Windows firewall authorization file missing

Page 1 of 3 123 LastLast

  1. Posts : 22
    Windows 7 Home Premium 64bit
       #1

    Windows firewall authorization file missing


    JACEE please.

    I've read a bunch on the sevenforums trying to solve this issue but I'm over my head and need professional help.

    If possible I'd like to have JACEE help solve this. Most posts I've read about solving this issue she has authored.

    It all started when I tried to turn Windows Firewall on and it would not allow me to do so. I get the following error message: "Windows cannot change some of your settings. Error Code 0x8007042c". After all the reading and changing I've done w/o any success I'm not sure what may be changed now.

    I will monitor posts to this thread but I'm not always at my computer so there may be some time pass before my next post.

    Thanks
      My Computer


  2. Posts : 8,608
    Windows 7 Ultimate 32bit SP1
       #2

    You may have a problem with SysTweak Adv. Sys. Optimize and/ or Webroot.


    Download DDS from one of these links:
    DDS.com

    DDS.pif
    • Disable any script blocking protection
    • Double click the dds icon to run the tool.
    • When done, DDS will open two (2) logs:
      1. DDS.txt
      2. Attach.txt <--- will be minimized in the task tray
    • Save both reports to your desktop.
    Include the contents of both logs in your next post.
    The scan will instruct you to post Attach.txt as an attachment.
      My Computer


  3. Posts : 22
    Windows 7 Home Premium 64bit
    Thread Starter
       #3

    Jacee, thanks for you help. I really appreciate it.

    I'm basically your run of the mill user and don't know much about registry or services. So please be patient with me.

    Some information which might be of importance to you:

    1. I once had a subscription to Norton Internet Security. Used it up until sometime in 2012 or 2013. There are still leftovers in places.

    2. Webroot and SysTweak subscriptions were purchased to replace Norton.

    3. While trying to resolve this on my own I downloaded MS Security Essentials.

    4. I've downloaded some other programs while trying another person's online solution. They include:

    Malwarebytes Anti-Malware
    UVK Ultra Virus Killer
    Hitman Pro
    Avast Free Version

    So I'm all ears and appoligize for the mess I may have caused before asking for your help.


    attach.txt

    dds.txt
      My Computer


  4. Posts : 8,608
    Windows 7 Ultimate 32bit SP1
       #4

    First off, let's get rid of the adware you have...

    Please download AdwCleaner by Xplode and save to your Desktop.
    • Double click on AdwCleaner.exe to run the tool.
      Vista/Windows 7/8 users right-click and select Run As Administrator.
    • Click on the Scan button.
    • AdwCleaner will begin...be patient as the scan may take some time to complete.
    • After the scan has finished, click on the Report button...a logfile (AdwCleaner[R#].txt) will open in Notepad for review (where the largest value of # represents the most recent report).
    • The contents of the log file may be confusing. Unless you see a program name that you know should not be removed, don't worry about it. If you see an entry you want to keep, let me know about it.
    • Copy and paste the contents of that logfile in your next reply.
    • A copy of all logfiles are saved in the C:\AdwCleaner folder which was created when running the tool.


    Using AdwCleaner v3: Scan & Clean:
    Double click on AdwCleaner.exe to run the tool again.
    Click on the Scan button.
    AdwCleaner will begin to scan your computer like it did before.
    After the scan has finished...

    This time click on the Clean button.
    Press OK when asked to close all programs and follow the onscreen prompts.
    Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
    After rebooting, a logfile report (AdwCleaner[S#].txt) will open automatically (where the largest value of # represents the most recent report).
    Copy and paste the contents of that logfile in your next reply.
    A copy of that logfile will also be saved in the C:\AdwCleaner folder
      My Computer


  5. Posts : 22
    Windows 7 Home Premium 64bit
    Thread Starter
       #5

    Didn't know if I should run AdwCleaner the 2nd time w/o telling you the program names I recognize and may need kept.

    There's some for SysTweak and RegClean Pro in the report.

    Side note: My machine keeps making a sound like it is trying to dialup a connection. I don't have a modem and have checked the phone/fax in control panel. Don't see that has ever been activated. Just thought it was worth mentioning. Not trying to address multiple issues at once.


