProcess.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Java\\jre7\\bin\\javaw.exe"=
"c:\\Program Files\\NVIDIA Corporation\\NVIDIA Update Core\\daemonu.exe"=
"c:\\Program Files\\J River\\Media Center 18\\Media Center 18.exe"=
"c:\\Program Files\\Spybot - Search & Destroy 2\\SDTray.exe"=
"c:\\Program Files\\Spybot - Search & Destroy 2\\SDFSSvc.exe"=
"c:\\Program Files\\Spybot - Search & Destroy 2\\SDUpdate.exe"=
"c:\\Program Files\\Spybot - Search & Destroy 2\\SDUpdSvc.exe"=
.
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [23/07/2011 2:27 AM 12880]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [13/07/2011 7:55 AM 67664]
R2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCore.exe [24/05/2013 6:11 AM 119056]
R2 LBeepKE;Logitech Beep Suppression Driver;c:\windows\system32\drivers\LBeepKE.sys [24/06/2013 7:12 PM 12808]
R2 SDScannerService;Spybot-S&D 2 Scanner Service;c:\program files\Spybot - Search & Destroy 2\SDFSSvc.exe [2/11/2013 9:11 PM 3921880]
R2 SDUpdateService;Spybot-S&D 2 Updating Service;c:\program files\Spybot - Search & Destroy 2\SDUpdSvc.exe [2/11/2013 9:11 PM 1042272]
R2 thdudf;TOSHIBA UDF2.5 Reader File System Driver;c:\windows\system32\drivers\thdudf.sys [27/09/2012 10:20 PM 66944]
R3 DtvAudio;DtvAudio;c:\windows\system32\drivers\DtvAudio.sys [12/02/2012 2:26 PM 10330]
R3 DtvVideo;DtvVideo;c:\windows\system32\drivers\DtvVideo.sys [12/02/2012 2:31 PM 25600]
R3 LEqdUsb;Logitech SetPoint Unifying KMDF USB Filter;c:\windows\system32\drivers\LEqdUsb.sys [3/01/2013 6:18 PM 44296]
R3 LHidEqd;Logitech SetPoint Unifying KMDF HID Filter;c:\windows\system32\drivers\LHidEqd.sys [3/01/2013 6:18 PM 12808]
S0 hswlygbl;hswlygbl;c:\windows\system32\drivers\ehsof.sys --> c:\windows\system32\drivers\ehsof.sys [?]
S0 kamwka;kamwka;c:\windows\system32\drivers\lpptqqd.sys --> c:\windows\system32\drivers\lpptqqd.sys [?]
S2 MBAMScheduler;MBAMScheduler;c:\program files\Malwarebytes' Anti-Malware\mbamscheduler.exe [3/11/2013 2:56 PM 418376]
S2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [3/11/2013 2:56 PM 701512]
S2 SDWSCService;Spybot-S&D 2 Security Center Service;c:\program files\Spybot - Search & Destroy 2\SDWSCSvc.exe [2/11/2013 9:11 PM 171416]
S3 Apowersoft_AudioDevice;Apowersoft_AudioDevice;c:\windows\system32\drivers\Apowersoft_AudioDevice.sys [3/10/2012 11:00 PM 16640]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [3/11/2013 2:56 PM 22856]
S3 pgusbmme;usb-audio.de MME-Adapter;c:\windows\system32\drivers\pgusbmm3.sys --> c:\windows\system32\drivers\pgusbmm3.sys [?]
S3 pgusbwdm;usb-audio.de driver (commercial 2.8.45);c:\windows\system32\Drivers\pgusbwdm.sys --> c:\windows\system32\Drivers\pgusbwdm.sys [?]
S3 USBPNPA;USB PnP Sound Device Interface;c:\windows\system32\drivers\CM108.sys --> c:\windows\system32\drivers\CM108.sys [?]
S3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\drivers\wdcsam.sys [6/05/2008 4:06 PM 11520]
.
Contents of the 'Scheduled Tasks' folder
.
2013-11-11 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-21 18:33]
.
2013-11-07 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2009-10-22 07:57]
.
2013-11-11 c:\windows\Tasks\Check for updates (Spybot - Search & Destroy).job
- c:\program files\Spybot - Search & Destroy 2\SDUpdate.exe [2013-11-02 00:57]
.
2013-11-11 c:\windows\Tasks\Microsoft Antimalware Scheduled Scan.job
- c:\program files\Microsoft Security Client\MpCmdRun.exe [2013-08-12 00:12]
.
2013-11-05 c:\windows\Tasks\Refresh immunization (Spybot - Search & Destroy).job
- c:\program files\Spybot - Search & Destroy 2\SDImmunize.exe [2013-11-02 00:49]
.
2013-11-02 c:\windows\Tasks\Scan the system (Spybot - Search & Destroy).job
- c:\program files\Spybot - Search & Destroy 2\SDScan.exe [2013-11-02 00:51]
.
.
------- Supplementary Scan -------
.

