bProtect... is it gone?

Viruses and worms
1

I noticed that bProtect.exe was running on my machine and couldn’t get rid of it. MSE didn’t find anything, Malwarebytes didn’t either. Ran Spybot, it found babylon tool bar (which is bProtect). It got rid of it for a minute, but then it came back. So here I am. I ran adwcleaner and it found it and deleted it. I no longer see it running but I ran the other two scans (Malwarebytes and OTL) just to be sure. Attached are the logs.

Am I looking good?

Thanks in advance.

2

malware removers are notified: it may take hours before one arrive so be paitient…

and since most of them are in european time zone and it is way over midnight here… it will be some time

3

thanks for the heads up.

Attached is aswMBR log.

4

Hi,

Re-run OTL.exe.

[*]Copy and paste the following text written inside of the quote box into the Custom Scans/Fixes box.

:OTL
IE - HKU\S-1-5-21-4088066805-3619012977-2177704951-1000\..\SearchScopes,bProtectorDefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
O3 - HKLM\..\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O3 - HKU\S-1-5-21-4088066805-3619012977-2177704951-1000\..\Toolbar\WebBrowser: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O4 - HKLM..\Run: [ROC_roc_dec12] "C:\Program Files (x86)\AVG Secure Search\ROC_roc_dec12.exe" /PROMPT /CMPID=roc_dec12 File not found

:files
c:\ProgramData\bProtectorForWindows\2.2.453.59
c:\progra~3\bprote~1\22453~1.59
C:\Windows\SysWow64\bProtectorForWindows

:commands
[CREATERESTOREPOINT]
[emptytemp]

[*]Then click the Run Fix button at the top.
[*]Let the program run unhindered; it will reboot the system when it is done and open notepad with logreport. Attach here that logreport.

Have a problem now?

5

I ran it and the log suggested that everything would be removed on reboot. I did the rebot, but how do I tel if it’s all gone?

6
I did the rebot, but how do I tel if it's all gone?
posting a new log ;)
7

All is gone :wink: now you have a problems?

8

Nope, all seems good now! thanks to everyone for the help!

9

Run OTL and hit the CleanUp button.

10

OK, but is there any special code I need to drop in it?

11

No :wink: AdwCleaner and Malwarebytes you may keep …and you dont need SpyBot when you have malwarebytes