[Satchfan]

Windows Firewall

You should not have Windows Firewall on when you have another firewall enabled. As you have one included in Norton Security Suite you need to turn off Windows' firewall.


1. Open Windows Firewall by clicking Start, Control Panel, and then click Windows Firewall.
2. On the left, click Turn Windows Firewall on or off. If you are prompted for an administrator password or confirmation, type the password or provide confirmation.
3. Click Off (not recommended) , and then OK.
===================================================

You probably have no malware here but some more checks need to be done due to the fact that some spyware/adware was present and I'd like to see it gone before we tidy up.

===================================================

Download and run AdwCleaner

Download AdwCleaner from here and save it to your desktop.

• run AdwCleaner and select Delete
• when it has finished it will ask to reboot - allow the reboot
• on reboot a log will be produced; please attach the content of the log to your next reply.

===================================================

Download and run Junkware Removal Tool

Please download Junkware Removal Tool to your desktop.

• shut down your protection software now to avoid potential conflicts.
• run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator"
• the tool will open and start scanning your system
• please be patient as this can take a while to complete depending on your system's specifications
• on completion, a log (JRT.txt) is saved to your desktop and will automatically open
• post the contents of JRT.txt into your next message.

Logs to include in the next post:

AdwCleaner log
JRT.txt

Please tell me if there are any remaining problems.

Thanks

Satchfan

[Advertisements]

# AdwCleaner v2.114 - Logfile created 03/15/2013 at 11:33:09
# Updated 05/03/2013 by Xplode
# Operating system : Windows Vista ™ Home Basic Service Pack 2 (32 bits)
# User : sireesha - SIREESHA-PC
# Boot Mode : Normal
# Running from : C:\Users\sireesha\Downloads\adwcleaner.exe
# Option [Search]


***** [Services] *****


***** [Files / Folders] *****

File Found : C:\Program Files\Mozilla Firefox\searchplugins\avg-secure-search.xml
File Found : C:\Users\sireesha\AppData\Local\Temp\Uninstall.exe
File Found : C:\Users\sireesha\AppData\Roaming\Mozilla\Firefox\Profiles\fr7c0f69.default\searchplugins\Askcom.xml
Folder Found : C:\Program Files\AutocompletePro
Folder Found : C:\Program Files\Speedbit Video Downloader
Folder Found : C:\ProgramData\Ask
Folder Found : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Speedbit Video Downloader
Folder Found : C:\ProgramData\Speedbit
Folder Found : C:\Users\Administrator\AppData\LocalLow\AskToolbar
Folder Found : C:\Users\sireesha\AppData\Local\Temp\AskSearch
Folder Found : C:\Users\sireesha\AppData\Roaming\iWin
Folder Found : C:\Users\sireesha\AppData\Roaming\Mozilla\Firefox\Profiles\fr7c0f69.default\extensions\[email protected]

