Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

here is the message I get [Closed]


  • This topic is locked This topic is locked

#1
ligegeorge

ligegeorge

    New Member

  • Member
  • Pip
  • 3 posts
There was a problem starting C:\Program Files (x86)\Music
Toolbar\Datamngr\apcrtdr.dll

Access us
  • 0

Advertisements


#2
ligegeorge

ligegeorge

    New Member

  • Topic Starter
  • Member
  • Pip
  • 3 posts
========== Files Created - No Company Name ==========

[2014/02/21 14:36:49 | 000,010,848 | ---- | C] () -- C:\Users\Multi Media\.recently-used.xbel
[2014/02/21 02:56:42 | 000,000,326 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\Programs - Shortcut.lnk
[2014/02/20 23:07:29 | 000,002,515 | ---- | C] () -- C:\Users\Public\Desktop\Skype.lnk
[2014/02/20 23:04:05 | 000,002,184 | ---- | C] () -- C:\Users\Multi Media\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
[2014/02/17 18:10:16 | 000,012,596 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\line draw all engine.gif
[2014/02/15 21:26:25 | 001,205,234 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\Hard Aggressive Rap Instrumental.mp3
[2014/02/15 19:12:54 | 190,632,448 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\greeting.avi
[2014/02/15 14:59:32 | 000,000,706 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\Libraries - Shortcut.lnk
[2014/02/15 14:13:25 | 001,277,547 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\BlueMarble-2001-2002.jpg
[2014/02/15 02:15:51 | 000,056,479 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\iBang Kick 2.mp3
[2014/02/15 02:14:53 | 000,028,475 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\iBang Kick.mp3
[2014/02/15 00:33:09 | 000,001,150 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\ASIO4ALL v2 Instruction Manual.lnk
[2014/02/15 00:25:15 | 000,002,046 | ---- | C] () -- C:\Users\Public\Desktop\FL Studio 11.lnk
[2014/02/15 00:23:56 | 000,002,058 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FL Studio 11.lnk
[2014/02/14 23:00:09 | 000,110,786 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\drum loop 44.mp3
[2014/02/14 22:56:02 | 000,275,464 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\25 top breaks.mp3
[2014/02/14 21:23:45 | 000,647,168 | ---- | C] () -- C:\Windows\SysWow64\sonicismdsp.dll
[2014/02/14 18:36:53 | 000,060,801 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\Nelly weave.jpg
[2014/02/14 18:17:40 | 015,739,924 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\lg mix 4.mp3
[2014/02/12 00:15:27 | 000,001,319 | ---- | C] () -- C:\Users\Multi Media\Application Data\Microsoft\Internet Explorer\Quick Launch\Free YouTube Downloader.lnk
[2014/02/12 00:15:27 | 000,001,295 | ---- | C] () -- C:\Users\Public\Desktop\Free YouTube Downloader.lnk
[2014/02/12 00:15:26 | 000,000,174 | ---- | C] () -- C:\Users\Public\Desktop\Amazon.url
[2014/02/12 00:15:16 | 000,000,393 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\FREE Games.url
[2014/02/12 00:00:19 | 000,002,199 | ---- | C] () -- C:\Users\Multi Media\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Severe Weather Alerts App.lnk
[2014/02/12 00:00:19 | 000,001,244 | ---- | C] () -- C:\Users\Multi Media\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Severe Weather Alerts.lnk
[2014/02/11 23:48:24 | 000,001,628 | ---- | C] () -- C:\Windows\tasks\MediaPlayerEnhance-updater.job
[2014/02/11 23:48:20 | 000,001,482 | ---- | C] () -- C:\Windows\tasks\MediaPlayerEnhance-enabler.job
[2014/02/11 23:48:17 | 000,001,584 | ---- | C] () -- C:\Windows\tasks\MediaPlayerEnhance-codedownloader.job
[2014/02/11 23:48:10 | 000,002,428 | ---- | C] () -- C:\Windows\tasks\MediaPlayerEnhance-firefoxinstaller.job
