trovi search engine malware

[diurnal]

Hi,

 

I used Malwarebytes but i still have issues with redirection of my home page. also i cant get into my gmail account from this computer. here are the logs

Addition.txt

FRST.txt

[Maurice Naggar]

Hello diurnal and welcome to Malwarebytes forum.

Save the attached file Fixlist.txt to the same location where you have FRST.exe ---- thats important for the Fix to work.

It needs to be saved Next to the "Farbar Recovery Scan Tool" (FRST) program (If asked to overwrite an existing one please allow)

Run FRST again but this time press the "Fix" button just once and wait.

When finished, it will make a log ( fixlog.txt ) next to FRST.
Please attach the Fixlog.txt into a reply.

Let me know how things are after this run.

Fixlist.txt

[diurnal]

hi,

 

Thanks for the help! While I was waiting for a reply i tried a system restore. The entry changed to:

 

CHR StartupUrls: Default -> "hxxp://astromenda.com/?f=7&a=ast_dnldstr_14_40_ie&cd=2XzuyEtN2Y1L1QzuzztDzzyC0FtB0CyCzytAyCtAyDyC0AyDtN0D0Tzu0StCtDtDyBtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyE0Dzy0C0DyD0EzztG0BtAyEyBtG0EyDyD0CtGzyzyyEtAtGtA0Bzz0A0B0AtByCyByD0DtA2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0B0DtBtCzz0A0ByEtGzz0C0EtDtGyEyEtAtBtG0A0B0AtDtGyByD0ByCtA0C0FyCyBtAzyyD2Q&cr=561858551&ir=", "hxxp://www.trovi.com/?gd=&ctid=CT3330556&octid=EB_ORIGINAL_CTID&ISID=ME193494C-F688-41C4-AD2E-1316AA544975&SearchSource=55&CUI=&UM=6&UP=SPEAB85333-B2B2-42D7-A3E0-5166E66B5E4E&SSPV="

 

So I put the entry in for your fix. I was about to reformat my harddrive to fix this. Your fix seems to be working now. I will update you in a couple of hours on the progress.

Fixlog.txt

[Maurice Naggar]

Hello,

 

Dont try to do fixes on your own.

 

Start the Anti-Malware program.
on the Dashboard, click the **Scan Now >>** ( link)  button.
If an update is available, click the Update Now button.
A Threat Scan will begin.
When the scan is complete, if there have been detections, click **Apply Actions** to allow MBAM to clean what was detected.
In some cases, a restart will be required.
Wait for the prompt to restart the computer to appear, then click on Yes.



Click on the **History tab** > Application Logs.
Double click on the scan log which shows the Date and time of the scan just performed.
Click **'Copy to Clipboard'**
Paste the contents of the clipboard into your reply.
then in the body of  reply box,   do a click with the mouse ---just so that has the current focus ---- then do a Paste by pressing CTRL+V keys on the keyboard.

[diurnal]

hi,

 

sorry i did the fix after i scanned with malwarebytes. but it seems to be working good. here's the log

Malwarebytes Anti-Malware

www.malwarebytes.org

 

Scan Date: 10/20/2014

Scan Time: 3:45:30 PM

Logfile: 

Administrator: No

 

Version: 2.00.3.1025

Malware Database: v2014.10.20.07

Rootkit Database: v2014.10.17.01

License: Trial

Malware Protection: Enabled

Malicious Website Protection: Enabled

Self-protection: Disabled

 

OS: Windows 8.1

CPU: x64

File System: NTFS

User: Mitch

 

Scan Type: Threat Scan

Result: Completed

Objects Scanned: 301960

Time Elapsed: 14 min, 44 sec

 

Memory: Enabled

Startup: Enabled

Filesystem: Enabled

Archives: Enabled

Rootkits: Disabled

Heuristics: Enabled

PUP: Enabled

PUM: Enabled

 

Processes: 0

(No malicious items detected)

 

Modules: 0

(No malicious items detected)

 

Registry Keys: 22

PUP.Optional.AdvanceElite.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Util AdvanceElite, Quarantined, [12e59680a8d4b5819a7913b44cb52ad6], 

