[CompCav]

Ahh yes a sneaky one with an incomplete install.

Go here and follow the manual uninstall instructions.

Here are a couple of explanatory notes:

3. Save as like they said and make sure you save it on your desktop.

9. Use the Vista instructions, Windows 7 is a glorified Vista Service Pack in many ways.


Regards,

CompCav

[muckypup]

10. Delete the Chrome folder in the directory that opens.

there is no Chrome folder in there?

[muckypup]

ignore that, it was hidden in the Google folder!

[muckypup]

Malwarebytes Anti-Malware 1.61.0.1400
www.malwarebytes.org

Database version: v2012.05.18.09

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 8.0.7601.17514
Paul :: PAUL-PC [administrator]

19/05/2012 01:32:40
mbam-log-2012-05-19 (01-32-40).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 200695
Time elapsed: 12 minute(s), 21 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 14
HKCR\CLSID\{1E0DE227-5CE4-4ea3-AB0C-8B03E1AA76BC} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\Typelib\{D518921A-4A03-425E-9873-B9A71756821E} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\Interface\{CF54BE1C-9359-4395-8533-1657CF209CFE} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\Typelib\{E47CAEE0-DEEA-464A-9326-3F2801535A4D} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\Interface\{3E1656ED-F60E-4597-B6AA-B6A58E171495} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\Typelib\{F42228FB-E84E-479E-B922-FBBD096E792C} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\Interface\{6E74766C-4D93-4CC0-96D1-47B8E07FF9CA} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\MyWebSearch.SkinLauncher (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\MyWebSearch.SkinLauncher.1 (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\MyWebSearch.SkinLauncherSettings (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\MyWebSearch.SkinLauncherSettings.1 (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\MyWebSearch.ThirdPartyInstaller (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\MyWebSearch.ThirdPartyInstaller.1 (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll (PUP.MyWebSearch) -> Quarantined and deleted successfully.

Registry Values Detected: 1
HKLM\SOFTWARE\Microsoft\Windows Media\WMSDK\Sources|f3PopularScreensavers (PUP.MyWebSearch) -> Data: C:\Program Files\MyWebSearch\bar\1.bin\F3SCRCTR.DLL -> Quarantined and deleted successfully.

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)

Gonna run the ESET scanner, but going to bed while it works. thanks for your help today, i'll post more tomorrow.

[CompCav]

Great job


Have a good night's rest and I look forward to hearing from you tomorrow.

[muckypup]

good morning!

ESETSmartInstaller@High as CAB hook log:
OnlineScanner.ocx - registred OK
# version=7
# iexplore.exe=8.00.7600.16385 (win7_rtm.090713-1255)
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=e43dc3677cf88f4694e7d2b7b8411806
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2012-05-19 01:10:42
# local_time=2012-05-19 02:10:42 (+0000, GMT Daylight Time)
# country="United Kingdom"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776574 100 94 8344 89856053 0 0
# compatibility_mode=8192 67108863 100 0 274 274 0 0
# scanned=161
# found=0
# cleaned=0
# scan_time=180
esets_scanner_update returned -1 esets_gle=53251
# version=7
# iexplore.exe=8.00.7600.16385 (win7_rtm.090713-1255)
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=e43dc3677cf88f4694e7d2b7b8411806
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2012-05-19 03:32:18
# local_time=2012-05-19 04:32:18 (+0000, GMT Daylight Time)
# country="United Kingdom"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776574 100 94 8597 89856306 0 0
# compatibility_mode=8192 67108863 100 0 527 527 0 0
# scanned=57151
# found=3
# cleaned=0
# scan_time=8421
C:\Users\Paul\Downloads\cheat engine setup (1).exe a variant of Win32/Soft32Downloader.A application (unable to clean) 00000000000000000000000000000000 I
C:\Users\Paul\Downloads\cheat engine setup.exe a variant of Win32/Soft32Downloader.A application (unable to clean) 00000000000000000000000000000000 I
C:\Users\Paul\Downloads\CheatEngine61.exe multiple threats (unable to clean) 00000000000000000000000000000000 I