    # AdwCleaner v3.014 - Report created 08/12/2013 at 13:39:20
    # Updated 01/12/2013 by Xplode
    # Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
    # Username : Brian R - LEE_TOSIBA
    # Running from : C:\Users\Brian R\AppData\Local\Opera\Opera\temporary_downloads\adwcleaner.exe
    # Option : Scan

    ***** [ Services ] *****

    Service Found : DefaultTabSearch
    Service Found : Updater Service for AMZN

    ***** [ Files / Folders ] *****

    File Found : C:\END
    File Found : C:\Users\Brian R\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_app.mam.conduit.com_0.localstorage
    File Found : C:\Users\Brian R\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_app.mam.conduit.com_0.localstorage-journal
    File Found : C:\Users\Public\Desktop\RegClean Pro.lnk
    File Found : C:\windows\System32\roboot64.exe
    Folder Found : C:\Users\Brian R\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc
    Folder Found : C:\Users\Brian R\AppData\Local\Google\Chrome\User Data\Default\Extensions\lipgolpfajiadodbcbljdpmbmbdmfcil
    Folder Found C:\Lee's Stuff\Documents\Systweak
    Folder Found C:\Lee's Stuff\Documents\Systweak
    Folder Found C:\Program Files (x86)\Amazon Browser Bar
    Folder Found C:\Program Files (x86)\Conduit
    Folder Found C:\Program Files (x86)\DefaultTab
    Folder Found C:\Program Files (x86)\MyPC Backup
    Folder Found C:\Program Files (x86)\Object
    Folder Found C:\Program Files (x86)\RegClean Pro
    Folder Found C:\Program Files (x86)\Searchprotect
    Folder Found C:\Program Files (x86)\somoto_v.1
    Folder Found C:\Program Files (x86)\Somoto_V.1
    Folder Found C:\Program Files (x86)\Systweak
    Folder Found C:\Program Files (x86)\XingHaoLyrics
    Folder Found C:\ProgramData\Conduit
    Folder Found C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RegClean Pro
    Folder Found C:\ProgramData\Systweak
    Folder Found C:\ProgramData\VisualBee
    Folder Found C:\Searchprotect
    Folder Found C:\Users\Brian R\AppData\Local\Amazon Browser Bar
    Folder Found C:\Users\Brian R\AppData\Local\Bundled software uninstaller
    Folder Found C:\Users\Brian R\AppData\Local\Conduit
    Folder Found C:\Users\Brian R\AppData\Local\NativeMessaging
    Folder Found C:\Users\Brian R\AppData\Local\Systweak
    Folder Found C:\Users\Brian R\AppData\Local\TBHostSupport
    Folder Found C:\Users\Brian R\AppData\Local\Wajam
    Folder Found C:\Users\Brian R\AppData\LocalLow\Conduit
    Folder Found C:\Users\Brian R\AppData\LocalLow\PriceGong
    Folder Found C:\Users\Brian R\AppData\LocalLow\Somoto_V.1
    Folder Found C:\Users\Brian R\AppData\LocalLow\somoto_v.1
    Folder Found C:\Users\Brian R\AppData\Roaming\DefaultTab
    Folder Found C:\Users\Brian R\AppData\Roaming\pccustubinstaller
    Folder Found C:\Users\Brian R\AppData\Roaming\PerformerSoft
    Folder Found C:\Users\Brian R\AppData\Roaming\Searchprotect
    Folder Found C:\Users\Brian R\AppData\Roaming\Systweak
    Folder Found C:\Users\BRIANR~1\AppData\Local\Temp\NativeMessaging
    Folder Found C:\Users\BRIANR~1\AppData\Local\Temp\NativeMessaging
    Folder Found C:\Users\Lee_Non_Administrato\AppData\Roaming\Systweak
    Folder Found C:\windows\SysWOW64\WNLT