[2014/02/11 23:48:07 | 000,002,432 | ---- | C] () -- C:\Windows\tasks\MediaPlayerEnhance-validator.job
[2014/02/11 23:39:25 | 000,002,149 | ---- | C] () -- C:\Users\Public\Desktop\YouTube to MP3.lnk
[2014/02/10 08:48:34 | 000,020,827 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\Transforming sound.mp3
[2014/02/10 08:46:08 | 000,002,005 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\EasyDJSoftware - Copy.lnk
[2014/02/09 14:40:12 | 000,002,285 | ---- | C] () -- C:\Users\Multi Media\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2014/02/09 14:40:12 | 000,002,185 | ---- | C] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2014/02/08 22:27:10 | 000,030,226 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\lg mix 3.aup
[2014/02/08 18:42:55 | 000,431,100 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\bane voice.mp3
[2014/02/08 02:03:01 | 000,000,468 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\HP © - Shortcut.lnk
[2014/02/08 01:57:13 | 003,633,796 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\Vanille nude.7z
[2014/02/08 01:56:25 | 000,347,472 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\zn1nmy1v43-LULA3D03142013.rar
[2014/02/07 22:14:20 | 000,002,669 | ---- | C] () -- C:\Users\Multi Media\Documents\My Movie.wlmp
[2014/02/06 23:56:34 | 000,207,279 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\Icovia® Room Planner.pdf
[2014/02/06 22:54:22 | 000,094,749 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\SharkBackground.png
[2014/02/06 22:37:09 | 000,091,862 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\Blender Hotkeys Cheatsheet.pdf
[2014/02/01 13:18:11 | 000,002,165 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\Play Midnight Mysteries - Devil on the MissIssippi.lnk
[2014/01/30 10:18:56 | 000,366,611 | ---- | C] () -- C:\Users\Multi Media\AppData\Local\mysearchdial-speeddial.crx
[2014/01/30 10:18:17 | 000,002,243 | ---- | C] () -- C:\Users\Public\Desktop\WinZip.lnk
[2014/01/30 10:16:52 | 000,000,804 | ---- | C] () -- C:\Users\Multi Media\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\jZip.lnk
[2014/01/30 08:40:45 | 002,287,264 | ---- | C] () -- C:\Users\Public\Documents\FreeDrumKits.net - Lex Luger - Soundfonts.zip
[2014/01/30 02:52:50 | 001,449,609 | ---- | C] () -- C:\Users\Multi Media\Documents\Marilyn Monroe - Happy Birthday Mr. President.mp3
[2014/01/30 02:24:58 | 001,725,727 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\lg mix 3.mp3
[2014/01/26 11:43:59 | 000,002,159 | ---- | C] () -- C:\Users\Public\Desktop\Media Impression 2.lnk
[2014/01/25 18:59:11 | 000,001,104 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
[2014/01/25 18:59:11 | 000,001,092 | ---- | C] () -- C:\Users\Public\Desktop\TeamViewer 9.lnk
[2014/01/25 15:24:50 | 000,002,161 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\Play Women's Murder Club Little Black Lies.lnk
[2014/01/25 01:51:22 | 000,017,671 | -H-- | C] () -- C:\Users\Multi Media\Documents\YouPorn - Alexandre e Camila.MP4.mta
[2014/01/24 23:04:36 | 001,022,594 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\Nelly weave.xcf
[2014/01/19 01:53:08 | 000,000,064 | ---- | C] () -- C:\Windows\GPlrLanc.dat
[2014/01/02 10:47:18 | 000,000,017 | ---- | C] () -- C:\Users\Multi Media\AppData\Local\resmon.resmoncfg
[2013/12/27 00:22:55 | 000,005,632 | ---- | C] () -- C:\Users\Multi Media\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013/12/16 12:59:43 | 000,011,303 | ---- | C] () -- C:\Users\Multi Media\AppData\Local\recently-used.xbel
[2013/11/29 23:50:38 | 000,000,271 | -H-- | C] () -- C:\Windows\retroplug.dll