PUP.Optional.AdvanceElite.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Update AdvanceElite, Quarantined, [8c6b30e6df9da096dc37f9ce4db4ea16], 

PUP.Optional.BrowseFox.A, HKLM\SOFTWARE\CLASSES\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}, Quarantined, [4aad27ef96e63afc00a8b426ee145ea2], 

PUP.Optional.BrowseFox.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}, Quarantined, [4aad27ef96e63afc00a8b426ee145ea2], 

PUP.Optional.Sanbreel.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\{02bbe9df-d3b0-43f4-8dcb-e24500d3308f}w64, Quarantined, [55a2eb2b57251c1ab8123c4d3aca08f8], 

PUP.Optional.AdvanceElite.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\AdvanceElite, Quarantined, [886f1006c1bb3303e15dd5bab64e1de3], 

PUP.Optional.AdvanceElite.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}, Quarantined, [886f1006c1bb3303e15dd5bab64e1de3], 

PUP.Optional.AdvanceElite.A, HKLM\SOFTWARE\CLASSES\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}, Quarantined, [886f1006c1bb3303e15dd5bab64e1de3], 

PUP.Optional.AdvanceElite.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}, Quarantined, [886f1006c1bb3303e15dd5bab64e1de3], 

PUP.Optional.AdvanceElite.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}, Quarantined, [886f1006c1bb3303e15dd5bab64e1de3], 

PUP.Optional.AdvanceElite.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}, Quarantined, [886f1006c1bb3303e15dd5bab64e1de3], 

PUP.Optional.AdvanceElite.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}, Quarantined, [886f1006c1bb3303e15dd5bab64e1de3], 

PUP.Optional.AdvanceElite.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}, Quarantined, [886f1006c1bb3303e15dd5bab64e1de3], 

PUP.Optional.AdvanceElite.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}, Quarantined, [886f1006c1bb3303e15dd5bab64e1de3], 

PUP.Optional.AdvanceElite.A, HKLM\SOFTWARE\WOW6432NODE\AdvanceElite, Quarantined, [0becfb1baece79bd9fa0414efa0aba46], 

PUP.Optional.InstallCore.A, HKLM\SOFTWARE\WOW6432NODE\INSTALLCORE\WSE_Astromenda, Quarantined, [40b7f81e8eeebb7b1afaa17b7b8835cb], 

PUP.Optional.AdvanceElite.A, HKU\S-1-5-21-2827587175-320770035-3572455552-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\AdvanceElite, Quarantined, [6493fc1aa6d64aec5ae63a55dc28d927], 

PUP.Optional.Astromenda.A, HKU\S-1-5-21-2827587175-320770035-3572455552-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\wse_astromenda, Quarantined, [f4030d097dfffd39ba5a889cb84bb14f], 

PUP.Optional.InstallCore.A, HKU\S-1-5-21-2827587175-320770035-3572455552-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE\1I1T1Q1S, Quarantined, [d522f32394e893a36358e96afa09bd43], 

PUP.Optional.InstallCore.A, HKU\S-1-5-21-2827587175-320770035-3572455552-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE, Quarantined, [9c5b03137a02ca6ce5291a50df25dd23], 

PUP.Optional.SuperFish.A, HKU\S-1-5-21-2827587175-320770035-3572455552-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\DOMSTORAGE\superfish.com, Quarantined, [b0476aac275566d051f20d2361a29b65], 

PUP.Optional.Astromenda, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\WSE_Astromenda, Quarantined, [d5222aece696a98dd32e9e73bc470000], 

 

Registry Values: 1

PUP.Optional.InstallCore.A, HKU\S-1-5-21-2827587175-320770035-3572455552-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE|tb, zr2X2X1G1S1F2V1S2Q0V, Quarantined, [9c5b03137a02ca6ce5291a50df25dd23]

 

Registry Data: 0

(No malicious items detected)

 

Folders: 9

PUP.Optional.AdvanceElite.A, C:\Program Files (x86)\AdvanceElite, Quarantined, [886f1006c1bb3303e15dd5bab64e1de3], 

