[ali.B]

did you run cmd as administrator ?

[Advertisements]

How would I know that

I have admin privelidges I believe

How would I check that

[lando78]

How would I know that

I have admin privelidges I believe

How would I check that

[ali.B]

You need to right click cmd.exe and select "Run As Administrator"

See Here for a example.

[lando78]

Well Done back to normal no error messages

Should we run malware etc now?

[ali.B]

hi

good

Download ComboFix here :

Link 1
Link 2


* IMPORTANT !!! Save ComboFix.exe to your Desktop

• Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. Here is a guide on how to disable them
  
  Click me
  
  
• Double click on ComboFix.exe & follow the prompts.
  
  
• As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
  
  
• Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:




Click on Yes, to continue scanning for malware.

When finished, it shall produce a log for you. Please include the C:\ComboFix.txt log in your next reply.

[lando78]

all went to plan until your log part.

As a few programmes started like Skype etc on Start up automatically

Anyway the log

ComboFix 10-06-14.03 - acer 15/06/2010 17:59:54.1.2 - x86
Microsoft® Windows Vista™ Ultimate 6.0.6002.2.1253.30.1033.18.3069.1783 [GMT 3:00]
Running from: c:\users\acer\Desktop\ComboFix.exe
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\jestertb.dll
c:\windows\struct~.ini
c:\windows\system32\pthreadVC.dll
c:\windows\system32\system

.
((((((((((((((((((((((((( Files Created from 2010-05-15 to 2010-06-15 )))))))))))))))))))))))))))))))
.

2010-06-15 15:10 . 2010-06-15 15:10 -------- d-----w- c:\users\Nikoula\AppData\Local\temp
2010-06-15 15:10 . 2010-06-15 15:10 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-06-15 14:41 . 2010-05-04 19:38 834560 ----a-w- c:\windows\system32\wininet.dll
2010-06-14 14:50 . 2010-06-14 14:50 -------- d-----w- c:\program files\Trojan Remover
2010-06-14 14:50 . 2010-06-14 14:50 -------- d-----w- c:\users\acer\AppData\Roaming\Simply Super Software
2010-06-14 14:50 . 2010-06-14 14:50 -------- d-----w- c:\programdata\Simply Super Software
2010-06-14 13:31 . 2010-06-14 13:32 -------- d-----w- c:\program files\ERUNT
2010-06-13 19:01 . 2010-06-13 19:01 -------- d-----w- c:\users\acer\Option
2010-06-10 15:19 . 2010-06-10 15:20 -------- d-----w- c:\users\acer\AppData\Local\ISL Online Cache
2010-06-09 15:53 . 2010-04-05 17:01 67072 ----a-w- c:\windows\system32\asycfilt.dll
2010-06-09 15:53 . 2010-05-26 17:06 34304 ----a-w- c:\windows\system32\atmlib.dll
2010-06-09 15:53 . 2010-05-26 14:47 289792 ----a-w- c:\windows\system32\atmfd.dll
2010-06-09 15:53 . 2010-05-04 18:37 78336 ----a-w- c:\windows\system32\ieencode.dll
2010-06-09 15:53 . 2010-05-01 14:13 2037248 ----a-w- c:\windows\system32\win32k.sys
2010-06-03 15:35 . 2008-04-07 02:38 22872 ----a-r- c:\windows\system32\AdobePDFUI.dll
2010-06-03 15:35 . 2008-04-07 02:38 45392 ----a-r- c:\windows\system32\AdobePDF.dll
2010-06-03 14:54 . 2010-06-15 15:12 -------- d-----w- c:\program files\Common Files\Akamai
2010-06-02 13:43 . 2010-06-02 13:43 -------- d-----w- c:\users\acer\AppData\Roaming\Adobe Mini Bridge CS5
2010-06-02 13:43 . 2010-06-02 13:43 -------- d-----w- c:\users\acer\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
2010-06-01 18:17 . 2010-06-01 18:17 -------- d-----w- c:\users\acer\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
2010-06-01 16:46 . 2010-06-01 16:46 -------- d-----w- c:\programdata\regid.1986-12.com.adobe
2010-05-28 10:58 . 2010-06-01 14:31 -------- d-----w- c:\users\acer\AppData\Roaming\FMZilla
2010-05-28 10:58 . 2010-06-01 14:31 -------- d-----w- c:\program files\Free Music Zilla
2010-05-28 10:55 . 2010-05-28 10:55 -------- d-----w- c:\users\acer\AppData\Roaming\OpenCandy
2010-05-27 10:12 . 2010-05-27 13:31 -------- d-----w- c:\users\acer\AppData\Roaming\SmartDraw
2010-05-27 09:58 . 2010-05-27 10:12 -------- d-----w- C:\SmartDraw VP
2010-05-25 17:50 . 2010-04-23 14:13 2048 ----a-w- c:\windows\system32\tzres.dll
2010-05-22 22:18 . 2010-05-22 22:18 411368 ----a-w- c:\windows\system32\deployJava1.dll
2010-05-22 22:18 . 2010-05-22 22:18 -------- d-----w- c:\program files\Java

