[akash171096]

Hi i have been getting an error message everytime i start up my laptop, the error message is

 

" the module "C:ProgramData\UcgiyVubma.dat" failed to load.

 

Make sure the binary is stored at the specified path or debug it to check for problems with the binary or dependent. DLL Files.

 

 Invalid access to memory location."

 

Can you please help me with this thanks.

[Advertisements]

Hi there, I will need to take a quick look at the system

Download OTL to your Desktop
Secondary link

• Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
  
  
• Select All Users
• Select LOP and Purity
• Under the Custom Scan box paste this in
  
  netsvcs
  BASESERVICES
  %SYSTEMDRIVE%\*.exe
  c:\program files (x86)\Google\Desktop
  c:\program files\Google\Desktop
  dir "%systemdrive%\*" /S /A:L /C
  /md5start
  rpcss.dll
  /md5stop
  CREATERESTOREPOINT
• Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
  • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
  • Attach both logs

[Essexboy]

Hi there, I will need to take a quick look at the system

Download OTL to your Desktop
Secondary link

• Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
  
  
• Select All Users
• Select LOP and Purity
• Under the Custom Scan box paste this in
  
  netsvcs
  BASESERVICES
  %SYSTEMDRIVE%\*.exe
  c:\program files (x86)\Google\Desktop
  c:\program files\Google\Desktop
  dir "%systemdrive%\*" /S /A:L /C
  /md5start
  rpcss.dll
  /md5stop
  CREATERESTOREPOINT
• Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
  • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
  • Attach both logs

[akash171096]

Hi i hhave attached both the the Extras.txt and OTL.txt

Attached Files

•  Extras.Txt   58.59KB   140 downloads
•  OTL.Txt   131.53KB   124 downloads

[Essexboy]

Could you let me know how the computer is behaving after this

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL

• Under the Custom Scans/Fixes box at the bottom, paste in the following
  

:Commands
[CREATERESTOREPOINT]

:OTL
SRV - [2014/03/14 15:17:00 | 000,036,392 | ---- | M] (Just Develop It) [Auto | Running] -- C:\Program Files (x86)\MyPC Backup\BackupStack.exe -- (BackupStack)
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://searchy.easylifeapp.com/
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://searchy.easylifeapp.com/
IE - HKU\S-1-5-21-3631653108-633396649-2893303694-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://search.b1.org/?bsrc=hmior&chid=c167991
IE - HKU\S-1-5-21-3631653108-633396649-2893303694-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page Before = http://search.b1.org/?bsrc=hmior&chid=c167991
IE - HKU\S-1-5-21-3631653108-633396649-2893303694-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com/?ctid=CT3325290&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=4&UP=SPDA40DC1A-010C-41D5-9685-3C8B218E3096&SSPV=
IE - HKU\S-1-5-21-3631653108-633396649-2893303694-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Before = http://search.b1.org/?bsrc=hmior&chid=c167991
IE - HKU\S-1-5-21-3631653108-633396649-2893303694-1000\..\URLSearchHook: {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - No CLSID value found
IE - HKU\S-1-5-21-3631653108-633396649-2893303694-1000\..\SearchScopes,DefaultScope = {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
IE - HKU\S-1-5-21-3631653108-633396649-2893303694-1000\..\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}: "URL" = http://search.conduit.com/Results.aspx?ctid=CT3325290&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=4&UP=SPDA40DC1A-010C-41D5-9685-3C8B218E3096&q={searchTerms}&SSPV=
IE - HKU\S-1-5-21-3631653108-633396649-2893303694-1000\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://www.delta-search.com/?q={searchTerms}&affID=121845&tt=gc_150213_lnkry&babsrc=SP_ss&mntrId=86770090F5CBEAEF
IE - HKU\S-1-5-21-3631653108-633396649-2893303694-1000\..\SearchScopes\{3AFE5FC7-3889-4589-ACD5-93ACEBA22FEE}: "URL" = http://www.delta-search.com/?q={searchTerms}&affID=120006&babsrc=SP_ss&mntrId=86770090F5CBEAEF
O2 - BHO: (Delta SmartbarEngine) - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - mscoree.dll File not found
O2 - BHO: (no name) - {95B7759C-8C7F-4BF1-B163-73684A933233} - No CLSID value found.
O3:64bit: - HKLM\..\Toolbar: (Delta Smartbar) - {ae07101b-46d4-4a98-af68-0333ea26e113} - mscoree.dll File not found
O3 - HKLM\..\Toolbar: (Delta Smartbar) - {ae07101b-46d4-4a98-af68-0333ea26e113} - mscoree.dll File not found
O3 - HKU\S-1-5-21-3631653108-633396649-2893303694-1000\..\Toolbar\WebBrowser: (no name) - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No CLSID value found.
O4 - HKU\S-1-5-21-3631653108-633396649-2893303694-1000..\Run: [UcgiyVubma] regsvr32.exe "C:\ProgramData\UcgiyVubma.dat" File not found
O4 - Startup: C:\Users\Bina Kakhani\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk = C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe (MyPCBackup.com)
[2014/07/08 19:55:22 | 000,000,000 | ---D | C] -- C:\ProgramData\boost_interprocess
[2014/07/07 14:14:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\TakeoThoeCoupOOn
[2014/06/17 17:21:18 | 000,000,000 | ---D | C] -- C:\Users\Bina Kakhani\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
[2014/06/17 17:21:18 | 000,001,103 | ---- | C] () -- C:\Users\Bina Kakhani\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
[2014/06/17 17:21:18 | 000,001,093 | ---- | C] () -- C:\Users\Bina Kakhani\Desktop\MyPC Backup.lnk
[2013/06/12 20:03:35 | 000,000,000 | ---D | M] -- C:\Users\Bina Kakhani\AppData\Roaming\B1Toolbar
[2013/03/05 22:49:05 | 000,000,000 | ---D | M] -- C:\Users\Bina Kakhani\AppData\Roaming\Babylon
[2013/04/15 15:47:32 | 000,000,000 | ---D | M] -- C:\Users\Bina Kakhani\AppData\Roaming\Chirp.3E67724F17ED2775332FC10D237475858B808A75.1
[2013/05/16 18:47:37 | 000,000,000 | ---D | M] -- C:\Users\Bina Kakhani\AppData\Roaming\SpeedyPC Software
[2013/03/18 21:05:31 | 000,000,000 | ---D | M] -- C:\Users\Bina Kakhani\AppData\Roaming\YourFileDownloader
@Alternate Data Stream - 943 bytes -> C:\ProgramData\Microsoft:DVmF1d7k8E1RTdbILoPsEB
@Alternate Data Stream - 1164 bytes -> C:\Users\Bina Kakhani\AppData\Local\1K5WtF1T2rUA:oFjHVihjr2JdFG1DCiUryV2aXp
@Alternate Data Stream - 1149 bytes -> C:\ProgramData\Microsoft:MLKXbfNcpxmfoZ25nUCTFTqP8Jy
@Alternate Data Stream - 1142 bytes -> C:\ProgramData\Microsoft:wHn07KUIphgrLvXG4kWXPB1PW
@Alternate Data Stream - 1135 bytes -> C:\ProgramData\Microsoft:Jucn11KnLDwgzhMTCj7MJFrT
@Alternate Data Stream - 1111 bytes -> C:\Users\Bina Kakhani\AppData\Local\U5xd1uYgu9vP:PPjbfYWAQ7a3k8R4bFmG31aWF
@Alternate Data Stream - 1071 bytes -> C:\Users\Bina Kakhani\AppData\Local\Temp:sM5d4z9Caz40Ls9nSHsOEAWG
@Alternate Data Stream - 1063 bytes -> C:\ProgramData\Microsoft:gcouDhXOgse6Z4OjxjamaDPl8Qe
@Alternate Data Stream - 1056 bytes -> C:\ProgramData\Microsoft:PqBZ662uDQBs8gqjk9
@Alternate Data Stream - 1054 bytes -> C:\ProgramData\Microsoft:tC91BBZrlU3XWseiw6xZC
@Alternate Data Stream - 1050 bytes -> C:\ProgramData\Microsoft:h6QVyubS31FFCixfpAo