PUP.Optional.AdvanceElite.A, C:\Program Files (x86)\AdvanceElite\bin, Quarantined, [886f1006c1bb3303e15dd5bab64e1de3], 

PUP.Optional.AdvanceElite.A, C:\Program Files (x86)\AdvanceElite\bin\plugins, Quarantined, [886f1006c1bb3303e15dd5bab64e1de3], 

PUP.Optional.AdvanceElite.A, C:\Program Files (x86)\AdvanceElite\bin\TEMP, Quarantined, [886f1006c1bb3303e15dd5bab64e1de3], 

PUP.Optional.Astromenda, C:\Program Files (x86)\WSE_Astromenda, Quarantined, [d5222aece696a98dd32e9e73bc470000], 

PUP.Optional.Astromenda, C:\Program Files (x86)\WSE_Astromenda\BRS, Quarantined, [d5222aece696a98dd32e9e73bc470000], 

PUP.Optional.Astromenda.A, C:\Users\Mitch\AppData\Roaming\WSE_Astromenda, Quarantined, [63945eb8bebef640ad6dfb16659e926e], 

PUP.Optional.Astromenda.A, C:\Users\Mitch\AppData\Roaming\WSE_Astromenda\icons_3.2.1.5, Quarantined, [63945eb8bebef640ad6dfb16659e926e], 

PUP.Optional.Astromenda.A, C:\Users\Mitch\AppData\Roaming\WSE_Astromenda\UpdateProc, Quarantined, [63945eb8bebef640ad6dfb16659e926e], 

 

Files: 46

PUP.Optional.AdvanceElite.A, C:\Program Files (x86)\AdvanceElite\bin\utilAdvanceElite.exe, Quarantined, [12e59680a8d4b5819a7913b44cb52ad6], 

PUP.Optional.AdvanceElite.A, C:\Program Files (x86)\AdvanceElite\updateAdvanceElite.exe, Quarantined, [8c6b30e6df9da096dc37f9ce4db4ea16], 

PUP.Optional.Sambreel.A, C:\Program Files (x86)\AdvanceElite\AdvanceElite.FirstRun.exe, Quarantined, [d81f58be97e553e3f7377af04ab7e11f], 

PUP.Optional.Sanbreel.A, C:\Program Files (x86)\AdvanceElite\AdvanceEliteBrowserFilter.exe, Quarantined, [35c27f97e399d75f2ab13f5612ef39c7], 

PUP.Optional.Astromenda.A, C:\Windows\System32\Tasks\WSE_Astromenda, Quarantined, [9e5937df7903171f7c59849717ec9e62], 

PUP.Optional.Astromenda.A, C:\Windows\Tasks\WSE_Astromenda.job, Quarantined, [c63172a4c5b71e188e48b16a8b7808f8], 

PUP.Optional.Sanbreel.A, C:\Windows\System32\drivers\{02bbe9df-d3b0-43f4-8dcb-e24500d3308f}w64.sys, Quarantined, [55a2eb2b57251c1ab8123c4d3aca08f8], 

PUP.Optional.AdvanceElite.A, C:\Program Files (x86)\AdvanceElite\AdvanceElite.ico, Quarantined, [886f1006c1bb3303e15dd5bab64e1de3], 

PUP.Optional.AdvanceElite.A, C:\Program Files (x86)\AdvanceElite\7za.exe, Quarantined, [886f1006c1bb3303e15dd5bab64e1de3], 

PUP.Optional.AdvanceElite.A, C:\Program Files (x86)\AdvanceElite\AdvanceElite.BrowserFilter.Helper.dll, Quarantined, [886f1006c1bb3303e15dd5bab64e1de3], 

PUP.Optional.AdvanceElite.A, C:\Program Files (x86)\AdvanceElite\AdvanceEliteUninstall.exe, Quarantined, [886f1006c1bb3303e15dd5bab64e1de3], 

