Virus or malware

I responded to your PM before I came to the topic. I've got it now so give me a bit to look through the information.

GLASERDJ,

Limewire
You have Limewire, a P2P/file sharing programs installed on your computer. P2P applications like it are the largest source of malware we see. You'll be doing yourself a favor by removing it.

References for the risk of these programs can be found in these links:
http://www.microsoft.com/windows/ie/commun…protection.mspx
http://www.techweb.com/wire/160500554
http://www.internetworldstats.com/articles/art053.htm://http://www.techweb.com/wire/1605005…cles/art053.htm


I would recommend that you uninstall Limewire, however that choice is up to you. If you choose to remove these programs, you can do so via Control Panel >> Add or Remove Programs.

If you wish to keep it, please do not use it until your computer is cleaned.

Your Java is out of date and you have other old versions still on your computer, those old versions are now a security vulnerability:

Please download JavaRa to your desktop and unzip it to its own folder

• Run JavaRa.exe, pick the language of your choice and click Select. Then click Remove Older Versions.
• Accept any prompts.
• Open JavaRa.exe again and select Search For Updates.
• Select Update Using Sun Java's Website then click Search and click on the Open Webpage button. Download and install the latest Java Runtime Environment (JRE) version for your computer - Version 6 update 22

Double click on OTL

• Under the Custom Scans/Fixes box at the bottom, paste in the following
• Do Not copy the word CODE
• please note the fix starts with the :

:Processes
explorer.exe

:Files
C:\Users\mom\Downloads\dpfne4bt.exe

:Commands
[purity]
[emptytemp]
[start explorer]
[Reboot]

Then click the Run Fix button at the top

• Let the program run unhindered
• Please save the resulting log to be posted in your next reply.
• Reboot your computer

Please post the OTL log and let me know what symptoms you are experiencing.


After posting… go on with this online scan:

Please go to Kaspersky website and perform an online antivirus scan.

• Read through the requirements and privacy statement and click on Accept button.
• It will start downloading and installing the scanner and virus definitions. You will be prompted to install an application from Kaspersky. Click Run.
• When the downloads have finished, click on Settings.
• Make sure these boxes are checked (ticked). If they are not, please tick them and click on the Save button:
  • Spyware, Adware, Dialers, and other potentially dangerous programs
    Archives
    Mail databases
• Click on My Computer under Scan.
• Once the scan is complete, it will display the results. Click on View Scan Report.
• You will see a list of infected items there. Click on Save Report As....
• Save this report to a convenient place. Change the Files of type to Text file (.txt) before clicking on the Save button.
• Please post this log in your next reply.

All processes killed ========== PROCESSES ========== No active process named explorer.exe was found! ========== FILES ========== C:\Users\mom\Downloads\dpfne4bt.exe moved successfully. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: mom ->Temp folder emptied: 919251505 bytes ->Temporary Internet Files folder emptied: 8855277 bytes ->Java cache emptied: 67439695 bytes ->FireFox cache emptied: 46489686 bytes ->Google Chrome cache emptied: 233687916 bytes ->Flash cache emptied: 265574 bytes User: Public User: RA Media Server ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32 (64bit) .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 254286959 bytes %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 33170 bytes %systemroot%\sysnative\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment folder emptied: 326 bytes RecycleBin emptied: 782104517 bytes Total Files Cleaned = 2,205.00 mb OTL by OldTimer - Version 3.2.17.2 log created on 11082010_215824 Files\Folders moved on Reboot… File\Folder C:\Windows\temp\WFV9283.tmp not found! Registry entries deleted on Reboot… Things seem faster. 8 minutes from windows account password to this point. I think before it would take 15 minutes or more to reboot and get anywhere…

I got an error message on the Kaspersky website that my computer did not meet the hardware requirements……

It says I need a safari browser. I have Chrome, Firefox and IE. I don't have safari on this computer.

That doesn't make sense.

Originally it would only run in IE, now I know it also works in FireFox. I've never heard of it asking you to run Safari.

Let's try a different scanner.

ESET Online Scanner:

Note: You can use either Internet Explorer or Mozilla FireFox for this scan. You will however need to disable your current installed Anti-Virus, how to do so can be read here.

