HKEY_LOCAL_MACHINE\SOFTWARE\Redemption * *

Viruses and worms
1

I have a question concerning this registry entry I found:

HKEY_LOCAL_MACHINE\SOFTWARE\Redemption * *
(Default) REG_SZ (value not set)

                • 16155F18 REG_SZ

Looks like some kind of malware or virus. There are no files by the name of redemption on my system.
I am exhibiting slow disk access and occasional freezing in which I must hardboot.
Is it safe to remove this registry entry completely?

thanks in advance.

2

Looks like a part of the Redemption malware.
Follow these instructions please :
https://forum.avast.com/index.php?topic=53253.0

3

These are the resulting logs from mbam, farbar, and aswMBR apps.

4

Just attach the logs.
Do not pack or alter them.

5

OK. What I sent was a zip file with its extension changed. If you remove the “.txt” at the end, then you should be able to open the zip file.

I’ll send each individual file right now…

6

…continuing…

7

Redemption is used by various Outlook add-ons, e.g. Cloudmark’s spam filter system. I can see no apparent malware, are you experiencing any problems ?

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

CreateRestorePoint: GroupPolicyUsers\S-1-5-21-3122674186-4217450863-837817289-1002\User: Restriction <======= ATTENTION GroupPolicyUsers\S-1-5-21-3122674186-4217450863-837817289-1001\User: Restriction <======= ATTENTION HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION Toolbar: HKLM - No Name - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No File Toolbar: HKU\S-1-5-21-3122674186-4217450863-837817289-1000 -> No Name - {A057A204-BACC-4D26-9990-79A187E2698E} - No File Toolbar: HKU\S-1-5-21-3122674186-4217450863-837817289-1000 -> No Name - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No File Toolbar: HKU\S-1-5-21-3122674186-4217450863-837817289-1000 -> No Name - {604BC32A-9680-40D1-9AC6-E06B23A1BA4C} - No File CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f RemoveProxy: EmptyTemp: CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe

https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG

Run FRST and press Fix
On completion a log will be generated please post that

8

These are the fixlog results…

9

And to answer your question, the issue I am having is that my PC freezes in which the clock freezes, the cursor freezes, occasionally when I’m watching youtube, it will freeze, everything freezes and I have to perform a hard reboot by hitting the power button. This freezing seems to occur intermittently sometimes 3 or 4 times a day and then some days freezing does not happen at all. It seems to occur mostly when firefox runs java scripts or loads webpages with lots of content. I’m not sure if this problem is actually a hardware issue or some problem with the disk controller.

10

Have you tried a clean install of firefox

11

Use a other browser and see if it still happens.

Also remove all dust from within the case as well as from the inside of the psu.
It can (amongst other things) be a heat problem.