Hyde99,
UNINSTALL:
Code:
avast! Free Antivirus AVAST Software 01/01/2002 7.0.1426.0
AVG Security Toolbar AVG Technologies 05/06/2012 11.1.0.7
BitTorrent BitTorrent Inc. 04/05/2012 7.6.1
DAEMON Tools Lite DT Soft Ltd 05/06/2012 4.45.4.0315
NCH Toolbox NCH Software 28/05/2012
Terraria 22/02/2012
µTorrent 04/05/2012 3.1.3
REBOOT!
this one is known to cause problems. If you do not need, then uninstall:
Code:
Hi-Rez Studios Authenticate and Update Service
REBOOT!
REMOVAL OF P2P PROGRAMS
There are signs of one or more
P2P (Peer to Peer) File Sharing Programs on your computer.
As long as you are using any form of
P2P networking to
download files, you can
anticipate malware infestations.
References citing the risk of using P2P programs:
How cyber criminals infect victims via P2P with pirated software on Vimeo
Malware: Help prevent the Infection
Perils of P2P File Sharing
How to Prevent the Online Invasion of Spyware and Adware
I
strongly recommend that you uninstall:
µTorrent
BitTorrent
Vuze
=====================================================
Since you have been using peer-to-peer software, then I can not proceed until you have run WDO over your computer. Following writeup will explain how. Please include the .LOG files mentioned in your next post.
HOW TO USE WINDOWS DEFENDER OFFLINE ON A USB STICK
Windows Defender Offline
· is a
free standalone,
bootable malware and virus remover from Microsoft.
· performs an offline scan of an infected PC to remove viruses, rootkits and other advanced malware.
Download Windows Defender Offline (about 764 kB)
You will have the choice of downloading the 32bit version (x86) or the 64 bit version (x64).
The link will help you determine whether you are running a 32 bit version or 64 bit version of Windows
NOTE!! You can download and prepare a 32 bit version using a 64 bit version of Windows
NOTE!! You can download and prepare a 64 bit version using a 32bit version of Windows.
You run the 32 bit version on a 32 bit version of Windows.
You run the 64 bit version on a 64 bit version of Windows.
The 32 bit download file name is:
mssstool32.exe
The 64 bit download file name is:
mssstool64.exe
For the curious, this program was originally name
Microsoft
Standalone
System
Sweeper.
INSTALLATION:
You will need an Internet Connection.
Insert 512 mB (Microsoft’s 256 mB is no longer accurate) or larger USB stick into a usb port.
Run the downloaded program--
mssstool64.exe or
mssstool32.exe
NEXT button
Choose the option
On a USB flash drive that is not password protected
NEXT button
NEXT button
.
The install program will format the usb stick using the NTFS format.
The install program will download about 210 mB.
The install program will name the USB stick
WDO_Media32 or
WDO_Media64
The WDO_Media32 usb stick will have used space of 255 mB (268,140,544 bytes)
The WDO_Media64 usb stick will have used space of 282 mB (296,165,376 bytes)
You can expect the number of mB to increase as more malware appears.
UPDATE Windows Defender Offline USB stick:
· reinsert the usb stick
· run the installation program,
mssstool64.exe or
mssstool32.exe, again.
· the update will download about 66 mB (mssstool32.exe) and 68 mB (mssstool64.exe).
Since the malware database is sometimes updated several times in a day, always update before running.
PERFORM AN OFFLINE SCAN
Bootup your computer from the USB stick
Windows Defender Offline will automatically perform a
quick scan.
After the quick scan finishes,
Choose Full Scan
Select
all of your drives
The initial,
full scan can easily take several hours, but
Remember, your computer is being very thoroughly checked for all types of malware.
RESULTS OF THE SCAN
The results will be in 4 log files on your computer's disk in:
\Windows\Microsoft Antimalware\Support
msssWrapper.log, (reveals start and stop time of WDO)
MPDetection-dddddddd-nnnnnn.log, (version of detection engine and AV database)
MPLog-dddddddd-nnnnnn.log (scan summary), and
MpCacheStats.log.
Upload the four log files please.
==================================================
karl
