[Essexboy]

Sounds like AVG has a glitch, I have not used that one for many a year so I do not know if it has a repair option ............ OK found it

To repair your AVG:
1. Go to Start -> (Settings) -> Control Panel.
2. Open (Programs) -> Programs and Features, or Add or Remove Programs.
3. Select AVG in the list of programs.
4. Click the Change or Change/Remove button.
5. Select Repair.
6. Follow the instructions on your screen to complete the installation.
7. Restart your computer.

Let me know if that cures it

Java scripts are still an avenue for malware although if Java itself is uninstalled/disabled then the risk is reduced markedly

[Advertisements]

OK Thanks, will check that. (sorry I was refreshing page 2 here hehe)

Now... MBAM quick scan found some PUPs: OpenCandy, traces of the never disappearing Iminent and Tarma installer. Should I keep something (Tarma, isn't that normal?)

log:

Malwarebytes Anti-Malware (Essai) 1.75.0.1300
www.malwarebytes.org

Version de la base de données: v2013.09.27.06

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16686
Catherine :: MUMANDDAD [administrateur]

Protection: Activé

27/09/2013 14:53:22
MBAM-log-2013-09-27 (15-15-43).txt

Type d'examen: Examen rapide
Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM
Options d'examen désactivées: P2P
Elément(s) analysé(s): 230531
Temps écoulé: 9 minute(s), 18 seconde(s)

Processus mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Module(s) mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Clé(s) du Registre détectée(s): 2
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199} (PUP.Optional.Iminent.A) -> Aucune action effectuée.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48d2-9061-8BBD4899EB08} (PUP.Optional.Iminent.A) -> Aucune action effectuée.

Valeur(s) du Registre détectée(s): 0
(Aucun élément nuisible détecté)

Elément(s) de données du Registre détecté(s): 0
(Aucun élément nuisible détecté)

Dossier(s) détecté(s): 3
C:\ProgramData\Tarma Installer (PUP.Optional.Tarma.A) -> Aucune action effectuée.
C:\Users\Catherine\AppData\Roaming\OpenCandy (PUP.Optional.OpenCandy) -> Aucune action effectuée.
C:\Users\Catherine\AppData\Roaming\OpenCandy\BD60847A4D24449BA4370EA81970A755 (PUP.Optional.OpenCandy) -> Aucune action effectuée.

Fichier(s) détecté(s): 3
C:\Users\Catherine\AppData\Roaming\OpenCandy\BD60847A4D24449BA4370EA81970A755\LatestDLMgr.exe (PUP.Optional.OpenCandy.A) -> Aucune action effectuée.
C:\Users\Catherine\AppData\Roaming\OpenCandy\BD60847A4D24449BA4370EA81970A755\3031.ico (PUP.Optional.OpenCandy) -> Aucune action effectuée.
C:\Users\Catherine\AppData\Roaming\OpenCandy\BD60847A4D24449BA4370EA81970A755\ds-cadriverscanner.exe (PUP.Optional.OpenCandy) -> Aucune action effectuée.

(fin)

[vrainewb]

OK Thanks, will check that. (sorry I was refreshing page 2 here hehe)

Now... MBAM quick scan found some PUPs: OpenCandy, traces of the never disappearing Iminent and Tarma installer. Should I keep something (Tarma, isn't that normal?)

log:

Malwarebytes Anti-Malware (Essai) 1.75.0.1300
www.malwarebytes.org

Version de la base de données: v2013.09.27.06

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16686
Catherine :: MUMANDDAD [administrateur]

Protection: Activé

27/09/2013 14:53:22
MBAM-log-2013-09-27 (15-15-43).txt

Type d'examen: Examen rapide
Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM
Options d'examen désactivées: P2P
Elément(s) analysé(s): 230531
Temps écoulé: 9 minute(s), 18 seconde(s)

Processus mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Module(s) mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Clé(s) du Registre détectée(s): 2
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199} (PUP.Optional.Iminent.A) -> Aucune action effectuée.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48d2-9061-8BBD4899EB08} (PUP.Optional.Iminent.A) -> Aucune action effectuée.

Valeur(s) du Registre détectée(s): 0
(Aucun élément nuisible détecté)

Elément(s) de données du Registre détecté(s): 0
(Aucun élément nuisible détecté)

Dossier(s) détecté(s): 3
C:\ProgramData\Tarma Installer (PUP.Optional.Tarma.A) -> Aucune action effectuée.
C:\Users\Catherine\AppData\Roaming\OpenCandy (PUP.Optional.OpenCandy) -> Aucune action effectuée.
C:\Users\Catherine\AppData\Roaming\OpenCandy\BD60847A4D24449BA4370EA81970A755 (PUP.Optional.OpenCandy) -> Aucune action effectuée.

Fichier(s) détecté(s): 3
C:\Users\Catherine\AppData\Roaming\OpenCandy\BD60847A4D24449BA4370EA81970A755\LatestDLMgr.exe (PUP.Optional.OpenCandy.A) -> Aucune action effectuée.
C:\Users\Catherine\AppData\Roaming\OpenCandy\BD60847A4D24449BA4370EA81970A755\3031.ico (PUP.Optional.OpenCandy) -> Aucune action effectuée.
C:\Users\Catherine\AppData\Roaming\OpenCandy\BD60847A4D24449BA4370EA81970A755\ds-cadriverscanner.exe (PUP.Optional.OpenCandy) -> Aucune action effectuée.

(fin)

[Essexboy]

Remove the lot they are remnants from our earlier cleaning and are all unwanted, including Tarma

Did the repair on AVG work ?

[vrainewb]

Alright it's done now. I'll try a long scan later I guess.

AVG seems fine, though now i'm considering Avast, well... not just because you said so I keep reading good things about it though but I thought it seemed too big... well it was a big dl to begin with. I'll probably give it a try.

Ok well... thank you a ton. I think that's pretty much it for now. I've read (I think it's propably in the forums here even) about a way to redirect some cookies to 127.0.0.1 using host lists. I didn't totally get it but I think I'll give that a try as well.

Thank you very very much again.

[Essexboy]

No real need for a host file programme as IE10 copes very well with that http://windows.micro...dwide-languages

If you decide on Avast wait until the next version gets released (we are just completing the beta now) that will be downloaded by a stub installer so you will only get the files needed not the whole kit and caboodle

There is no real difference between a quick scan and normal scan with MBAM

[vrainewb]

Oh OK. Thanks a bunch for all that... Good night

[Essexboy]

[Essexboy]

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.