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-06-15 15:16 . 2009-10-07 02:04 -------- d-----w- c:\users\acer\AppData\Roaming\Skype
2010-06-15 15:12 . 2009-09-15 12:29 227078 ----a-w- c:\programdata\nvModes.dat
2010-06-15 15:10 . 2009-09-21 19:18 12 ----a-w- c:\windows\bthservsdp.dat
2010-06-15 14:50 . 2009-10-02 08:59 552704 ----a-w- c:\windows\system32\perfh008.dat
2010-06-15 14:50 . 2009-10-02 08:59 88502 ----a-w- c:\windows\system32\perfc008.dat
2010-06-15 14:45 . 2009-10-07 02:05 -------- d-----w- c:\users\acer\AppData\Roaming\skypePM
2010-06-14 16:35 . 2009-10-10 06:12 8268 ----a-w- c:\users\acer\AppData\Local\d3d9caps.dat
2010-06-14 12:12 . 2009-12-16 19:07 -------- d-----w- c:\programdata\AVG Security Toolbar
2010-06-10 22:45 . 2009-10-07 02:24 -------- d-----w- c:\programdata\Google Updater
2010-06-10 00:55 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2010-06-10 00:38 . 2008-03-30 12:49 -------- d-----w- c:\programdata\Microsoft Help
2010-06-06 21:36 . 2009-09-24 21:35 -------- d-----w- c:\users\acer\AppData\Roaming\vlc
2010-06-06 19:57 . 2009-10-11 20:48 -------- d-----w- c:\users\acer\AppData\Roaming\dvdcss
2010-06-03 18:16 . 2009-09-15 12:29 107000 ----a-w- c:\users\acer\AppData\Local\GDIPFONTCACHEV1.DAT
2010-06-03 15:36 . 2008-03-30 12:48 -------- d-----w- c:\program files\Common Files\Adobe
2010-06-03 10:47 . 2008-03-30 12:24 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-06-03 10:10 . 2008-03-30 13:00 -------- d-----w- c:\program files\Cyberlink
2010-06-03 09:48 . 2010-06-03 09:48 29512 ----a-w- c:\programdata\avg9\update\backup\avgmfx86.sys
2010-06-03 09:48 . 2010-06-03 09:48 242896 ----a-w- c:\programdata\avg9\update\backup\avgtdix.sys
2010-06-03 09:47 . 2009-12-16 19:07 242896 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2010-06-03 09:47 . 2009-12-16 19:07 29584 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
2010-06-02 20:36 . 2009-09-22 18:00 -------- d-----w- c:\program files\Opera
2010-06-01 12:14 . 2008-03-30 12:57 -------- d-----w- c:\program files\Yahoo!
2010-06-01 12:07 . 2009-10-07 02:13 -------- d-----w- c:\users\acer\AppData\Roaming\Orbit
2010-06-01 12:06 . 2010-02-20 23:52 -------- d-----w- c:\programdata\Nero
2010-06-01 12:06 . 2010-02-20 23:52 -------- d-----w- c:\program files\Common Files\Nero
2010-06-01 11:51 . 2010-02-20 23:53 -------- d-----w- c:\program files\Nero
2010-06-01 11:48 . 2008-03-30 12:36 -------- d-----w- c:\program files\Acer GameZone
2010-06-01 11:46 . 2009-10-26 23:57 -------- d-----w- c:\program files\DivX
2010-06-01 11:46 . 2009-10-07 02:14 -------- d-----w- c:\program files\DVDVideoSoft
2010-06-01 11:46 . 2009-10-07 02:14 -------- d-----w- c:\program files\Common Files\DVDVideoSoft
2010-06-01 10:58 . 2010-04-07 12:14 -------- d-----w- c:\programdata\PrettyMay
2010-05-28 17:47 . 2009-10-07 02:24 -------- d-----w- c:\program files\Google
2010-05-28 10:56 . 2010-05-28 10:55 939909 ----a-w- c:\users\acer\AppData\Roaming\OpenCandy\OpenCandy_D86C6D5358CB45399D07ABE3D76F0921\FreeMusicZillaWrapped.exe
2010-05-28 09:52 . 2010-02-24 20:59 -------- d-----w- c:\program files\Radio_Bar_2
2010-05-24 20:02 . 2010-04-30 22:58 -------- d-----w- c:\programdata\DivX
2010-05-24 20:01 . 2009-10-26 23:57 -------- d-----w- c:\program files\Common Files\DivX Shared
2010-05-24 20:01 . 2009-10-26 23:58 -------- d-----w- c:\program files\Common Files\PX Storage Engine
2010-05-12 13:16 . 2010-05-10 09:17 -------- d-----w- c:\users\acer\AppData\Roaming\U3
2010-05-12 09:29 . 2010-05-12 09:29 2560 ----a-w- c:\windows\_MSRSTRT.EXE
2010-05-12 09:21 . 2009-10-03 23:29 -------- d-----w- c:\program files\COSMOTE