[2013/11/29 23:50:38 | 000,000,223 | -H-- | C] () -- C:\Windows\samborombon.dll
[2013/11/22 17:32:53 | 000,000,092 | ---- | C] () -- C:\Users\Multi Media\AppData\Roaming\WB.CFG
[2013/11/03 02:47:50 | 000,112,477 | ---- | C] () -- C:\Users\Multi Media\AppData\Local\tmpDEANNA.JPG
[2013/10/30 12:07:00 | 000,030,568 | ---- | C] () -- C:\Windows\MusiccityDownload.exe
[2013/10/30 12:06:54 | 000,974,848 | ---- | C] () -- C:\Windows\SysWow64\cis-2.4.dll
[2013/10/30 12:06:54 | 000,081,920 | ---- | C] () -- C:\Windows\SysWow64\issacapi_bs-2.3.dll
[2013/10/30 12:06:54 | 000,065,536 | ---- | C] () -- C:\Windows\SysWow64\issacapi_pe-2.3.dll
[2013/10/30 12:06:54 | 000,057,344 | ---- | C] () -- C:\Windows\SysWow64\issacapi_se-2.3.dll
[2013/10/29 08:33:16 | 000,235,008 | ---- | C] () -- C:\Windows\SysWow64\FltEng.dll
[2013/10/29 08:33:16 | 000,061,440 | ---- | C] () -- C:\Windows\SysWow64\secpro.exe
[2013/10/22 09:50:04 | 000,025,600 | ---- | C] () -- C:\Windows\SysWow64\MediaDB.dll
[2013/10/22 09:48:02 | 000,707,072 | ---- | C] () -- C:\Windows\SysWow64\ContentDirectoryPresenter.dll
[2013/10/19 17:39:54 | 000,147,674 | ---- | C] () -- C:\Users\Multi Media\drawing.svg
[2013/10/13 21:50:44 | 000,000,098 | ---- | C] () -- C:\Users\Multi Media\AppData\Roaming\CamStudio.Producer.command
[2013/10/13 17:58:29 | 000,000,408 | ---- | C] () -- C:\Users\Multi Media\AppData\Roaming\CamShapes.ini
[2013/10/13 17:58:29 | 000,000,408 | ---- | C] () -- C:\Users\Multi Media\AppData\Roaming\CamLayout.ini
[2013/10/13 17:58:29 | 000,000,046 | ---- | C] () -- C:\Users\Multi Media\AppData\Roaming\CamData.ini
[2013/10/13 17:54:29 | 000,001,206 | ---- | C] () -- C:\Users\Multi Media\AppData\Roaming\CamStudio.Producer.ini
[2013/10/13 17:54:29 | 000,000,000 | ---- | C] () -- C:\Users\Multi Media\AppData\Roaming\CamStudio.Producer.Data.ini
[2013/10/13 03:54:23 | 000,000,058 | ---- | C] () -- C:\Users\Multi Media\AppData\Local\DonationCoder_ScreenshotCaptor_InstallInfo.dat
[2013/10/12 16:42:23 | 000,266,056 | ---- | C] () -- C:\Users\Multi Media\synfigstudio-0.64.0-20130509.master.8.i386.tar.bz2
[2013/10/12 16:34:32 | 021,114,901 | ---- | C] () -- C:\Users\Multi Media\synfigstudio-0.64.0-20130509.master.8.i386.tar.bz2.tar.bz2.tar.bz2
[2013/10/12 16:23:20 | 000,004,509 | ---- | C] () -- C:\Users\Multi Media\AppData\Roaming\CamStudio.cfg
[2013/10/12 14:34:29 | 000,002,065 | ---- | C] () -- C:\Users\Multi Media\.lmmsrc.xml
[2013/10/12 02:56:17 | 003,558,921 | ---- | C] () -- C:\Users\Multi Media\preview.mp3
[2013/10/06 13:38:57 | 000,000,479 | ---- | C] () -- C:\Users\Multi Media\FACTORY_IMAGE (D) - Shortcut.lnk
[2013/09/20 21:38:11 | 000,000,258 | RHS- | C] () -- C:\Users\Multi Media\ntuser.pol
[2013/09/09 13:16:42 | 000,854,452 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2013/07/23 19:18:54 | 000,046,592 | ---- | C] () -- C:\Windows\SysWow64\boost_thread-vc90-mt-1_47.dll
[2013/07/23 19:18:46 | 000,038,912 | ---- | C] () -- C:\Windows\SysWow64\boost_date_time-vc90-mt-1_47.dll
[2013/07/23 19:18:42 | 000,704,000 | ---- | C] () -- C:\Windows\SysWow64\boost_regex-vc90-mt-1_47.dll
[2013/07/23 19:18:40 | 000,227,840 | ---- | C] () -- C:\Windows\SysWow64\boost_serialization-vc90-mt-1_47.dll
[2013/07/23 19:18:38 | 000,130,048 | ---- | C] () -- C:\Windows\SysWow64\boost_filesystem-vc90-mt-1_47.dll
[2013/07/23 19:18:38 | 000,012,800 | ---- | C] () -- C:\Windows\SysWow64\boost_system-vc90-mt-1_47.dll
[2012/07/02 15:11:02 | 000,016,384 | ---- | C] () -- C:\Windows\SysWow64\theowl.dll
[2011/02/26 13:39:38 | 009,649,183 | ---- | C] () -- C:\Users\Multi Media\Gun N270211.gsm
[2011/02/26 10:07:56 | 001,684,218 | ---- | C] () -- C:\Users\Multi Media\Gun N270211.3DS