    ***** [ Shortcuts ] *****


    ***** [ Registry ] *****

    Key Found : HKCU\Software\Alexa Internet
    Key Found : HKCU\Software\AppDataLow\Software\Conduit
    Key Found : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
    Key Found : HKCU\Software\AppDataLow\Software\Crossrider
    Key Found : HKCU\Software\AppDataLow\Software\DefaultTab
    Key Found : HKCU\Software\AppDataLow\Software\PriceGong
    Key Found : HKCU\Software\AppDataLow\Software\Search Settings
    Key Found : HKCU\Software\AppDataLow\Software\SmartBar
    Key Found : HKCU\Software\AppDataLow\Software\Somoto_V.1
    Key Found : HKCU\Software\BI
    Key Found : HKCU\Software\Conduit
    Key Found : HKCU\Software\Cr_Installer
    Key Found : HKCU\Software\Default Tab
    Key Found : HKCU\Software\DefaultTab
    Key Found : HKCU\Software\distromatic
    Key Found : HKCU\Software\Google\Chrome\Extensions\lipgolpfajiadodbcbljdpmbmbdmfcil
    Key Found : HKCU\Software\Google\Chrome\Extensions\pbjikboenpfhbbejgkoklgkhjpfogcam
    Key Found : HKCU\Software\IM
    Key Found : HKCU\Software\ImInstaller
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EA582743-9076-4178-9AA6-7393FDF4D5CE}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F443A627-5009-4323-9C1D-7FD598D0D712}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E306AAA2-3B4F-4802-9FAF-0C10AB78B589}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EA582743-9076-4178-9AA6-7393FDF4D5CE}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F443A627-5009-4323-9C1D-7FD598D0D712}
    Key Found : HKCU\Software\SearchProtect
    Key Found : HKCU\Software\Softonic
    Key Found : HKCU\Software\systweak
    Key Found : HKCU\Software\visualbee
    Key Found : [x64] HKCU\Software\Alexa Internet
    Key Found : [x64] HKCU\Software\BI
    Key Found : [x64] HKCU\Software\Conduit
    Key Found : [x64] HKCU\Software\Cr_Installer
    Key Found : [x64] HKCU\Software\Default Tab
    Key Found : [x64] HKCU\Software\DefaultTab
    Key Found : [x64] HKCU\Software\distromatic
    Key Found : [x64] HKCU\Software\IM
    Key Found : [x64] HKCU\Software\ImInstaller
    Key Found : [x64] HKCU\Software\SearchProtect
    Key Found : [x64] HKCU\Software\Softonic
    Key Found : [x64] HKCU\Software\systweak
    Key Found : [x64] HKCU\Software\visualbee
    Key Found : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
    Key Found : HKLM\SOFTWARE\Classes\AppID\{38495740-0035-4471-851E-F5BBB86AB085}
    Key Found : HKLM\SOFTWARE\Classes\AppID\{72D89EBF-0C5D-4190-91FD-398E45F1D007}
    Key Found : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}
    Key Found : HKLM\SOFTWARE\Classes\AppID\DefaultTabBHO.DLL
    Key Found : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
    Key Found : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
    Key Found : HKLM\SOFTWARE\Classes\CLSID\{7F6AFBF1-E065-4627-A2FD-810366367D01}
    Key Found : HKLM\SOFTWARE\Classes\CLSID\{A1E28287-1A31-4B0F-8D05-AA8C465D3C5A}
    Key Found : HKLM\SOFTWARE\Classes\CLSID\{AF175732-0D59-716D-F757-9F1492D808D9}
    Key Found : HKLM\SOFTWARE\Classes\CLSID\{B673DD09-E496-4A82-8144-D16AD900B303}
    Key Found : HKLM\SOFTWARE\Classes\CLSID\{E306AAA2-3B4F-4802-9FAF-0C10AB78B589}
    Key Found : HKLM\SOFTWARE\Classes\DefaultTabBHO.DefaultTabBrowser
    Key Found : HKLM\SOFTWARE\Classes\DefaultTabBHO.DefaultTabBrowser.1
    Key Found : HKLM\SOFTWARE\Classes\DefaultTabBHO.DefaultTabBrowserActiveX
    Key Found : HKLM\SOFTWARE\Classes\DefaultTabBHO.DefaultTabBrowserActiveX.1
    Key Found : HKLM\SOFTWARE\Classes\Interface\{1F8EDE97-36D5-422A-B8F0-9406E2D87C60}
    Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT3241284
    Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT3279418
    Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT3282812
    Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT3287811
    Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT3298573
    Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT3306061
    Key Found : HKLM\SOFTWARE\Classes\TypeLib\{FEB62B15-CC00-4736-AAEC-BA046C9DFF73}
    Key Found : HKLM\Software\Conduit
    Key Found : HKLM\Software\Default Tab
    Key Found : HKLM\Software\DefaultTab
    Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp
    Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc
    Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\lipgolpfajiadodbcbljdpmbmbdmfcil
    Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C2E691C3-8026-4763-9B93-D0E0A3734AEB}
    Key Found : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
    Key Found : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
    Key Found : HKLM\SOFTWARE\Microsoft\Tracing\wajamupdater_rasapi32
    Key Found : HKLM\SOFTWARE\Microsoft\Tracing\wajamupdater_rasmancs
    Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7F6AFBF1-E065-4627-A2FD-810366367D01}
    Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E306AAA2-3B4F-4802-9FAF-0C10AB78B589}
    Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7F6AFBF1-E065-4627-A2FD-810366367D01}
    Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A1E28287-1A31-4B0F-8D05-AA8C465D3C5A}
    Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B673DD09-E496-4A82-8144-D16AD900B303}
    Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\RegClean Pro_is1
    Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect
    Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Somoto_V.1 Toolbar
    Key Found : HKLM\Software\SearchProtect
    Key Found : HKLM\Software\Somoto_V.1
    Key Found : HKLM\Software\systweak
    Key Found : HKLM\Software\visualbee
    Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{B9C767DD-F66A-40B4-8F12-4199A9A4393C}
    Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{0194532A-A99C-4337-937E-2A452C8957BE}
    Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{0923E315-2D8B-48CE-A37C-AE9A42F9711C}
    Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{1A1BBE49-C6F1-40EA-9D2F-262F0AF6DDE3}
    Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{1F8EDE97-36D5-422A-B8F0-9406E2D87C60}
    Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{2022154E-7E3E-4809-871E-1B45A6FC7058}
    Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{292ECB89-350E-45D2-816F-52C15305B144}
    Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{36CC2180-B6BF-4951-9578-6B0C40044AAA}
    Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}
    Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{44A36944-22C6-4A08-BC7C-161F3E540DBF}
    Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{6247DD2C-8CF9-4041-A235-93691D71B8B4}
    Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
    Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
    Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{835BED79-DF7E-4096-B355-ED43FA2EA87B}
    Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{8E863BD6-50DE-47D0-A6F1-3C1F6DB72451}
    Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{9DD36F1E-5111-41C5-ADED-A2A11A2FF3E4}
    Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{A2FB8217-E320-434E-BA79-513E357AD54F}
    Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{A9CEBBF4-9129-479A-9231-E833ED3D3A8F}
    Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{AFD4D1F9-167C-4884-95AE-B5A9797B0D16}
    Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{B3EAD50C-ECB0-459A-9EDA-F505AB99675B}
    Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{C47788B1-9604-4D7A-A684-F4D450F2D7D2}
    Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{CA3B41D0-D4C1-4808-B248-75DA27238828}
    Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{D4A2FF6C-087F-4D40-8DFE-92AAD484BFB8}
    Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{D88B9D5C-A9CF-4C69-906D-1CCA5D85A2EF}
    Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{F83AF01C-AA2F-469F-8BE7-D178FB15FD07}
    Key Found : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DefaultTab
    Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E306AAA2-3B4F-4802-9FAF-0C10AB78B589}]
    Value Found : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{E306AAA2-3B4F-4802-9FAF-0C10AB78B589}]
    Value Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [ConduitFloatingPlugin_gahpidfnpjlikfplofgcckpplbhopgpp]
    Value Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [ConduitFloatingPlugin_lipgolpfajiadodbcbljdpmbmbdmfcil]
    Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{E306AAA2-3B4F-4802-9FAF-0C10AB78B589}]
    Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{E306AAA2-3B4F-4802-9FAF-0C10AB78B589}]

