[pika3pika]

java update cant use it more than 7.51  coz i think it need sp3. and i know no more service for xp. and for vlc yeah i update it later.  changed to vista and need more cash and new computer. so just let it be.  so lets go with frst. 

[Advertisements]

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version:22-06-2014

Ran by dd at 2014-06-25 19:48:02 Run:1

Running from C:\Documents and Settings\dd\Desktop

Boot Mode: Normal

 

==============================================

 

Content of fixlist:

*****************

Start

AlternateDataStreams: C:\Documents and Settings\All Users\Application Data\TEMP:931BB48A

C:\Documents and Settings\dd\Local Settings\Temp\Quarantine.exe

C:\Documents and Settings\dd\jagex_cl_runescape_LIVE.dat

C:\Documents and Settings\dd\random.dat

2014-06-12 00:40 - 2014-06-12 00:40 - 00000000 ____D () C:\Documents and Settings\LocalService\Application Data\Hotspot Shield

2014-06-14 13:29 - 2013-10-04 22:41 - 00000000 ____D () C:\Documents and Settings\dd\Application Data\IObit

File: C:\WINDOWS\System32\msiexec.exe

C:\Documents and Settings\dd\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\v9-toolbar.crx

CHR HKLM\...\Chrome\Extension: [bpeeepmahhfjiediknjejcmcfmjcjdck] - C:\Documents and Settings\dd\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\serach.crx [2014-06-20]

C:\Documents and Settings\dd\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\serach.crx

SearchScopes: HKLM - DefaultScope value is missing.

HKLM\...\Run: [] => [X]

End

*****************

 

C:\Documents and Settings\All Users\Application Data\TEMP => ":931BB48A" ADS removed successfully.

C:\Documents and Settings\dd\Local Settings\Temp\Quarantine.exe => Moved successfully.

C:\Documents and Settings\dd\jagex_cl_runescape_LIVE.dat => Moved successfully.

C:\Documents and Settings\dd\random.dat => Moved successfully.

C:\Documents and Settings\LocalService\Application Data\Hotspot Shield => Moved successfully.

C:\Documents and Settings\dd\Application Data\IObit => Moved successfully.

 

========================= File: C:\WINDOWS\System32\msiexec.exe ========================

 

MD5: f5f0146580e7023adb963879840777f8     

Creation and modification date: 2004-08-03 23:56 - 2005-05-04 14:45

Size: 0078848

Attributes: ----A

Company Name: Microsoft Corporation

Internal Name: msiexec

Original Name: msiexec.exe

Product Name: Windows Installer - Unicode

Description: Windows® installer

File Version: 3.1.4000.1823

Product Version: 3.1.4000.1823

Copyright: © Microsoft Corporation. All rights reserved.

 

====== End Of File: ======

 

"C:\Documents and Settings\dd\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\v9-toolbar.crx" => File/Directory not found.

'HKLM\SOFTWARE\Google\Chrome\Extensions\bpeeepmahhfjiediknjejcmcfmjcjdck' => Key deleted successfully.

"C:\Documents and Settings\dd\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\serach.crx" => File/Directory not found.

"C:\Documents and Settings\dd\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\serach.crx" => File/Directory not found.

HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\ => value deleted successfully.

 

==== End of Fixlog ====

[pika3pika]

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version:22-06-2014

Ran by dd at 2014-06-25 19:48:02 Run:1

Running from C:\Documents and Settings\dd\Desktop

Boot Mode: Normal

 

==============================================

 

Content of fixlist:

*****************

Start

AlternateDataStreams: C:\Documents and Settings\All Users\Application Data\TEMP:931BB48A

C:\Documents and Settings\dd\Local Settings\Temp\Quarantine.exe

C:\Documents and Settings\dd\jagex_cl_runescape_LIVE.dat

C:\Documents and Settings\dd\random.dat

2014-06-12 00:40 - 2014-06-12 00:40 - 00000000 ____D () C:\Documents and Settings\LocalService\Application Data\Hotspot Shield

2014-06-14 13:29 - 2013-10-04 22:41 - 00000000 ____D () C:\Documents and Settings\dd\Application Data\IObit

File: C:\WINDOWS\System32\msiexec.exe

C:\Documents and Settings\dd\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\v9-toolbar.crx

CHR HKLM\...\Chrome\Extension: [bpeeepmahhfjiediknjejcmcfmjcjdck] - C:\Documents and Settings\dd\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\serach.crx [2014-06-20]

C:\Documents and Settings\dd\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\serach.crx

SearchScopes: HKLM - DefaultScope value is missing.