========== ZeroAccess Check ==========

[2013/11/23 23:35:21 | 000,000,000 | -HSD | M] -- C:\Users\Multi Media\AppData\Local\Google\Desktop\Install\{aa97cac2-f405-cd59-f327-1532545954de}\❤≸⋙\Ⱒ☠⍨\ﯹ๛\{aa97cac2-f405-cd59-f327-1532545954de}\L
[2013/11/23 23:35:20 | 000,000,000 | -HSD | M] -- C:\Users\Multi Media\AppData\Local\Google\Desktop\Install\{aa97cac2-f405-cd59-f327-1532545954de}\❤≸⋙\Ⱒ☠⍨\ﯹ๛\{aa97cac2-f405-cd59-f327-1532545954de}\U
[2009/07/13 23:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2013/07/25 21:24:57 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013/07/25 20:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/13 20:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 07:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/13 20:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2014/02/21 07:30:10 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\Audacity
[2013/09/09 17:06:21 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\Blender Foundation
[2013/09/26 17:52:13 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\Canon
[2013/10/13 04:26:58 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\ColorCop
[2013/09/09 18:24:01 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\DAZ 3D
[2013/10/13 03:54:23 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\DonationCoder
[2014/01/02 20:26:39 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\DownLite
[2014/01/23 16:38:18 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\Flood Light Games
[2014/01/25 20:09:52 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\Floodlight Games
[2014/02/15 02:00:29 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\FlowStone
[2013/12/14 02:27:02 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\fltk.org
[2013/11/16 02:29:39 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\Foxit Software
[2013/09/29 05:05:13 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\Free Audio Editor
[2014/02/15 19:59:22 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\gtk-2.0
[2014/02/21 19:04:50 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\IDM2
[2014/02/15 00:24:01 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\Image-Line
[2014/02/10 00:30:47 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\IminentToolbar
[2013/11/23 15:27:54 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\inkscape
[2013/09/20 19:31:18 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\Logs
[2013/11/01 15:53:35 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\MixVibes
[2014/02/05 20:18:33 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\MumboJumbo
[2014/01/25 02:32:45 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\MusicNet
[2014/01/01 00:37:24 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\newnext.me
[2014/01/02 22:19:12 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\Open Download Manager
[2013/09/09 06:57:26 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\PictureMover
[2014/02/05 20:12:22 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\Samsung
[2014/01/02 17:44:18 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\Spotify
[2014/01/30 07:08:52 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\TeamViewer
[2014/02/21 16:07:34 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\uTorrent
[2014/01/23 15:57:14 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\Windows Live Writer
[2014/01/30 10:34:29 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\WinZip

========== Purity Check ==========



< End of report >
  • 0

#3
ligegeorge

ligegeorge

    New Member

  • Topic Starter
  • Member
  • Pip
  • 3 posts
========== Files Created - No Company Name ==========