2010-05-03 22:43 . 2010-05-01 18:51 57344 ----a-w- c:\programdata\DivX\RunAsUser\RUNASUSERPROCESS.dll
2010-05-01 18:48 . 2009-10-26 23:58 -------- d-----w- c:\users\acer\AppData\Roaming\DivX
2010-04-30 22:58 . 2010-05-01 18:48 1180952 ----a-w- c:\programdata\DivX\Setup\DivXSetup.exe
2010-04-29 18:47 . 2010-04-29 18:47 3600384 ----a-w- c:\windows\system32\GPhotos.scr
2010-04-27 09:41 . 2010-01-31 00:29 -------- d-----w- c:\programdata\PlayMovie
2010-04-27 09:41 . 2010-01-31 00:28 -------- d-----w- c:\users\acer\AppData\Roaming\SoftDMA
2010-04-27 01:13 . 2010-01-30 22:36 36864 ----a-w- c:\programdata\TEMP\{AAF84FAD-5236-4A83-BA62-7D098FE1B8FA}\PostBuild.exe
2010-04-27 01:13 . 2009-09-15 12:42 -------- d-----w- c:\programdata\CyberLink
2010-04-27 01:12 . 2010-01-30 22:35 53319 ----a-w- c:\programdata\TEMP\{5DB1DF0C-AABC-4362-8A6D-CEFDFB036E41}\PostBuild.exe
2010-04-22 10:56 . 2010-04-22 10:56 -------- d-----w- c:\programdata\NtiDvdCopy
2010-04-21 18:07 . 2009-09-21 21:14 -------- d-----w- c:\users\acer\AppData\Roaming\CyberLink
2010-04-21 12:57 . 2010-04-21 12:57 -------- d-----w- c:\programdata\Gretech
2010-04-21 12:57 . 2009-09-22 20:16 -------- d-----w- c:\users\acer\AppData\Roaming\GRETECH
2010-04-21 08:54 . 2010-04-21 08:54 -------- d-----w- c:\programdata\Office Genuine Advantage
2010-04-19 15:45 . 2010-04-19 15:44 -------- d-----w- c:\users\acer\AppData\Roaming\Epson
2010-04-19 15:34 . 2010-04-19 15:22 -------- d-----w- c:\programdata\EPSON
2010-04-19 15:30 . 2010-04-19 15:30 -------- d-----w- c:\programdata\UDL
2010-04-19 15:30 . 2010-04-19 15:27 -------- d-----w- c:\program files\Epson Software
2010-04-19 15:27 . 2010-04-19 15:20 -------- d-----w- c:\program files\epson
2010-04-19 15:26 . 2010-04-19 15:26 -------- d-----w- c:\program files\ABBYY FineReader 6.0 Sprint
2010-04-19 15:15 . 2010-01-31 20:10 8224 ----a-w- c:\users\Nikoula\AppData\Local\GDIPFONTCACHEV1.DAT
2010-04-19 07:25 . 2010-06-14 12:12 2117704 ----a-w- c:\programdata\AVG Security Toolbar\IEToolbar.dll
2010-04-07 12:13 . 2010-04-07 12:13 53760 ----a-w- c:\programdata\Skype\Plugins\Plugins\962C58B9C93944A28A0B82EF9F85A392\zlib.dll
2010-04-07 12:13 . 2010-04-07 12:13 42496 ----a-w- c:\programdata\Skype\Plugins\Plugins\962C58B9C93944A28A0B82EF9F85A392\PrettyMayRemover.exe
2010-04-07 12:13 . 2010-04-07 12:13 40448 ----a-w- c:\programdata\Skype\Plugins\Plugins\962C58B9C93944A28A0B82EF9F85A392\PrettyMayLoader.exe
2010-04-07 12:13 . 2010-04-07 12:13 3690496 ----a-w- c:\programdata\Skype\Plugins\Plugins\962C58B9C93944A28A0B82EF9F85A392\PrettyMay.exe
2010-04-07 12:13 . 2010-04-07 12:13 2273280 ----a-w- c:\programdata\Skype\Plugins\Plugins\962C58B9C93944A28A0B82EF9F85A392\dsound.dll
2010-04-07 12:13 . 2010-04-07 12:13 940032 ----a-w- c:\programdata\Skype\Plugins\Plugins\962C58B9C93944A28A0B82EF9F85A392\dbghelp.dll
2010-04-07 12:13 . 2010-04-07 12:13 325120 ----a-w- c:\programdata\Skype\Plugins\Plugins\962C58B9C93944A28A0B82EF9F85A392\CrashRpt.dll
2010-04-07 12:13 . 2010-04-07 12:13 2249728 ----a-w- c:\programdata\Skype\Plugins\Plugins\962C58B9C93944A28A0B82EF9F85A392\audioses.dll
2010-03-26 06:21 . 2010-05-22 22:34 12255080 ----a-w- c:\users\acer\AppData\Roaming\Mozilla\Firefox\Profiles\r0rduc4t.default\extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}\plugins\npGarmin.dll
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{fc600575-3013-4e8e-941c-4b00dafce730}"= "c:\program files\myBabylon_English4\tbmyB1.dll" [2009-11-20 2166296]
"{A3BC75A2-1F87-4686-AA43-5347D756017C}"= "c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll" [2010-04-19 2117704]
"{9bb815eb-3f9f-4e11-9150-cb70e29b40fc}"= "c:\program files\Radio_Bar_2\tbRad1.dll" [2010-05-28 2515552]

