New
#11
first.txt
driverproblem6 - Pastebin.com
addition.txt
driverproblem7 - Pastebin.com
first.txt
driverproblem6 - Pastebin.com
addition.txt
driverproblem7 - Pastebin.com
Open notepad .
Copy and Paste the highlighted text into Notepad .
start
C:\Windows\Tasks\SA.DAT
C:\ProgramData\13412D80_S_drv [x]
AppInit_DLLs: C:\Windows\system32\nvinitx.dll [97280 2009-07-13] ()
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [97280 2009-07-13] ()
testsigning: ==> Check for possible unsigned rootkit driver <===== ATTENTION!
nointegritychecks: ==> Integrity Checks is disabled <===== ATTENTION!
end
Save the file as Fixlist.txt and save it to your Desktop . Open FRST64.exe once again and click on the Fix button.
Once completed it will create a Fixlog.txt file on the desktop. Upload Fixlog.txt with your reply.
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 25-06-2013 01
Ran by Quicksilver at 2013-06-24 22:05:27 Run:1
Running from C:\Users\Quicksilver\Desktop
Boot Mode: Normal
==============================================
C:\Windows\Tasks\SA.DAT => Moved successfully.
C:\ProgramData\13412D80_S_drv [x] => File/Directory not found.
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs => Value was restored successfully.
HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs => Value was restored successfully.
An error occurred while attempting to delete the specified data element.
Element not found.
The operation completed successfully.
==== End of Fixlog ====
Run ESET Online Scanner
On
Hold down Control and click on ESET Online Scanner to open ESET OnlineScan in a new window
Click the button
Check YES, I accept the Terms of Use.
Click the Start button.
Accept any security warnings from your browser.
Under scan settings, check "Scan Archives" and "Remove found threats"
Click Advanced settings and select the following:
° Scan potentially unwanted applications
° Scan for potentially unsafe applications
° Enable Anti-Stealth technology
ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
When the scan completes, click List Threats
Click Export, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
Click the Back button.
Click the Finish button.
On or
Click on http://download.eset.com/special/eos...taller_enu.exe to download the ESET Smart Installer. Save it to your desktop.
Right click on choose on your desktop
Check YES, I accept the Terms of Use.
Click the Start button.
Accept any security warnings from your browser.
Under scan settings, check "Scan Archives" and "Remove found threats"
Click Advanced settings and select the following:
° Scan potentially unwanted applications
° Scan for potentially unsafe applications
° Enable Anti-Stealth technology
ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
When the scan completes, click List Threats
Click Export, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
Click the Back button.
Click the Finish button.
AdwCleaner
Click here AdwCleaner
Click on Download Now button
Save to the Desktop
Right-click on AdwCleaner.exe and choose
Click the Search button
Upload the AdwCleaner[Rn].txt in your reply.
NoteThe log file is at C:\AdwCleaner[Rn].txt
Run HitManPro
Download below
32-Bit Version OS
Download
64-Bit Version OS
Download
Save to the Desktop
Right click on HitmanPro.exe and choose
When HitmanPro opens up click on the Settings button uncheck Scan for Tracking cookies then click OK . Then on the Next button
Click on No, I only want to perform a one-time scan to check this computer on the Setup page . Click Next once done .
Let it scan the PC once its done Click Next
Click Activate free license to start the free 30 days trial and remove all the malicious files from your computer then click Next
C:\Windows\Downloaded Installations\{570713D0-36B6-45A3-AB49-78451DBD2DC4}\PCmover.msi a variant of Win32/PSWTool.PWDump.A application deleted - quarantined
E:\Users\Quicksilver\AppData\Local\Torch\User Data\Default\Cache\f_000008 a variant of Win32/Adware.MediaFinder.F application cleaned by deleting - quarantined
E:\Users\Quicksilver\AppData\Local\Torch\User Data\Default\Cache\f_00000f a variant of Win32/Adware.MediaFinder.F application cleaned by deleting - quarantined
E:\Users\Quicksilver\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\51\5b481b3-49cef280 multiple threats cleaned by deleting - quarantined
E:\Users\Quicksilver\New Downloads\SetupImgBurn_2.5.7.0.exe a variant of Win32/Bundled.Toolbar.Ask application cleaned by deleting - quarantined
Uninstall Registry Repair .
I recommend using Revo Uninstaller
RevoUninstaller Free Version
Download
For 32-bit OS
RevoUninstaller Pro 30-Day Trial Version
Download
For 64-Bit OS
Click on the app inside RevoUnistaller and choose uninstall
Click on Yes to agree you want to uninstall
If you get the builtin Uninstaller for the app use that and once you're done click Finish
Back inside RevoUninstaller click on Next
Let RevoUninstaller scan for left over registry keys . Click on Select All and choose Delete .
Once done click on Next.
Let the left over files and folders be locates then Click on Select All then click Delete then Next and you should be done .
Please download and install Revo Uninstaller Free
Double click Revo Uninstaller to run it.
From the list of programs double click on The Program to remove
When prompted if you want to uninstall click Yes.
Be sure the Advanced option is selected then click Next.
The program will run, If prompted again click Yes
when the built-in uninstaller is finished click on Next.
Once the program has searched for leftovers click Next.
Check/tick the bolded items only on the list then click Delete
when prompted click on Yes and then on next.
put a check on any folders that are found and select delete
when prompted select yes then on next
Once done click Finish.
NoteIf the free version of RevoUninstaller doesn't show the program you would need to download and install the 30-Day trial of RevoUninstaller Pro which will be able to remove 64-bit programs
uninstalled
adwcleaner
# AdwCleaner v2.303 - Logfile created 06/25/2013 at 02:05:21
# Updated 08/06/2013 by Xplode
# Operating system : Windows 7 Ultimate Service Pack 1 (64 bits)
# User : Quicksilver - QUICKSILVER-PC
# Boot Mode : Normal
# Running from : C:\Users\Quicksilver\Desktop\AdwCleaner.exe
# Option [Search]
***** [Services] *****
***** [Files / Folders] *****
Folder Found : C:\Users\Quicksilver\AppData\Roaming\Mozilla\Firefox\Profiles\gcspxzfz.default\jetpack
***** [Registry] *****
***** [Internet Browsers] *****
-\\ Internet Explorer v9.0.8112.16490
[OK] Registry is clean.
-\\ Mozilla Firefox v21.0 (en-US)
File : C:\Users\Quicksilver\AppData\Roaming\Mozilla\Firefox\Profiles\gcspxzfz.default\prefs.js
[OK] File is clean.
*************************
AdwCleaner[R1].txt - [790 octets] - [25/06/2013 02:05:21]
########## EOF - C:\AdwCleaner[R1].txt - [849 octets] ##########
running hitman now