[2014/02/21 14:36:49 | 000,010,848 | ---- | C] () -- C:\Users\Multi Media\.recently-used.xbel
[2014/02/21 02:56:42 | 000,000,326 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\Programs - Shortcut.lnk
[2014/02/20 23:07:29 | 000,002,515 | ---- | C] () -- C:\Users\Public\Desktop\Skype.lnk
[2014/02/20 23:04:05 | 000,002,184 | ---- | C] () -- C:\Users\Multi Media\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
[2014/02/17 18:10:16 | 000,012,596 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\line draw all engine.gif
[2014/02/15 21:26:25 | 001,205,234 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\Hard Aggressive Rap Instrumental.mp3
[2014/02/15 19:12:54 | 190,632,448 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\greeting.avi
[2014/02/15 14:59:32 | 000,000,706 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\Libraries - Shortcut.lnk
[2014/02/15 14:13:25 | 001,277,547 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\BlueMarble-2001-2002.jpg
[2014/02/15 02:15:51 | 000,056,479 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\iBang Kick 2.mp3
[2014/02/15 02:14:53 | 000,028,475 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\iBang Kick.mp3
[2014/02/15 00:33:09 | 000,001,150 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\ASIO4ALL v2 Instruction Manual.lnk
[2014/02/15 00:25:15 | 000,002,046 | ---- | C] () -- C:\Users\Public\Desktop\FL Studio 11.lnk
[2014/02/15 00:23:56 | 000,002,058 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FL Studio 11.lnk
[2014/02/14 23:00:09 | 000,110,786 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\drum loop 44.mp3
[2014/02/14 22:56:02 | 000,275,464 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\25 top breaks.mp3
[2014/02/14 21:23:45 | 000,647,168 | ---- | C] () -- C:\Windows\SysWow64\sonicismdsp.dll
[2014/02/14 18:36:53 | 000,060,801 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\Nelly weave.jpg
[2014/02/14 18:17:40 | 015,739,924 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\lg mix 4.mp3
[2014/02/12 00:15:27 | 000,001,319 | ---- | C] () -- C:\Users\Multi Media\Application Data\Microsoft\Internet Explorer\Quick Launch\Free YouTube Downloader.lnk
[2014/02/12 00:15:27 | 000,001,295 | ---- | C] () -- C:\Users\Public\Desktop\Free YouTube Downloader.lnk
[2014/02/12 00:15:26 | 000,000,174 | ---- | C] () -- C:\Users\Public\Desktop\Amazon.url
[2014/02/12 00:15:16 | 000,000,393 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\FREE Games.url
[2014/02/12 00:00:19 | 000,002,199 | ---- | C] () -- C:\Users\Multi Media\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Severe Weather Alerts App.lnk
[2014/02/12 00:00:19 | 000,001,244 | ---- | C] () -- C:\Users\Multi Media\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Severe Weather Alerts.lnk
[2014/02/11 23:48:24 | 000,001,628 | ---- | C] () -- C:\Windows\tasks\MediaPlayerEnhance-updater.job
[2014/02/11 23:48:20 | 000,001,482 | ---- | C] () -- C:\Windows\tasks\MediaPlayerEnhance-enabler.job
[2014/02/11 23:48:17 | 000,001,584 | ---- | C] () -- C:\Windows\tasks\MediaPlayerEnhance-codedownloader.job
[2014/02/11 23:48:10 | 000,002,428 | ---- | C] () -- C:\Windows\tasks\MediaPlayerEnhance-firefoxinstaller.job
[2014/02/11 23:48:07 | 000,002,432 | ---- | C] () -- C:\Windows\tasks\MediaPlayerEnhance-validator.job
[2014/02/11 23:39:25 | 000,002,149 | ---- | C] () -- C:\Users\Public\Desktop\YouTube to MP3.lnk
[2014/02/10 08:48:34 | 000,020,827 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\Transforming sound.mp3
[2014/02/10 08:46:08 | 000,002,005 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\EasyDJSoftware - Copy.lnk
[2014/02/09 14:40:12 | 000,002,285 | ---- | C] () -- C:\Users\Multi Media\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2014/02/09 14:40:12 | 000,002,185 | ---- | C] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2014/02/08 22:27:10 | 000,030,226 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\lg mix 3.aup
[2014/02/08 18:42:55 | 000,431,100 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\bane voice.mp3
[2014/02/08 02:03:01 | 000,000,468 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\HP © - Shortcut.lnk
[2014/02/08 01:57:13 | 003,633,796 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\Vanille nude.7z
[2014/02/08 01:56:25 | 000,347,472 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\zn1nmy1v43-LULA3D03142013.rar
[2014/02/07 22:14:20 | 000,002,669 | ---- | C] () -- C:\Users\Multi Media\Documents\My Movie.wlmp
[2014/02/06 23:56:34 | 000,207,279 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\Icovia® Room Planner.pdf
[2014/02/06 22:54:22 | 000,094,749 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\SharkBackground.png
[2014/02/06 22:37:09 | 000,091,862 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\Blender Hotkeys Cheatsheet.pdf
[2014/02/01 13:18:11 | 000,002,165 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\Play Midnight Mysteries - Devil on the MissIssippi.lnk
[2014/01/30 10:18:56 | 000,366,611 | ---- | C] () -- C:\Users\Multi Media\AppData\Local\mysearchdial-speeddial.crx
[2014/01/30 10:18:17 | 000,002,243 | ---- | C] () -- C:\Users\Public\Desktop\WinZip.lnk
