[King Quiambao]

Please Help me fix this! i downloaded a software from the internet and after i have finished downloading it i discovered it had malwares attached to it. now every time i boot up my laptop it always displays this error.

 

Can anyone help me? i badly need to fix this.it is so annoying and bothersome

 

thanks in advance

Attached Thumbnails

• 

[Advertisements]

Hi! My name is zep516 and Welcome to Geekstogo!
I'll do the best I can to resolve your computer issue
Please make sure to carefully read any instruction that I give you. If you're not sure, or if something unexpected happens, don't continue Stop and ask! Never be afraid to ask questions!

Everything gets download to the desktop and tools are "Run as administrator."

Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

• Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
• Press Scan button.
• It will produce a log called FRST.txt in the same directory the tool is run from.
• Please copy and paste log back here.
• The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.

[zep516]

Hi! My name is zep516 and Welcome to Geekstogo!
I'll do the best I can to resolve your computer issue
Please make sure to carefully read any instruction that I give you. If you're not sure, or if something unexpected happens, don't continue Stop and ask! Never be afraid to ask questions!

Everything gets download to the desktop and tools are "Run as administrator."

Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

• Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
• Press Scan button.
• It will produce a log called FRST.txt in the same directory the tool is run from.
• Please copy and paste log back here.
• The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.

[King Quiambao]

here are the files that you asked. hope you can solve my problem asap thank you

Attached Files

•  Addition.txt   84.69KB   204 downloads
•  FRST.txt   41.48KB   204 downloads

Edited by King Quiambao, 20 September 2016 - 05:00 AM.

[zep516]

A few items to fix

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system
Open notepad (Start =>All Programs => Accessories => Notepad).
Copy/Paste the contents of the code box below into Notepad.

start
CloseProcesses:
CreateRestorePoint:
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-1625786293-3034445564-3463336212-1005\...\Run: [Uhvxmedia] => C:\Windows\SysWOW64\regsvr32.exe C:\Users\king\AppData\Local\UZTmedia\jdkreswm.dll
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = 
SearchScopes: HKU\S-1-5-21-1625786293-3034445564-3463336212-1005 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
Toolbar: HKU\S-1-5-21-1625786293-3034445564-3463336212-1005 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Toolbar: HKU\S-1-5-21-1625786293-3034445564-3463336212-1005 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
U3 aspnet_state; no ImagePath
U0 aswVmm; no ImagePath
U3 wpcsvc; no ImagePath
C:\Users\king\AppData\Local\Temp\libeay32.dll
C:\Users\king\AppData\Local\Temp\msvcr120.dll
C:\Users\king\AppData\Local\Temp\ReimagePackage.exe
C:\Users\king\AppData\Local\Temp\sqlite3.dll
Task: {4446B304-D925-4C9F-A78A-5A222BF84362} - \{5C6C9C26-CFB5-D4D0-C3D5-581E178441BD} -> No File <==== ATTENTION
Task: {3B7CD8CF-A7D8-4CC7-8706-0BB36A0A4651} - \Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan -> No File <==== ATTENTION
Task: {4446B304-D925-4C9F-A78A-5A222BF84362} - \{5C6C9C26-CFB5-D4D0-C3D5-581E178441BD} -> No File <==== ATTENTION
Task: {559092ED-7528-444E-B075-1279EDFEF146} - \Opera scheduled Autoupdate 1474196915 -> No File <==== ATTENTION
Task: {98F65DA3-01C5-4785-8A16-FA62F3B0DB1E} - \Microsoft\Windows\Windows Defender\Windows Defender Cleanup -> No File <==== ATTENTION
Task: {9F017B09-409B-4D18-AC9F-4D006E76CB18} - \Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance -> No File <==== ATTENTION
Task: {AC4E6F65-9073-44AE-A8AF-639B2D563369} - \Opera_helper -> No File <==== ATTENTION
Task: {AFD4A8A3-508B-4785-8271-CDEBAEED3F46} - \Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask -> No File <==== ATTENTION
Task: {CEDB1A65-BE1B-4CBE-A52E-A83CFCF06426} - \Microsoft\Windows\Windows Defender\Windows Defender Verification -> No File <==== ATTENTION
Task: {FA625267-66E0-464A-AE95-8754007E78AD} - \Microsoft\Windows\UpdateOrchestrator\Reboot -> No File <==== ATTENTION
AlternateDataStreams: C:\ProgramData\TEMP:D1B5B4F1 [112]
AlternateDataStreams: C:\Users\king\Cookies:d0wOdhpneRmBk4tAQngb1d7nO [2090]
AlternateDataStreams: C:\Users\king\Cookies:L7zqKFQXY8uUyTLGtpb6nz2 [2336]
2016-09-19 20:00 - 2016-09-19 20:01 - 00604960 _____ (Reimage) C:\Users\king\Downloads\ReimageRepair (1).exe
2016-09-19 19:45 - 2016-09-19 19:48 - 00604928 _____ (Reimage) C:\Users\king\Downloads\ReimageRepair.exe
2016-09-18 19:02 - 2016-09-18 21:55 - 00000000 ____D C:\ProgramData\AVAST Software
CMD: bitsadmin /reset /allusers
RemoveProxy:
Emptytemp:

• Click Format and ensure Wordwrap is unchecked.
• Save as Fixlist.txt to your Desktop (Must be in this location)
• Run FRST/FRST64 and press the Fix button just once and wait.
• If the tool needed a restart please make sure you let the system to restart normally and let the tool completes its run after restart.
• The tool will make a log on the Desktop (Fixlog.txt). Please post it to your reply.

Note: If the tool warns you about the version you're using being an outdated version please download and run the updated version.

Next

Please download AdwCleaner by Xplode onto your Desktop.

• Close all open programs and internet browsers.
• Double click on AdwCleaner.exe to run the tool.
• Click the Scan button and wait for the process to complete.
• Click the logfile button and the log will open in Notepad.
• Click on the Clean button follow the prompts.
• A log file will automatically open after the scan has finished and the PC has rebooted.
• Please post the content of that log file with your next answer.
• The report will be saved in the C:\AdwCleaner folder.
  
  In your next reply post
  Fixlog.txt
  post the log from adwcleaner c1.txt

[King Quiambao]

log files

Attached Files

•  Fixlog.txt   11.31KB   205 downloads
•  AdwCleanerC3.txt   1.23KB   194 downloads

[zep516]

How is the computer ?

[King Quiambao]

No more regsvr32 error THANK YOU .however i get this new error

Attached Thumbnails

• 

Edited by King Quiambao, 21 September 2016 - 04:18 PM.

[zep516]

What's the new error and when does it occur ?

[King Quiambao]

I edited my last reply.it occurs when i boot my computer

Edited by King Quiambao, 21 September 2016 - 04:20 PM.

[King Quiambao]

This error

Attached Thumbnails

• 

[zep516]

Yes. I see the error and have no idea what's causing it.

What requested changes is windows trying to complete ?

What specified module could not be found ?


What does it say if you click on That--> "Tell me how to solve the problem" in the error report. I'm curious.

[King Quiambao]

it brings me to https://support.micr...n-us/kb/2734782

and it says it is my .NET Framework

[zep516]

OK, That helps because i saw something about .Net Framework, so I'll focus around that.

Did you uninstall anything or install anything ?

[King Quiambao]

oh one more thing. when i try to update or uninstall a program there is also an error. do you think they are related??

here is the screenshot 

Attached Thumbnails

• 

[King Quiambao]

the windows feature error started almost the same time as the regsvr32