PUP.Optional.AdvanceElite.A, C:\Program Files (x86)\AdvanceElite\bin\02bbe9dfd3b043f48dcb.dll, Quarantined, [886f1006c1bb3303e15dd5bab64e1de3], 

PUP.Optional.AdvanceElite.A, C:\Program Files (x86)\AdvanceElite\bin\02bbe9dfd3b043f48dcb64.dll, Quarantined, [886f1006c1bb3303e15dd5bab64e1de3], 

PUP.Optional.AdvanceElite.A, C:\Program Files (x86)\AdvanceElite\bin\7za.exe, Quarantined, [886f1006c1bb3303e15dd5bab64e1de3], 

PUP.Optional.AdvanceElite.A, C:\Program Files (x86)\AdvanceElite\bin\AdvanceElite.BOAS.exe, Quarantined, [886f1006c1bb3303e15dd5bab64e1de3], 

PUP.Optional.AdvanceElite.A, C:\Program Files (x86)\AdvanceElite\bin\AdvanceElite.BOAS.zip, Quarantined, [886f1006c1bb3303e15dd5bab64e1de3], 

PUP.Optional.AdvanceElite.A, C:\Program Files (x86)\AdvanceElite\bin\AdvanceElite.BOASHelper.exe, Quarantined, [886f1006c1bb3303e15dd5bab64e1de3], 

PUP.Optional.AdvanceElite.A, C:\Program Files (x86)\AdvanceElite\bin\AdvanceElite.BOASPRT.exe, Quarantined, [886f1006c1bb3303e15dd5bab64e1de3], 

PUP.Optional.AdvanceElite.A, C:\Program Files (x86)\AdvanceElite\bin\AdvanceElite.BrowserAdapter.exe, Quarantined, [886f1006c1bb3303e15dd5bab64e1de3], 

PUP.Optional.AdvanceElite.A, C:\Program Files (x86)\AdvanceElite\bin\AdvanceElite.BrowserAdapter64.exe, Quarantined, [886f1006c1bb3303e15dd5bab64e1de3], 

PUP.Optional.AdvanceElite.A, C:\Program Files (x86)\AdvanceElite\bin\AdvanceElite.PurBrowse.zip, Quarantined, [886f1006c1bb3303e15dd5bab64e1de3], 

PUP.Optional.AdvanceElite.A, C:\Program Files (x86)\AdvanceElite\bin\AdvanceElite.PurBrowse64.exe, Quarantined, [886f1006c1bb3303e15dd5bab64e1de3], 

PUP.Optional.AdvanceElite.A, C:\Program Files (x86)\AdvanceElite\bin\BrowserAdapter.7z, Quarantined, [886f1006c1bb3303e15dd5bab64e1de3], 

PUP.Optional.AdvanceElite.A, C:\Program Files (x86)\AdvanceElite\bin\utilAdvanceElite.InstallState, Quarantined, [886f1006c1bb3303e15dd5bab64e1de3], 

PUP.Optional.AdvanceElite.A, C:\Program Files (x86)\AdvanceElite\bin\{02bbe9df-d3b0-43f4-8dcb-e24500d3308f}.dll, Quarantined, [886f1006c1bb3303e15dd5bab64e1de3], 

PUP.Optional.AdvanceElite.A, C:\Program Files (x86)\AdvanceElite\bin\{02bbe9df-d3b0-43f4-8dcb-e24500d3308f}64.dll, Quarantined, [886f1006c1bb3303e15dd5bab64e1de3], 

PUP.Optional.AdvanceElite.A, C:\Program Files (x86)\AdvanceElite\bin\plugins\AdvanceElite.BOAS.dll, Quarantined, [886f1006c1bb3303e15dd5bab64e1de3], 

PUP.Optional.AdvanceElite.A, C:\Program Files (x86)\AdvanceElite\bin\plugins\AdvanceElite.Bromon.dll, Quarantined, [886f1006c1bb3303e15dd5bab64e1de3], 

PUP.Optional.AdvanceElite.A, C:\Program Files (x86)\AdvanceElite\bin\plugins\AdvanceElite.BroStats.dll, Quarantined, [886f1006c1bb3303e15dd5bab64e1de3], 

