Windows "not genuine" but can't run legitcheck.hta - HELP!

NoelDP · 23 Apr 2015

First make sure that your AV is up to date then run a full system scan.

ship691 · 23 Apr 2015

No threats detected by AVG

NoelDP · 23 Apr 2015

Now run malwarebytes anti malware. Again, a full scan

ship691 · 23 Apr 2015

oh-oh. PUP.Optional.MarketScore
Five detected objects (so far)
Type: key
Location:
HKLM\SOFTWARE\ [various - see attachment]

ship691 · 23 Apr 2015

Malwarebytes Anti-Malware
Malwarebytes | Free Anti-Malware & Internet Security Software

Scan Date: 23/04/2015
Scan Time: 20:39:01
Logfile:
Administrator: Yes

Version: 2.01.4.1018
Malware Database: v2015.04.23.05
Rootkit Database: v2015.04.21.01
License: Premium
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Enabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Alec

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 468611
Time Elapsed: 9 min, 43 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Warn
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 5
PUP.Optional.MarketScore, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{35B7E48B-9D81-4C6C-9578-5FD4F620D886}, , [8baf8fe0e4a679bd9fd27cec93708d73],
PUP.Optional.MarketScore, HKLM\SOFTWARE\CLASSES\Setup.Player.2K2, , [8baf8fe0e4a679bd9fd27cec93708d73],
PUP.Optional.MarketScore, HKLM\SOFTWARE\CLASSES\Setup.Player, , [8baf8fe0e4a679bd9fd27cec93708d73],
PUP.Optional.MarketScore, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Setup.Player, , [8baf8fe0e4a679bd9fd27cec93708d73],
PUP.Optional.MarketScore, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Setup.Player.2K2, , [8baf8fe0e4a679bd9fd27cec93708d73],

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 0
(No malicious items detected)

Physical Sectors: 0
(No malicious items detected)

(end)

ship691 · 23 Apr 2015

Should I quarantine them all ?

NoelDP · 23 Apr 2015

Yup!
nothing particularly bad there - but it's an indicator that you may need to review your ideas of what is 'acceptable' to install.

RolandJS · 23 Apr 2015

One can run two antivirus programs; only one of the two has its real time shields active; both can have non-overlapping scheduled scans. I have both Avast and Avira, one w/activated real time shields, both running scans.

ship691 · 23 Apr 2015

OK I've quarantined those 5 PUP things.
How can I be sure that I've not got any other 'unwanted' stuff?
What else should I run?

Supportacus · 23 Apr 2015

Greetings,
I don't want to interrupt or something...

License Status: Notification
Notification Reason: 0xC004F009 (grace time expired).

Windows must be activated within 30 days of install, Your 30 day grace period has expired.
You will have to activate by phone
STEPS:
1) Click Start, and in the Search box type: slui.exe 4
2) Next press the 'ENTER' key
3) Select your 'Country' from the list.
4) Choose the 'Phone Activation' option.
5) Stay on the phone (do not select/press any options) and wait for a person to help you with activation.
6) Explain your problem clearly to the support person.

MBAM is one of the best AM it can also detect rootkits....Viruses...etc.
It comes with chameleon.com*.exe in the installation path.
For best scanner there is for viruses and malware services there is RKill.exe(NAMED: iexplorer.exe) only 1MB size.
If you want to ultimately secure...The BD RescueCD that Almost anyone would rate it 5 stars is a rescue disk used to detect and remove many viruses and trojans that boot with the computer it even works against the malware that makes the explorer.exe stop working in normal mode.