    ***** [ Browsers ] *****

    -\\ Internet Explorer v0.0.0.0

    Setting Found : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page] - hxxp://search.conduit.com?SearchSource=10&CUI=UN32719296008037905&UM=2&ctid=CT3279418

    -\\ Google Chrome v31.0.1650.63

    [ File : C:\Users\Brian R\AppData\Local\Google\Chrome\User Data\Default\preferences ]

    Found : urls_to_restore_on_startup
    Found : urls_to_restore_on_startup
    Found : urls_to_restore_on_startup

    *************************

    AdwCleaner[R0].txt - [12269 octets] - [08/12/2013 13:39:20]

    ########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [12330 octets] ##########
      My Computer


  6. Posts : 8,608
    Windows 7 Ultimate 32bit SP1
       #6

    This is all adware .... you don't need any registry cleaners or optimizers, just get rid of this junk!! Please post the Adware Clean log.

    As for the dialing sound, Disable the proxy settings in Internet Explorer:
    1) Under “Tools” in the browser tool bar select “Internet Options”.
    2) In the “Internet Options” window that pops up, click the “Connections” tab at the top.
    3) Click “LAN Settings” near the bottom of the “Connections” section.
    4) If the “Proxy server” checkbox is marked with a check, click it to deselect/uncheck it.
    5) Click “Ok” to close the “Local Area Network (LAN) Settings” window.
    6) Click “Ok” to close the “Internet Options” window.
    Reboot
    Make sure "Proxy server" is still disabled under your LAN Settings.
      My Computer


  7. Posts : 22
    Windows 7 Home Premium 64bit
    Thread Starter
       #7

    Okay, ran AdwCleaner in Clean Mode w/o running Scan again as per your instructions. Not intentionally. So, Cleaned, Scanned, then another Clean. All reports pasted below.




    # AdwCleaner v3.014 - Report created 08/12/2013 at 15:30:20
    # Updated 01/12/2013 by Xplode
    # Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
    # Username : Brian R - LEE_TOSIBA
    # Running from : C:\Users\Brian R\AppData\Local\Opera\Opera\temporary_downloads\adwcleaner.exe
    # Option : Clean

    ***** [ Services ] *****

    [#] Service Deleted : DefaultTabSearch
    [#] Service Deleted : Updater Service for AMZN

    ***** [ Files / Folders ] *****

    Folder Deleted : C:\Searchprotect
    Folder Deleted : C:\ProgramData\Conduit
    Folder Deleted : C:\ProgramData\Systweak
    Folder Deleted : C:\ProgramData\VisualBee
    Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RegClean Pro
    Folder Deleted : C:\Program Files (x86)\Amazon Browser Bar
    Folder Deleted : C:\Program Files (x86)\Conduit
    Folder Deleted : C:\Program Files (x86)\DefaultTab
    Folder Deleted : C:\Program Files (x86)\MyPC Backup
    Folder Deleted : C:\Program Files (x86)\Object
    Folder Deleted : C:\Program Files (x86)\RegClean Pro
    Folder Deleted : C:\Program Files (x86)\Searchprotect
    Folder Deleted : C:\Program Files (x86)\somoto_v.1
    Folder Deleted : C:\Program Files (x86)\Systweak
    Folder Deleted : C:\Program Files (x86)\XingHaoLyrics
    Folder Deleted : C:\windows\SysWOW64\WNLT
    Folder Deleted : C:\Users\Brian R\AppData\Local\Amazon Browser Bar
    Folder Deleted : C:\Users\Brian R\AppData\Local\Bundled software uninstaller
    Folder Deleted : C:\Users\Brian R\AppData\Local\Conduit
    Folder Deleted : C:\Users\Brian R\AppData\Local\NativeMessaging
    Folder Deleted : C:\Users\Brian R\AppData\Local\Systweak
    Folder Deleted : C:\Users\Brian R\AppData\Local\TBHostSupport
    Folder Deleted : C:\Users\Brian R\AppData\Local\Wajam
    Folder Deleted : C:\Users\BRIANR~1\AppData\Local\Temp\NativeMessaging
    Folder Deleted : C:\Users\Brian R\AppData\LocalLow\Conduit
    Folder Deleted : C:\Users\Brian R\AppData\LocalLow\PriceGong
    Folder Deleted : C:\Users\Brian R\AppData\LocalLow\somoto_v.1
    Folder Deleted : C:\Users\Brian R\AppData\Roaming\DefaultTab
    Folder Deleted : C:\Users\Brian R\AppData\Roaming\pccustubinstaller
    Folder Deleted : C:\Users\Brian R\AppData\Roaming\PerformerSoft
    Folder Deleted : C:\Users\Brian R\AppData\Roaming\Searchprotect
    Folder Deleted : C:\Users\Brian R\AppData\Roaming\Systweak
    Folder Deleted : C:\Lee's Stuff\Documents\Systweak
    Folder Deleted : C:\Users\Lee_Non_Administrato\AppData\Roaming\Systweak
    Folder Deleted : C:\Users\Brian R\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc
    Folder Deleted : C:\Users\Brian R\AppData\Local\Google\Chrome\User Data\Default\Extensions\lipgolpfajiadodbcbljdpmbmbdmfcil
    File Deleted : C:\END
    File Deleted : C:\Users\Public\Desktop\RegClean Pro.lnk
    File Deleted : C:\windows\System32\roboot64.exe
    File Deleted : C:\Users\Brian R\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_app.mam.conduit.com_0.localstorage
    File Deleted : C:\Users\Brian R\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_app.mam.conduit.com_0.localstorage-journal