uInternet Settings,ProxyOverride = *.local
TCP: DhcpNameServer = 61.9.211.1 61.9.242.33

FF - ProfilePath - c:\documents and settings\Compaq_Administrator.YOUR-C6B5E4EABC.000\Application Data\Mozilla\Firefox\Profiles\ljua5hww.default-1383705478203\
.
- - - - ORPHANS REMOVED - - - -
.
HKLM-Run-PCDrProfiler - (no file)
c:\documents and settings\UpdatusUser\Start Menu\Programs\Startup\Pin.lnk - c:\hp\bin\CLOAKER.EXE c:\hp\bin\PinToStart.bat
c:\documents and settings\UpdatusUser\Start Menu\Programs\Startup\PinMcLnk.lnk - c:\hp\bin\cloaker.exe c:\hp\bin\PinMcLnkToStart.bat
Notify-SDWinLogon - SDWinLogon.dll
MSConfigStartUp-DivXUpdate - c:\program files\DivX\DivX Update\DivXUpdate.exe
AddRemove-{A04BCE0F-CCDA-6340-DD63-02F908A08895} - c:\docume~1\ALLUSE~1\APPLIC~1\INSTAL~3\{01F9E169-ADBD-4757-A5BC-E59FDA1AC39F}\Setup.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2013-11-11 22:05
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_9_900_117_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_9_900_117_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
--------------------- DLLs Loaded Under Running Processes ---------------------
.
- - - - - - - > 'winlogon.exe'(732)
c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll
.
- - - - - - - > 'explorer.exe'(1964)
c:\windows\system32\WININET.dll
c:\windows\system32\msi.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Completion time: 2013-11-11 22:07:20
ComboFix-quarantined-files.txt 2013-11-11 12:07
.
Pre-Run: 49,906,384,896 bytes free
Post-Run: 50,035,879,936 bytes free
.
- - End Of File - - AB8D421760444AF8FE6577D930440606
D11C727E03BB7318DCDA069B06E652F0

Maniac · November 12, 2013

Please scan your machine with ESET OnlineScan

Hold down Control and click on the following link to open ESET OnlineScan in a new window.
ESET OnlineScan
Click the button.
For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
- Click on esetsmartinstaller_enu.exe to download the ESET Smart Installer.
  Save it to your Desktop.
- Double click on the to download the ESET Smart Installer. icon on your Desktop.
Check "YES, I accept the Terms of Use."
Click the Start button.
Accept any security warnings from your browser.
Under Scan Settings, check "Scan Archives" and "Remove found threats"
Click Advanced settings and select the following:
- Scan potentially unwanted applications
- Scan for potentially unsafe applications
- Enable Anti-Stealth technology
ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
When the scan completes, click List Threats
Click Export, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
Click the Back button.
Click the Finish button.