[2014/01/30 10:16:52 | 000,000,804 | ---- | C] () -- C:\Users\Multi Media\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\jZip.lnk
[2014/01/30 08:40:45 | 002,287,264 | ---- | C] () -- C:\Users\Public\Documents\FreeDrumKits.net - Lex Luger - Soundfonts.zip
[2014/01/30 02:52:50 | 001,449,609 | ---- | C] () -- C:\Users\Multi Media\Documents\Marilyn Monroe - Happy Birthday Mr. President.mp3
[2014/01/30 02:24:58 | 001,725,727 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\lg mix 3.mp3
[2014/01/26 11:43:59 | 000,002,159 | ---- | C] () -- C:\Users\Public\Desktop\Media Impression 2.lnk
[2014/01/25 18:59:11 | 000,001,104 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
[2014/01/25 18:59:11 | 000,001,092 | ---- | C] () -- C:\Users\Public\Desktop\TeamViewer 9.lnk
[2014/01/25 15:24:50 | 000,002,161 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\Play Women's Murder Club Little Black Lies.lnk
[2014/01/25 01:51:22 | 000,017,671 | -H-- | C] () -- C:\Users\Multi Media\Documents\YouPorn - Alexandre e Camila.MP4.mta
[2014/01/24 23:04:36 | 001,022,594 | ---- | C] () -- C:\Users\Multi Media\.thumbnails\Desktop\Nelly weave.xcf
[2014/01/19 01:53:08 | 000,000,064 | ---- | C] () -- C:\Windows\GPlrLanc.dat
[2014/01/02 10:47:18 | 000,000,017 | ---- | C] () -- C:\Users\Multi Media\AppData\Local\resmon.resmoncfg
[2013/12/27 00:22:55 | 000,005,632 | ---- | C] () -- C:\Users\Multi Media\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013/12/16 12:59:43 | 000,011,303 | ---- | C] () -- C:\Users\Multi Media\AppData\Local\recently-used.xbel
[2013/11/29 23:50:38 | 000,000,271 | -H-- | C] () -- C:\Windows\retroplug.dll
[2013/11/29 23:50:38 | 000,000,223 | -H-- | C] () -- C:\Windows\samborombon.dll
[2013/11/22 17:32:53 | 000,000,092 | ---- | C] () -- C:\Users\Multi Media\AppData\Roaming\WB.CFG
[2013/11/03 02:47:50 | 000,112,477 | ---- | C] () -- C:\Users\Multi Media\AppData\Local\tmpDEANNA.JPG
[2013/10/30 12:07:00 | 000,030,568 | ---- | C] () -- C:\Windows\MusiccityDownload.exe
[2013/10/30 12:06:54 | 000,974,848 | ---- | C] () -- C:\Windows\SysWow64\cis-2.4.dll
[2013/10/30 12:06:54 | 000,081,920 | ---- | C] () -- C:\Windows\SysWow64\issacapi_bs-2.3.dll
[2013/10/30 12:06:54 | 000,065,536 | ---- | C] () -- C:\Windows\SysWow64\issacapi_pe-2.3.dll
[2013/10/30 12:06:54 | 000,057,344 | ---- | C] () -- C:\Windows\SysWow64\issacapi_se-2.3.dll
[2013/10/29 08:33:16 | 000,235,008 | ---- | C] () -- C:\Windows\SysWow64\FltEng.dll
[2013/10/29 08:33:16 | 000,061,440 | ---- | C] () -- C:\Windows\SysWow64\secpro.exe
[2013/10/22 09:50:04 | 000,025,600 | ---- | C] () -- C:\Windows\SysWow64\MediaDB.dll
[2013/10/22 09:48:02 | 000,707,072 | ---- | C] () -- C:\Windows\SysWow64\ContentDirectoryPresenter.dll
[2013/10/19 17:39:54 | 000,147,674 | ---- | C] () -- C:\Users\Multi Media\drawing.svg
[2013/10/13 21:50:44 | 000,000,098 | ---- | C] () -- C:\Users\Multi Media\AppData\Roaming\CamStudio.Producer.command
[2013/10/13 17:58:29 | 000,000,408 | ---- | C] () -- C:\Users\Multi Media\AppData\Roaming\CamShapes.ini
[2013/10/13 17:58:29 | 000,000,408 | ---- | C] () -- C:\Users\Multi Media\AppData\Roaming\CamLayout.ini
[2013/10/13 17:58:29 | 000,000,046 | ---- | C] () -- C:\Users\Multi Media\AppData\Roaming\CamData.ini
[2013/10/13 17:54:29 | 000,001,206 | ---- | C] () -- C:\Users\Multi Media\AppData\Roaming\CamStudio.Producer.ini
[2013/10/13 17:54:29 | 000,000,000 | ---- | C] () -- C:\Users\Multi Media\AppData\Roaming\CamStudio.Producer.Data.ini
[2013/10/13 03:54:23 | 000,000,058 | ---- | C] () -- C:\Users\Multi Media\AppData\Local\DonationCoder_ScreenshotCaptor_InstallInfo.dat
[2013/10/12 16:42:23 | 000,266,056 | ---- | C] () -- C:\Users\Multi Media\synfigstudio-0.64.0-20130509.master.8.i386.tar.bz2
[2013/10/12 16:34:32 | 021,114,901 | ---- | C] () -- C:\Users\Multi Media\synfigstudio-0.64.0-20130509.master.8.i386.tar.bz2.tar.bz2.tar.bz2
[2013/10/12 16:23:20 | 000,004,509 | ---- | C] () -- C:\Users\Multi Media\AppData\Roaming\CamStudio.cfg
[2013/10/12 14:34:29 | 000,002,065 | ---- | C] () -- C:\Users\Multi Media\.lmmsrc.xml
[2013/10/12 02:56:17 | 003,558,921 | ---- | C] () -- C:\Users\Multi Media\preview.mp3
[2013/10/06 13:38:57 | 000,000,479 | ---- | C] () -- C:\Users\Multi Media\FACTORY_IMAGE (D) - Shortcut.lnk
[2013/09/20 21:38:11 | 000,000,258 | RHS- | C] () -- C:\Users\Multi Media\ntuser.pol
[2013/09/09 13:16:42 | 000,854,452 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2013/07/23 19:18:54 | 000,046,592 | ---- | C] () -- C:\Windows\SysWow64\boost_thread-vc90-mt-1_47.dll
[2013/07/23 19:18:46 | 000,038,912 | ---- | C] () -- C:\Windows\SysWow64\boost_date_time-vc90-mt-1_47.dll
[2013/07/23 19:18:42 | 000,704,000 | ---- | C] () -- C:\Windows\SysWow64\boost_regex-vc90-mt-1_47.dll
[2013/07/23 19:18:40 | 000,227,840 | ---- | C] () -- C:\Windows\SysWow64\boost_serialization-vc90-mt-1_47.dll
[2013/07/23 19:18:38 | 000,130,048 | ---- | C] () -- C:\Windows\SysWow64\boost_filesystem-vc90-mt-1_47.dll
[2013/07/23 19:18:38 | 000,012,800 | ---- | C] () -- C:\Windows\SysWow64\boost_system-vc90-mt-1_47.dll
[2012/07/02 15:11:02 | 000,016,384 | ---- | C] () -- C:\Windows\SysWow64\theowl.dll
[2011/02/26 13:39:38 | 009,649,183 | ---- | C] () -- C:\Users\Multi Media\Gun N270211.gsm
[2011/02/26 10:07:56 | 001,684,218 | ---- | C] () -- C:\Users\Multi Media\Gun N270211.3DS

