OK I found a few that do not belong… What can you tell me about this programme c:\RecInfo\RecInfo.exe
On completion of this run can you check for alerts please
Start OTS. Copy/Paste the information in the quotebox below into the panel where it says “Paste fix here” and then click the Run Fix button.
[Unregister Dlls]
[Win32 Services - Safe List]
YN -> (LiveUpdate Notice Ex) LiveUpdate Notice Service Ex [Auto | Stopped] ->
YN -> (CLTNetCnService) Symantec Lic NetConnect service [Auto | Stopped] ->
YY -> (LiveUpdate Notice Service) LiveUpdate Notice Service [Auto | Running] -> C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
YY -> (LiveUpdate) LiveUpdate [On_Demand | Stopped] -> C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE
YY -> (Automatic LiveUpdate Scheduler) Automatic LiveUpdate Scheduler [Auto | Running] -> C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
[Driver Services - Safe List]
YY -> (eeCtrl) Symantec Eraser Control driver [Kernel | System | Running] -> C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys
[Registry - Safe List]
< Internet Explorer Settings [HKEY_USERS\S-1-5-21-2150399044-275700037-2335568422-1002\] > ->
YN -> HKEY_USERS\S-1-5-21-2150399044-275700037-2335568422-1002\: URLSearchHooks\\"{472734EA-242A-422b-ADF8-83D1E48CC825}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.]
< FireFox Settings [Prefs.js] > -> C:\Users\Gareth\AppData\Roaming\Mozilla\FireFox\Profiles\q8zn0dnh.default\prefs.js
YN -> network.proxy.http -> "127.0.0.1"
YN -> network.proxy.http_port -> 50370
YN -> network.proxy.type -> 4
< FireFox Extensions [Program Folders] > ->
YY -> Java Console -> C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
YY -> Java Console -> C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
YY -> XULRunner -> C:\USERS\GARETH\APPDATA\LOCAL\{7401291A-E0D5-460C-9BF6-3CB24B5DC176}
< Internet Explorer ToolBars [HKEY_USERS\.DEFAULT\] > -> HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Toolbar\
YN -> WebBrowser\\"{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.]
< Internet Explorer ToolBars [HKEY_USERS\S-1-5-18\] > -> HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Toolbar\
YN -> WebBrowser\\"{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.]
< Run [HKEY_USERS\S-1-5-21-2150399044-275700037-2335568422-1002\] > -> HKEY_USERS\S-1-5-21-2150399044-275700037-2335568422-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
YY -> "Vguyucegaq" -> C:\Users\Gareth\AppData\Local\ohuraqilaquv.dll [rundll32.exe "C:\Users\Gareth\AppData\Local\ohuraqilaquv.dll",Startup]
[Files/Folders - Created Within 30 Days]
NY -> {7401291A-E0D5-460C-9BF6-3CB24B5DC176} -> C:\Users\Gareth\AppData\Local\{7401291A-E0D5-460C-9BF6-3CB24B5DC176}
NY -> ohuraqilaquv.dll -> C:\Users\Gareth\AppData\Local\ohuraqilaquv.dll
[Files/Folders - Modified Within 30 Days]
NY -> Hgidupilidarex.bin -> C:\Users\Gareth\AppData\Local\Hgidupilidarex.bin
NY -> 1103toten.exe -> C:\Users\Gareth\AppData\Roaming\1103toten.exe
NY -> 81f82bi7.bat -> C:\Users\Gareth\AppData\Roaming\81f82bi7.bat
[Files - No Company Name]
NY -> 1103toten.exe -> C:\Users\Gareth\AppData\Roaming\1103toten.exe
NY -> 81f82bi7.bat -> C:\Users\Gareth\AppData\Roaming\81f82bi7.bat
NY -> i2152v11p7d4sg8 -> C:\Users\Gareth\AppData\Local\i2152v11p7d4sg8
NY -> i2152v11p7d4sg8 -> C:\ProgramData\i2152v11p7d4sg8
NY -> Nfidiyerez.dat -> C:\Users\Gareth\AppData\Local\Nfidiyerez.dat
NY -> Hgidupilidarex.bin -> C:\Users\Gareth\AppData\Local\Hgidupilidarex.bin
NY -> mgxoschk.ini -> C:\Windows\mgxoschk.ini
[Empty Temp Folders]
[EmptyFlash]
[CreateRestorePoint]
The fix should only take a very short time. When the fix is completed a message box will popup telling you that it is finished. Click the Ok button and Notepad will open with a log of actions taken during the fix. Post that information back here
Depending on what the fix contains, this process may take some time and your desktop icons might disappear or other uncommon behavior may occur.
This is no sign of malfunction, do not panic!
I will review the information when it comes back in.