PUP.Optional.AdvanceElite.A, C:\Program Files (x86)\AdvanceElite\bin\plugins\AdvanceElite.BrowserAdapter.dll, Quarantined, [886f1006c1bb3303e15dd5bab64e1de3], 

PUP.Optional.AdvanceElite.A, C:\Program Files (x86)\AdvanceElite\bin\plugins\AdvanceElite.CompatibilityChecker.dll, Quarantined, [886f1006c1bb3303e15dd5bab64e1de3], 

PUP.Optional.AdvanceElite.A, C:\Program Files (x86)\AdvanceElite\bin\plugins\AdvanceElite.FFUpdate.dll, Quarantined, [886f1006c1bb3303e15dd5bab64e1de3], 

PUP.Optional.AdvanceElite.A, C:\Program Files (x86)\AdvanceElite\bin\plugins\AdvanceElite.GCUpdate.dll, Quarantined, [886f1006c1bb3303e15dd5bab64e1de3], 

PUP.Optional.AdvanceElite.A, C:\Program Files (x86)\AdvanceElite\bin\plugins\AdvanceElite.IEUpdate.dll, Quarantined, [886f1006c1bb3303e15dd5bab64e1de3], 

PUP.Optional.AdvanceElite.A, C:\Program Files (x86)\AdvanceElite\bin\plugins\AdvanceElite.PurBrowse.dll, Quarantined, [886f1006c1bb3303e15dd5bab64e1de3], 

PUP.Optional.Astromenda, C:\Program Files (x86)\WSE_Astromenda\astcnfg.dat, Quarantined, [d5222aece696a98dd32e9e73bc470000], 

PUP.Optional.Astromenda, C:\Program Files (x86)\WSE_Astromenda\FavIcon.ico, Quarantined, [d5222aece696a98dd32e9e73bc470000], 

PUP.Optional.Astromenda, C:\Program Files (x86)\WSE_Astromenda\Sqlite3.dll, Quarantined, [d5222aece696a98dd32e9e73bc470000], 

PUP.Optional.Astromenda, C:\Program Files (x86)\WSE_Astromenda\uninstall.exe, Quarantined, [d5222aece696a98dd32e9e73bc470000], 

PUP.Optional.Astromenda, C:\Program Files (x86)\WSE_Astromenda\BRS\brs.exe, Quarantined, [d5222aece696a98dd32e9e73bc470000], 

PUP.Optional.Astromenda, C:\Program Files (x86)\WSE_Astromenda\BRS\Sqlite3.dll, Quarantined, [d5222aece696a98dd32e9e73bc470000], 

PUP.Optional.Astromenda.A, C:\Users\Mitch\AppData\Roaming\WSE_Astromenda\icons_3.2.1.5\ctr.ico, Quarantined, [63945eb8bebef640ad6dfb16659e926e], 

PUP.Optional.Astromenda.A, C:\Users\Mitch\AppData\Roaming\WSE_Astromenda\UpdateProc\info.dat, Quarantined, [63945eb8bebef640ad6dfb16659e926e], 

PUP.Optional.Astromenda.A, C:\Users\Mitch\AppData\Roaming\WSE_Astromenda\UpdateProc\STTL.DAT, Quarantined, [63945eb8bebef640ad6dfb16659e926e], 

PUP.Optional.Astromenda.A, C:\Users\Mitch\AppData\Roaming\WSE_Astromenda\UpdateProc\TTL.DAT, Quarantined, [63945eb8bebef640ad6dfb16659e926e], 

PUP.Optional.Astromenda.A, C:\Users\Mitch\AppData\Roaming\WSE_Astromenda\UpdateProc\UpdateTask.exe, Quarantined, [63945eb8bebef640ad6dfb16659e926e], 

 

Physical Sectors: 0

(No malicious items detected)

 

 

(end)

[Maurice Naggar]

OK.  That run got rid of a lot of PUP potentially unwanted programs.

 

Highly suggest:   Pay close attention when installing 3rd-party programs.

It is important that you pay attention to the license agreements and installation screens when installing anything off of the Internet.

