Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: can't download


10 Aug 2013   #1

windows 7
 
 
can't download

Hello,
I have windows 7. I have got a problem to download even from a trusted websites. I bought a software from a very known website. it keeps telling me "the file has a virus and deleted." It happened several times before. I know it is now my antivirus. It is my windows. Please help me.

Thank you


My System SpecsSystem Spec
.

10 Aug 2013   #2

Windows 7 Ultimate 32-Bit & Windows 7 Ultimate 64-Bit
 
 

Download the two tools below on a PC that could download and use a

Then transfer the programs to the PC that is having issues . Place the files onto the desktop

Farbar Recovery Scan Tool

32-bit Version OS Farbar Recovery Scan Tool
Right click on FRST.exe and choose

64-Bit Version OS Farbar Recovery Scan Tool x64
Right click on FRST64.exe and choose

When the tool opens click Yes to disclaimer.
Press Scan button.
FRST will let you know when the scan is complete and has written the FRST.txt to file
Note   Note
The first time Farbar Recovery Scan Tool is run, it makes also another log Addition.txt

Please copy and paste both logs in your reply.(FRST.txt and Addition.txt)



Farbar Service Scanner
Click here Downloading Farbar Service Scanner to DOWNLOAD

Right click on FSS.exe and choose
Place a check next to the following options
Internet Services
Windows Firewall
System Restore
Security Center
Windows Update
Windows Defender
Press: Scan


Note   Note
All three text files FRST.txt , Additional.txt , and FSS.txt will be located on the Desktop


Copy the files to your USB drive and upload them using the working PC

How To Upload a File

Click on the Go Advanced button under the Message box . Scroll down to Additional Options then click on Manage Attachments in the Attach Files sections . Click the Browse button locate the file then click on the Open button . In the Upload File from your Computer section click on the Upload button . Wait until it finishes uploading then close the window . Then click Submit Reply .
My System SpecsSystem Spec
12 Aug 2013   #3

windows 7
 
 
Logs

Addition.txt
FRST.txt

Thank You very much , I appreciate it greatly !


My System SpecsSystem Spec
.


12 Aug 2013   #4
Microsoft MVP

Windows 7 Ultimate 32bit SP1
 
 

The FRST log shows ... HKLM\...D6A79037F57F\InprocServer32: [Default-fastprox] ATTENTION! ====> ZeroAccess?
This is a Rootkit.

Lean what a rootkit is Rootkit - Wikipedia, the free encyclopedia
My System SpecsSystem Spec
12 Aug 2013   #5

Windows 7 Ultimate 32-Bit & Windows 7 Ultimate 64-Bit
 
 

Open Notepad. Inside Notepad paste the highlighted text below


start
HKLM\...D6A79037F57F\InprocServer32: [Default-fastprox] ATTENTION! ====> ZeroAccess?
HKCR\...409d6c4515e9\InprocServer32: [Default-shell32] C:\$Recycle.Bin\S-1-5-21-2294209149-3407582263-2661049725-1001\$15da2196a821ebda03249fdef95d7253\o. ATTENTION! ====> ZeroAccess?
HKLM-x32\...\Run: [ROC_ROC_NT] - "C:\Program Files (x86)\AVG Secure Search\ROC_ROC_NT.exe" / /PROMPT /CMPID=ROC_NT [x]
AppInit_DLLs-x32: c:\progra~2\contin~1\sprote~1.dll [97280 2009-07-13] ()
SearchScopes: HKCU - {5510EFCC-BCB8-4649-89A2-39E9BAFF93A8} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3289663&CUI=UN23162986582385297&UM=2
BHO-x32: Shopping Sidekick - {11111111-1111-1111-1111-110011501158} - C:\Program Files (x86)\Shopping Sidekick\Shopping Sidekick.dll No File
BHO-x32: Safe Saver - {11111111-1111-1111-1111-110311321154} - C:\Program Files (x86)\Safe Saver\Safe Saver-bho.dll No File
BHO-x32: coiNttinueetosavoe - {9EA40422-A01A-2ED9-0188-E7AA52A6BB36} - C:\ProgramData\coiNttinueetosavoe\518488e6cd950.dll No File
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
Toolbar: HKCU - No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File