:Files
C:\Program Files (x86)\MyPC Backup

:Commands
[resethosts]
[emptytemp]
[Reboot]

• Then click the Run Fix button at the top
• Let the program run unhindered, reboot the PC when it is done
• Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

THEN

Please download AdwCleaner by Xplode onto your desktop.

• Close all open programs and internet browsers.
• Double click on AdwCleaner.exe to run the tool.
• Click on Scan.
• After the scan is complete click on "Clean"
• Confirm each time with Ok.
• Your computer will be rebooted automatically. A text file will open after the restart.
• Please post the content of that logfile with your next answer.
• You can find the logfile at C:\AdwCleaner[S1].txt as well.

[akash171096]

i think everything is all good know, one quick question, why did my "mypcbackup" app get deleted, thanks

Attached Files

•  OTL.Txt   79.78KB   190 downloads
•  AdwCleanerS0.txt   13.57KB   145 downloads

[Essexboy]

Mypcbackup is a rogue programme that offers a lot but only if you pay and then nags you http://malwaretips.c...-virus-removal/

Lets run a sweep for orphans now

Please download Malwarebytes Anti-Malware to your desktop
Install the progamme and select update
Once it has updated select Settings > Detection and Protection
Tick Scan for rootkits



Go back to the Dashboard and select Scan Now



If threats are detected, click the Apply Actions button, MBAM will ask for a reboot.





On completion of the scan (or after the reboot) select View Detailed Log
Select Export > Select text file and save to the desktop
Attach/Post that log

[akash171096]

i have attached the scan log and also removed the viruses to quarantine, the error message does not appear anymore, thanks for the help i really appreciate it

Attached Files

•  scan log.txt   3.93KB   147 downloads

[Essexboy]

In that case methinks I will send you on your merry way

Subject to no further problems

I will remove my tools now and give some recommendations, but, I would like you to run for 24 hours or so and come back if you have any problems

Now the best part of the day ----- Your log now appears clean

A good workman always cleans up after himself so..The following will implement some cleanup procedures as well as reset System Restore points:

Download and run Delfix




Now that you are clean, to help protect your computer in the future I recommend that you get the following free programmes:

CryptoPrevent install this programme to lock down and prevent crypto ransome ware



Malwarebytes.

Update and run weekly to keep your system clean


It is critical to have both a firewall and anti virus to protect your system and to keep them updated.

To learn more about how to protect yourself while on the internet read this little guide Best security practices Keep safe

[Essexboy]

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.