========== ZeroAccess Check ==========

[2013/11/23 23:35:21 | 000,000,000 | -HSD | M] -- C:\Users\Multi Media\AppData\Local\Google\Desktop\Install\{aa97cac2-f405-cd59-f327-1532545954de}\❤≸⋙\Ⱒ☠⍨\ﯹ๛\{aa97cac2-f405-cd59-f327-1532545954de}\L
[2013/11/23 23:35:20 | 000,000,000 | -HSD | M] -- C:\Users\Multi Media\AppData\Local\Google\Desktop\Install\{aa97cac2-f405-cd59-f327-1532545954de}\❤≸⋙\Ⱒ☠⍨\ﯹ๛\{aa97cac2-f405-cd59-f327-1532545954de}\U
[2009/07/13 23:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2013/07/25 21:24:57 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013/07/25 20:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/13 20:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 07:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/13 20:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2014/02/21 07:30:10 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\Audacity
[2013/09/09 17:06:21 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\Blender Foundation
[2013/09/26 17:52:13 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\Canon
[2013/10/13 04:26:58 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\ColorCop
[2013/09/09 18:24:01 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\DAZ 3D
[2013/10/13 03:54:23 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\DonationCoder
[2014/01/02 20:26:39 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\DownLite
[2014/01/23 16:38:18 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\Flood Light Games
[2014/01/25 20:09:52 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\Floodlight Games
[2014/02/15 02:00:29 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\FlowStone
[2013/12/14 02:27:02 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\fltk.org
[2013/11/16 02:29:39 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\Foxit Software
[2013/09/29 05:05:13 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\Free Audio Editor
[2014/02/15 19:59:22 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\gtk-2.0
[2014/02/21 19:04:50 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\IDM2
[2014/02/15 00:24:01 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\Image-Line
[2014/02/10 00:30:47 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\IminentToolbar
[2013/11/23 15:27:54 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\inkscape
[2013/09/20 19:31:18 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\Logs
[2013/11/01 15:53:35 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\MixVibes
[2014/02/05 20:18:33 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\MumboJumbo
[2014/01/25 02:32:45 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\MusicNet
[2014/01/01 00:37:24 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\newnext.me
[2014/01/02 22:19:12 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\Open Download Manager
[2013/09/09 06:57:26 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\PictureMover
[2014/02/05 20:12:22 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\Samsung
[2014/01/02 17:44:18 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\Spotify
[2014/01/30 07:08:52 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\TeamViewer
[2014/02/21 16:07:34 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\uTorrent
[2014/01/23 15:57:14 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\Windows Live Writer
[2014/01/30 10:34:29 | 000,000,000 | ---D | M] -- C:\Users\Multi Media\AppData\Roaming\WinZip

========== Purity Check ==========



< End of report >
  • 0

#4
godawgs

godawgs

    Teacher

  • Retired Staff
  • 8,228 posts
Hello ligegeorge, :wave: Welcome to the forums!
:welcome:. My name is godawgs and I will be assisting you with your Virus / Malware issues.
I will start working on your Malware issues. This may, or may not, solve other issues you have with your machine. The fixes are specific to your problem and should only be used for this issue on this machine!

