Possible infection - here are my logs - please help

Viruses and worms
1

Hi,

I was told to post my logs. I have some sort of issue with my computer, I attached the two otl logs I just created from the instructions. I will also paste below my original post below. Thank you for any help. I will carefully follow any instructions - but please try to make them simple, it took me a long time to figure out the log post stuff…yikes… :wink:

(begin paste)
<<<<<<<<<<<<

Updated Avast - now I get a popup every 30 seconds

Hi computer experts!

I have used Avast the past year with no problems, until today, I updated the lastest version, and now I am getting a pop up saying “Malicious URL Blocked” about every 30 seconds - very annoying. It says something abou t"Infection:
URL:Mal"

I don’t know if this is an issue with Avast - OR has something to do with other problem I have been experiencing the last week with my computer. I had downloaded IE 10, and all of a sudden my computer started acting wierd - mainly when signing into any website that required a password - things looked strange, like I was on somebody’s else computer, the colors and fonts changed slightly, and all prompted usernames and passwords weren’t staked up in a row, there were spaces between them. I corrected this problem by going back to IE 9, and everything started working normally again.

I have had other minor problems on this computer every since I bought it new a year ago, including my favorites in IE not working properly, and my screen resolution never staying where I put it, but don’t know if these issues mean I have some huge problem going on, or a bunch of small ones?

Does anyone have any advice, for someone that is not much of a computer expert (to put it mildly)?

Thank you in advance for any tips, help or advice, much appreciated!!
(end paste)>>>>>>>>>>>>>>>>>

2

Looks like a few problems there, mainly system ones… But lets stop the alerts first

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL

[*]Under the Custom Scans/Fixes box at the bottom, paste in the following

https://dl.dropbox.com/u/73555776/OTL_Fix.GIF


:OTL
IE - HKLM\..\SearchScopes\{cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8}: "URL" = http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?p2=^HJ^xdm003^S01939^us&si=CKb6pKb69LECFQed7Qod5EoAug&ptb=584D32C0-FB6F-45A8-9FF3-235B9CC89546&ind=2012081920&n=77edef00&psa=&st=sb&searchfor={searchTerms}
IE - HKU\S-1-5-21-2640257656-1590885676-473803805-1001\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&affID=110014&tt=050412_30b&babsrc=SP_ss&mntrId=96b5950a00000000000088532e224fa8
IE - HKU\S-1-5-21-2640257656-1590885676-473803805-1001\..\SearchScopes\{cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8}: "URL" = http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?p2=^HJ^xdm003^S01939^us&si=CKb6pKb69LECFQed7Qod5EoAug&ptb=584D32C0-FB6F-45A8-9FF3-235B9CC89546&ind=2012081920&n=77edef00&psa=&st=sb&searchfor={searchTerms}
[2012/04/16 20:14:41 | 000,000,000 | ---D | M] (Babylon) -- C:\Users\Amado\AppData\Roaming\Mozilla\Firefox\Profiles\6c0h3qgd.default\extensions\ffxtlbr@babylon.com
O2 - BHO: (Babylon toolbar helper) - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll (Babylon BHO)
O3 - HKLM\..\Toolbar: (Babylon Toolbar) - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll (Babylon Ltd.)
O4 - HKU\S-1-5-21-2640257656-1590885676-473803805-1001..\Run: [Adobe CSx Manager] C:\Users\Amado\AppData\Roaming\ce05b5d4-45f4-4130-ac85-33eb6f0fabf3ad\cebdfacebffabfad.exe ()
[2013/04/08 19:42:51 | 000,000,000 | ---D | C] -- C:\Users\Amado\AppData\Roaming\ce05b5d4-45f4-4130-ac85-33eb6f0fabf3ad
[2013/03/29 11:02:20 | 000,000,000 | ---D | C] -- C:\Users\Amado\AppData\Local\{56F98B34-EC7A-4D1A-9801-6CC91A580393}
[2013/03/28 12:06:55 | 000,000,000 | ---D | C] -- C:\Users\Amado\AppData\Local\{7AF0D4BA-4E91-475F-9C94-91650C78CD38}
[2013/03/27 16:01:40 | 000,000,000 | ---D | C] -- C:\Users\Amado\AppData\Local\{89447E9E-7592-4162-AC67-B61958B012F8}

:Commands
[resethosts]
[emptytemp]
[CREATERESTOREPOINT]
[Reboot]

[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
[*]Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

THEN

Download AdwCleaner from here to your desktop
Run AdwCleaner and select Delete

https://dl.dropbox.com/u/73555776/AdwCleaner.GIF

Once done it will ask to reboot, allow this
On reboot a log will be produced please attach that

3

Thank you for your help! Here is the log from this otl, I hope this is the right log - I could not figure out what was the first one, or the new one…but I think maybe there is just the latest now? I will post the log from the adwcleaner in the next post.

4

Here is the adwcleaner log.
I will follow any and all instructions - thank you!!!

5

did this solve your problem?

anyway essexboy is in bed now, so check back late tomorrow and he will continue and remove the tools used if problem is gone

6

<<<<<
did this solve your problem?>>>>>>>>

YES!!! woo hoo!

No more Avast popups!!

Thank you!! That problem is solved!!!

Did I have a virus, or just what was everything I just did? I’m like a blind man following instructions…anyway to give a simple explanation of just what was going on? The terms, “a few problems, mainly system ones”, just what the heck did that mean in computer dummie terms? :wink:

Also - since these problems has nothing to do with Avast, maybe I can’t ask it here, but maybe you can refer me to somewhere to find help - I always from day 1 of buying this computer a year ago have had problems with my IE - it does not save any history, (yes, I have already tried to fix it simply in tools) it takes like 10 seconds to remove each and every “Favorite” that I have jillions downloaded from my Carbonite into the new computer. In my good ole computer and netscape, I could simply highlight and delete any favorites quickly and easily. And one last issue, with my bad eyesite, I have to run a computer at a big resolution, and this fricking computer goes back to the old standard resolution every 2nd or 3rd time you rev 'er up.

7

The problem was allied to one of the toolbars that was on your computer, now history ;D

For the resolution problem there is a possible solution but you will need to spend an hour or so to narrow it down. I can walk you through it
However, as it is irregular… Do you know what programme is started prior to this occurring

(1) Perform the "clean boot process" to determine which software program(s) was causing the problem.. and then,

(2) Right-click on the ‘problem’ program (as discovered in above) name in Start Menu>properties>compatibility. For some reason, there’s an option to “run in 640x480 screen resolution”, which was checked. This particular program was in the startup folder, and was the cause of the problem. Then unchecked the resolution box. No more problem.

For the favourites problem initially I would update to IE10 to see if that resolves it http://windows.microsoft.com/en-GB/internet-explorer/downloads/ie-10/worldwide-languages