[HKEY_CLASSES_ROOT\clsid\{fc600575-3013-4e8e-941c-4b00dafce730}]

[HKEY_CLASSES_ROOT\clsid\{a3bc75a2-1f87-4686-aa43-5347d756017c}]

[HKEY_CLASSES_ROOT\clsid\{9bb815eb-3f9f-4e11-9150-cb70e29b40fc}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{9bb815eb-3f9f-4e11-9150-cb70e29b40fc}]
2010-05-28 09:53 2515552 ----a-w- c:\program files\Radio_Bar_2\tbRad1.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C}]
2010-04-19 07:25 2117704 ----a-w- c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{fc600575-3013-4e8e-941c-4b00dafce730}]
2009-11-20 13:09 2166296 ----a-w- c:\program files\myBabylon_English4\tbmyB1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{fc600575-3013-4e8e-941c-4b00dafce730}"= "c:\program files\myBabylon_English4\tbmyB1.dll" [2009-11-20 2166296]
"{CCC7A320-B3CA-4199-B1A6-9F516DD69829}"= "c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll" [2010-04-19 2117704]
"{9bb815eb-3f9f-4e11-9150-cb70e29b40fc}"= "c:\program files\Radio_Bar_2\tbRad1.dll" [2010-05-28 2515552]

[HKEY_CLASSES_ROOT\clsid\{fc600575-3013-4e8e-941c-4b00dafce730}]

[HKEY_CLASSES_ROOT\clsid\{ccc7a320-b3ca-4199-b1a6-9f516dd69829}]

[HKEY_CLASSES_ROOT\clsid\{9bb815eb-3f9f-4e11-9150-cb70e29b40fc}]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{FC600575-3013-4E8E-941C-4B00DAFCE730}"= "c:\program files\myBabylon_English4\tbmyB1.dll" [2009-11-20 2166296]
"{CCC7A320-B3CA-4199-B1A6-9F516DD69829}"= "c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll" [2010-04-19 2117704]
"{9BB815EB-3F9F-4E11-9150-CB70E29B40FC}"= "c:\program files\Radio_Bar_2\tbRad1.dll" [2010-05-28 2515552]

[HKEY_CLASSES_ROOT\clsid\{fc600575-3013-4e8e-941c-4b00dafce730}]

[HKEY_CLASSES_ROOT\clsid\{ccc7a320-b3ca-4199-b1a6-9f516dd69829}]

