Sue6410 Posted January 14, 2014 Author ID:777865 Share Posted January 14, 2014 Fixlog.txt Here is the log. Link to post Share on other sites More sharing options...
MrCharlie Posted January 14, 2014 ID:777875 Share Posted January 14, 2014 Did you uninstall Norton Ghost?? How is it???? MrC Link to post Share on other sites More sharing options...
Sue6410 Posted January 14, 2014 Author ID:777886 Share Posted January 14, 2014 I have not done anything with Norton Ghost yet. I was waiting to be sure you didn't see anything else. I will proceed with dealing with Norton and see how things go. I will be in touch. Link to post Share on other sites More sharing options...
MrCharlie Posted January 14, 2014 ID:777887 Share Posted January 14, 2014 OK.....MrC Application errors:==================Error: (01/14/2014 08:52:42 AM) (Source: Base) (User: )Description: Error EC8F1775: An error occurred while starting Norton Ghost service.Error EC8F1772: The following component is not installed correctly: Symantec.FileBackup.ExtensionGroupContainer.Error EBAB03F1: Class not registered.Details:Source: BaseError: (01/14/2014 08:52:42 AM) (Source: MsiInstaller) (User: NT AUTHORITY)Description: Product: Norton Ghost -- Error 1719.Windows Installer service could not be accessed. Contact your support personnel to verify that it is properly registered and enabled.Error: (01/14/2014 08:52:41 AM) (Source: MsiInstaller) (User: NT AUTHORITY)Description: Product: Norton Ghost -- Error 1719.Windows Installer service could not be accessed. Contact your support personnel to verify that it is properly registered and enabled.Error: (01/14/2014 08:52:41 AM) (Source: MsiInstaller) (User: NT AUTHORITY)Description: Product: Norton Ghost -- Error 1719.Windows Installer service could not be accessed. Contact your support personnel to verify that it is properly registered and enabled.Error: (01/14/2014 08:52:40 AM) (Source: MsiInstaller) (User: NT AUTHORITY)Description: Product: Norton Ghost -- Error 1719.Windows Installer service could not be accessed. Contact your support personnel to verify that it is properly registered and enabled.Error: (01/14/2014 08:52:40 AM) (Source: MsiInstaller) (User: NT AUTHORITY)Description: Product: Norton Ghost -- Error 1719.Windows Installer service could not be accessed. Contact your support personnel to verify that it is properly registered and enabled.Error: (01/14/2014 08:52:39 AM) (Source: MsiInstaller) (User: NT AUTHORITY)Description: Product: Norton Ghost -- Error 1719.Windows Installer service could not be accessed. Contact your support personnel to verify that it is properly registered and enabled.Error: (01/14/2014 08:52:36 AM) (Source: MsiInstaller) (User: NT AUTHORITY)Description: Product: Norton Ghost -- Error 1706.No valid source could be found for product Norton Ghost. The Windows Installer cannot continue.Error: (01/14/2014 08:52:09 AM) (Source: MsiInstaller) (User: NT AUTHORITY)Description: Product: Norton Ghost -- Error 1706.No valid source could be found for product Norton Ghost. The Windows Installer cannot continue.Error: (01/14/2014 08:51:44 AM) (Source: MsiInstaller) (User: NT AUTHORITY)Description: Product: Norton Ghost -- Error 1706.No valid source could be found for product Norton Ghost. The Windows Installer cannot continue. Link to post Share on other sites More sharing options...
Sue6410 Posted January 14, 2014 Author ID:777938 Share Posted January 14, 2014 I am still working on Norton. I am having trouble locating the install cd to run a repair install. At any rate, I turned off the service and the weird command window popping went away so I am making headway. A few more questions for you: 1) Did you find any issues with my machine with all of the logs you looked at? 2) What program(s) should I run against the data on my external drive? I ran Microsoft Security Scanner and MalwareBytes previously and they found nothing. 3) Should I still run a full scan with MalwareBytes as you requested and send you that log? 4) Probably based on the answers to number 1 above, Would if be a good idea to turn off system restore so it deletes the restore points that exist currently and start fresh? 5) What adware software do you recommend and how often should it be run? Are they mostly safe to just let them fix what they find? 6) I don't want to forget to get instructions from you regarding removing all of the programs I have downloaded and run per your requests. I can certainly just delete them if that is all there is to it. Thanks so much for all your help. I really appreciate it. Link to post Share on other sites More sharing options...
MrCharlie Posted January 14, 2014 ID:777952 Share Posted January 14, 2014 1) Did you find any issues with my machine with all of the logs you looked at?Yes, ComboFix found many folders like this that we deleted:C:\Documents and Settings\Susan\Local Settings\Application Data\bvxhjiobC:\Documents and Settings\Susan\Local Settings\Application Data\mlcquveg2) What program(s) should I run against the data on my external drive? I ran Microsoft Security Scanner and MalwareBytes previously and they found nothing.That should be OK3) Should I still run a full scan with MalwareBytes as you requested and send you that log?Yes, when you get a chance4) Probably based on the answers to number 1 above, Would if be a good idea to turn off system restore so it deletes the restore points that exist currently and start fresh?Yes, when we uninstall ComboFix, it will do that automatically5) What adware software do you recommend and how often should it be run? Are they mostly safe to just let them fix what they find?For adware, I use AdwCleaner (always download a fresh copy) and Malwarebytes, once a week should be fineAre they mostly safe to just let them fix what they find?Yes, they both make back-ups of what was deleted or cleaned6) I don't want to forget to get instructions from you regarding removing all of the programs I have downloaded and run per your requests. I can certainly just delete them if that is all there is to it.When we're done, I'll give you instructions when we're done.MrC Link to post Share on other sites More sharing options...