HKLM\...\Run: [] => [X]

End

*****************

 

C:\Documents and Settings\All Users\Application Data\TEMP => ":931BB48A" ADS removed successfully.

C:\Documents and Settings\dd\Local Settings\Temp\Quarantine.exe => Moved successfully.

C:\Documents and Settings\dd\jagex_cl_runescape_LIVE.dat => Moved successfully.

C:\Documents and Settings\dd\random.dat => Moved successfully.

C:\Documents and Settings\LocalService\Application Data\Hotspot Shield => Moved successfully.

C:\Documents and Settings\dd\Application Data\IObit => Moved successfully.

 

========================= File: C:\WINDOWS\System32\msiexec.exe ========================

 

MD5: f5f0146580e7023adb963879840777f8     

Creation and modification date: 2004-08-03 23:56 - 2005-05-04 14:45

Size: 0078848

Attributes: ----A

Company Name: Microsoft Corporation

Internal Name: msiexec

Original Name: msiexec.exe

Product Name: Windows Installer - Unicode

Description: Windows® installer

File Version: 3.1.4000.1823

Product Version: 3.1.4000.1823

Copyright: © Microsoft Corporation. All rights reserved.

 

====== End Of File: ======

 

"C:\Documents and Settings\dd\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\v9-toolbar.crx" => File/Directory not found.

'HKLM\SOFTWARE\Google\Chrome\Extensions\bpeeepmahhfjiediknjejcmcfmjcjdck' => Key deleted successfully.

"C:\Documents and Settings\dd\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\serach.crx" => File/Directory not found.

"C:\Documents and Settings\dd\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\serach.crx" => File/Directory not found.

HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\ => value deleted successfully.

 

==== End of Fixlog ====

[Valinorum]

You need to atleast update it to Service Pack 3 until you upgrade your OS to Vista or above. How is your system?

[pika3pika]

well it seems okay. dont see anything wrong

[Valinorum]

• Step #6 Scan with Malwarebytes' Anti-Malware
  • Download Malwarebytes' Anti-Malware from the suitable link below --
    • Download Link #1
    • Download Link #2
    • Download Link #3
  • Double-click mbam-setup.exe to install the application.
  • Before clicking Finish perform the following actions --
    • Un-check the box beside Enable free trial of Malwarebytes Anti-Malware Premium.
    • Check the box beside Launch Malwarebytes Anti-Malware
  • Once the program has loaded, The MBAM dashboard will appear with an alert to update - click the green button Update Now;
  • Click on Setting--
    • Navigate to the tab Detection and Protection and check all the boxes under Detection Options
  • From the Dashboard click on Scan Now;
  • If threats are detected click on Apply actions. If the program asks to reboot your PC, let it do so;
  • On completion of the scan click on View Detailed Log after that click on Export Button, select Text File and save the log to your Desktop;
  • Copy and Paste the contents of the log in your next reply.

 

• Step #7 ESET Online Scanner
  Disable your security programs which includes but not limited to anti-virus, anti-malware, anti-spyware et cetera. Peruse this for additional information.
  • Download esetsmartinstaller_enu.exe by clicking here.
  • Right-click on the program and choose Run as administrator.
  • Accept their terms and condition and proceed.
  • Install Add-On/Active X if prompted.
  • From the Computer Scan Setting check the following box --
    • Enable detection for potentially unwanted programs
  • Click on Advanced Setting --
    • Uncheck the box beside Remove Found Threats;
    • Check the box beside Scan archives
    • Check the box beside Scan for potentially unsafe applications
    • Check the box beside Enable Anti-Stealth Technology
  • Click on Start and wait for the virus signature database to update.
  • The online scan will begin automatically and can take several hours.
    • Note: Do not touch either the Mouse or keyboard during the scan. Otherwise it may stall.
  • After the Scan finishes --
    • If no threats were found:
      • Put a checkmark in Uninstall application on close.
      • Close the program and report that nothing was found
    • If threats were found:
      • Open the file located in C:\Program Files\ESET\ESET Online Scanner\log.txt (32-bit) or C:\Program Files (x86)\ESET\ESET Online Scanner\log.txt (64-bit).
      • Copy and Paste contents of the log file in your next reply.
  Note: Enable your security programs afterwards.

