isiwizard/wuaudit.exe

Viruses and worms
21

@rheyank please start your own thread

@proaudio

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL

[*]Under the Custom Scans/Fixes box at the bottom, paste in the following

https://dl.dropbox.com/u/73555776/OTL_Fix.GIF


:Commands
[CREATERESTOREPOINT]

:OTL
O4 - HKU\S-1-5-21-1965147933-3229020990-1516968896-500..\Run: [BackgroundContainer] C:\Users\Administrador\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll (Conduit Ltd.)
O4 - HKU\S-1-5-21-1965147933-3229020990-1516968896-500..\Run: [SearchProtection] C:\Users\Administrador\AppData\Roaming\Search Protection\SearchProtection.EXE (Spigot, Inc.)
O4 - HKU\S-1-5-21-1965147933-3229020990-1516968896-500..\Run: [tsiVideo] C:\Windows\SysWOW64\rundll32.exe C:\Users\ADMINI~1\AppData\Local\Temp\\tsiVi132.dll,start File not found
[2013/10/29 00:28:12 | 000,000,000 | ---D | C] -- C:\Users\Administrador\AppData\Roaming\Search Protection
[2013/10/20 13:40:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Conduit
[2013/10/20 13:40:34 | 000,000,000 | ---D | C] -- C:\Users\Administrador\AppData\Local\Conduit
[2013/10/20 13:40:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Conduit

:Files
C:\Users\ADMINI~1\AppData\Local\Temp\iswizard

:Commands
[resethosts]
[emptytemp]
[Reboot]

[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
[*]Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

THEN

Please download Junkware Removal Tool to your desktop.

[]Right-mouse click JRT.exe and select “Run as Administrator” the tool will open and start scanning your system
[]please be patient as this can take a while to complete depending on your system’s specifications
[]On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
[]post the contents of JRT.txt into your next message.

22

Ok, I got it… this is the new OTL.txt file.

23

Could you confirm that all alerts have now ceased

24

Well… wuaudit.exe is not found… McAfee don’t says anything… it sounds very good. So, now must I run JRT? ( obviously, have I to disabling McAfee?)

25

Yes run JRT and that will remove all the adware :slight_smile:

26

Well… so, thank you very much for your help!