I don’t know if this is a problem with my Avast software or my other anti-virus program (AdvancedSystemCare by IObit) but— I keep getting this message window that says - SearchProtection.exe - Fatal Application Exit Unhandled exception. It then has a ExpCode number, ExpFlag, and Exp address. The window says I should report it immediately.
What do I do?
(AdvancedSystemCare by IObit)something you may want to read
https://forums.malwarebytes.org/index.php?/topic/29681-iobit-steals-malwarebytes-intellectual-property/
https://forums.malwarebytes.org/index.php?/topic/30989-iobits-denial-of-theft-unconvincing/
https://forums.malwarebytes.org/index.php?/topic/33217-iobit-theft-conclusion/
http://www.computerworld.com/article/2468070/endpoint-security/iobit-accused-of-stealing-from-malwarebytes.html
see instructions here https://forum.avast.com/index.php?topic=53253.0
scroll down to Farbar Recovery Scan Tool … run as instructed and attach the two diagnostic logs
I can’t figure out how to attach the logs.
OK. I’ve attached the files. Thank you for your help.
That is a remanant of AdAware, I will remove it
CAUTION : This fix is only valid for this specific machine, using it on another may break your computer
Open notepad and copy/paste the text in the quotebox below into it:
CreateRestorePoint: HKLM-x32\...\Run: [Search Protection] => C:\ProgramData\Search Protection\SearchProtection.exe [949512 2014-02-17] (Lavasoft) GroupPolicy: Group Policy on Chrome detected <======= ATTENTION CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION CHR HKU\S-1-5-21-2374806663-1734421451-2339922351-1000\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKU\S-1-5-21-2374806663-1734421451-2339922351-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION SearchScopes: HKLM -> {2E00D31D-D171-423D-836D-1A4D7EA7F1A9} URL = SearchScopes: HKLM-x32 -> DefaultScope value is missing. Task: {0D4ACE5A-6CDD-4097-87DB-219DE82A4401} - \Advanced System Protector No Task File <==== ATTENTION Task: {454BC4E0-036C-4293-B8AC-599B26FAB062} - \Microsoft\Windows\Windows Activation Technologies\ValidationTaskDeadline No Task File <==== ATTENTION Task: {4FC6EA5B-EC37-4A75-BCFB-AE561B5A91D4} - \YourFile DownloaderUpdate No Task File <==== ATTENTION Task: {5B18F0D2-7D25-42E1-8AA6-956D3DF37575} - \{8ACF0F12-9BD0-4561-81E8-882B1A53AC54} No Task File <==== ATTENTION Task: {A1EC53E8-054F-4BD6-BFAD-0B391DE12292} - \{85FC6910-9A4E-4124-BD82-8D30A3747824} No Task File <==== ATTENTION Task: {A48E5CE1-5B57-4B7C-99BD-A53533130823} - \{7DC2226E-8E98-4528-8639-204A2C117D39} No Task File <==== ATTENTION Task: {CB939A68-E7E5-4739-AF3C-639EBEB15247} - \DealPly No Task File <==== ATTENTION Task: {DE2061C5-94AC-46CA-9A8F-4EBA83BFF316} - \{29B7C6A3-4691-4D42-BFEA-C4A172A84BDE} No Task File <==== ATTENTION Task: {FC16327C-3973-4EDB-BFAC-B30483D35FEC} - \Microsoft\Windows\Windows Activation Technologies\ValidationTask No Task File <==== ATTENTION Task: C:\Windows\Tasks\UpdaterEX.job => C:\Users\BOB\AppData\Roaming\UPDATE~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION C:\ProgramData\Search Protection EmptyTemp: CMD: bitsadmin /reset /allusers
Save this as fixlist.txt, in the same location as FRST.exe
https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG
Run FRST and press Fix
On completion a log will be generated please post that
THEN
Please download AdwCleaner by Xplode onto your desktop.
[*]Close all open programs and internet browsers.
[*]Double click on AdwCleaner.exe to run the tool.
[*]Click on Scan.
[*]After the scan is complete click on “Clean”
[*]Confirm each time with Ok.
[*]Your computer will be rebooted automatically. A text file will open after the restart.
[*]Please post the content of that logfile with your next answer.
[*]You can find the logfile at C:\AdwCleaner[S1].txt as well.
OK. I copied the fixlist into the the same folder as FRST and pressed Fix. It didn’t generate a log. Working on the second part.
I tried again to open FRST and press fix. This time a window popped up saying “Warning: Looks you don’t know what to do. To prevent damage to the system the tool will exit.” The top of the window says Farber Recovery tool, but doesn’t have the logo.
OK. I ran Adwcleaner a couple of times cause i couldn’t find t he logfile it generated at first. I’m attaching those files. There were also files with an [R0] after them. Not sure if they are important or not so I included them anyway.
Could you run a freesh FRST scan please… Ensure that FRST is on the desktop and not in another folder somewhere
OK. I’m going to run the scan now. The original problem seems to have been solved as that window doesn’t pop up now. I’m attaching the scan logs.