MarshallE · November 13, 2013

Thanks again

21 hours later Here is what it found

C:\AdwCleaner\Quarantine\C\Documents and Settings\All Users\Application Data\SaveAs\510508f393149.dll.vir   a variant of Win32/Adware.MultiPlug.I application   cleaned by deleting - quarantined
C:\Documents and Settings\Compaq_Administrator\Local Settings\Application Data\Conduit\CT2504091\Vuze_RemoteAutoUpdateHelper.exe   multiple threats   cleaned by deleting - quarantined
C:\Documents and Settings\Compaq_Administrator\Local Settings\Application Data\Conduit\CT2724386\IncrediMail_MediaBar_2AutoUpdateHelper.exe   Win32/Toolbar.Conduit.Q application   cleaned by deleting - quarantined
C:\Documents and Settings\Compaq_Administrator\Local Settings\Application Data\IncrediMail_MediaBar_2\tbInc2.dll   a variant of Win32/Toolbar.Conduit.B application   cleaned by deleting - quarantined
C:\Documents and Settings\Compaq_Administrator\Local Settings\Application Data\IncrediMail_MediaBar_2\tbIncr.dll   a variant of Win32/Toolbar.Conduit.B application   cleaned by deleting - quarantined
C:\Documents and Settings\Compaq_Administrator\Local Settings\Application Data\Vuze_Remote\ldrtbVuz0.dll   a variant of Win32/Toolbar.Conduit.P application   cleaned by deleting - quarantined
C:\Documents and Settings\Compaq_Administrator\Local Settings\Application Data\Vuze_Remote\tbVuz0.dll   a variant of Win32/Toolbar.Conduit.B application   cleaned by deleting - quarantined
C:\Documents and Settings\Compaq_Administrator\Local Settings\Application Data\Vuze_Remote\tbVuze.dll   a variant of Win32/Toolbar.Conduit.B application   cleaned by deleting - quarantined
C:\Documents and Settings\Compaq_Administrator.YOUR-C6B5E4EABC.000\Application Data\0F0W0T1V0D0L0M\Photoscape Packages\uninstaller.exe   Win32/InstallCore.AZ application   cleaned by deleting - quarantined
C:\Documents and Settings\Compaq_Administrator.YOUR-C6B5E4EABC.000\My Documents\Downloads\cbsidlm-cbsi134-Ashampoo_Registry_Cleaner-BP-75408896.exe   probably a variant of Win32/CNETInstaller.A application   cleaned by deleting - quarantined
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Ashampoo_US\ldrtbAsha.dll   a variant of Win32/Toolbar.Conduit.P application   cleaned by deleting - quarantined
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Ashampoo_US\tbAsha.dll   a variant of Win32/Toolbar.Conduit.B application   cleaned by deleting - quarantined
C:\Documents and Settings\NetworkService\Local Settings\Application Data\IncrediMail_MediaBar_2\ldrtbInc0.dll   a variant of Win32/Toolbar.Conduit.P application   cleaned by deleting - quarantined
C:\Documents and Settings\NetworkService\Local Settings\Application Data\IncrediMail_MediaBar_2\ldrtbIncr.dll   a variant of Win32/Toolbar.Conduit.P application   cleaned by deleting - quarantined
C:\Documents and Settings\NetworkService\Local Settings\Application Data\IncrediMail_MediaBar_2\tbInc0.dll   a variant of Win32/Toolbar.Conduit.B application   cleaned by deleting - quarantined
C:\Documents and Settings\NetworkService\Local Settings\Application Data\IncrediMail_MediaBar_2\tbIncr.dll   a variant of Win32/Toolbar.Conduit.B application   cleaned by deleting - quarantined
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Vuze_Remote\ldrtbVuz0.dll   a variant of Win32/Toolbar.Conduit.P application   cleaned by deleting - quarantined
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Vuze_Remote\tbVuz0.dll   a variant of Win32/Toolbar.Conduit.B application   cleaned by deleting - quarantined
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Vuze_Remote\tbVuze.dll   a variant of Win32/Toolbar.Conduit.B application   cleaned by deleting - quarantined

Maniac · November 13, 2013

I'm so sorry about this long time scanning.

Please locate and manually delete the following folders:

C:\Documents and Settings\Compaq_Administrator\Local Settings\Application Data\Conduit

C:\Documents and Settings\Compaq_Administrator\Local Settings\Application Data\IncrediMail_MediaBar_2

C:\Documents and Settings\Compaq_Administrator\Local Settings\Application Data\Vuze_Remote

C:\Documents and Settings\NetworkService\Local Settings\Application Data\Ashampoo_US

Reboot your system and let me know how are things then.

MarshallE · November 16, 2013

Apologies for the delayed reply.

This seems to have made my computer a lot more responsive. Thank you.

However Malware bytes is still taking a very long time to complete a full scan. It doesn't appear to be hanging but we are taking 20 hours +. Is there a way to fix this?

I will re install Chrome and test.

Also can I delete everything that the EST scan found above or just what you have suggested??

You have been a big help thank you. I will be donating.

Maniac · November 17, 2013

Try to reinstall Malwarebytes:

Download and run mbam-clean.exe from here
It will ask to restart your computer, please allow it to do so very important
After the computer restarts, temporarily disable your Anti-Virus and install the latest version of Malwarebytes' Anti-Malware from here
- Note: You will need to reactivate the program using the license you were sent via email if using the Pro version
- Launch the program and set the Protection and Registration. Then go to the UPDATE tab if not done during installation and check for updates.
  Restart the computer again and verify that MBAM is in the task tray if using the Pro version. Now setup any file exclusions as may be required in your Anti-Virus/Internet-Security/Firewall applications and restart your Anti-Virus/Internet-Security applications. You may use the guides posted in the FAQ's here or ask and we'll explain how to do it.

AdvancedSetup · December 10, 2013

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Beeping computer - Malwarebytes crashes.

Recommended Posts

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Recently Browsing 0 members

Important Information