If an installation screen offers you Custom or Advanced installation options, it is a good idea to select these as they will typically disclose what other 3rd party software will also be installed. Furthermore, If the license agreement or installation screens state that they are going to install a toolbar or other unwanted adware, it is advised that you cancel the install and not use the free software.

 

This next is a quick tool, and is a good idea to run, as well.

Download and SAVE Shortcut Cleaner to your Desktop from http://www.bleepingcomputer.com/download/shortcut-cleaner/dl/172/
On Windows 7 / 8 / Vista, do a Right-click on it and select Run as Administrator.
On Windows XP, double-click to start.

When all done, attach  "sc-cleaner.txt"   into a reply.

 

Then also tell me, How is the system now ?

[diurnal]

hi,

 

yes i think thats what happened is i install 3rd party software and that got the malware. everything is working great!

 

Shortcut Cleaner 1.3.3 by Lawrence Abrams (Grinler)

http://www.bleepingcomputer.com/

Copyright 2008-2014 BleepingComputer.com

More Information about Shortcut Cleaner can be found at this link:

 http://www.bleepingcomputer.com/download/shortcut-cleaner/

 

Windows Version: Windows 8.1 

Program started at: 10/21/2014 06:36:44 PM.

 

Scanning for registry hijacks:

 

 * No issues found in the Registry.

 

Searching for Hijacked Shortcuts:

 

Searching C:\Users\Mitch\AppData\Roaming\Microsoft\Windows\Start Menu\

 

Searching C:\ProgramData\Microsoft\Windows\Start Menu\

 

Searching C:\Users\Mitch\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\

 

Searching C:\Users\Public\Desktop\

 

Searching C:\Users\Mitch\Desktop

 

 

0 bad shortcuts found.

 

Program finished at: 10/21/2014 06:36:45 PM

Execution time: 0 hours(s), 0 minute(s), and 0 seconds(s)

[Maurice Naggar]

I am glad to hear that all is well.

Very good. We can wrap up this case.

The following procedures will implement some cleanup procedures to remove the tools I had you use.

Download Delfix from http://windowsupdate.microsoft.com]Windows Update and install any Important Updates offered.

Make certain that Automatic Updates is enabled.
How to configure and use Automatic Updates in Windows
http://support.microsoft.com/kb/306525

Pay close attention when installing 3rd-party programs. It is important that you pay attention to the license agreements and installation screens when installing anything off of the Internet. If an installation screen offers you Custom or Advanced installation options, it is a good idea to select these as they will typically disclose what other 3rd party software will also be installed. Furthermore, If the license agreement or installation screens state that they are going to install a toolbar or other unwanted adware, it is advised that you cancel the install and not use the free software.

Check on other update issues as well, by getting, installing and using Secunia Personal Software Inspector (PSI) on a monthly basis.
See How to detect vulnerable and out-dated programs using Secunia Personal Software Inspector
http://www.bleepingcomputer.com/tutorials/tutorial174.html
 
 
Download, install, and keep updated Spyware Blaster (free): http://www.brightfort.com/spywareblaster.html
(all Protections should be enabled at all times)
Tutorial for Spywareblaster: Using SpywareBlaster to protect your computer from Spyware, Hijackers, and Malware
http://www.bleepingcomputer.com/tutorials/use-spywareblaster-to-protect-your-computer/


 Make regular backups of your system to removable media: DVD, USB external hard drive, etc.
Having a total image backup of your system stored on DVD/CD is highly important.
Get and make use of imaging-backup utilities and save them to offline media. That way you have something to fall back to if a disaster hits.
 
Consider using Web of Trust    WOT add-on for your browser(s)
http://www.mywot.com/en/download
http://www.mywot.com/en/faq/add-on

Take extreme care if you share USB-flash/thumb drives from other people {even from friends, roommates, relatives}
Don't plug in an unknown flash/thumb drive into your PC.
IF you must do so, hold down the SHIFT-key when you insert the drive.
Scan any file with your Antivirus prior to opening or using.
 

[AdvancedSetup]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!