debrovorda, rumolottra, go.wvydeo, fff5ee, xmlka, etc.

Viruses and worms
1

aswMBR got stuck, other logs attached.

2

This should stop it

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

HKU\S-1-5-21-3970814764-1662971714-2222571466-1000\...A8F59079A8D5}\localserver32: rundll32.exe javascript:"\..\mshtml,RunHTMLApplication ";eval("epdvnfou/xsjuf)(=tdsjqu!mbohvbhf>ktds (the data entry has 239 more characters). <==== Poweliks! BHO-x32: No Name -> {02478D38-C3F9-4efb-9B51-7695ECA05670} -> No File Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File 2014-10-30 18:38 - 2014-10-30 18:38 - 00000028 _____ () C:\Windows\SysWOW64\u 2014-10-30 17:40 - 2014-10-30 17:40 - 00000000 _____ () C:\Windows\system32\flnuidr.dll 2014-10-24 21:56 - 2014-10-24 21:56 - 00000000 ___HD () C:\ProgramData\{9A88E103-A20A-4EA5-8636-C73B709A5BF8} 2014-11-20 11:53 - 2013-09-13 16:16 - 00000000 ____D () C:\ProgramData\Conduit CustomCLSID: HKU\S-1-5-21-3970814764-1662971714-2222571466-1000_Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\localserver32 -> rundll32.exe javascript:"\..\mshtml,RunHTMLApplication ";eval("epdvnfou/xsjuf)(=tdsjqu!mbohvbhf>ktds (the data entry has 247 more characters). <==== Poweliks? EmptyTemp: CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe
Run FRST and press Fix
On completion a log will be generated please post that

THEN

Please download AdwCleaner by Xplode onto your desktop.

[*]Close all open programs and internet browsers.
[*]Double click on AdwCleaner.exe to run the tool.
[*]Click on Scan.
[*]After the scan is complete click on “Clean”
[*]Confirm each time with Ok.
[*]Your computer will be rebooted automatically. A text file will open after the restart.
[*]Please post the content of that logfile with your next answer.
[*]You can find the logfile at C:\AdwCleaner[S1].txt as well.

3

That seems to have done the trick. Logs attached.

4

I would recommend that you empty your temp files more regularly :)EmptyTemp: => Removed 30.5 GB temporary data.

When you are happy let me know and I will tidy up

5

I’ve been trying to figure out how to empty the temp files, but I’ve had no luck so far.

And I’m not exactly sure what that means, but tidy away.

6

You can use CCleaner … it will empty temp and clear lots of clutter https://www.piriform.com

Or you can use TFC - Temp file cleaner
Info here http://www.geekstogo.com/forum/files/file/187-tfc-temp-file-cleaner-by-oldtimer/

And I'm not exactly sure what that means, but tidy away.
It means Essexboy will remove the tools used ;)