 

• Required Log(s):
  • Malwarebytes' Anti-Malware Log
  • ESET Scan Log

Regards,
Valinorum

[pika3pika]

Malwarebytes Anti-Malware

www.malwarebytes.org

 

Scan Date: 6/27/2014

Scan Time: 1:28:46 PM

Logfile: mbam.txt

Administrator: Yes

 

Version: 2.00.2.1012

Malware Database: v2014.06.27.02

Rootkit Database: v2014.06.23.02

License: Free

Malware Protection: Disabled

Malicious Website Protection: Disabled

Self-protection: Disabled

 

OS: Windows XP Service Pack 2

CPU: x86

File System: NTFS

User: dd

 

Scan Type: Threat Scan

Result: Completed

Objects Scanned: 246891

Time Elapsed: 21 min, 43 sec

 

Memory: Enabled

Startup: Enabled

Filesystem: Enabled

Archives: Enabled

Rootkits: Enabled

Deep Rootkit Scan: Enabled

Heuristics: Enabled

PUP: Enabled

PUM: Enabled

 

Processes: 0

(No malicious items detected)

 

Modules: 0

(No malicious items detected)

 

Registry Keys: 0

(No malicious items detected)

 

Registry Values: 0

(No malicious items detected)

 

Registry Data: 0

(No malicious items detected)

 

Folders: 0

(No malicious items detected)

 

Files: 0

(No malicious items detected)

 

Physical Sectors: 0

(No malicious items detected)

 

 

(end)

[Valinorum]

Post the ESET Log when done.

[pika3pika]

ESETSmartInstaller@High as downloader log:

all ok

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.7587

# api_version=3.0.2

# EOSSerial=c3c813af859d3b438e34ef9cf322ac59

# engine=18717

# end=stopped

# remove_checked=false

# archives_checked=true

# unwanted_checked=true

# unsafe_checked=true

# antistealth_checked=true

# utc_time=2014-06-14 05:05:05

# local_time=2014-06-15 12:05:05 (+0700, SE Asia Standard Time)

# country="United States"

# lang=1033

# osver=5.1.2600 NT Service Pack 2

# compatibility_mode_1='AntiVir Desktop'

# compatibility_mode=1797 16775165 100 93 0 138481254 231905 0

# scanned=12408

# found=11

# cleaned=0

# scan_time=1820

sh=71435DDB11E00D0243380C4902324853FE4ECE8F ft=1 fh=12b0cd2dde452d65 vn="a variant of Win32/Bundled.Toolbar.Ask potentially unsafe application" ac=I fn="C:\Documents and Settings\dd\Local Settings\Temp\AskSLib.dll"

sh=AE9A9EC8C2BA8B3B6807DDF1A39C2FC2A0FFC91F ft=1 fh=4bf73624e4741a5b vn="Win32/Mobogenie.B potentially unwanted application" ac=I fn="C:\Documents and Settings\dd\Local Settings\Temp\awh359.tmp"

sh=CF6185A9EDFBA0217C9D36D25CA9F6ADCC9F6BC8 ft=1 fh=f90d49fcbe154eac vn="Win32/Toolbar.Conduit potentially unwanted application" ac=I fn="C:\Documents and Settings\dd\Local Settings\Temp\conduitinstaller.exe"