If you have since resolved the issues you were originally experiencing, or have received help elsewhere, please inform me so that this topic can be closed.
If you have not, please adhere to the guidelines below and then carefully follow all future instructions:

You must reply to posts within four days. If you haven't replied within that time, the topic will be closed! If you need additional time to complete things, just let me know.
If you're not sure, or if something unexpected happens, Do NOT continue! Stop and ask!

This board can notify you when a new reply is added to a topic. Please read this topic to find out how to do that.

Please do not run any tools unless instructed to do so.
  • We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability. Do as the instructions ask, nothing extra. Do Not run things twice unless instructed.
  • Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.
  • If I ask a Question just answer it, don't run anything unless directed to.
Please read every post completely before doing anything.
  • Pay special attention to the NOTE: lines, or anything in red. These entries identify an individual issue or important step in the cleanup process.
  • Please make sure you are saving and printing the instructions out prior to each fix, this way you will have them on hand just in case you are unable to access this site. Some of the steps I will be asking you to do may require you to boot into Safe Mode and this process will be much easier for you to perform if the instructions are printed out for you to follow.
  • Please do not use the Attachment feature for any log file. Do a Copy/Paste of the entire contents of the log file and submit it inside your post unless directed otherwise.
Logs from malware diagnostic or removal programs (OTL is one of them) can take some time to analyze.
  • I need you to be patient while I analyze any logs you post. Please remember, I am a volunteer, and I do have a life outside of these forum, (sometimes :lol: )
  • Attention to detail is important! Since I cannot see or directly interact with your computer I am dependent on you to "be my eyes" and provide as much information as you can regarding the current state of your computer.
Lastly, Please be aware that removing Malware is a hazardous undertaking. I will take care not to knowingly suggest courses of action that might damage your computer. However it is impossible for me to foresee all interactions that may happen between the software on your computer and those we'll use to clear you of infection, and I cannot guarantee the safety of your system. Some infections are so severe that we might encounter situations where the only recourse is to re-format and re-install your operating system. Don't worry, this only happens in severe cases, but, sadly, it does happen.
In light of this be prepared to back up your data. Have means of backing up your data available.

IMPORTANT:Change your browser(s) to download any tools to the desktop.
Follow the directions here
For FireFox check the dot beside "Always ask me where to save files."
For Chrome, check the box beside "Ask where to save each file before downloading"
NOTE: IE8 Does not support changing download locations in this manner. You will need to download the tool(s) to the default folder, usually Downloads, then copy them to the desktop.


:alarm:
Warning: One or more of the identified infections on your computer is known to use a backdoor!
These are information stealing trojans installed on your computer.
Backdoor Trojans, IRCBots, keyloggers and Infostealers are very dangerous because they provide a way of accessing a computer system that bypasses security mechanisms and can steal sensitive information like passwords, personal and financial data which they send back to the hacker. Remote attackers use backdoor Trojans as part of an exploit to to gain unauthorized access to a computer and take control of it without your knowledge.

I would advise you to immediately disconnect this computer from the internet except when reading my posts, downloading the required tools and replying to this topic on this forum only.

If your computer was used for online banking, has credit card information or other sensitive data on it, I suggest you do the following:
  • All passwords should be changed to include those used for banking, email, eBay, Facebook ect; and forums. You should consider them to be compromised. They should be changed using a different computer and not the infected one. If you use the infected computer, an attacker may get the new passwords and transaction information.
  • Banking and credit card institutions should be notified of the possible security breach.

Though the infection has been identified and can be killed, because of it's backdoor functionality, your PC is very likely compromised and there is no way to be sure your computer can ever again be trusted. Many experts in the security community believe that once infected with this type of trojan, the best course of action would be a reformat and reinstall of the OS.
Please read these for more information:

How Do I Handle Possible Identify Theft, Internet Fraud and CC Fraud?
When Should I Format, How Should I Reinstall


We can still clean this machine but I can't guarantee that it will be 100% secure afterward. Please let me know if you want to clean the machine or reinstall Windows.
  • 0

#5
godawgs

godawgs

    Teacher

  • Retired Staff
  • 8,228 posts
Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP