More Toolbars

system · February 14, 2013, 11:15pm

Another toolbar takeover…

Dimension E310
Windows XP

See the logs

system · February 14, 2013, 11:16pm

see attached

system · February 14, 2013, 11:18pm

fss

tdsskiller = no infections

essexboy · February 14, 2013, 11:23pm

Definitely toolbar city

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL

[*]Under the Custom Scans/Fixes box at the bottom, paste in the following

https://dl.dropbox.com/u/73555776/OTL_Fix.GIF


:OTL
O2 - BHO: (no name) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (no name) - {201f27d4-3704-41d6-89c1-aa35e39143ed} - No CLSID value found.
O2 - BHO: (Blekko Search Bar) - {5ce808f4-c861-4392-b55e-c97a89fbe2dd} - C:\Program Files\blekkotb_005\blekkotb_005X.dll ()
O2 - BHO: (no name) - {6F6A5334-78E9-4D9B-8182-8B41EA8C39EF} - No CLSID value found.
O2 - BHO: (no name) - {CCB69577-088B-4004-9ED8-FF5BCC83A039} - No CLSID value found.
O2 - BHO: (Shop to Win 16) - {D2D09FE0-F451-45F7-A617-FABF9130C4D6} - C:\Program Files\Shop to Win 16\Shop to Win 16.dll (Shop To Win, LLC)
O2 - BHO: (no name) - {D3D233D5-9F6D-436C-B6C7-E63F77503B30} - No CLSID value found.
O3 - HKLM\..\Toolbar: (Blekko Search Bar) - {5ce808f4-c861-4392-b55e-c97a89fbe2dd} - C:\Program Files\blekkotb_005\blekkotb_005X.dll ()
O3 - HKU\S-1-5-21-2033217731-2711648698-3583270307-1005\..\Toolbar\ShellBrowser: (no name) - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - No CLSID value found.
O3 - HKU\S-1-5-21-2033217731-2711648698-3583270307-1005\..\Toolbar\WebBrowser: (no name) - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - No CLSID value found.

:Files
C:\Program Files\Shop to Win 16
C:\Program Files\blekkotb_005

:Commands
[resethosts]
[emptytemp]
[CREATERESTOREPOINT]
[Reboot]

[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
[*]Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

system · February 15, 2013, 9:00pm

otl log attached after fix/scan

essexboy · February 15, 2013, 10:15pm

You appear to be running both AVG and Avast, one will need to go.

After this run could you let me know what problems remain

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL

[*]Under the Custom Scans/Fixes box at the bottom, paste in the following

https://dl.dropbox.com/u/73555776/OTL_Fix.GIF


:OTL
O2 - BHO: (no name) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (no name) - {201f27d4-3704-41d6-89c1-aa35e39143ed} - No CLSID value found.
O2 - BHO: (no name) - {5ce808f4-c861-4392-b55e-c97a89fbe2dd} - No CLSID value found.
O2 - BHO: (no name) - {6F6A5334-78E9-4D9B-8182-8B41EA8C39EF} - No CLSID value found.
O2 - BHO: (no name) - {CCB69577-088B-4004-9ED8-FF5BCC83A039} - No CLSID value found.
O2 - BHO: (no name) - {D2D09FE0-F451-45F7-A617-FABF9130C4D6} - No CLSID value found.
O2 - BHO: (no name) - {D3D233D5-9F6D-436C-B6C7-E63F77503B30} - No CLSID value found.
O15 - HKCU\..Trusted Domains: doginhispen.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: whataboutadog.com ([]* in Trusted sites)


:Commands
[resethosts]
[emptytemp]
[CREATERESTOREPOINT]
[Reboot]

[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
[*]Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

system · February 15, 2013, 10:40pm

I cant seem to shut off avg? When I try uninstall, it fails.

EDIT: I think I uninstalled it all now… :

system · February 16, 2013, 12:12am

new otl

essexboy · February 16, 2013, 12:04pm

Could you disable spybot teatimer please as it keeps replacing the registry items I am trying to remove

How is the computer behaving now ?