sh=8EBB21D03921B00DE990760F7FA7F08DE689AB06 ft=1 fh=c71c00111e1f412d vn="a variant of Win32/OpenInstall potentially unwanted application" ac=I fn="C:\Documents and Settings\dd\Local Settings\Temp\OIC327.tmp"

sh=946C6D775385138168AC1E9A7CD0D92E68292313 ft=1 fh=6d1c50d5739df3f8 vn="Win32/ExpressDownloader.I potentially unwanted application" ac=I fn="C:\Documents and Settings\dd\Local Settings\Temp\uninstall12906109.exe"

sh=E52A4762CFD4C84AFD6F911889F55206A112D344 ft=1 fh=71e17c1609972e73 vn="a variant of Win32/YourFileDownloader.B potentially unwanted application" ac=I fn="C:\Documents and Settings\dd\Local Settings\Temp\uninstall12906265.exe"

sh=D1538BE3B888751164501BFDD255A3A6477ACCF0 ft=1 fh=6adef79fba00a234 vn="a variant of MSIL/Soft32Downloader.A potentially unwanted application" ac=I fn="C:\Documents and Settings\dd\Local Settings\Temp\DM_GD808mw3C3\DownloadManager.exe"

sh=D1538BE3B888751164501BFDD255A3A6477ACCF0 ft=1 fh=6adef79fba00a234 vn="a variant of MSIL/Soft32Downloader.A potentially unwanted application" ac=I fn="C:\Documents and Settings\dd\Local Settings\Temp\DM_hbyZe3j1vx\DownloadManager.exe"

sh=E50E36B07C184D3223F5C6582658DEF407434110 ft=1 fh=013db0d7a18218df vn="Win32/Toolbar.Conduit potentially unwanted application" ac=I fn="C:\Documents and Settings\dd\Local Settings\Temp\oi_TnM80N3xIJ\main.exe"

sh=7DDE85155B9B675CAB46DDF2A2B1E15EEFCB6077 ft=1 fh=102aa0de19308ce9 vn="a variant of Win32/OpenInstall potentially unwanted application" ac=I fn="C:\Documents and Settings\dd\Local Settings\Temp\oi_TnM80N3xIJ\OIAssistWTD.exe"

sh=71435DDB11E00D0243380C4902324853FE4ECE8F ft=1 fh=12b0cd2dde452d65 vn="a variant of Win32/Bundled.Toolbar.Ask potentially unsafe application" ac=I fn="C:\Documents and Settings\dd\Local Settings\Temporary Internet Files\Content.IE5\PH0SB34E\ApnIC[1].0"

ESETSmartInstaller@High as downloader log:

all ok

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.7587

# api_version=3.0.2

# EOSSerial=c3c813af859d3b438e34ef9cf322ac59

# engine=18717

# end=finished

# remove_checked=true

# archives_checked=false

# unwanted_checked=true

# unsafe_checked=true

# antistealth_checked=true

# utc_time=2014-06-14 05:50:14

# local_time=2014-06-15 12:50:14 (+0700, SE Asia Standard Time)

# country="United States"

# lang=1033

# osver=5.1.2600 NT Service Pack 2

# compatibility_mode_1='AntiVir Desktop'

# compatibility_mode=1797 16775165 100 93 0 138483963 0 0

# scanned=49435

# found=25

# cleaned=25

# scan_time=2412

sh=71435DDB11E00D0243380C4902324853FE4ECE8F ft=1 fh=12b0cd2dde452d65 vn="a variant of Win32/Bundled.Toolbar.Ask potentially unsafe application (deleted - quarantined)" ac=C fn="C:\Documents and Settings\dd\Local Settings\Temp\AskSLib.dll"

sh=AE9A9EC8C2BA8B3B6807DDF1A39C2FC2A0FFC91F ft=1 fh=4bf73624e4741a5b vn="Win32/Mobogenie.B potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Documents and Settings\dd\Local Settings\Temp\awh359.tmp"

sh=CF6185A9EDFBA0217C9D36D25CA9F6ADCC9F6BC8 ft=1 fh=f90d49fcbe154eac vn="Win32/Toolbar.Conduit potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Documents and Settings\dd\Local Settings\Temp\conduitinstaller.exe"

