Threats detected, cannot do anything with it

Viruses and worms
1

I was trying to follow the directions indicated in the information thread, so forgive me if I miss something. I have had to reinstall Windows 7. It had been hanging up and crashing randomly. Of course, now my Windows product key is gone. It was my fault for not copying it down, but I’ve gotten no joy from Microsoft or HP. I have run magic jellybean, etc. Still no help. I have an HP 2000 Notebook, which I bought for my daughter December of 2011. Please find my information below.

What Avast is portraying when I have had to move to chest, etc. :

Error: The request not supported. (50)

2

Hello,

1. Open notepad and copy/paste the text present inside the code box below.
To do this highlight the contents of the box and right click on it. Paste this into the open notepad.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system


Task: {A6F748C0-A492-4B69-99FA-D581C7843229} - \RocketTab No Task File <==== ATTENTION
Task: {39A52758-68A9-4E65-B87F-A9139B96F353} - \RocketTab Update Task No Task File <==== ATTENTION
Task: {8EFF9C30-7027-4E36-9AB7-24927A7D5DD4} - System32\Tasks\Update Service YourFileDownloader => C:\Program Files (x86)\YourFileDownloaderUpdater\YourFileDownloaderUpdater.exe <==== ATTENTION
HKU\S-1-5-21-3713619471-3739935699-1413246748-1001\...\MountPoints2: {132b5ec4-351b-11e4-a6a8-806e6f6e6963} - F:\setup.exe
URLSearchHook: HKLM-x32 - ZoneAlarm Security Toolbar - {91da5e8a-3318-4f8c-b67e-5964de3ab546} -  No File
SearchScopes: HKLM - {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://search.ask.com/web?q={searchterms}&l=dis&o=CPNTDF
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = http://dts.search-results.com/sr?src=ieb&appid=101&systemid=406&sr=0&q={searchTerms}
SearchScopes: HKLM-x32 - {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://search.ask.com/web?q={searchterms}&l=dis&o=CPNTDF
SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = http://dts.search-results.com/sr?src=ieb&appid=101&systemid=406&sr=0&q={searchTerms}
SearchScopes: HKLM-x32 - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = http://search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=CPNTDF
SearchScopes: HKLM - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = http://search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=CPNTDF
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://search.ask.com/web?q={searchterms}&l=dis&o=CPNTDF
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = 
SearchScopes: HKCU - {B393E4EF-79C1-48E6-8F76-C1EE68F7B8F2} URL = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=kw&q={searchTerms}&locale=&apn_ptnrs=TV&apn_dtid=OSJ000YYUS&apn_uid=E86CEE99-EC95-4464-940D-1905D40C1638&apn_sauid=51BFDF92-B809-4BAF-9A5C-F27F51E016EB
SearchScopes: HKCU - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = http://search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=CPNTDF
BHO: No Name -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} ->  No File
BHO-x32: ZoneAlarm Security Toolbar -> {91da5e8a-3318-4f8c-b67e-5964de3ab546} ->  No File
BHO-x32: No Name -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} ->  No File
Toolbar: HKLM-x32 - ZoneAlarm Security Toolbar - {91da5e8a-3318-4f8c-b67e-5964de3ab546} -  No File
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Toolbar: HKCU - No Name - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} -  No File
Handler: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} -  No File
FF SearchEngineOrder.1: Ask.com
FF Plugin HKCU: @tools.google.com/Google Update;version=3 -> C:\Users\Erin\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 -> C:\Users\Erin\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Erin\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF SearchPlugin: C:\Users\Erin\AppData\Roaming\Mozilla\Firefox\Profiles\0k82755o.default\searchplugins\askcom.xml
C:\Users\Erin\AppData\Local\Google\Update
C:\Users\Erin\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll
C:\Users\Erin\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll
FF SearchPlugin: C:\Users\Erin\AppData\Roaming\Mozilla\Firefox\Profiles\0k82755o.default\searchplugins\askcom.xml
C:\Users\Erin\AppData\Roaming\Mozilla\Firefox\Profiles\0k82755o.default\searchplugins\askcom.xml
CHR HomePage: Default -> 52F3106CC1434E5FE8FDAB4139F5015E5437551551DAC850CC172530025DC12C
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}sugkey={google:suggestAPIKeyParameter}
CHR HKCU\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
Emptytemp:

2. Save notepad as fixlist.txt to your Desktop.
NOTE: => It’s important that both files, FRST and fixlist.txt are in the same location or the fix will not work.

3. Run FRST/FRST64 and press the Fix button just once and wait.
If the tool needed a restart please make sure you let the system to restart normally and let the tool completes its run after restart.

The tool will make a log on the Desktop (Fixlog.txt). Please attach it to your reply.
Note: If the tool warned you about the outdated version please download and run the updated version.
.

It is necessary to uninstall ComboFix :

[*] Click Start (or
http://amf.mycity.rs/pg/images/VistaStartButton.png
) then Run.

On Windows7 or Vista you may use Start Search field if Run is not available.

[*] In the line of text type in (Copy) the following:

ComboFix /Uninstall

Note that there is a space between " ComboFix " and " /Uninstall " .

[*] then click OK (or press Enter ).

Wait for the uninstall process is complete.

3

Good Morning!

Sorry for the late response. I work 24 hour shifts and was exhausted yesterday. Please find my Fixlog.txt attached.

Thank you so much for your help!

4

How’s your computer behaving now?

5

I, also, forgot to include the RogueKiller report. Please find it below.

6

It still won’t let me re-register Windows.

I’m about to run another Avast scan. RogueKiller found some items, which I attached to my last post. I’m about to do another full scan with Avast. Hopefully, nothing will come up again.

7

It is adware, is not a classic malware.

You have a PM.

8

This may sound like a stupid question, but do I run it as .exe? Or not at all? Avast says it’s a threat. Forgive me for my lack of knowledge, I’m self-taught about all of this.

9

Turn off avast. No worries.

10

Argus:

I sent you a PM.

Thanks!