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL

[*]Under the Custom Scans/Fixes box at the bottom, paste in the following

https://dl.dropbox.com/u/73555776/OTL_Fix.GIF


:OTL
IE - HKCU\..\SearchScopes\{23085ED1-F7D9-473E-A24A-3834A50CFF2F}: "URL" = http://start.funmoods.com/results.php?f=4&a=fmtoby&q={searchTerms}
FF - prefs.js..keyword.URL: "http://www.instafinder.com/addsearch.asp?err=ADD&url="
O2 - BHO: (no name) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (no name) - {201f27d4-3704-41d6-89c1-aa35e39143ed} - No CLSID value found.
O2 - BHO: (no name) - {5ce808f4-c861-4392-b55e-c97a89fbe2dd} - No CLSID value found.
O2 - BHO: (no name) - {6F6A5334-78E9-4D9B-8182-8B41EA8C39EF} - No CLSID value found.
O2 - BHO: (no name) - {CCB69577-088B-4004-9ED8-FF5BCC83A039} - No CLSID value found.
O2 - BHO: (no name) - {D2D09FE0-F451-45F7-A617-FABF9130C4D6} - No CLSID value found.
O2 - BHO: (no name) - {D3D233D5-9F6D-436C-B6C7-E63F77503B30} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O4 - HKLM..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe File not found
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.5.0/jinstall-1_5_0_03-windows-i586.cab (Reg Error: Value error.)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: Garmin Communicator Plug-In https://my.garmin.com/static/m/cab/2.8.3/GarminAxControl.CAB (Reg Error: Key error.)
O20 - Winlogon\Notify\SDWinLogon: DllName - (SDWinLogon.dll) - File not found
[2013/02/14 18:16:59 | 002,237,968 | ---- | C] (Kaspersky Lab ZAO) -- C:\Documents and Settings\Jackie\Desktop\tdsskiller.exe
[2013/02/14 17:58:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jackie\Desktop\RK_Quarantine
[2013/02/14 16:22:04 | 004,732,416 | ---- | C] (AVAST Software) -- C:\Documents and Settings\Jackie\Desktop\aswMBR.exe
[2013/02/14 16:21:44 | 000,352,883 | ---- | C] (Farbar) -- C:\Documents and Settings\Jackie\Desktop\FSS.exe
[2013/02/15 16:21:54 | 000,000,476 | -H-- | M] () -- C:\WINDOWS\tasks\Norton Security Scan for Jackie.job
[2013/02/14 17:56:58 | 000,000,512 | ---- | M] () -- C:\Documents and Settings\Jackie\Desktop\MBR.dat
[2013/02/14 16:21:15 | 000,798,208 | ---- | C] () -- C:\Documents and Settings\Jackie\Desktop\RogueKiller.exe
[2013/02/14 16:20:08 | 000,587,671 | ---- | C] () -- C:\Documents and Settings\Jackie\Desktop\adwcleaner0.exe
[2011/01/27 15:02:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jackie\Application Data\AVGTOOLBAR
[2013/02/07 18:23:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jackie\Application Data\blekkotb_005


:Commands
[resethosts]
[emptytemp]
[CREATERESTOREPOINT]
[Reboot]

[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
[*]Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

system · February 16, 2013, 9:25pm

removed both versions of spybot that here running :-\

OTL attached

essexboy · February 16, 2013, 9:44pm

Worked that time ;D

What problems remain

system · February 17, 2013, 7:11pm

think it all seems good. anything else we should check?

system · February 17, 2013, 7:34pm

update: only issues so far…some leftover ‘programs’ that wont remove/uninstall. using revo to remove them now. Also Security Update for Microsoft Silverlight (KB2690729) wont install… ???

essexboy · February 17, 2013, 7:41pm

Could you run the fixit on this page and let me know if it resolves the Silverlight problem
http://support.microsoft.com/kb/822798

system · February 17, 2013, 8:02pm

doing a bunch of windows updates…a few are failing…ill try that and report back

system · February 17, 2013, 8:39pm

MS FIX IT did not solve issue. Silverlight still wont install.

essexboy · February 17, 2013, 9:08pm

Could you download 10329.00\runtime\Silverlight.exe from here http://www.microsoft.com/en-gb/download/details.aspx?id=29716 and let me know if it does not install and what error you get if not

system · February 17, 2013, 9:51pm

:o I uninstalled the version 4 of silverlight ans installed the version 5…all seems ok now.

just cleaning up some of the garbage now…

seems ok…

system · February 19, 2013, 2:15pm

All seems well. Is there anything else we need to do? And again…THANKS! :-* ;D

system · February 19, 2013, 7:05pm

IE loading slowly. When first starting up and between pages…?

2gb ram petium 4 chip…?

Thoughts?

More Toolbars

Announcements