Error 1706, something aint right...

Viruses and worms
1

I have no idea if this is a virus related problem but here goes.

Everytime I start up my pc I get the message: error 1706 can not find valid source for product scan soft paperport 11.

Paperport has been on my pc for years.

I used MBAM

Problem remains though.

Any suggestion would be highly appreciated

T

2

Hi,

In order to receive help I need you to do the following. Please run the following programs. Also run in the listed order. AdwCleaner/MBAM/OTL/AswMBR

programs: http://forum.avast.com/index.php?topic=53253.0

After this has been completed, I’ll notify the removalist to assist you.

3

Much Appreciated!

Here are the logs

4

And the OTL

5

Hello,

Re-run Adwcleaner, but now make sure to hit Clean button, after the scanning is complete.
Attach me that log.

Please download Farbar Recovery Scan Tool by Farbar and save it to your desktop.

Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them.
Only one of them will run on your system, that will be the right version.

[*]Double-click to run it. When the tool opens click Yes to disclaimer.
[*]Under Optional Scan ensure “List BCD” and “Driver MD5” are ticked.
[*]Press Scan button.
[*]It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
[*]The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

6

Ok

Here are the logs

7

1. Open notepad and copy/paste the text present inside the code box below.
To do this highlight the contents of the box and right click on it. Paste this into the open notepad.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system

HKU\Janneke\...\Winlogon: [Shell] c:\documents and settings\janneke\application data\bstr55uhjzd.exe <==== ATTENTION
c:\documents and settings\janneke\application data\bstr55uhjzd.exe
CHR HKLM\...\Chrome\Extension: [hbcennhacfaagdopikcegfcobcadeocj] - C:\Program Files\Common Files\Spigot\GC\saebay_1.1.crx
CHR HKLM\...\Chrome\Extension: [pfndaklgolladniicklehhancnlgocpp] - C:\Program Files\Common Files\Spigot\GC\saamazon_1.0.crx
C:\Program Files\Common Files\Spigot
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://nl.search.yahoo.com?type=198484&fr=spigot-yhp-ie
C:\Documents and Settings\Janneke\hpothb07.dat
C:\Documents and Settings\Ted\hpothb07.dat
C:\Windows\Tasks\At1.job
C:\Documents and Settings\Ted\Local Settings\Temp
cmd: ipconfig /flushdns

2. Save notepad as fixlist.txt to your Desktop.
NOTE: => It’s important that both files, FRST and fixlist.txt are in the same location or the fix will not work.

3. Run FRST/FRST64 and press the Fix button just once and wait.
If the tool needed a restart please make sure you let the system to restart normally and let the tool completes its run after restart.

The tool will make a log on the Desktop (Fixlog.txt). Please attach it to your reply.
Note: If the tool warned you about the outdated version please download and run the updated version.

Then

Re-run FRST and attach the fresh report. Make sure to include missed Addition.txt

8

So here are the fixlog and the addition.txt

Now for the re-run…

Will post when done

Thanks!

9

After re-run

Here are the frst and addition logs

10

Please download TFC by OldTimer to your desktop

[*]Please double-click TFC.exe to run it. (Note: If you are running on Vista, right-click on the file and choose Run As Administrator).
[*]It will close all programs when run, so make sure you have saved all your work before you begin.
[*]Click the Start button to begin the process. Depending on how often you clean temp
files, execution time should be anywhere from a few seconds to a minute
or two. Let it run uninterrupted to completion.
[*]Once it’s finished it should reboot your machine. If it does not, please manually reboot the machine yourself to ensure a complete clean.

How are the things now?

11

The 1706 still comes up after reboot…

12

Ok, let’s have another check…

  1. Please download ComboFix by sUBs from here and save it to your Desktop.
    If you are unsure how ComboFix works please read this guide carefully.
    note: ComboFix must be downloaded to your Desktop.
  1. Temporarily disable your AntiVirus program.
    If you are unsure how to do this please read this or this Instruction.

Instructions how to disable avast:

[*]Right-click on the avast! icon in the lower right corner of the screen and choose Open Avast! User Interface.
[*]In the window that opens on the top right corner, click Settings.
[*]In a new window that opens, choose the option Troubleshooting, Uncheck Enable avast! self-defense, and click OK.
[*]=> Again, right-click on the avast! icon in the lower right corner of the screen and select avast! shield controls .
[*]In the menu that appears, choose Disable Permanently. When you are prompted to turn off security, click Yes.

Note: Do not forget to turn on this option after the cleaning.

  1. Run ComboFix. Click on I Agree!

ComboFix will check if there is a newer version of ComboFix available.
Click Yes if prompted to download.
ComboFix will display DISCLAIMER OF WARRANTY ON SOFTWARE.
Click Yes to allow ComboFix to continue.
If Recovery Console is not installed, ComboFix will offer download & installation.
Click Yes to allow ComboFix to install Recovery Console.
Note:Do not mouse-click Combofix’s window while it is running.
If you see a message like “Illegal operation attempted on a registry key that has been marked for deletion” just restart computer once more.

  1. When the tool is finished, it will produce a log report for you. (typical location: C:[b]ComboFix.txt[/b] )
    Attach log reports ( ComboFix.txt) back to topic.
13

Here it is.
At the first run of combofix my pc shut down so I had to run it for a second time.

14

No malware in the logs, do you still get the message?

15

That is good news, btw any idea what was wrong with my pc?

I still get the message; 1706 when I try to open scansoft paperport…
Maybe I’ll just Unistall the software?

16

Try to uninstall, and see if it works…

17

Seems allright now!

Anything else I should be doing?

Thanks!

18

We’re done here :slight_smile:

Please download DelFix by “Xplode” to your Desktop.

Run the tool and check the following boxes below;

[] Remove disinfection tools
[] Create registry backup
[*] Purge System Restore

Now click on “Run” button. Wait for the programme completes his work.
All the tools we used should be gone.
Tool will create and open an log report (DelFix.txt)
Note: The report will also be stored on C:\DelFix.txt

I don’t need DelFix log report.

19

Thank you very much for your assistance!!

All the best

T