This should be the last run, could you let me know what problems remain
CAUTION : This fix is only valid for this specific machine, using it on another may break your computer
Open notepad and copy/paste the text in the quotebox below into it:
CreateRestorePoint: CHR HKLM-x32\...\Chrome\Extension: [mfchmfgdaabgdjbcaophikcobddojjoe] - C:\Users\BOB\AppData\Local\CRE\mfchmfgdaabgdjbcaophikcobddojjoe.crx [Not Found] 2014-09-02 20:51 - 2013-01-14 11:34 - 0007680 _____ () C:\Users\BOB\AppData\Local\Z@!-a5dab68c-7e98-4002-bcdc-dbaed7c199e6.tmp 2014-09-02 20:51 - 2013-01-14 11:34 - 0007168 _____ () C:\Users\BOB\AppData\Local\Z@S!-562ef08f-c9df-4f13-9877-a4a89518f80c.tmp HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\plsapp => ""="service" EmptyTemp: CMD: bitsadmin /reset /allusers
Save this as fixlist.txt, in the same location as FRST.exe
https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG
Run FRST and press Fix
On completion a log will be generated please post that
OK. Here are the logs
How is the computer running now ?
It seems slightly faster. I don’t have that Fatal application Exit window popping up. One weird thing though is after I logon to to this forum, a window pops up asking for a master password. It happened twice when I looged on to the forum. — OK, I logged off for a while and now that isn’t happening. Don’t know what it was.
I appreciate all the help you guys have given me. Thank you again.
What I will do now is tidy up and see how it behaves
Subject to no further problems 
I will remove my tools now and give some recommendations, but, I would like you to run for 24 hours or so and come back if you have any problems
Now the best part of the day ----- Your log now appears clean 
A good workman always cleans up after himself so…The following will implement some cleanup procedures as well as reset System Restore points:
Remove tools
Download and run Delfix
https://dl.dropboxusercontent.com/u/73555776/delfix.JPG
: Keep Java Updated :
WARNING: Java is the #1 exploited program at this time. The Department of Homeland Security recommends that computer users disable Java
See this article
I would recommend that you completely uninstall Java unless you need it to run an important software.
In that instance I would recommend that you disable Java in your browsers until you need it for that software and then enable it. (See How to diasble Java in your web browser and How to unplug Java from the browser)
If you do need to keep Java then download JavaRa
Run the programme and select Remove Java Runtime. Uninstall all versions of Java present
Once done then run it again and select Update Java runtime > Download and install Latest version
https://dl.dropboxusercontent.com/u/73555776/javara.JPG
Now that you are clean, to help protect your computer in the future I recommend that you get the following free programmes:
CryptoPrevent install this programme to lock down and prevent crypto ransome ware
https://dl.dropboxusercontent.com/u/73555776/CryptoPrevent.JPG
Update and run weekly to keep your system clean
Click on the link above to be taken to Unchecky.com
click the very large Download button.
click Save
Click Open folder
Right click on the Unchecky_setup and choose to Run as Administrator
Once open click the Install button.
Then click on Finish
Unchecky is now installed and will help you keep unwanted check boxes unchecked, this is a fire and forget programme 
It is critical to have both a firewall and anti virus to protect your system and to keep them updated.
To learn more about how to protect yourself while on the internet read this little guide Best security practices Keep safe 
OK. I ran Delfix and saved the log.
I deleted Java Updater from the list of programs.
I went to the the CryptoPrevent page but didn’t see any button for a free download.
I downloaded MalwareBytes, but reluctantly, as it didn’t prevent my last computer from getting infected. {Wheee! More fun! My ‘Free Trial’ period has expired just microseconds after I downloaded it!} I tried re-installing it. It did the same thing. WTF?
OK, next step. Downloaded and installed UnChecky. It actually fuckin’ worked.
Now I’m going to try to install Malwarbytes again. OK, I uninstalled it and re-installed it. It said the same thing but when I clicked on ‘My Account’ it went to the main window. There is a big green bar with a check mark that says "Malwarebytes Anti-Malware (Free). Below that it says “License:” then a little white X in a red circle next to the words “Malwarebytes Anti-Malware (Free)”. I suppose it’s ok now, but I really don’t know.
OK. I went back to the CryptoPrevent website and found the hidden free download. I downloaded it and installed it. It actually fuckin’ worked. WooHoo!
Thanks for all your help Essex.
Reference the MBAM trial https://helpdesk.malwarebytes.org/hc/en-us/articles/201948497-I-keep-getting-notified-that-my-trial-has-expired-how-do-I-revert-to-the-free-version-
I got the MBAM app to work, but then Firefox wouldn’t open. It showed a window saying something about XULRunner 33 not being compatible. I had that problem before, so I tired to reinstall Firefox. It wasn’t working, I got mad, banged on the keyboard of the laptop… and now it won’t start at all. A window comes up saying that i should contact the hardware manufacturer, which is impossible because I bought the computer used.
Sigh… So, after all that work, my laptop is dead.
It’s just occurred to me though that I did get something out of this. I learned that IObit is not good and that Avast anti-virus is, I learned that there are good people out there that will help me and how to find the help I need in help forums which use to baffle me because there are so many thousands of pages. I will buy the better version of Avast for my next computer and be more diligent about backing things up. (I lost everything on that machine. I didn’t erase it from this old machine though, so I do have most of it.)
Thank you again for all of your help EssexMan (You deserve an upgrade for this… ;D )
An idea may be to use the hardrive from the dead laptop as a backup drive. If that appeals let me know and I will explain how to do it