    ***** [ Shortcuts ] *****


    ***** [ Registry ] *****

    Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp
    Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc
    Key Deleted : HKCU\Software\Google\Chrome\Extensions\pbjikboenpfhbbejgkoklgkhjpfogcam
    Key Deleted : HKCU\Software\Google\Chrome\Extensions\lipgolpfajiadodbcbljdpmbmbdmfcil
    Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\lipgolpfajiadodbcbljdpmbmbdmfcil
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\DefaultTabBHO.DLL
    Key Deleted : HKLM\SOFTWARE\Classes\DefaultTabBHO.DefaultTabBrowser
    Key Deleted : HKLM\SOFTWARE\Classes\DefaultTabBHO.DefaultTabBrowser.1
    Key Deleted : HKLM\SOFTWARE\Classes\DefaultTabBHO.DefaultTabBrowserActiveX
    Key Deleted : HKLM\SOFTWARE\Classes\DefaultTabBHO.DefaultTabBrowserActiveX.1
    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\wajamupdater_rasapi32
    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\wajamupdater_rasmancs
    Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3241284
    Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3279418
    Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3282812
    Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3287811
    Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3298573
    Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3306061
    Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [ConduitFloatingPlugin_lipgolpfajiadodbcbljdpmbmbdmfcil]
    Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [ConduitFloatingPlugin_gahpidfnpjlikfplofgcckpplbhopgpp]
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{38495740-0035-4471-851E-F5BBB86AB085}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{72D89EBF-0C5D-4190-91FD-398E45F1D007}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7F6AFBF1-E065-4627-A2FD-810366367D01}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A1E28287-1A31-4B0F-8D05-AA8C465D3C5A}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AF175732-0D59-716D-F757-9F1492D808D9}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E306AAA2-3B4F-4802-9FAF-0C10AB78B589}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B673DD09-E496-4A82-8144-D16AD900B303}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1F8EDE97-36D5-422A-B8F0-9406E2D87C60}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{FEB62B15-CC00-4736-AAEC-BA046C9DFF73}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7F6AFBF1-E065-4627-A2FD-810366367D01}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E306AAA2-3B4F-4802-9FAF-0C10AB78B589}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EA582743-9076-4178-9AA6-7393FDF4D5CE}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F443A627-5009-4323-9C1D-7FD598D0D712}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E306AAA2-3B4F-4802-9FAF-0C10AB78B589}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EA582743-9076-4178-9AA6-7393FDF4D5CE}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F443A627-5009-4323-9C1D-7FD598D0D712}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7F6AFBF1-E065-4627-A2FD-810366367D01}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A1E28287-1A31-4B0F-8D05-AA8C465D3C5A}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B673DD09-E496-4A82-8144-D16AD900B303}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C2E691C3-8026-4763-9B93-D0E0A3734AEB}
    Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{E306AAA2-3B4F-4802-9FAF-0C10AB78B589}]
    Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E306AAA2-3B4F-4802-9FAF-0C10AB78B589}]
    Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{E306AAA2-3B4F-4802-9FAF-0C10AB78B589}]
    Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{E306AAA2-3B4F-4802-9FAF-0C10AB78B589}]
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{B9C767DD-F66A-40B4-8F12-4199A9A4393C}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{0194532A-A99C-4337-937E-2A452C8957BE}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{0923E315-2D8B-48CE-A37C-AE9A42F9711C}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{1A1BBE49-C6F1-40EA-9D2F-262F0AF6DDE3}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{1F8EDE97-36D5-422A-B8F0-9406E2D87C60}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{2022154E-7E3E-4809-871E-1B45A6FC7058}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{292ECB89-350E-45D2-816F-52C15305B144}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{36CC2180-B6BF-4951-9578-6B0C40044AAA}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{44A36944-22C6-4A08-BC7C-161F3E540DBF}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{6247DD2C-8CF9-4041-A235-93691D71B8B4}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{835BED79-DF7E-4096-B355-ED43FA2EA87B}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{8E863BD6-50DE-47D0-A6F1-3C1F6DB72451}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{9DD36F1E-5111-41C5-ADED-A2A11A2FF3E4}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{A2FB8217-E320-434E-BA79-513E357AD54F}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{A9CEBBF4-9129-479A-9231-E833ED3D3A8F}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{AFD4D1F9-167C-4884-95AE-B5A9797B0D16}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{B3EAD50C-ECB0-459A-9EDA-F505AB99675B}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C47788B1-9604-4D7A-A684-F4D450F2D7D2}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{CA3B41D0-D4C1-4808-B248-75DA27238828}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{D4A2FF6C-087F-4D40-8DFE-92AAD484BFB8}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{D88B9D5C-A9CF-4C69-906D-1CCA5D85A2EF}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{F83AF01C-AA2F-469F-8BE7-D178FB15FD07}
    Key Deleted : HKCU\Software\Alexa Internet
    Key Deleted : HKCU\Software\BI
    Key Deleted : HKCU\Software\Conduit
    Key Deleted : HKCU\Software\Cr_Installer
    Key Deleted : HKCU\Software\Default Tab
    Key Deleted : HKCU\Software\DefaultTab
    Key Deleted : HKCU\Software\distromatic
    Key Deleted : HKCU\Software\IM
    Key Deleted : HKCU\Software\ImInstaller
    Key Deleted : HKCU\Software\SearchProtect
    Key Deleted : HKCU\Software\Softonic
    Key Deleted : HKCU\Software\systweak
    Key Deleted : HKCU\Software\visualbee
    Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
    Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
    Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
    Key Deleted : HKCU\Software\AppDataLow\Software\DefaultTab
    Key Deleted : HKCU\Software\AppDataLow\Software\PriceGong
    Key Deleted : HKCU\Software\AppDataLow\Software\Search Settings
    Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar
    Key Deleted : HKCU\Software\AppDataLow\Software\Somoto_V.1
    Key Deleted : HKLM\Software\Conduit
    Key Deleted : HKLM\Software\Default Tab
    Key Deleted : HKLM\Software\DefaultTab
    Key Deleted : HKLM\Software\SearchProtect
    Key Deleted : HKLM\Software\systweak
    Key Deleted : HKLM\Software\visualbee
    Key Deleted : HKLM\Software\Somoto_V.1
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\RegClean Pro_is1
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Somoto_V.1 Toolbar
    Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DefaultTab