***** [Registry] *****

Key Found : HKCU\Software\1ClickDownload
Key Found : HKCU\Software\AutocompletePro
Key Found : HKCU\Software\AutocompleteProBHO
Key Found : HKCU\Software\IGearSettings
Key Found : HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{603C4CC9-5DC6-4C44-873F-8281509DF953}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{79A765E1-C399-405B-85AF-466F52E918B0}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\1ClickDownloader
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\AutocompletePro3_is1
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\AVG Secure Search
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\SPEEDbit Video Downloader
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0329E7D6-6F54-462D-93F6-F5C3118BADF2}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FF7C3CF0-4B15-11D1-ABED-709549C10000}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0329E7D6-6F54-462D-93F6-F5C3118BADF2}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FF7C3CF0-4B15-11D1-ABED-709549C10000}
Key Found : HKCU\Software\Softonic
Key Found : HKCU\Software\SpeedBit
Key Found : HKLM\SOFTWARE\Classes\AppID\{442F13BC-2031-42D5-9520-437F65271153}
Key Found : HKLM\SOFTWARE\Classes\AppID\{5B1881D1-D9C7-46DF-B041-1E593282C7D0}
Key Found : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Key Found : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Key Found : HKLM\SOFTWARE\Classes\AppID\AutocompletePro.DLL
Key Found : HKLM\SOFTWARE\Classes\CLSID\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{0329E7D6-6F54-462D-93F6-F5C3118BADF2}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{57CADC46-58FF-4105-B733-5A9F3FC9783C}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{761F6A83-F007-49E4-8EAC-CDB6808EF06F}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{97D69524-BB57-4185-9C7F-5F05593B771A}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{CA3EB689-8F09-4026-AA10-B9534C691CE0}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{FF7C3CF0-4B15-11D1-ABED-709549C10000}
Key Found : HKLM\SOFTWARE\Classes\ComObject.DeskbarEnabler
Key Found : HKLM\SOFTWARE\Classes\ComObject.DeskbarEnabler.1
Key Found : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Found : HKLM\SOFTWARE\Classes\Interface\{2A42D13C-D427-4787-821B-CF6973855778}
Key Found : HKLM\SOFTWARE\Classes\Interface\{3D8478AA-7B88-48A9-8BCB-B85D594411EC}
Key Found : HKLM\SOFTWARE\Classes\Interface\{4897BBA6-48D9-468C-8EFA-846275D7701B}
Key Found : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Found : HKLM\SOFTWARE\Classes\Interface\{C9AE652B-8C99-4AC2-B556-8B501182874E}
Key Found : HKLM\SOFTWARE\Classes\Interface\{E67D5BC7-7129-493E-9281-F47BDAFACE4F}
Key Found : HKLM\SOFTWARE\Classes\SBConvert.SBConvert
Key Found : HKLM\SOFTWARE\Classes\SBConvert.SBConvert.3
Key Found : HKLM\SOFTWARE\Classes\SuggestMeYes.SuggestMeYesBHO
Key Found : HKLM\SOFTWARE\Classes\SuggestMeYes.SuggestMeYesBHO.1
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{01BCB858-2F62-4F06-A8F4-48F927C15333}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{4509D3CC-B642-4745-B030-645B79522C6D}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{EC4085F2-8DB3-45A6-AD0B-CA289F3C5D7E}
Key Found : HKLM\SOFTWARE\Classes\URLSearchHook.ToolbarURLSearchHook
Key Found : HKLM\SOFTWARE\Classes\URLSearchHook.ToolbarURLSearchHook.1
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\jplinpmadfkdgipabgcdchbdikologlh
Key Found : HKLM\Software\Iminent
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{603C4CC9-5DC6-4C44-873F-8281509DF953}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FF7C3CF0-4B15-11D1-ABED-709549C10000}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AutocompletePro3_is1
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SPEEDbit Video Downloader
Key Found : HKLM\SOFTWARE\MozillaPlugins\@funwebproducts.com/Plugin
Key Found : HKLM\Software\SpeedBit
Key Found : HKU\S-1-5-21-1656552025-3035671873-3864937306-1003\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}
Key Found : HKU\S-1-5-21-1656552025-3035671873-3864937306-1003\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{0329E7D6-6F54-462D-93F6-F5C3118BADF2}]

***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16470

[OK] Registry is clean.

-\\ Mozilla Firefox v3.0.14 (en-US)

File : C:\Users\sireesha\AppData\Roaming\Mozilla\Firefox\Profiles\fr7c0f69.default\prefs.js

