potentially downloaded spyware

[Zulfy]

Hi all, i was having a missing msinet.ocx file so i googled the problem and followed this guys solution.

angrybyte.com/windows-hacks/msinet-ocx-for-64-bit-windows-7-vista/

After downloading the file and putting it in my syswow64 and system 32 folders, the problem didnt get fixed and after reading the comments the last guy said that the download link was spyware. So far all ive done is run malwarebytes and remove two threats that appeared to be related and removed the file from both folders, What else should i do?

oh yah i did a dumb thing and installed it to into my syswow64 folder...

 

[Zulfy]

pls help i think this has slowed my computers performace :<

 

[Jacee]

Download DDS from one of these links:
DDS.com
DDS.pif

• Disable any script blocking protection
• Double click the dds icon to run the tool.
• When done, DDS will open two (2) logs:
  1. DDS.txt
  2. Attach.txt <--- will be minimized in the task tray
• Save both reports to your desktop.

Include the contents of both logs in your next post.
The scan will instruct you to post Attach.txt as an attachment.

 

[Zulfy]

Thanks for the reply here you go:

 

[Jacee]

I don't see an Anti-virus program installed and running!


I'd like you to scan your machine with ESET OnlineScan

1. Hold down Control and click on the following link to open ESET OnlineScan in a new window.
   ESET OnlineScan
2. Click the
   
   button.
3. For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
   1. Click on
      
      to download the ESET Smart Installer. Save it to your desktop.
   2. Double click on the
      
      icon on your desktop.
4. Check
   
5. Click the
   
   button.
6. Accept any security warnings from your browser.
7. Check
   
8. Push the Start button.
9. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
10. When the scan completes, push
    
11. Push
    
    , and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
12. Push the
    
    button.
13. Push
    

 

[Zulfy]

took 2 hours but here it is oh and is malware bytes not an antivirus?

 

[ShamrockRig]

No malwarebytes is an on demand scanner, AVAST! or AVG for example keep you secure to an extent over the course of the average day, Id suggest running these

Please download AdwCleaner by Xplode and save to your Desktop.

• Double click on AdwCleaner.exe to run the tool.
  Vista/Windows 7/8 users right-click and select Run As Administrator.
• Click on the Scan button.
• AdwCleaner will begin...be patient as the scan may take some time to complete.
• After the scan has finished, click on the Report button...a logfile (AdwCleaner[R#].txt) will open in Notepad for review (where the largest value of # represents the most recent report).
• The contents of the log file may be confusing. Unless you see a program name that you know should not be removed, don't worry about it. If you see an entry you want to keep, let me know about it.
• Copy and paste the contents of that logfile in your next reply.
• A copy of all logfiles are saved in the C:\AdwCleaner folder which was created when running the tool.

Please download Junkware Removal Tool to your desktop.

• Shut down your protection software now to avoid potential conflicts.
• Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
• The tool will open and start scanning your system.
• Please be patient as this can take a while to complete depending on your system's specifications.
• On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
• Post the contents of JRT.txt into your next message.

 

[Jacee]

Download Security Check by screen317 from here http://screen317.spywareinfoforum.org/SecurityCheck.exe or here http://screen317.spywareinfoforum.org/
Save it to your Desktop.
Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
A Notepad document should open automatically called checkup.txt.
Please post the contents of that document.


Next,


Download CKScanner from here http://downloads.malwareremoval.com/CKScanner.exe
Save it to your desktop. <=== IMPORTANT
Doubleclick CKScanner.exe and click Search For Files.
After a very short time, when the cursor hourglass disappears, click Save List To File.
A message box will verify that the file is saved.
Double-click the CKFiles.txt icon on your desktop and copy/paste the contents in your next reply.

