My wonderful child downloaded a program that came with all sorts of goodies. First thing I did was remove all the programs and toolbars that were installed. Apparently, he downloaded Cheat Engine 6.1, along with that was Reg Clean Pro and Advanced System Protector. Along with that came toolbars for something called babylon, mystart.incredibar, and the funweb/mywebsearch thing- all removed using the add/remove programs, but obviously not all were successfully removed.
Second thing I did was a full system scan with Avast. It found a threat listed at Win32:Alureon-AUH [Trj]. I put that in the chest, and Avast requested I do a boot-time scan. The boot-time scan found 18 additional items, 5 of which would not go into the chest.
Since then, I ran all the scans posted here on the forums, and am wondering if there is a way to get rid of all this junk and reclaim my browser, which adamantly suggests my home page be mystart.incredibar, all searches not done directly through Google are directing through mystart.incredibar, and anything typed into the url bar directly also go through mystart.
[*]Then click the Run Fix button at the top.
[*]Let the program run unhindered; it will reboot the system when it is done and open notepad with logreport. Attach here that logreport.
Step2
[]Download AdwCleaner (by Xplode) on your desktop.
[*]Launch it, click on [Search] and wait for the scan.
[]When the scan ends, notepad with the report will appears.
[*] Click on the [Delete] Wait for the programme completes his work. The program will close all active programs. Click OK to confirm that.
On the next two windows that open ( Informations and Restart required ) click OK
[*] The computer will restart and open a notepad ( C:\AdwCleaner[S1].txt ) with the report.
[*] Save the notepad report on the Desktop
[*] Please attach here C:\AdwCleaner[S1].txt
Note: The report will also be stored on C:\AdwCleaner[S1].txt
I’ve tried this in the past, but ended up losing complete access to the admin account and everything on the computer.
Argus- Thank you for your reply. I am having trouble with OTL moving past the Killing Processes step. The first attempt, I forgot to exit mbam, and an error popped up that wouldn’t go away. I forced a reboot after an hour and tried again, this time making sure everything was closed first. I set it to run again and went to sleep. 4 hours later, I forced another reboot as it was still stuck on Killing Processes. Any suggestions?
Right-click on the MBAM icon in the System Tray and uncheck Enable Protection.
When asked, "Are you sure you want to disable the MBAM Protection Module?", click Yes.
Right-click on the MBAM icon again and then uncheck Start with Windows.
The Protection Module is now disabled and will not restart.
Left OTL on while I was at work, and came home to it still sitting on Killing Processes. Forced reboot and went to step 2. Log attached.
No more redirects when opening a new tab. No more mystery searches. No more random browser opening up when clicking on a link from outside of the browser (such as in skype). And the browser loads so fast now. Thank you very much for that. Will it stay gone?
Is there a next step? Do I still need to do step 1?