[muckypup]

Results of screen317's Security Check version 0.99.32
Windows 7 Service Pack 1 x86 (UAC is enabled)
Internet Explorer 8 Out of date!
``````````````````````````````
Antivirus/Firewall Check:
Windows Firewall Enabled!
ESET Online Scanner v3
Microsoft Security Essentials
WMI entry may not exist for antivirus; attempting automatic update.
```````````````````````````````
Anti-malware/Other Utilities Check:
Adobe Reader 9 Adobe Reader out of date!
````````````````````````````````
Process Check:
objlist.exe by Laurent
Windows Defender MSMpEng.exe
Microsoft Security Essentials msseces.exe
``````````End of Log````````````

[muckypup]

Just tried to run itunes and it came up with this error -

Apple application support was not found

apple application support is required to run itunes. please uninstall itunes then inistall itunes again.

error 2 (windows eror 2)

reinstalled and working!

To answer your question, everything seems to be running OK.

[CompCav]

OK we need to do updates to insure you are protected.

Step 1.

Microsoft Updates
Although Automatic Updates can automatically install updates for you, you can also do this manually.

To manually check Windows Update for updates, follow these steps:
1.Click Start , click All Programs, and then click Microsoft Update.
2.In the navigation pane, click Check for updates.
3.AfterMicrosoft Update has finished checking for updates, click View available updates.
4.Click to select the check boxes for the updates that you want to install, and then click Install.

If you are prompted for an administrator password or for confirmation, type the password, or provide confirmation.

Repeat these steps until all critical and important updates are installed.


This will include an update of internet explorer to 9. Internet explorer is part of your Windows 7 operating system and it is critical to your security to have the latest version installed.



Step 2.

Update Adobe Reader

Recently there have been vunerabilities detected in older versions of Adobe Reader. It is strongly suggested that you update to the current version.

Uninstall all previous versions.
Download the latest version from: http://www.adobe.com.../readstep2.html

If you already have Adobe Photoshop® Album Starter Edition installed or do not wish to have it installed UNcheck the box which says Also Download Adobe Photoshop® Album Starter Edition.

Step 3.

Please let me know when the updates are complete

[muckypup]

All done, there is a blank Adobe Reader 9 icon in the start menu. OK to delete?

[CompCav]

Quote

there is a blank Adobe Reader 9 icon in the start menu. OK to delete?

Yes!

Now we need to do a little TLC on this computer:

OK next we will check the disc and then the file structure

• On the desktop click the My Computer icon
  
• Right click your main drive (I am on C) and select properties
  
• Select the tools tab
  
• Select error checking
  
• Place a tick in both boxes
  
• Press start
  
• You will get a warning that it needs to reboot to continue
  
• Allow it to do so

Once completed

Run an elevated command prompt
Go to Start, All programs, Accessories
Right click command prompt and select run as administrator


In the black box that opens type or copy and paste the following command and press enter:

sfc /scannow



After all this is completed could you update me on the problems being experienced

[muckypup]

6.Press start

7.You will get a warning that it needs to reboot to continue

8.Allow it to do so


after pressing start it says

cannot check the disk while it's in use

Do you want to check for hard disk errors the next time you start the computer?

button for schedule disk check and cancel

Cancel takes me back to Tools and Schedule does the same. tried rebooting, but no checks that I can see have happened.

[CompCav]

You want to schedule the disk check and then reboot.

[muckypup]

it worked second time, scanned fine.

sfc /scannow

"resource protection found corrupt files and successfully repaired them. details are included in the CBS.Log. windir\logs\CBS\CBS.log. for example C:\windows\logs\CBS\CBS.log

The system file repair changes will take effect after the next reboot."

Access is denied to that log file even after rebooting.

gonna have a play with it now to see if there are any issues.

[CompCav]

As long as it is running well I do not need the log.