Vista users: You will need to to right-click on the either the IE or FF icon in the Start Menu or Quick Launch Bar on the Taskbar and select Run as Administrator from the context menu.

• Please go here then click on: [external image: Posted Image]
  

  Note: If using Mozilla Firefox you will need to download esetsmartinstaller_enu.exe when prompted then double click on it to install.
  All of the below instructions are compatible with either Internet Explorer or Mozilla FireFox.

• Select the option YES, I accept the Terms of Use then click on: [external image: Posted Image]
• When prompted allow the Add-On/Active X to install.
• Make sure that the option Remove found threats is NOT checked, and the option Scan archives is checked.
• Now click on Advanced Settings and select the following:

• • Scan for potentially unwanted applications
  • Scan for potentially unsafe applications
  • Enable Anti-Stealth Technology
• Now click on: [external image: Posted Image]
• The virus signature database… will begin to download. Be patient this make take some time depending on the speed of your Internet Connection.
• When completed the Online Scan will begin automatically.
• Do not touch either the Mouse or keyboard during the scan otherwise it may stall.
• When completed select Uninstall application on close if you so wish, make sure you copy the logfile first!
• Now click on: [external image: Posted Image]
• Use notepad to open the logfile located at C:\Program Files\ESET\EsetOnlineScanner\log.txt.
• Copy and paste that log as a reply to this topic.

Note: Do not forget to re-enable your Anti-Virus application after running the above scan!