    ***** [ Browsers ] *****

    -\\ Internet Explorer v0.0.0.0

    Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]

    -\\ Google Chrome v31.0.1650.63

    [ File : C:\Users\Brian R\AppData\Local\Google\Chrome\User Data\Default\preferences ]

    Deleted : urls_to_restore_on_startup

    *************************

    AdwCleaner[R0].txt - [12567 octets] - [08/12/2013 13:39:20]
    AdwCleaner[S0].txt - [11822 octets] - [08/12/2013 15:30:20]

    ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [11883 octets] ##########








    # AdwCleaner v3.014 - Report created 08/12/2013 at 15:42:58
    # Updated 01/12/2013 by Xplode
    # Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
    # Username : Brian R - LEE_TOSIBA
    # Running from : C:\Users\Brian R\AppData\Local\Opera\Opera\temporary_downloads\adwcleaner (1).exe
    # Option : Scan

    ***** [ Services ] *****


    ***** [ Files / Folders ] *****

    Folder Found : C:\Users\Brian R\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc

    ***** [ Shortcuts ] *****


    ***** [ Registry ] *****


    ***** [ Browsers ] *****

    -\\ Internet Explorer v0.0.0.0


    -\\ Google Chrome v31.0.1650.63

    [ File : C:\Users\Brian R\AppData\Local\Google\Chrome\User Data\Default\preferences ]


    *************************

    AdwCleaner[R0].txt - [12567 octets] - [08/12/2013 13:39:20]
    AdwCleaner[R1].txt - [848 octets] - [08/12/2013 15:42:58]
    AdwCleaner[S0].txt - [12068 octets] - [08/12/2013 15:30:20]