Found : user_pref("browser.search.order.1", "Ask.com");
Found : user_pref("browser.search.selectedEngine", "Ask.com");
Found : user_pref("browser.startup.homepage", "hxxp://isearch.avg.com/?cid={91FCFBC5-02CC-47F4-A022-96AAB671[...]
Found : user_pref("speedbitvideodownloader.Var1", "0");
Found : user_pref("speedbitvideodownloader.Var10", "0");
Found : user_pref("speedbitvideodownloader.Var2", "0");
Found : user_pref("speedbitvideodownloader.Var3", "0");
Found : user_pref("speedbitvideodownloader.Var4", "0");
Found : user_pref("speedbitvideodownloader.Var5", "0");
Found : user_pref("speedbitvideodownloader.Var6", "0");
Found : user_pref("speedbitvideodownloader.Var7", "0");
Found : user_pref("speedbitvideodownloader.Var8", "0");
Found : user_pref("speedbitvideodownloader.Var9", "0");
Found : user_pref("speedbitvideodownloader.cache.tbs_include_xml_spd", "27/13/3/1/113");
Found : user_pref("speedbitvideodownloader.firstlaunch", "0");
Found : user_pref("speedbitvideodownloader.guid", "%7B3E4D4849-8857-D88E-B899-A26726E8D4CA%7D");
Found : user_pref("speedbitvideodownloader.popupblockedcnt", "74");
Found : user_pref("speedbitvideodownloader_installed_version", "2.1.2");
Found : user_pref("keyword.URL", "hxxp://websearch.ask.com/redirect?client=ff&src=kw&tb=ORJ&o=&locale=&apn_[...]
Found : user_pref("browser.search.defaultengine", "Ask.com");
Found : user_pref("browser.search.defaultenginename", "Ask.com");

*************************

AdwCleaner[R1].txt - [9141 octets] - [15/03/2013 11:33:09]

########## EOF - C:\AdwCleaner[R1].txt - [9201 octets] ##########

[thebiologist]

# AdwCleaner v2.114 - Logfile created 03/15/2013 at 11:33:09
# Updated 05/03/2013 by Xplode
# Operating system : Windows Vista ™ Home Basic Service Pack 2 (32 bits)
# User : sireesha - SIREESHA-PC
# Boot Mode : Normal
# Running from : C:\Users\sireesha\Downloads\adwcleaner.exe
# Option [Search]


***** [Services] *****


***** [Files / Folders] *****

File Found : C:\Program Files\Mozilla Firefox\searchplugins\avg-secure-search.xml
File Found : C:\Users\sireesha\AppData\Local\Temp\Uninstall.exe
File Found : C:\Users\sireesha\AppData\Roaming\Mozilla\Firefox\Profiles\fr7c0f69.default\searchplugins\Askcom.xml
Folder Found : C:\Program Files\AutocompletePro
Folder Found : C:\Program Files\Speedbit Video Downloader
Folder Found : C:\ProgramData\Ask
Folder Found : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Speedbit Video Downloader
Folder Found : C:\ProgramData\Speedbit
Folder Found : C:\Users\Administrator\AppData\LocalLow\AskToolbar
Folder Found : C:\Users\sireesha\AppData\Local\Temp\AskSearch
Folder Found : C:\Users\sireesha\AppData\Roaming\iWin
Folder Found : C:\Users\sireesha\AppData\Roaming\Mozilla\Firefox\Profiles\fr7c0f69.default\extensions\[email protected]