[HKEY_CLASSES_ROOT\clsid\{9bb815eb-3f9f-4e11-9150-cb70e29b40fc}]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2008-03-05 06:38 121392 ----a-w- c:\program files\Acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]
"WindowsWelcomeCenter"="oobefldr.dll" [2009-04-11 2153472]
"AdobeBridge"="d:\adobe\Adobe Bridge CS5\Bridge.exe" [2010-03-09 11989960]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-10-07 39408]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2009-09-14 25623336]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-21 1008184]
"RtHDVCpl"="RtHDVCpl.exe" [2008-03-11 5296128]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-04-04 1037608]
"ePower_DMC"="c:\program files\Acer\Empowering Technology\ePower\ePower_DMC.exe" [2008-03-12 397312]
"eDataSecurity Loader"="c:\program files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe" [2008-03-05 526896]
"eAudio"="c:\program files\Acer\Empowering Technology\eAudio\eAudio.exe" [2008-03-07 544768]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-03-08 40048]
"BkupTray"="c:\program files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe" [2008-02-26 34040]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-04-23 13535776]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-04-23 92704]
"WarReg_PopUp"="c:\program files\Acer\WR_PopUp\WarReg_PopUp.exe" [2008-01-29 303104]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2007-10-03 178712]
"ZPdtWzdVitaKey MC3000"="c:\program files\Acer\Acer Bio Protection\PdtWzd.exe" [2009-09-15 3659264]
"PLFSetI"="c:\windows\PLFSetI.exe" [2007-10-23 200704]
"LManager"="c:\progra~1\LAUNCH~1\LManager.exe" [2008-04-28 809480]
"ArcadeDeluxeAgent"="c:\program files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe" [2009-09-07 152872]
"AdobeCS4ServiceManager"="c:\program files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [2008-08-14 611712]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
"Skytel"="Skytel.exe" [2007-11-20 1826816]
"Google Quick Search Box"="c:\program files\Google\Quick Search Box\GoogleQuickSearchBox.exe" [2009-11-20 122880]
"AVG9_TRAY"="c:\progra~1\AVG\AVG9\avgtray.exe" [2010-06-03 2065248]
"PlayMovie"="c:\program files\Acer Arcade Deluxe\PlayMovie\PMVService.exe" [2009-05-21 173288]
"EEventManager"="c:\progra~1\EPSONS~1\EVENTM~1\EEventManager.exe" [2008-12-04 665424]
"CLMLServer"="c:\program files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe" [2009-09-07 206120]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040]
"AdobeAAMUpdater-1.0"="c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208]
"SwitchBoard"="c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"AdobeCS5ServiceManager"="c:\program files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-02-22 406992]
"Adobe Acrobat Speed Launcher"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe" [2008-06-11 37232]
"Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe" [2008-06-11 640376]

c:\users\acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
ERUNT AutoBackup.lnk - c:\program files\ERUNT\AUTOBACK.EXE [2005-10-20 38912]
OneNote 2007 Screen Clipper and Launcher.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Acer VCM.lnk - c:\program files\Acer\Acer VCM\AcerVCM.exe [2009-9-15 1216512]
AVer HID Receiver.lnk - c:\program files\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe [2010-1-30 159744]
AVerQuick.lnk - c:\program files\Common Files\AVerMedia\AVerQuick\AVerQuick.exe [2010-1-30 651264]
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2007-4-24 723760]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\AWinNotifyVitaKey MC3000]
2009-09-15 12:33 3024896 ----a-w- c:\program files\Acer\Acer Bio Protection\WinNotify.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\System32\avgrsstx.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiSpyware]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"VistaSp2"=hex(b):fb,03,cc,e1,fe,62,ca,01

