When where done we will run a tool to remove Combofix and Qoobox, please don't remove anything on your own, what if by mistake Combofix removed a legit entry and we needed to reinstall it ?????????????
Please copy and paste the reports in in lew of attaching them.
Lets go over a few things.
Advanced Registry Optimizer
Unless your a windows expert you should not be using any registry cleaners, remove the wrong entries or entry and you could severely damage your system making it unbootable. You will see no difference in system performance by running this cleaner. I strongly suggest you remove it via add remove programs in the control panel.
Ask.com Toolbar
* It promotes its toolbars on sites targeted at kids.
* It promotes its toolbars through ads that appear to be part of other companies' sites.
* It promotes its toolbars through other companies' spyware.
* It is Installed without any disclosure whatsoever and without any consent from the user whatsoever.
* It solicits installations via "deceptive door openers" that do not accurately describe the offer; failing to affirmatively show a license agreement; linking to a EULA via an off-screen link.
* It makes confusing changes to user's browsers - increasing Ask's revenues while taking users to pages they didn't intend to visit.
This program has no uninstall, if you want to remove it let me know.
Open
Notepad Go to
Start> All Programs> Assessories> Notepad ( this will only work with Notepad )and copy all the text
inside the Codebox by highlighting it all and pressing CTRL C on your keyboard, then paste it into Notepad, make sure there is no space before and above
DDS::
Code:
DDS::
uRun: [MyWebSearch Email Plugin] c:\progra~1\mywebs~1\bar\1.bin\mwsoemon.exe
mRun: [MyWebSearch Plugin] "c:\windows\system32\rundll32.exe" c:\progra~1\mywebs~1\bar\1.bin\M3PLUGIN.DLL,UPF
Save this as
CFScript to your desktop.
Then drag the
CFScript into
ComboFix.exe as you see in the screenshot below.
This will start ComboFix again. After reboot, (in case it asks to reboot), post the contents of Combofix.txt in your next reply.