***** [Registry] *****

Key Found : HKCU\Software\1ClickDownload
Key Found : HKCU\Software\AutocompletePro
Key Found : HKCU\Software\AutocompleteProBHO
Key Found : HKCU\Software\IGearSettings
Key Found : HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{603C4CC9-5DC6-4C44-873F-8281509DF953}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{79A765E1-C399-405B-85AF-466F52E918B0}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\1ClickDownloader
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\AutocompletePro3_is1
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\AVG Secure Search
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\SPEEDbit Video Downloader
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0329E7D6-6F54-462D-93F6-F5C3118BADF2}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FF7C3CF0-4B15-11D1-ABED-709549C10000}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0329E7D6-6F54-462D-93F6-F5C3118BADF2}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FF7C3CF0-4B15-11D1-ABED-709549C10000}
Key Found : HKCU\Software\Softonic
Key Found : HKCU\Software\SpeedBit
Key Found : HKLM\SOFTWARE\Classes\AppID\{442F13BC-2031-42D5-9520-437F65271153}
Key Found : HKLM\SOFTWARE\Classes\AppID\{5B1881D1-D9C7-46DF-B041-1E593282C7D0}
Key Found : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Key Found : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Key Found : HKLM\SOFTWARE\Classes\AppID\AutocompletePro.DLL
Key Found : HKLM\SOFTWARE\Classes\CLSID\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{0329E7D6-6F54-462D-93F6-F5C3118BADF2}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{57CADC46-58FF-4105-B733-5A9F3FC9783C}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{761F6A83-F007-49E4-8EAC-CDB6808EF06F}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{97D69524-BB57-4185-9C7F-5F05593B771A}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{CA3EB689-8F09-4026-AA10-B9534C691CE0}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{FF7C3CF0-4B15-11D1-ABED-709549C10000}
Key Found : HKLM\SOFTWARE\Classes\ComObject.DeskbarEnabler
Key Found : HKLM\SOFTWARE\Classes\ComObject.DeskbarEnabler.1
Key Found : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Found : HKLM\SOFTWARE\Classes\Interface\{2A42D13C-D427-4787-821B-CF6973855778}
Key Found : HKLM\SOFTWARE\Classes\Interface\{3D8478AA-7B88-48A9-8BCB-B85D594411EC}
Key Found : HKLM\SOFTWARE\Classes\Interface\{4897BBA6-48D9-468C-8EFA-846275D7701B}
Key Found : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Found : HKLM\SOFTWARE\Classes\Interface\{C9AE652B-8C99-4AC2-B556-8B501182874E}
Key Found : HKLM\SOFTWARE\Classes\Interface\{E67D5BC7-7129-493E-9281-F47BDAFACE4F}
Key Found : HKLM\SOFTWARE\Classes\SBConvert.SBConvert
Key Found : HKLM\SOFTWARE\Classes\SBConvert.SBConvert.3
Key Found : HKLM\SOFTWARE\Classes\SuggestMeYes.SuggestMeYesBHO
Key Found : HKLM\SOFTWARE\Classes\SuggestMeYes.SuggestMeYesBHO.1
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{01BCB858-2F62-4F06-A8F4-48F927C15333}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{4509D3CC-B642-4745-B030-645B79522C6D}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{EC4085F2-8DB3-45A6-AD0B-CA289F3C5D7E}
Key Found : HKLM\SOFTWARE\Classes\URLSearchHook.ToolbarURLSearchHook
Key Found : HKLM\SOFTWARE\Classes\URLSearchHook.ToolbarURLSearchHook.1
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\jplinpmadfkdgipabgcdchbdikologlh
Key Found : HKLM\Software\Iminent
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{603C4CC9-5DC6-4C44-873F-8281509DF953}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FF7C3CF0-4B15-11D1-ABED-709549C10000}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AutocompletePro3_is1
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SPEEDbit Video Downloader
Key Found : HKLM\SOFTWARE\MozillaPlugins\@funwebproducts.com/Plugin
Key Found : HKLM\Software\SpeedBit
Key Found : HKU\S-1-5-21-1656552025-3035671873-3864937306-1003\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}
Key Found : HKU\S-1-5-21-1656552025-3035671873-3864937306-1003\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{0329E7D6-6F54-462D-93F6-F5C3118BADF2}]

***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16470

[OK] Registry is clean.

-\\ Mozilla Firefox v3.0.14 (en-US)

File : C:\Users\sireesha\AppData\Roaming\Mozilla\Firefox\Profiles\fr7c0f69.default\prefs.js