sh=8EBB21D03921B00DE990760F7FA7F08DE689AB06 ft=1 fh=c71c00111e1f412d vn="a variant of Win32/OpenInstall potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Documents and Settings\dd\Local Settings\Temp\OIC327.tmp"

sh=946C6D775385138168AC1E9A7CD0D92E68292313 ft=1 fh=6d1c50d5739df3f8 vn="Win32/ExpressDownloader.I potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Documents and Settings\dd\Local Settings\Temp\uninstall12906109.exe"

sh=E52A4762CFD4C84AFD6F911889F55206A112D344 ft=1 fh=71e17c1609972e73 vn="a variant of Win32/YourFileDownloader.B potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Documents and Settings\dd\Local Settings\Temp\uninstall12906265.exe"

sh=D1538BE3B888751164501BFDD255A3A6477ACCF0 ft=1 fh=6adef79fba00a234 vn="a variant of MSIL/Soft32Downloader.A potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Documents and Settings\dd\Local Settings\Temp\DM_GD808mw3C3\DownloadManager.exe"

sh=D1538BE3B888751164501BFDD255A3A6477ACCF0 ft=1 fh=6adef79fba00a234 vn="a variant of MSIL/Soft32Downloader.A potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Documents and Settings\dd\Local Settings\Temp\DM_hbyZe3j1vx\DownloadManager.exe"

sh=E50E36B07C184D3223F5C6582658DEF407434110 ft=1 fh=013db0d7a18218df vn="Win32/Toolbar.Conduit potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Documents and Settings\dd\Local Settings\Temp\oi_TnM80N3xIJ\main.exe"

sh=7DDE85155B9B675CAB46DDF2A2B1E15EEFCB6077 ft=1 fh=102aa0de19308ce9 vn="a variant of Win32/OpenInstall potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Documents and Settings\dd\Local Settings\Temp\oi_TnM80N3xIJ\OIAssistWTD.exe"

sh=71435DDB11E00D0243380C4902324853FE4ECE8F ft=1 fh=12b0cd2dde452d65 vn="a variant of Win32/Bundled.Toolbar.Ask potentially unsafe application (deleted - quarantined)" ac=C fn="C:\Documents and Settings\dd\Local Settings\Temporary Internet Files\Content.IE5\PH0SB34E\ApnIC[1].0"

sh=252BB7CF6BF5619E419841122325024A250E1D93 ft=1 fh=7b04b13f4f8fa2f6 vn="a variant of Win32/Toolbar.Widgi.B potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Documents and Settings\dd\My Documents\Downloads\asc-setup (1).exe"

sh=9590088AB47BAADF5F41EA26635236E8521271E8 ft=1 fh=000320d40bc4cf3e vn="a variant of Win32/Bundled.Toolbar.Ask potentially unsafe application (deleted - quarantined)" ac=C fn="C:\Documents and Settings\dd\My Documents\Downloads\avira_antivir_personal_2012_12.0.0.872.exe"

sh=C5BF7B7A607C4BD8226147A84473F55E0B514B9F ft=1 fh=17daee83f741f33c vn="a variant of Win32/Bundled.Toolbar.Ask potentially unsafe application (deleted - quarantined)" ac=C fn="C:\Documents and Settings\dd\My Documents\Downloads\avira_antivir_personal_en.exe"

sh=53A05EFCA59C0965A71EADF8397BFC0B8B59BD51 ft=1 fh=cb8ba365f7ed6ff5 vn="a variant of Win32/Bundled.Toolbar.Ask.D potentially unsafe application (deleted - quarantined)" ac=C fn="C:\Documents and Settings\dd\My Documents\Downloads\avira_free_antivirus_en (1).exe"

sh=B214B8F0B58BC6E6DDAA1C56232912117F48B8B0 ft=1 fh=0585e9feaa7bc92e vn="a variant of Win32/Bundled.Toolbar.Ask potentially unsafe application (deleted - quarantined)" ac=C fn="C:\Documents and Settings\dd\My Documents\Downloads\avira_free_antivirus_en_13.0.0.2688.exe"