R2 AVGIDSAgent;AVG9IDSAgent;c:\program files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe AVGIDSAgent [x]
R2 gupdate;Υπηρεσία Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2009-10-07 133104]
R3 AVerPola;AVerMedia USB Polaris Series Capture Service;c:\windows\system32\DRIVERS\AVerPola.sys [2009-06-19 317056]
R3 AVPolCIR;AVerMedia USB Polaris Series Custom IR Service;c:\windows\system32\DRIVERS\AVPolCIR.sys [2009-06-19 33792]
R3 massfilter;ZTE Mass Storage Filter Driver;c:\windows\system32\drivers\massfilter.sys [2009-04-27 9216]
R3 SwitchBoard;SwitchBoard;c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 ubloxusb;ubloxusb;c:\windows\system32\DRIVERS\ubloxusb.sys [2008-09-11 75264]
R4 PuranDefrag;PuranDefrag;c:\windows\system32\PuranDefragS.exe [2010-02-10 233472]
S0 AlfaFF;AlfaFF File System mini-filter;c:\windows\system32\Drivers\AlfaFF.sys [2009-09-15 43184]
S0 AVGIDSErHrvtx;AVG9IDSErHr;c:\windows\System32\Drivers\AVGIDSvx.sys [2010-03-13 25096]
S0 AvgRkx86;avgrkx86.sys;c:\windows\System32\Drivers\avgrkx86.sys [2010-03-13 52872]
S1 AvgLdx86;AVG AVI Loader Driver x86;c:\windows\System32\Drivers\avgldx86.sys [2010-03-13 216200]
S1 AvgTdiX;AVG Network Redirector;c:\windows\System32\Drivers\avgtdix.sys [2010-06-03 242896]
S2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796};Power Control [2010/01/31 00:55];c:\program files\Acer Arcade Deluxe\PlayMovie\000.fcl [2009-09-11 15:43 87536]
S2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe [2008-01-21 21504]
S2 AVerRemote;AVerRemote;c:\program files\Common Files\AVerMedia\Service\AVerRemote.exe [2009-04-08 344064]
S2 AVerScheduleService;AVerScheduleService;c:\program files\Common Files\AVerMedia\Service\AVerScheduleService.exe [2008-12-09 405504]
S2 avg9wd;AVG WatchDog;c:\program files\AVG\AVG9\avgwdsvc.exe [2010-03-13 308064]
S2 BUNAgentSvc;NTI Backup Now 5 Agent Service;c:\program files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe [2008-02-26 21752]
S2 CLHNService;CLHNService;c:\program files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe [2009-04-16 75048]
S2 ETService;Empowering Technology Service;c:\program files\Acer\Empowering Technology\Service\ETService.exe [2008-03-21 24576]
S2 IGBASVC;iGroupTec Service;c:\program files\Acer\Acer Bio Protection\BASVC.exe [2009-09-15 3474432]
S2 NTIBackupSvc;NTI Backup Now 5 Backup Service;c:\program files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [2008-02-25 49152]
S2 NTIPPKernel;NTIPPKernel;c:\program files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\NTIPPKernel.sys [2008-01-16 122368]
S2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service;c:\program files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [2008-02-26 131072]
S2 RS_Service;Raw Socket Service;c:\program files\Acer\Acer VCM\RS_Service.exe [2008-01-10 233472]
S2 vfsFPService;Validity Fingerprint Service;c:\windows\system32\vfsFPService.exe [2008-04-22 599344]
S3 AVGIDSDrivervtx;AVG9IDSDriver;c:\program files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_Vista\AVGIDSDriver.sys [2010-03-13 122376]
S3 AVGIDSFiltervtx;AVG9IDSFilter;c:\program files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_Vista\AVGIDSFilter.sys [2010-03-13 30216]
S3 AVGIDSShimvtx;AVG9IDSShim;c:\program files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_Vista\AVGIDSShim.sys [2010-03-13 27144]
S3 itecir;ITECIR Infrared Receiver;c:\windows\system32\DRIVERS\itecir.sys [2007-12-19 54784]
S3 JMCR;JMCR;c:\windows\system32\DRIVERS\jmcr.sys [2008-04-11 84240]
S3 NETw5v32;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\DRIVERS\NETw5v32.sys [2008-11-17 3668480]
S3 vfs101x;vfs101x;c:\windows\system32\drivers\vfs101x.sys [2008-04-22 40752]


[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs REG_MULTI_SZ BthServ
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
Akamai REG_MULTI_SZ Akamai

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{7070D8E0-650A-46b3-B03C-9497582E6A74}]
2008-04-11 14:23 38400 ----a-w- c:\windows\System32\SoundSchemes.exe

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{B3688A53-AB2A-4b1d-8CEF-8F93D8C51C24}]
2008-08-28 07:50 30720 ----a-w- c:\windows\System32\soundschemes2.exe
.
Contents of the 'Scheduled Tasks' folder

2010-06-15 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-10-07 02:24]

2010-06-15 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-10-07 02:26]

2010-06-15 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-10-07 02:26]

2010-06-15 c:\windows\Tasks\User_Feed_Synchronization-{1D3FDBA0-38E5-4EB0-98CC-2AB56FB84E2D}.job
- c:\windows\system32\msfeedssync.exe [2008-01-21 02:23]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://search.orbitdownloader.com
uDefault_Search_URL = hxxp://www.google.com/ie
mStart Page = hxxp://el.intl.acer.yahoo.com
uInternet Settings,ProxyOverride = local
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: Append Link Target to Existing PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Append to Existing PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert Link Target to Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert to Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
IE: Send image to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
FF - ProfilePath - c:\users\acer\AppData\Roaming\Mozilla\Firefox\Profiles\r0rduc4t.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://search.orbitdownloader.com
FF - prefs.js: keyword.URL - hxxp://us.yhs.search.yahoo.com/avg/search?fr=yhs-avg&type=yahoo_avg_hs2-tb-web_us&p=
FF - component: c:\program files\AVG\AVG9\Firefox\components\avgssff.dll
FF - component: c:\program files\AVG\AVG9\Toolbar\Firefox\avg@igeared\components\IGeared_tavgp_xputils2.dll
FF - component: c:\program files\AVG\AVG9\Toolbar\Firefox\avg@igeared\components\IGeared_tavgp_xputils3.dll
FF - component: c:\program files\AVG\AVG9\Toolbar\Firefox\avg@igeared\components\IGeared_tavgp_xputils35.dll
FF - component: c:\program files\AVG\AVG9\Toolbar\Firefox\avg@igeared\components\xpavgtbapi.dll
FF - plugin: c:\program files\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\Google\Google Updater\2.4.1487.6512\npCIDetect13.dll
FF - plugin: c:\program files\Google\Picasa3\npPicasa3.dll
FF - plugin: c:\program files\Google\Update\1.2.183.23\npGoogleOneClick8.dll
FF - plugin: c:\program files\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\program files\Opera\program\plugins\nporbit.dll
FF - plugin: c:\program files\Veetle\Player\npvlc.dll
FF - plugin: c:\program files\Veetle\plugins\npVeetle.dll
FF - plugin: c:\users\acer\AppData\Roaming\Mozilla\Firefox\Profiles\r0rduc4t.default\extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}\plugins\npGarmin.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- FIREFOX POLICIES ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pr
ef", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
.
- - - - ORPHANS REMOVED - - - -