Found : user_pref("browser.search.order.1", "Ask.com");
Found : user_pref("browser.search.selectedEngine", "Ask.com");
Found : user_pref("browser.startup.homepage", "hxxp://isearch.avg.com/?cid={91FCFBC5-02CC-47F4-A022-96AAB671[...]
Found : user_pref("speedbitvideodownloader.Var1", "0");
Found : user_pref("speedbitvideodownloader.Var10", "0");
Found : user_pref("speedbitvideodownloader.Var2", "0");
Found : user_pref("speedbitvideodownloader.Var3", "0");
Found : user_pref("speedbitvideodownloader.Var4", "0");
Found : user_pref("speedbitvideodownloader.Var5", "0");
Found : user_pref("speedbitvideodownloader.Var6", "0");
Found : user_pref("speedbitvideodownloader.Var7", "0");
Found : user_pref("speedbitvideodownloader.Var8", "0");
Found : user_pref("speedbitvideodownloader.Var9", "0");
Found : user_pref("speedbitvideodownloader.cache.tbs_include_xml_spd", "27/13/3/1/113");
Found : user_pref("speedbitvideodownloader.firstlaunch", "0");
Found : user_pref("speedbitvideodownloader.guid", "%7B3E4D4849-8857-D88E-B899-A26726E8D4CA%7D");
Found : user_pref("speedbitvideodownloader.popupblockedcnt", "74");
Found : user_pref("speedbitvideodownloader_installed_version", "2.1.2");
Found : user_pref("keyword.URL", "hxxp://websearch.ask.com/redirect?client=ff&src=kw&tb=ORJ&o=&locale=&apn_[...]
Found : user_pref("browser.search.defaultengine", "Ask.com");
Found : user_pref("browser.search.defaultenginename", "Ask.com");

*************************

AdwCleaner[R1].txt - [9141 octets] - [15/03/2013 11:33:09]

########## EOF - C:\AdwCleaner[R1].txt - [9201 octets] ##########

[thebiologist]

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 4.7.1 (03.12.2013:1)
OS: Windows Vista ™ Home Basic x86
Ran by sireesha on 15-03-2013 at 11:43:43.67
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully deleted: [Registry Value] hkey_local_machine\software\microsoft\internet explorer\toolbar\\{ef99bd32-c1fb-11d2-892f-0090271d4f88}



~~~ Registry Keys

Successfully deleted: [Registry Key] hkey_current_user\software\sweetim
Successfully deleted: [Registry Key] hkey_local_machine\software\sweetim
Successfully deleted: [Registry Key] hkey_classes_root\clsid\{ef99bd32-c1fb-11d2-892f-0090271d4f88}



~~~ Files



~~~ Folders



~~~ FireFox

Successfully deleted the following from C:\Users\sireesha\AppData\Roaming\mozilla\firefox\profiles\fr7c0f69.default\prefs.js

user_pref("avg.toolbar.buttons_icon", ",,chrome://avg/skin/safesurf.png,chrome://avg/skin/safesurf.png,chrome://avg/skin/safesearch.png,chrome://avg/skin/avglinks.png,chrome:/
user_pref("extensions.enabledItems", "[email protected]:3.15.9.100013,[email protected]:1.11,{3f963a5b-e555-4543-90e2-c3908898db71}:12.0.0.2191,{CAFEEFAC-0016-0000-0015-ABCD
Emptied folder: C:\Users\sireesha\AppData\Roaming\mozilla\firefox\profiles\fr7c0f69.default\minidumps [2 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 15-03-2013 at 11:48:23.04
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

[thebiologist]

hi

thank you very very much.. now the system was not showing cannot find script file ":/documents/database.mdb" . If you dont mind, i have few more issues.

1. The system is booting 2 -3 min lately than earlier.

2. In Security essentials:
Firewall - on
Automatic updating - on
Malware protection - off
Spyware and other malware protection - off
when i tried to turn them on even as administrator it was not turned on.

3. AVG tune up it has to be uninstalled or not

Edited by thebiologist, 15 March 2013 - 02:07 AM.

[Satchfan]

The system is booting 2 -3 min lately than earlier.

It could be that you have too many programs that are taking up resources on startup.

Try stopping them all from starting when you boot up – it won’t affect your programs starting normally as and when you need them.

Make sure you are logged in as administrator.

Click Start, Run type in msconfig and then press Enter. Click on the “Start up” tab and uncheck everything except Norton's anti virus and firewall. Click OK and reboot. When you come back to the desktop, check the box Do not show this message again and click OK

===================================================

In Security essentials:

What do you mean by “Security Essentials”?

I gave instructions for you to disable Windows Defender and Windows firewall but your Security Check log shows that both were still running.

You must disable them as Norton is already doing those jobs.

===================================================

AVG tune up it has to be uninstalled or not

Yes. It's not a good idea to use registry cleaners/boosters.

The usefulness of cleaning the registry is highly overrated and can be dangerous. In most cases, using a cleaner to remove obsolete, invalid, and erroneous entries does not affect system performance but it can result in "unpredictable results". Unless you have a particular problem that requires a registry edit to correct it, (and you are expert in the registry), I would suggest you leave the registry alone.

I strongly advise you to get rid of AVG Tune Up.

One of the malware experts, miekiemoes, has an excellent write-up here
Another excellent article by Bill Castner is located here

You do need to defragment your hard drive but I’ll give instructions when we clean up the tools we’ve used along with instructions on updating some of your software.

===================================================

Run ESET Online Scan

Note: You can use either Internet Explorer or Mozilla FireFox for this scan. You will however need to disable your current installed Anti-Virus, how to do so can be read here.

This can take several hours to run depending on the size of your hard drive and amount of data on it.

Hold down Control and click on the following link to open ESET OnlineScan in a new window.

ESET OnlineScan


1. Click the Eset online Scanner button.
2. For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)

• Click on esetinstaller.exe to download the ESET Smart Installer. Save it to your desktop.
• Double click on the Eset installer icon on your desktop.

3. Check Yes, I accept the Terms of Use
4. Click the Start button.
5. Accept any security warnings from your browser.
6. Check Scan archives
7. Push the Start button.
8. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
9. When the scan completes, push List of found threats
10. Push Export to Text file and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
Note - when ESET doesn't find any threats, no report will be created.
11. Push the back button.
12. Push Finish
If a log has been produced post it in your next reply.

Satchfan

[thebiologist]

What do you mean by “Security Essentials”?

control panel-security

Firewall - on
Automatic updating - on
Malware protection - off
Spyware and other malware protection - off
when i tried to turn them on even as administrator it was not turned on.

i mean norton is turned off

[Satchfan]

This is a suggestion from the Norton community but before trying this you should run the Eset scan which requires your antivirus to be disabled.

Try to reinstall it using the Norton Removal and Reinstall Tool.

• if you use "Identity Safe", backup/export your data.
• run the Norton Removal and Reinstall Tool.
• reboot.
• run LiveUpdate manually a few times, rebooting as necessary, until no updates are available.
• import your Identity Safe data.

Let me know how it goes.

Satchfan

[thebiologist]

hi
when i tried eset scan a pop up opened and after that when i hit scan in it the page went blank and nothing happened. i ha ve waited for one n half hour but there was no change

[Satchfan]

I would really like to see the results of an online scan to make sure that everything is as it should be, so if it still doesn’t work, we can try a different one instead:

Before running it please note:

• this scan MUST be performed using Internet Explorer
• it can take up to an hour or longer, so please be patient
• it is recommended that you disable your onboard antivirus program and antispyware programs while performing scans to eliminate software conflicts and to speed up scan time
• DO NOT surf the net while your resident protection is disabled!
• once the scan is finished remember to re-enable your resident antivirus protection along with whatever antispyware applications you use.

Run the scan

• perform an online scan with Panda Active Scan 2.0 by clicking here
• click on the Scan Your PC Now button
• click on the Scan now button and follow the instructions (you may have to install an active X component)
• should you be required to register, click on Register
• choose the option you like most, but we recommend Free Active Scan 2.0 (requires registration)
• click on Register
• enter your e-mail address and create a password
• select "I do not want to receive any type of information" (unless you want to receive such information).
• click on Send
• confirm your registration and continue by entering your user name and password, then click on Enter
• select Full Scan, then click on Scan Now
• wait for the components to be loaded and installed. Don't close this window or go to another page while it is downloading
• jf the scan finds any malware it can disinfect, the “Disinfect” button will be enabled. Click on Disinfect
• please ignore the offer to buy the program
• click on the Export To button to export the log and save it to your desktop.

Please post the contents of the log in your next reply.