 

[Zulfy]

Security check:

Results of screen317's Security Check version 0.99.79
Windows 7 Service Pack 1 x64 (UAC is enabled)
Internet Explorer 10 Out of date!
``````````````Antivirus/Firewall Check:``````````````
Windows Firewall Enabled!
WMI entry may not exist for antivirus; attempting automatic update.
`````````Anti-malware/Other Utilities Check:`````````
Malwarebytes Anti-Malware version 1.75.0.1300
Java 7 Update 51
Adobe Flash Player 10 Flash Player out of Date!
Adobe Flash Player 11.9.900.117
Adobe Reader 9 Adobe Reader out of Date!
Mozilla Firefox (26.0)
Google Chrome 32.0.1700.102
Google Chrome 32.0.1700.76
````````Process Check: objlist.exe by Laurent````````
Malwarebytes' Anti-Malware mbamscheduler.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: 0%
````````````````````End of Log``````````````````````


CKscanner:
CKScanner 2.4 - Additional Security Risks - These are not necessarily bad
c:\program files (x86)\stunlock studios\bloodline champions\content\particles\1x1\point_cracks.dds.xnb
scanner sequence 3.AP.11.WKNAVZ
----- EOF -----

 

[ShamrockRig]

Ok, looking at that, i'd recommend downloading and using AVAST AVAST 2014 | Download Free Antivirus Software for Virus Protection

Also update your flash player as i have seen virus's appear from old non updated versions.
Internet explorer im assuming isnt your daily browser so thats not an issue.

I now ask you to run the three other programs suggested, thanks

 

[Jacee]

CKScanner has detected illegal software on your system. Besides being illegal, it's the number one way of infecting your system, as all cracked/keygen software is infected.


Uninstall>> c:\program files (x86)\stunlock studios\bloodline champions\content\particles\1x1\point_cracks.dds.xnb

 

[Zulfy]

Hey sorry for the late reply, i ran junk ware removal and ad ware cleaner. im a bit confused as to what to do with adware cleaner, do i hit clean or what? i also uninstalled bloodline champions jacee

theres no files in adware cleaner i really think i need to keep

 

[Computer0304]

Ok, looking at that, i'd recommend downloading and using AVAST AVAST 2014 | Download Free Antivirus Software for Virus Protection

Also update your flash player as i have seen virus's appear from old non updated versions.
Internet explorer im assuming isnt your daily browser so thats not an issue.

I now ask you to run the three other programs suggested, thanks

Even though i use AVG (i use it because i am too lazy to change) but lets not get off topic because of that.

 

[Zulfy]

is jace or delvin there?

 

[Layback Bear]

Zulfy after your 2 week delay you might be off the radar of Jacee.

 

[Jacee]

I'm here!


Using AdwCleaner v3: Scan & Clean:
Double click on AdwCleaner.exe to run the tool again.
Click on the Scan button.
AdwCleaner will begin to scan your computer like it did before.
After the scan has finished...

This time click on the Clean button.
Press OK when asked to close all programs and follow the onscreen prompts.
Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
After rebooting, a logfile report (AdwCleaner[S#].txt) will open automatically (where the largest value of # represents the most recent report).
Copy and paste the contents of that logfile in your next reply.
A copy of that logfile will also be saved in the C:\AdwCleaner folder


Next, download TFC by Old Timer http://www.geekstogo.com/forum/TFC-Temp-File-Cleaner-OldTimer-file187.html and save it to your desktop.
Save any unsaved work. TFC will close ALL open programs including your browser!
Double-click on TFC.exe to run it. If you are using Vista/Windows 7 right-click on the file and choose Run As Administrator.
Click the Start button to begin the cleaning process and let it run uninterrupted to completion.
Important! If TFC prompts you to reboot, please do so immediately. If not prompted, manually reboot the machine anyway to ensure a complete clean.


Now Rescan with DDS

• When done, DDS will open two (2) logs:
  1. DDS.txt
  2. Attach.txt <--- will be minimized in the task tray
• Save both reports to your desktop.

Include the contents of both logs in your next post.
The scan will instruct you to post Attach.txt as an attachment.

 

[Layback Bear]

Hi Jacee. You must have good radar.

 

[Jacee]

I guess I did tonight

 

[Zulfy]

Hey jaycee, i already cleaned on the first adware cleaner scan, but i scanned again and cleaned anyway...

here are the results, adware cleaner r0 file is the first scan

 

[Jacee]

I see two Anti-virus programs.
McAfee Security
AVG Internet Security 2014 *Enabled/Updated*


Please uninstall one:
McAfee: Uninstall McAfee


After doing that and rebooting, tell me how your computer is running.