HKLM-Run-eRecoveryService - (no file)
SafeBoot-mcmscsvc
SafeBoot-MCODS
AddRemove-Join (Merge, Combine) Multiple (or Two) HTML Fil~92653378_is1 - c:\program files\Join (Merge
AddRemove-{7B63B2922B174135AFC0E1377DD81EC2} - c:\program files\DivX\DivXCodecUninstall.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-06-15 18:14
Windows 6.0.6002 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\Akamai]
"ServiceDll"="C:/Program Files/Common Files/Akamai/rswin_3697.dll"

[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\Akamai]
"ServiceDll"="C:/Program Files/Common Files/Akamai/rswin_3697.dll"

[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\{49DE1C67-83F8-4102-99E0-C16DCC7EEC796}]
"ImagePath"="\??\c:\program files\Acer Arcade Deluxe\PlayMovie\000.fcl"
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'Explorer.exe'(3112)
c:\program files\Acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll
c:\program files\Acer\Empowering Technology\eDataSecurity\x86\sysenv.dll
c:\windows\system32\btmmhook.dll
c:\windows\System32\SysHook.dll
c:\program files\WIDCOMM\Bluetooth Software\btkeyind.dll
c:\windows\system32\btncopy.dll
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\nvvsvc.exe
c:\windows\system32\WLANExt.exe
c:\windows\system32\rundll32.exe
c:\program files\Acer\Acer Bio Protection\CompPtcVUI.exe
c:\windows\system32\agrsmsvc.exe
c:\program files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
c:\program files\Intel\WiFi\bin\EvtEng.exe
c:\program files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
c:\program files\AVG\AVG9\avgnsx.exe
c:\program files\Common Files\LightScribe\LSSrvc.exe
c:\acer\Mobility Center\MobilityService.exe
c:\program files\Common Files\Nero\Nero BackItUp 4\NBService.exe
c:\program files\Common Files\Intel\WirelessCommon\RegSrvc.exe
c:\windows\system32\wbem\unsecapp.exe
c:\windows\system32\conime.exe
c:\program files\AVG\AVG9\avgchsvx.exe
c:\program files\AVG\AVG9\avgrsx.exe
c:\program files\AVG\AVG9\avgcsrvx.exe
c:\windows\RtHDVCpl.exe
c:\windows\system32\wbem\unsecapp.exe
c:\windows\System32\rundll32.exe
c:\program files\Launch Manager\LManager.exe
c:\program files\AVG\AVG9\avgtray.exe
c:\program files\Epson Software\Event Manager\EEventManager.exe
c:\windows\ehome\ehmsas.exe
c:\program files\Acer\Acer Bio Protection\PwdBank.exe
c:\users\acer\AppData\Local\Temp\RtkBtMnt.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\windows\ehome\ehsched.exe
c:\program files\Acer\Acer VCM\acp2HID.exe
c:\windows\ehome\ehRecvr.exe
c:\program files\Synaptics\SynTP\SynTPHelper.exe
c:\program files\Windows Live\Contacts\wlcomm.exe
c:\program files\Opera\opera.exe
c:\program files\Acer\Empowering Technology\NotificationCenter\Framework.NotificationCenter.exe
.
**************************************************************************
.
Completion time: 2010-06-15 18:23:43 - machine was rebooted
ComboFix-quarantined-files.txt 2010-06-15 15:23

Pre-Run: 15.407.452.160 bytes free
Post-Run: 14.789.136.384 bytes free

- - End Of File - - 08B0CD618577CA49F3B50E36C85A9B36

[ali.B]

hi

two more scans

Step 1

Download TFC to your desktop

• Open the file and close any other windows.
• It will close all programs itself when run, make sure to let it run uninterrupted.
• Click the Start button to begin the process. The program should not take long to finish its job
• Once its finished it should reboot your machine, if not, do this yourself to ensure a complete clean

Step 2

Please download Malwarebytes' Anti-Malware from Here.

