Search:

I've completed all tasks outlined in your last post. The articles that you referred to are excellent. The machine seems to be running smoother and I have had no further blue screen shutdowns. Thank...

Yes, I am ready to tidy up. Please advise.

The logs are below. They don't mean much to me. Thank you very much for your help.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Log Name: System
Source: Service Control...

The machine seems to be running smoother. But I had an incident just this morning after boot up that I've never had before. Several minutes after the system fully loaded a blue screen popped up and...

ComboFix 15-12-16.01 - Bob 12/19/2015 15:19:42.1.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.8153.4819 [GMT -6:00]
Running from: c:\users\Bob\Desktop\ComboFix.exe
AV: AVG...

The ESET scan found nothing. The SystemLook log is below. Thank you very much for your help.


SystemLook 04.09.10 by jpshortstuff
Log created at 12:58 on 19/12/2015 by Bob
Administrator -...

Revo Uninstaller seemed to work for removing both versions of Strongvault in one pass. Neither shows up on my Control Panel/Programs and Features page. Thank you for your help.

Thank you very much for your help

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

# AdwCleaner v5.025 - Logfile created 18/12/2015 at 17:09:22
# Updated 13/12/2015 by Xplode
# Database :...

"D03D33E5698D29D40B33F55418B99273"="C:\Users\Bob\AppData\Local\Strongvault Online Backup\db"...

Yes, Strongvault Online Backup is listed as an installed program, but when I try to uninstall it I get "This action is only valid for products that are currently installed". Requested logs are below....

All listed programs were removed. However, I received an error message that Strongvault did not exist. I do NOT use either of the Citrix programs, but I DO use Tradestation 9.0 and TVersity Media...

This was an inherited machine, so I'm not sure what kind of illegal software may be on it. But I removed everything that seemed to have been flagged by CKScanner. Please let me know if there are...

Requested logs are attached. I had disabled AVG before running RogueKiller, so it was not able to find and remove any of the AVG files listed. Thank you very much for your help.
...

Requested logs below. To the best of my knowledge, CryptoPrevent has never been installed on this machine. Thank you very much for your help.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
...

The machine has been running very slow at times and even locks up periodically. I regularly run Spybot, Malwarebytes, and Eset. The requested Farbar and aswMBR logs are below.

Thank you very much...

Yes, it looks like its running better now and I've run Delfix. Thank you VERY much for your help.

I agree - that looks like the culprit. I'd like to give it a few days just to make sure. I'll give it 2 days and if everything looks OK I'll get back with you to proceed.

Thank you VERY much for...

I did NOT get any error reports on the last boot-up after the FRST64 fix.

When trying to remove the IObit Apps Toolbar I get an error message of "The feature you are trying to use is on a network...

Thank you for your help.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-02-2015
Ran by Bob (administrator) on XPS8500...

Everything on my MBAM Advanced Settings page is dimmed so that I can't change anything, but I do see that "Automatically quarantine detected items" is checked. I couldn't remember if I ever ran...

MalwareBytes and Eset reports are below. I am still getting two error reports whenever the computer is booted up. They are:
C:\Users\Bob\AppData\Local\YkhxPack\enhace.d... failed to load....

TFC seems to have done the trick. Fixlog.txt is below. Thank you for your help.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Fix result of Farbar Recovery Tool (FRST written by Farbar)...

The Farbar Recovery Scan Tool kept locking up on my right away. I tried several times, making sure that any antivirus programs were turned off. I gave it a good 10-15 minutes each time, but the...

Sorry for the delay. I was out of town for a few days, but back and ready to get this fixed.

When trying to remove the IObit Apps Toolbar I get an error message of "The feature you are trying to...

I was getting the Blue Screen Of Death that described a problem with the display driver. After reboot I would get it again after 20-30 minutes. I updated the driver, but that didn't help. I ran...

It looks like I'm back to normal. My browser is no longer opening up unexpected pages.

Thank you very much!

Malwarebytes found 2 items. the log is below.

Thank you.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org
...

My firefox browser will sometimes open a new window and go to an unrequested site with advertising. I've run Sybot, Malwarebytes, and Eset. Eset was the only one to find anything and it listed two...

All clean-up has been performed. Thank you very much for all your help. It is sincerely appreciated!

No, no other issues. Thank you so much for all your help.

The OTL log is below

The keylogger is something I used to use to check on my kids. They're passed that age now. I've removed it.

Registry First Aid is no longer in "Add/Remove Programs". I...

Yes, the computer does seem to boot a little faster now. Everything else seems to run fine too.

Eset found 6 threats. Should I re-scan and remove those threats?

Thank you for all your help.
...

The same thing happened again, but this time it froze on the "ipconfig /flushdns /c" file. Both freeze ups were associated with "Processing 034 -HKLM Boot Execute (Isdelete)".

Are you suggesting...

I tried to run the OTL.exe custom scan two times. Each time it would freeze up on the "C:\DOCUME~1\Bob\LOCALS~1\Temp\ex132np1.exe" file. The first time I kept it running for an hour before I...

OTL.txt is attached as a compressed file.

Thank you for your help.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

# AdwCleaner v2.112 - Logfile created 02/11/2013 at 18:58:16
# Updated...

Thank you for your help.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Malwarebytes Anti-Malware 1.70.0.1100
www.malwarebytes.org

Database version: v2013.02.11.04

Windows XP Service...

I'm sorry. I assumed those files were supposed to be removed, but I see now that they were not. There were only a couple of them in there. I'll pay better attention to your instructions next time.
...

I do not have LimeWire installed on this computer. I might have been on there a long time ago, but I cannot find it via "Add Remove Programs". I manually deleted its folder in the Program Folders...

Extras.txt file

~!~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

OTL Extras logfile created on: 4/8/2011 6:27:40 PM - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Documents and...

OTL.txt file continued

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile...

OTL logfile created on: 2/8/2013 4:40:37 PM - Run 2
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Bob\Desktop
Windows XP Professional Edition Service Pack 3 (Version =...

I has some re-direction a while back along with the slow boot, but I haven't noticed anything recently.

OTL.txt and Extras.txt files will be included in the next 2 posts due to their size.
...

My computer sometimes takes a very long time to boot. Even after waiting for 5-10 minutes I sometimes have to shut it down and try again. I've found and removed a few things using Spybot,...

Thank you very much for your help. it is sincerely appeciated!

Thank you for your help!

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

RogueKiller V8.3.1 [Nov 23 2012] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Feedback :...

Here you go. Thank you for your help.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Malwarebytes Anti-Malware 1.65.1.1000
www.malwarebytes.org

Database version: v2012.11.21.07
...

I had the FBI virus attack recently. I was able to identify and clean it with Malwarebytes, but some sort of Trojan keeps showing up whenever I do a subsequent scan and removal. I know that I wasn't...

After doing a C drive search for "Dyn" I was able to find a folder called Sendori within the Program Files directory. Googleing Sendori revealed that it "will update your computer's DNS settings to...

Combofix.txt info is below.

TCIP/IP DNS Server settings keep reverting back to 216.146.35.240 and 216.146.36.240. I have the modem set to use OpendDNS settings, so I want the computer to find DNS...

Yes, I do. Thank you very much.