CHR HomePage: http:\/\/www.safesearch.net\/?utm_medium=ch&utm_campaign=52&utm_source=sm&utm_content=1&utm_term=1516EA45B4F4436B
CHR RestoreOnStartup: "urls_to_restore_on_startup":[
CHR DefaultSearchURL: ( "name":"Delta Search",) - "search_url":"http:\/\/www1.delta-search.com\/?q={searchTerms}&babsrc=SP_ss&mntrId=10F7C018859E0CDD&affID=119360&tsp=4966",
CHR DefaultSuggestURL: ( "name":"Delta Search",) - "suggest_url":"{google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={sear chTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}"
CHR Plugin: ( "name":"Remoting Viewer",) - "path":"internal-remoting-viewer",
CHR Extension: (Session Buddy) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\edacconmaakjimmfgnblocblbcdcpbko\3.2.1_0
CHR HKLM-x32\...\Chrome\Extension: [nemfjadlboooiffmcelkafilagddogim] - C:\Users\user\AppData\Local\CRE\nemfjadlboooiffmcelkafilagddogim.crx
CHR HKLM-x32\...\Chrome\Extension: [nllafhekklanfkimibokomlmidmcmaoi] - C:\Users\user\AppData\Local\Shopping Sidekick\Chrome\Shopping Sidekick.crx
2013-08-06 09:07 - 2013-08-06 09:07 - 00000000 ____D C:\Users\user\AppData\Roaming\Babylon
2013-08-06 09:07 - 2013-08-06 09:07 - 00000000 ____D C:\ProgramData\Babylon
ZeroAccess:
C:\$Recycle.Bin\S-1-5-18\$15da2196a821ebda03249fdef95d7253
C:\$Recycle.Bin\S-1-5-18\$15da2196a821ebda03249fdef95d7253\@
C:\$Recycle.Bin\S-1-5-18\$15da2196a821ebda03249fdef95d7253\U\00000001.@
C:\$Recycle.Bin\S-1-5-18\$15da2196a821ebda03249fdef95d7253\U\80000000.@
C:\$Recycle.Bin\S-1-5-18\$15da2196a821ebda03249fdef95d7253\U\800000cb.@

ZeroAccess:
C:\$Recycle.Bin\S-1-5-18\$15da2196a821ebda03249fdef95d7253
C:\$Recycle.Bin\S-1-5-18\$15da2196a821ebda03249fdef95d7253\@
C:\$Recycle.Bin\S-1-5-18\$15da2196a821ebda03249fdef95d7253\U\00000001.@
C:\$Recycle.Bin\S-1-5-18\$15da2196a821ebda03249fdef95d7253\U\80000000.@
C:\$Recycle.Bin\S-1-5-18\$15da2196a821ebda03249fdef95d7253\U\800000cb.@

ZeroAccess:
C:\$Recycle.Bin\S-1-5-21-2294209149-3407582263-2661049725-1001\$15da2196a821ebda03249fdef95d7253

ZeroAccess:
C:\$Recycle.Bin\S-1-5-18\$15da2196a821ebda03249fdef95d7253
DeleteJunctionsIndirectory: C:\Program Files\Windows Defender
end


Click on File Select Save As

Save to : Desktop

File Name : Fixlist.txt

Save file as : All files

Click on Save . Close Notepad

Open FRST.exe click on the [Fix] button . Once complet it will create a new file called Fixlog.txt . Upload the log . Should be on your Desktop

Then run these programs next

AdwCleaner

Click here AdwCleaner

Click on Download Now button

Save to the Desktop

Right-click on AdwCleaner.exe and choose

Click on Delete and confirm the prompt.



Your computer will be rebooted automatically. A text file will open after the restart.

Upload the log : The log file is at C:\AdwCleaner[Sn].txt


Download Junkware Removal Toolkit

Click here Junkware Removal Tool to download

Drag the JRT.exe from the Downloads folder to your Desktop

Right click JRT.exe and choose

Once done upload the JRT.txt file

TDSSKILLER

download link TDSSKiller

Save to the Desktop

Right-click the program and select


When the TDSSKiller console opens, click on: Change Parameters
Under Additional Options, place a check in the box next to: Detect TDLFS File System

Click: OK


Press: Start Scan


If a suspicious object is detected, the default action is Skip, leave it as is, and click on: Continue
If malicious objects are found, they show in the Scan results.
Ensure Cure (the default) is selected, then click: Continue > Reboot now, to finish the cleaning process.
(Note: If Cure is not available, select Skip, >>Do not select: Delete<<)


When done, the tool outputs its log to the disk with the Windows Operating System, normally C:\


Logs have a name like:
C:\TDSSKiller.X.X.X_12.04.2013_15.31.43_log.txt


Please post the TDSSKiller log in your reply.
My System SpecsSystem Spec
Reply

 can't download




Thread Tools




Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 01:23 PM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33