sh=7B489F0325AC188BCAF16B3850680555564F1D05 ft=1 fh=abf109bf86049409 vn="Win32/OpenCandy potentially unsafe application (deleted - quarantined)" ac=C fn="C:\Documents and Settings\dd\My Documents\Downloads\FreeMP3CutterUltimate.exe"

sh=54880884F9ACA2DFF698FCE2B48A42ADBB4B2A57 ft=1 fh=848e9de229002cf7 vn="Win32/Adware.HitMalware.A application (cleaned by deleting - quarantined)" ac=C fn="C:\Documents and Settings\dd\My Documents\Downloads\HitMalware.exe"

sh=FB383616B988AAEBB1DF5A9EF5301311360D7514 ft=1 fh=094e2f2bc2cbc613 vn="Win32/Toolbar.Conduit potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Documents and Settings\dd\My Documents\Downloads\HSS-3.37-install-hss-561-conduit.exe"

sh=44162B498ADE394964F4CB82012BE7167049D5AD ft=1 fh=2b138af0aa44daae vn="a variant of Win32/Toolbar.Widgi.B potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Documents and Settings\dd\My Documents\Downloads\imf-setup.exe"

sh=1EFF205D7D0D82BAF841A98C176D700114E13FE6 ft=1 fh=b22528247c19a550 vn="a variant of Win32/Bundled.Toolbar.Ask potentially unsafe application (deleted (after the next restart) - quarantined)" ac=C fn="C:\Program Files\Avira\AntiVir Desktop\apnic.dll"

sh=F03442B504B5CE723ABE855CB805DABEF4E78F1E ft=1 fh=5c1d6bdce6f6a178 vn="a variant of Win32/Bundled.Toolbar.Ask potentially unsafe application (deleted (after the next restart) - quarantined)" ac=C fn="C:\Program Files\Avira\AntiVir Desktop\apntoolbarinstaller.exe"

sh=C2F8D1DCEDBA4E711F48E0349D54169F7BA401EE ft=1 fh=58054c55c6d40ee5 vn="a variant of Win32/Toolbar.Widgi potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Program Files\IObit\Advanced SystemCare 6\unlocker-setup.exe"

sh=65645B6D49CFD4E880981A7144889F266FB33461 ft=1 fh=62361f327712eb91 vn="a variant of Win32/Toolbar.Widgi.B potentially unwanted application (deleted - quarantined)" ac=C fn="C:\Program Files\IObit\Advanced SystemCare 6\Update\SDSetup.exe"

sh=383B5F02FED16789D650B6DA54FAF77B9B26EE0C ft=1 fh=0df88f1688975eb0 vn="a variant of Win32/PCCleaners potentially unwanted application (deleted - quarantined)" ac=C fn="C:\WINDOWS\uninst.exe"

ESETSmartInstaller@High as downloader log:

all ok

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.7587

# api_version=3.0.2

# EOSSerial=c3c813af859d3b438e34ef9cf322ac59

# engine=18911

# end=stopped

# remove_checked=false

# archives_checked=true

# unwanted_checked=true

# unsafe_checked=true

# antistealth_checked=true

# utc_time=2014-06-27 08:16:35

# local_time=2014-06-27 03:16:35 (+0700, SE Asia Standard Time)

# country="United States"

# lang=1033

# osver=5.1.2600 NT Service Pack 2

# compatibility_mode_1='AntiVir Desktop'

# compatibility_mode=1797 16775165 100 93 0 139572744 199769 0

# scanned=7105

# found=0

# cleaned=0

# scan_time=4195

ESETSmartInstaller@High as downloader log:

all ok

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.7587

# api_version=3.0.2

# EOSSerial=c3c813af859d3b438e34ef9cf322ac59

# engine=18917

# end=finished

# remove_checked=false

# archives_checked=true

# unwanted_checked=true

# unsafe_checked=true

# antistealth_checked=true

# utc_time=2014-06-27 04:38:04

# local_time=2014-06-27 11:38:04 (+0700, SE Asia Standard Time)

# country="United States"

# lang=1033

# osver=5.1.2600 NT Service Pack 2

# compatibility_mode_1='AntiVir Desktop'

# compatibility_mode=1797 16775165 100 93 0 139602833 229858 0

# scanned=49542

# found=2

# cleaned=0

# scan_time=12109

sh=1EFF205D7D0D82BAF841A98C176D700114E13FE6 ft=1 fh=b22528247c19a550 vn="a variant of Win32/Bundled.Toolbar.Ask potentially unsafe application" ac=I fn="C:\Program Files\Avira\AntiVir Desktop\ApnIC.dll"

sh=F03442B504B5CE723ABE855CB805DABEF4E78F1E ft=1 fh=5c1d6bdce6f6a178 vn="a variant of Win32/Bundled.Toolbar.Ask potentially unsafe application" ac=I fn="C:\Program Files\Avira\AntiVir Desktop\ApnToolbarInstaller.exe"

[Valinorum]

Log looks good. How is your PC running?

[pika3pika]

well it seems okay . well log looks good coz before it i scan using eset and that time i think i removed something. i mean before make this post. so if everything okay its time to go back to network problem .

[Valinorum]

Perusing your logs, I see no infection currently present in your system. Unless you are having any issue(s), the machine appears to be Malware-free as we speak.

 

♣ Removal of Tools and Quarantined Files ♣

 

Despite the tools we have used are clean, they are powerful removal tools and made in a way so that they carry out any commands given to them without (most cases) asking for a confirmation. In the hands of an inept person, they can make the machine un-bootable -- a scenario we do not wish to see. Also, we need to remove the quarantined files/folders from your system as a dormant malware can be as bad as an active one if given the proper environment. I shall now give you the guidelines to remove the tools and the quarantined files from your system.

• Cleanup with Delfix
  Please download DelFix by Xplode to your Desktop.
  Download Link
  • Double-click to run the program;
    • Note: Windows Vista/7/8 users right-click and choose Run as administrator
  • Make sure that all the boxes are checked;
  • Click Run;
  • A log will be opened after the operation is finished;
  • Copy and Paste it in your next reply

 

♣ Prevention and Future Guidelines ♣

 

Prevention is better than cure -- goes the old saying. As much as we love to see you visit our site, we do not want to see you having your PC infected by malwares again.

• Keep Windows up-to-date.
  It is extremely important that you keep your operating system (Windows) updated when updates are made available. It is set to alert you, so be sure not to ignore these notices and to allow the updates to install. Many of these are critical security packages which could very possibly be the difference between your picking up a future infiltration and simply passing right by it unharmed.
• Run antivirus software and keep it up-to-date, too.
  Antivirus software is your safety net if all other protections fail. The first line of defense is smart computing, of course, but everyone needs a backup. I'd recommend Microsoft Security Essentials or avast!, both of which are excellent, as well as free. Once they're installed, check periodically to ensure they have been successfully updating as well. An out-of-date antivirus is not a happy antivirus!
• Keep your web browser plugins and other programs updated also.
  This tip is rarely shared by technicians and its importance is not widely recognized, but it's absolutely critical. Programs such as Java, Adobe Flash Player and Adobe Reader, Internet Explorer, and myriad other such web-exposed items are deeply vulnerable to attack, which can quickly lead to a hopelessly infected system no matter what protection you currently have installed. The reason is that these programs are ubiquitous, but are also not perfect and are extremely complex... and as such, security vulnerabilities are discovered and exploited by hackers hoping to gain control over your machine. By performing every update for these programs as soon as it's made available, you will greatly reduce your exposure to dangerous internet threats.
  
  A great way to do this is to install the Filehippo Update Checker and run it regularly. Also, try not to ignore any notifications you receive regarding updates to programs already installed on your PC.
  
  No scripts is an excellent security device too. I like it but it is not for everyone because it requires you to take action if you want to see some things (pop ups, banners etc.) on sites you visit.
  
  Download NoSript by Giorgio Maone.
  