    ########## EOF - C:\AdwCleaner\AdwCleaner[R1].txt - [968 octets] ##########









    # AdwCleaner v3.014 - Report created 08/12/2013 at 17:12:58
    # Updated 01/12/2013 by Xplode
    # Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
    # Username : Brian R - LEE_TOSIBA
    # Running from : C:\Users\Brian R\AppData\Local\Opera\Opera\temporary_downloads\adwcleaner (1).exe
    # Option : Clean

    ***** [ Services ] *****


    ***** [ Files / Folders ] *****

    Folder Deleted : C:\Users\Brian R\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc

    ***** [ Shortcuts ] *****


    ***** [ Registry ] *****


    ***** [ Browsers ] *****

    -\\ Internet Explorer v0.0.0.0


    -\\ Google Chrome v31.0.1650.63

    [ File : C:\Users\Brian R\AppData\Local\Google\Chrome\User Data\Default\preferences ]


    *************************

    AdwCleaner[R0].txt - [12567 octets] - [08/12/2013 13:39:20]
    AdwCleaner[R1].txt - [1047 octets] - [08/12/2013 15:42:58]
    AdwCleaner[S0].txt - [12068 octets] - [08/12/2013 15:30:20]
    AdwCleaner[S1].txt - [972 octets] - [08/12/2013 17:12:58]

    ########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1031 octets] ##########
      My Computer


  8. Posts : 8,608
    Windows 7 Ultimate 32bit SP1
       #8

    Good!

    Now, download TFC by Old Timer TFC - Temp File Cleaner by OldTimer - Geeks to Go Forums and save it to your desktop.
    Save any unsaved work. TFC will close ALL open programs including your browser!
    Double-click on TFC.exe to run it. If you are using Vista/Windows 7 right-click on the file and choose Run As Administrator.
    Click the Start button to begin the cleaning process and let it run uninterrupted to completion.
    Important! If TFC prompts you to reboot, please do so immediately. If not prompted, manually reboot the machine anyway to ensure a complete clean.

    Next, download CKScanner from here http://downloads.malwareremoval.com/CKScanner.exe
    Save it to your desktop. <=== IMPORTANT
    Doubleclick CKScanner.exe and click Search For Files.
    After a very short time, when the cursor hourglass disappears, click Save List To File.
    A message box will verify that the file is saved.
    Double-click the CKFiles.txt icon on your desktop and copy/paste the contents in your next reply.

    We'll get rid of the extra "not needed processes" after this.
      My Computer


  9. Posts : 22
    Windows 7 Home Premium 64bit
    Thread Starter
       #9

    TFC


    Getting user folders.

    Stopping running processes.

    Emptying Temp folders.


    User: All Users

    User: Brian R
    ->Temp folder emptied: 131958334 bytes
    ->Temporary Internet Files folder emptied: 102240889 bytes
    ->Java cache emptied: 481512 bytes
    ->Google Chrome cache emptied: 6458036 bytes
    ->Opera cache emptied: 15025976 bytes
    ->Flash cache emptied: 10287915 bytes

    User: Default
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 0 bytes
    ->Flash cache emptied: 57472 bytes

    User: Default User
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 0 bytes
    ->Flash cache emptied: 0 bytes

    User: Lee_Non_Administrato
    ->Temp folder emptied: 8370114 bytes
    ->Temporary Internet Files folder emptied: 1326287 bytes
    ->Flash cache emptied: 56466 bytes

    User: Public





    CKScanner


    CKScanner 2.4 - Additional Security Risks - These are not necessarily bad
    c:\program files (x86)\explorer (x86)\python\lib\site-packages\numpy\f2py\crackfortran.pyc
    c:\users\brian r\appdata\local\opera\opera\icons\crackamite.com.idx
    c:\users\brian r\favorites\opera\lock picking\hd safe cracking in a vault (pt 2) - yo….url
    c:\users\brian r\favorites\opera\lock picking\the last hope safe-cracking (complete)….url
    scanner sequence 3.CA.11.TGNAKZ
    ----- EOF -----
      My Computer


  10. Posts : 8,608
    Windows 7 Ultimate 32bit SP1
       #10

    Download Security Check by screen317 from here http://screen317.spywareinfoforum.org/SecurityCheck.exe or here http://screen317.spywareinfoforum.org/
    Save it to your Desktop.
    Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
    A Notepad document should open automatically called checkup.txt.
    Please post the contents of that document.
      My Computer


 
Page 1 of 3 123 LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 17:51.
Find Us