HJT a little is help needed

well48 · 30 Sep 2013

johnsmith45jock said:

cottonball said:

I'd like to get rid of games, Norton, McAfee and other bloatware

Since you already have HJT installed, please go back to the HijackThis program console, and press: Config > Misc Tools > Open Uninstall Manager
Once the Add/Remove Program Manager list appears, click: Save list...

Please save to the Desktop, and post in your reply. The report shows what there is installed.

By the way, you are running HJT from here:
C:\Users\Tom\Desktop\HijackThis.exe

Although HJT can be run from the location above, obviously, it is not recommended that you do so.

The reason is because of the way HijackThis saves its backups. It creates backup files for entries fixed, and places them in the folder from which it runs!!

If you decide to run HijackThis from a location like the Temp folder, any file older than 7 days gets deleted from the folder, and whenever disc-cleanup is run. Consequently there are no backups to restore if something goes wrong.

It run from the Desktop, the backups are scattered all over, and not in a desirable location.
So, it should be always recommended to create an exclusive folder for HijackThis to reside in and run.

Does he want to keep these two toolbars?

O3 - Toolbar: @C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll

O3 - Toolbar: Grab Pro - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files (x86)\Orbitdownloader\GrabPro.dll

Also, Orbitdownloader is loaded with Junkware. Which may of been a lot of the crap you already removed.

Not a problem deleting toolbars. He can reinstall them if he needs them. I don't even use them on my pc because I think they are all spyware. Even Avast Rep.

I'd like to sort out the MS games from HP. Then delete HP & wildtangent games.

cottonball · 30 Sep 2013

Don't see McAfee on the list.

Also, only see Norton Online Backup. Some Users like to have that. Not sure, but it may come with some HP PCs.

As far as games go, it is up to the owner as to what he wants to keep.

You are getting plenty of good suggestions from everyone that has posted.

well48 · 30 Sep 2013

Removed those O3 toolbars

Disabled the MS games. Guess I'll remove games in Prog & Features and see what happens.

He only has this one acct on here. After I get it cleaned up, I'll create a Standard User Acct for him. Then make his desktop on Admin Acct so hideous he'll stay away from it.

Jacee · 30 Sep 2013

He only has this one acct on here. After I get it cleaned up, I'll create a Standard User Acct for him. Then make his desktop on Admin Acct so hideous he'll stay away from it.

What does this mean?? --> "Then make his desktop on Admin Acct so hideous he'll stay away from it"

well48 · 30 Sep 2013

It's a friends computer. I don't know how many times I've created a Standard User for him. He gets confused & frustrated because his favorites disappear, so he deletes one.
About 4 months ago I did the same thing for another friend for same reason.
I attached a png of his new Adm Desktop.

Thank you everybody for help.

AmericanPharaoh · 01 Oct 2013

If you don't use Norton Online Backup... get rid of it.

Same with the HP Wild Tangent games.

For now remove Chrome, you can reinstall it later.

Delete these in add/remove programs.

Run CCleaner, run the registry clean, over and over, until there is no more to remove.

Download Auslogic Disk Defrag

Run it in optimized mode, you'll find this setting by clicking the drop down arrow next to defrag button.

Be patience this may take awhile.

Once you get all the games out it will be easier to review you next logs.

Finally, run FRST again and post new logs.

cottonball · 01 Oct 2013

well48,

...run the registry clean, over and over, until there is no more to remove.

Cannot stop you from using a Registry cleaner, however, these programs can 'clean' a computer right into ruination!!

From what I have read, these programs use a certain technology to remove unnecessary Registry entries. However, technology is normally not 100% perfect, and, along with the unnecessary entries, it just takes the removal of one necessary Registry entry for the program to render the computer unstable, and in some cases, useless.

In addition Registry cleaning programs create gaps in the Registry, and the end result is that
the Registry becomes fragmented.

Most Registry experts (i.e. Bobbi Flekman - an outstanding master of the Registry) that work throughout the malware removal forums do not recommend their use.

well48 · 01 Oct 2013

I'm a lot leary of registry cleaners after losing a pc to one.

Attached FRST txt

well48 · 01 Oct 2013

Repost Addition txt

AmericanPharaoh · 01 Oct 2013

well48 said:

I'm a lot leary of registry cleaners after losing a pc to one.

Attached FRST txt

This log looks much better. I personally don't see any more Nasty entries.

Although, there are still some ( NO NAME - NO FILE) left over entry fragments which can be easily removed.

To make it simple, since you still have HJT installed. Is to run a scan, tick these entries for removal.

Or you can wait until one of our Malware Specialist show up here. Which can assist you future in creating a script (Fixlist.txt) to apply to FRST for removal.

I'm still learning this tool, so would rather let the members with more experience do this step.

Keeping the Bing Bar is up to you. If you use it...keep it.

BHO-x32: Bing Bar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll (Microsoft Corporation)

Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Toolbar: HKCU - No Name - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - No File
Toolbar: HKCU - No Name - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - No File
Toolbar: HKCU - No Name - {91DA5E8A-3318-4F8C-B67E-5964DE3AB546} - No File
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File

John

Will now look over your additional log, and get back to you later.