Satchfan

[thebiologist]

C:\Users\All Users\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setupx.dll a variant of Win32/Adware.Yontoo.B application
C:\Users\All Users\Tarma Installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\_Setupx.dll a variant of Win32/Adware.Yontoo.B application
C:\Program Files\Yontoo\YontooIEClient.dll a variant of Win32/Adware.Yontoo.A application cleaned by deleting - quarantined
C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setupx.dll a variant of Win32/Adware.Yontoo.B application cleaned by deleting - quarantined
C:\ProgramData\Tarma Installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\_Setupx.dll a variant of Win32/Adware.Yontoo.B application cleaned by deleting - quarantined
C:\Users\sireesha\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6A0YXSHG\yontoosetup[1].exe multiple threats cleaned by deleting - quarantined
C:\Users\sireesha\AppData\Local\Temp\is1275519350\yontoo-c4.exe multiple threats cleaned by deleting - quarantined
C:\Users\sireesha\AppData\Roaming\Mozilla\Firefox\Profiles\fr7c0f69.default\extensions\[email protected]\content\overlay.js Win32/Adware.Yontoo application cleaned by deleting - quarantined



hi i tried eset once again and above are the results..whether i have to check the delete quarantine and uninstall application on close or not?

[thebiologist]

if you use "Identity Safe", backup/export your data.



i dont know about identity safe nor backup. can you please elobarate

ps: i have downloaded norton uninstall/reinstall and ready run whenever you say.

[Satchfan]

Most of the infections were taken care of but there is one left.

Open Windows Explorer, (Windows key+E), then navigate to and delete the folder in red:

C:\Users\All Users\Tarma Installer

Let me know if you were able to do that and if there are any oustanding problems.

Thanks

Satchfan

[thebiologist]

hi i have deleted talmaware successfully. during the process of uninstall/reinstall of norton, first it showed a message "failed to detect any supported norton product.please click here for more information". after clicking it i found the following

Norton from Symantec
Store
Community
Downloads
Support
Security Center
Products & Services
Support
Select a product for personalized support English Contact Us
Search Support:

Download and run the Norton Removal Tool to remove the Norton product that you received from your service provider

This document is for running Norton Removal Tool to uninstall the Norton products that you downloaded from your service provider. If you have a different product, or a product that was not downloaded from a service provider, go to the main Norton Removal Tool document and choose the product that you have.
After you run the tool, you need to download your Noton product again from your service provider. If you have more than one Norton product, be sure to get the product key, CD or installation file for each product that you want to reinstall before running the Norton Removal Tool.
Download and run the Norton Removal Tool

The Norton Removal Tool uninstalls Norton AntiVirus, Norton Internet Security, Norton 360, and Norton SystemWorks from your computer. If you use ACT! or WinFax, back up those databases before you proceed.
Download the Norton Removal Tool.
Save the file to the Windows desktop.
On the Windows desktop, double-click the Norton Removal Tool icon.
Follow the on-screen instructions.
Restart your computer.
Your computer may be restarted more than once, and you will be provided the instructions on how to reinstall your Norton product.
Was this information helpful?
Yes
No
DOCID: kb20080710133024EN_EndUserProfile_en_us
Operating System: Windows 8, Windows 7, Windows Vista, Windows XP
Last modified: 11/09/2012
Norton.com Support Home 1995 - 2013 Symantec Corporation Legal Notices Privacy Policy License Agreements Support Policy




according to the instructions i downloaded removal tool and run it. the removal was completed and the system restarted. here is the problem-- i didnt find the reinstall option. now the system showed a warning message that "windows find no antivirus on this computer please

[Satchfan]

I don't know why it isn't working but there is information about it here.

Are there any othere remaining problems?

[thebiologist]

thank you very much. i have no other problems..can you please suggest me which antivirus software to download and install and also please tell me what to do with the earlier softwares i have downloaded during the problem rectifying process.

finally please educate me how to keep my system healthy now onwards
p.s: as i have biology background i actually dont know about all these stuff, so please teach me.

thanks
the biologist