Sue6410 Posted January 15, 2014 Author ID:778179 Share Posted January 15, 2014 mbam-log-2014-01-14 (17-25-56).txt Here is the mbam log from a full scan of both c drive and my external drive. One quick question. SuperAnti Spyware keeps finding an icon file and putting it under a category called Adware.GloboLook. Can you explain what it thinks the issue is? Also, what do you think of SuperAnti Spyware relative to other programs? Link to post Share on other sites More sharing options...
MrCharlie Posted January 15, 2014 ID:778197 Share Posted January 15, 2014 One quick question. SuperAnti Spyware keeps finding an icon file and putting it under a category called Adware.GloboLook. Can you explain what it thinks the issue is?Can I see the logAlso, what do you think of SuperAnti Spyware relative to other programs?It's OK as a scanner, you have to upgrade to the pro version to get realtime protection.MrC Link to post Share on other sites More sharing options...
Sue6410 Posted January 15, 2014 Author ID:778217 Share Posted January 15, 2014 The log. SUPERAntiSpyware Scan Log - 01-15-2014 - 10-59-16.log Link to post Share on other sites More sharing options...
MrCharlie Posted January 15, 2014 ID:778262 Share Posted January 15, 2014 See if you can delete this file: C:\CCONNECT\CSG4\RETAIL\ICONSGRAPHICS\ORIGICONS\GRAPHICS.ZIP MrC Link to post Share on other sites More sharing options...
Sue6410 Posted January 15, 2014 Author ID:778294 Share Posted January 15, 2014 Yes I can delete it. Link to post Share on other sites More sharing options...
MrCharlie Posted January 15, 2014 ID:778308 Share Posted January 15, 2014 Delete it....MrC Link to post Share on other sites More sharing options...
Sue6410 Posted January 15, 2014 Author ID:778312 Share Posted January 15, 2014 I did. That's how I knew it would let me. It is now in the recycle bin. Do you think there is a problem with the file? Should I delete the other files? Do you know what SSP.exe is? Every now and again I see it in processes and I have no idea what it is. Link to post Share on other sites More sharing options...
MrCharlie Posted January 15, 2014 ID:778316 Share Posted January 15, 2014 Should I delete the other files?What other files???Do you know what SSP.exe is? Every now and again I see it in processes and I have no idea what it is.Do a search for it and see where it's located.MrC Link to post Share on other sites More sharing options...
Sue6410 Posted January 15, 2014 Author ID:778319 Share Posted January 15, 2014 The Graphics.zip files in the other folders that are shown in the SuperAntiSpyware log. I will delete those as well. Link to post Share on other sites More sharing options...
MrCharlie Posted January 15, 2014 ID:778322 Share Posted January 15, 2014 OK....MrC Link to post Share on other sites More sharing options...
Sue6410 Posted January 15, 2014 Author ID:778341 Share Posted January 15, 2014 The search does not find SSP.exe even when I include hidden files and folders. That can't be good. Link to post Share on other sites More sharing options...
MrCharlie Posted January 15, 2014 ID:778348 Share Posted January 15, 2014 Please download SystemLook from one of the links below and save it to your Desktop.Download Mirror #1Download Mirror #2Double-click SystemLook.exe to run it.Copy the content of the following codebox into the main textfield::filefindSSP.exe:regfindSSP.exeClick the Look button to start the scan.When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.Note: The log can also be found on your Desktop entitled SystemLook.txtMrC Link to post Share on other sites More sharing options...
Sue6410 Posted January 15, 2014 Author ID:778355 Share Posted January 15, 2014 That link doesn't do anything. I tell the security warning to download the file but I just get a blank page and nothing downloads. Please advise. Link to post Share on other sites More sharing options...
MrCharlie Posted January 15, 2014 ID:778357 Share Posted January 15, 2014 Zipped and attached, MrC Link to post Share on other sites More sharing options...
Sue6410 Posted January 15, 2014 Author ID:778380 Share Posted January 15, 2014 Here is the log. See Link to Search.txt to see what I found on the Microsoft WebSite regarding this. systemlook.txtLink to Search.txt Link to post Share on other sites More sharing options...
MrCharlie Posted January 15, 2014 ID:778393 Share Posted January 15, 2014 OK, it's not on your system, just a couple of references in the registry. Download and unzip the attached sue.zip (sue.reg) Now double click on it and allow it to merge into the registry. MrC Link to post Share on other sites More sharing options...
Sue6410 Posted January 15, 2014 Author ID:778408 Share Posted January 15, 2014 Now that is good news. I ran the reg fix you sent and reran SystemLook with the same parameters and nothing was found in files or in the registry. Should I now feel pretty comfortable that the issues are solved? What is my next step? Link to post Share on other sites More sharing options...
MrCharlie Posted January 15, 2014 ID:778412 Share Posted January 15, 2014 I guess that's it. Lets check your computers security before you go and we have a little cleanup to do also: Download Security Check by screen317 from HERE or HERE.Save it to your Desktop.Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.If you get Unsupported operating system. Aborting now, just reboot and try again.A Notepad document should open automatically called checkup.txt.Please Post the contents of that document.Do Not Attach It!!!MrC Link to post Share on other sites More sharing options...
Sue6410 Posted January 15, 2014 Author ID:778439 Share Posted January 15, 2014 It won't allow me to paste the contents of the file either as plain text or not. I could attach it but your note says not to. Please advise. Also, MalwareBytes seems to turn Website blocking on and off and when it goes off, I cannot turn it back on. Please advise. Link to post Share on other sites More sharing options...
Recommended Posts