Double Click mbam-setup.exe to install the application.

• Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
• If an update is found, it will download and install the latest version.
• Once the program has loaded, select "Perform Quick Scan", then click Scan.
• The scan may take some time to finish,so please be patient.
• When the scan is complete, click OK, then Show Results to view the results.
• Make sure that everything is checked, and click Remove Selected.
• When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
• The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
• Copy&Paste the entire report in your next reply.

Extra Note:

If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediatly.


Step 3

Please download JavaRa to your desktop and unzip it to it's own folder

• Run JavaRa.exe, pick the language of your choice and click Select. Then click Remove Older Versions.
• Accept any prompts.
• Open JavaRa.exe again and select Search For Updates.
• Select Update Using Sun Java's Website then click Search and click on the Open Webpage button. Download and install the latest Java Runtime Environment (JRE) version for your computer.

Next

Using Internet Explorer or Firefox, visit Kaspersky Online Scanner

1. Click Accept, when prompted to download and install the program files and database of malware definitions.

2. To optimize scanning time and produce a more sensible report for review:

• Close any open programs
• Turn off the real time scanner of any existing antivirus program while performing the online scan. Click HERE to see how to disable the most common antivirus programs.

3. Click Run at the Security prompt.

The program will then begin downloading and installing and will also update the database.
Please be patient as this can take quite a long time to download.

• Once the update is complete, click on Settings.
• Make sure these boxes are checked (ticked). If they are not, please tick them and click on the Save button:
  • Spyware, adware, dialers, and other riskware
  • Archives
  • E-mail databases
• Click on My Computer under the green Scan bar to the left to start the scan.
• Once the scan is complete, it will display if your system has been infected. It does not provide an option to clean/disinfect. We only require a report from it.
• Do NOT be alarmed by what you see in the report. Many of the finds have likely been quarantined.
• Click View report... at the bottom.
• Click the Save report... button.
  
  
  
  
• Change the Files of type dropdown box to Text file (.txt) and name the file KasReport.txt to save the file to your desktop so that you may post it in your next reply

Things i would like to see in your reply:

• Malwarebytes Results.
• Kaspersky WebScanner Report
• Update on how your computer is running

[lando78]

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 4200

Windows 6.0.6002 Service Pack 2
Internet Explorer 7.0.6002.18005

15/6/2010 6:56:44 μμ
mbam-log-2010-06-15 (18-56-44).txt

Scan type: Quick scan
Objects scanned: 149824
Time elapsed: 5 minute(s), 25 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

[lando78]

I'm on step three
but th link keeps diverting to orbitdownloader page which I must have installed. So I can't download Java part yet

[ali.B]

hi

let's upgrade java in another way.

Upgrading Java :

• Download the latest version of Java SE Runtime Environment (JRE)JRE 6 Update 20 .
• Click the JDK 6 Update 20 (JDK or JRE) "Download JRE" button to the right.
• Select your Platform, Register and check the box that says: "I agree to the Java SE Runtime Environment 6 License Agreement.".
• Click on Continue.
• Click on the link to download Windows Offline Installation ( jre-6u20-windows-i586.exe) and save it to your desktop. Do NOT use the Sun Download Manager..
• Close any programs you may have running - especially your web browser.
• Go to Start > Control Panel, double-click on Add/Remove programs and remove all older versions of Java.
• Check any item with Java Runtime Environment (JRE or J2SE) in the name.
• Click the Remove or Change/Remove button.
• Repeat as many times as necessary to remove each Java version.
• Reboot your computer once all Java components are removed.
• Then from your desktop double-click on the download to install the newest version.(Vista users, right click on the jre-6u20-windows-i586.exe and select "Run as an Administrator.")

[/LIST]

[lando78]

I upgraded Java using the first way u gave me eventully

I now need to know if I can use my default browser Opera to do the Kasp online scan.

What are your views on Opera?

[ali.B]

hi

it should work with opera give it a shot

[lando78]

Attention! Kaspersky Online Scanner 7.0 may fail to start if another anti-virus program is already installed and running on your computer. Please deactivate the anti-virus software installed on your computer prior to starting Kaspersky Online Scanner 7.0.


I have AVG 9 Free Version

[ali.B]

the statement is very clear, deactivate your AVG antivirus before running the online scanner so it can work without interruption.

Edited by ali.B, 15 June 2010 - 11:01 AM.

[lando78]

But I did already before in the first parts of our diagnosys