  Note: Sometimes you will get a site telling you that you need to install Java when actually all you need to do is enable the site through the no script icon down on the right hand side of your computer.
• Watch out for new threat named CryptoLocker
  CryptoLocker is a new type ransomware family malware that encrypts your important files and asks for a ransom to decrypt them. At the moment of posting this reply there are no tools that can undo the havoc this malware causes. We can help you to remove the malware from your system but the files that was encrypted cannot be recovered without the decryption key. So, I ask for your forbearance and practice constant vigilance. Please read the following article to acknowledge yourself about the safety measures.
  How to prevent your computer from becoming infected by CryptoLocker.
• And last of all, surf smart.
  It doesn't matter how well the autopilot system works if the pilot keeps flying the plane into mountain ranges. Don't forget that no matter how much you have protecting yourself, your security ultimately begins and ends with you. Don't visit dangerous or questionable web sites, avoid suspicious links on Facebook and emails/email attachments you're unsure about, and just generally keep your wits about you, and you'll be much safer. Also, avoid illegal downloads, cracks, "warez", and all other too-good-to-be-true internet offerings: they're typically laden with malware. Be smart and you can avoid most threats lurking about the darker corners of the internet! And for even more tips, see our article, How Did I Get Infected in the First Place?
  
  

Regards,
Valinorum

[pika3pika]

# DelFix v10.7 - Logfile created 28/06/2014 at 13:48:06

# Updated 27/04/2014 by Xplode

# Username : dd - DD-K

# Operating System : Microsoft Windows XP Service Pack 2 (32 bits)

 

~ Removing disinfection tools ...

 

Deleted : C:\_OTL

Deleted : C:\FRST

Deleted : C:\AdwCleaner

Deleted : C:\Documents and Settings\dd\Desktop\mbar

Deleted : C:\Documents and Settings\dd\Desktop\Fixlog.txt

Deleted : C:\Documents and Settings\dd\Desktop\FRST.exe

Deleted : C:\Documents and Settings\dd\Desktop\JRT.txt

Deleted : C:\Documents and Settings\dd\Desktop\log.txt

Deleted : C:\Documents and Settings\dd\Desktop\OTL.Txt

Deleted : C:\Documents and Settings\dd\Desktop\OTL.exe

Deleted : C:\Documents and Settings\dd\Desktop\SecurityCheck.exe

Deleted : C:\Documents and Settings\dd\My Documents\Downloads\Addition.txt

Deleted : C:\Documents and Settings\dd\My Documents\Downloads\AdwCleaner (1).exe

Deleted : C:\Documents and Settings\dd\My Documents\Downloads\esetsmartinstaller_enu (1).exe

Deleted : C:\Documents and Settings\dd\My Documents\Downloads\FRST.txt

Deleted : C:\Documents and Settings\dd\My Documents\Downloads\JRT (1).exe

Deleted : C:\Documents and Settings\dd\My Documents\Downloads\MiniToolBox.exe

Deleted : C:\Documents and Settings\dd\My Documents\Downloads\OTL.Txt

Deleted : C:\Documents and Settings\dd\My Documents\Downloads\OTL.exe

Deleted : C:\Documents and Settings\dd\My Documents\Downloads\RogueKiller.exe

Deleted : C:\Documents and Settings\dd\My Documents\Downloads\Shortcut.txt

Deleted : C:\Documents and Settings\dd\My Documents\Downloads\TFC.exe

Deleted : HKLM\SOFTWARE\OldTimer Tools

Deleted : HKLM\SOFTWARE\AdwCleaner

 

~ Creating registry backup ... OK

 

~ Cleaning system restore ...

 

Deleted : RP #1 [System Checkpoint | 06/19/2014 05:49:25]

Deleted : RP #2 [System Checkpoint | 06/20/2014 06:51:16]

Deleted : RP #3 [System Checkpoint | 06/22/2014 08:22:28]

 

New restore point created !

 

~ Resetting system settings ... OK

 

########## - EOF - ##########

[Valinorum]

Browse safely.

[pika3pika]

ok then if its okay. now time to go back to network forum. thx for ur help Valinorum

[Valinorum]

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.