eset log C:\ProgramData\{4C35E33C-72B2-4623-82C4-FDB64E9FA0AB}\OFFLINE\mFileBagIDE.dll\bag\FFToolbar.xpi multiple threats C:\Users\All Users\{4C35E33C-72B2-4623-82C4-FDB64E9FA0AB}\OFFLINE\mFileBagIDE.dll\bag\FFToolbar.xpi multiple threats C:\Users\mom\Documents\FrostWire\Incomplete\T-1010769-Janis Ian - Fly too high.mp3 a variant of WMA/TrojanDownloader.GetCodec.gen trojan C:\Users\mom\Documents\FrostWire\Saved\amerias suitheart fall out boy[256k quality].snd a variant of WMA/TrojanDownloader.GetCodec.gen trojan C:\Users\mom\Documents\FrostWire\Saved\hate is strong word plain ts.snd a variant of WMA/TrojanDownloader.GetCodec.gen trojan C:\Users\mom\Documents\FrostWire\Saved\love is on its way jonas (high bitrate).mp3 a variant of WMA/TrojanDownloader.GetCodec.gen trojan C:\Users\mom\Documents\FrostWire\Saved\thats just way we roll jonas (256k 44800).mp3 a variant of WMA/TrojanDownloader.GetCodec.gen trojan C:\Users\mom\Documents\FrostWire\Saved\tonight jonas brothers (256k 44800).mp3 a variant of WMA/TrojanDownloader.GetCodec.gen trojan C:\Users\mom\Documents\FrostWire\Saved\tonight jonas brothers.mp3 a variant of WMA/TrojanDownloader.GetCodec.gen trojan C:\Users\mom\Documents\FrostWire\Saved\video girl jonas brothers.mp3 a variant of WMA/TrojanDownloader.GetCodec.gen trojan C:\Users\mom\Documents\FrostWire\Saved\what up whats haapinin t i - high quality.mp3 a variant of WMA/TrojanDownloader.GetCodec.gen trojan C:\Users\mom\Music\Incomplete\T-1010769-Janis Ian - Fly too high.mp3 a variant of WMA/TrojanDownloader.GetCodec.gen trojan C:\Users\mom\Music\Incomplete\T-4820647-we like her clean drake lil new hottest single.snd a variant of WMA/TrojanDownloader.GetCodec.gen trojan C:\Users\mom\Music\Incomplete\T-5121404-one time jusin bieber [new single].au a variant of WMA/TrojanDownloader.GetCodec.gen trojan C:\Users\mom\Music\Incomplete\T-5285734-whatchu say jason derulo.mp3 a variant of WMA/TrojanDownloader.GetCodec.gen trojan C:\Users\mom\Music\Saved\amerias suitheart fall out boy[256k quality].snd a variant of WMA/TrojanDownloader.GetCodec.gen trojan C:\Users\mom\Music\Saved\every girl clean lil wayne hot new track.mp3 a variant of WMA/TrojanDownloader.GetCodec.gen trojan C:\Users\mom\Music\Saved\hate is strong word plain ts.snd a variant of WMA/TrojanDownloader.GetCodec.gen trojan C:\Users\mom\Music\Saved\love is on its way jonas (high bitrate).mp3 a variant of WMA/TrojanDownloader.GetCodec.gen trojan C:\Users\mom\Music\Saved\patron tequila paridiso girls.wma probably a variant of Win32/Agent.KTQOACN trojan C:\Users\mom\Music\Saved\saturday secret handshake.mp3 a variant of WMA/TrojanDownloader.GetCodec.gen trojan C:\Users\mom\Music\Saved\thats just way we roll jonas (256k 44800).mp3 a variant of WMA/TrojanDownloader.GetCodec.gen trojan C:\Users\mom\Music\Saved\tonight jonas brothers (256k 44800).mp3 a variant of WMA/TrojanDownloader.GetCodec.gen trojan C:\Users\mom\Music\Saved\tonight jonas brothers.mp3 a variant of WMA/TrojanDownloader.GetCodec.gen trojan C:\Users\mom\Music\Saved\turn_right_jonas_brothes.wma a variant of WMA/TrojanDownloader.GetCodec.gen trojan C:\Users\mom\Music\Saved\video girl jonas brothers.mp3 a variant of WMA/TrojanDownloader.GetCodec.gen trojan C:\Users\mom\Music\Saved\we like her clean drake lil new single.mp3 a variant of WMA/TrojanDownloader.GetCodec.gen trojan C:\Users\mom\Music\Saved\we like her clean drake lil [new album].au a variant of WMA/TrojanDownloader.GetCodec.gen trojan C:\Users\mom\Music\Saved\what up whats haapinin t i - high quality.mp3 a variant of WMA/TrojanDownloader.GetCodec.gen trojan K:\My Documents\FrostWire\Saved\amerias suitheart fall out boy[256k quality].snd a variant of WMA/TrojanDownloader.GetCodec.gen trojan K:\My Documents\FrostWire\Saved\hate is strong word plain ts.snd a variant of WMA/TrojanDownloader.GetCodec.gen trojan K:\My Documents\FrostWire\Saved\love is on its way jonas (high bitrate).mp3 a variant of WMA/TrojanDownloader.GetCodec.gen trojan K:\My Documents\FrostWire\Saved\thats just way we roll jonas (256k 44800).mp3 a variant of WMA/TrojanDownloader.GetCodec.gen trojan K:\My Documents\FrostWire\Saved\tonight jonas brothers (256k 44800).mp3 a variant of WMA/TrojanDownloader.GetCodec.gen trojan K:\My Documents\FrostWire\Saved\tonight jonas brothers.mp3 a variant of WMA/TrojanDownloader.GetCodec.gen trojan K:\My Documents\FrostWire\Saved\video girl jonas brothers.mp3 a variant of WMA/TrojanDownloader.GetCodec.gen trojan K:\My Documents\FrostWire\Saved\what up whats haapinin t i - high quality.mp3 a variant of WMA/TrojanDownloader.GetCodec.gen trojan K:\My Documents\FrostWire\Incomplete\T-1010769-Janis Ian - Fly too high.mp3 a variant of WMA/TrojanDownloader.GetCodec.gen trojan K:\LimeWire\what up whats haapinin t i - high quality.mp3 a variant of WMA/TrojanDownloader.GetCodec.gen trojan K:\LimeWire\Saved\amerias suitheart fall out boy[256k quality].snd a variant of WMA/TrojanDownloader.GetCodec.gen trojan K:\LimeWire\Saved\every girl clean lil wayne hot new track.mp3 a variant of WMA/TrojanDownloader.GetCodec.gen trojan K:\LimeWire\Saved\hate is strong word plain ts.snd a variant of WMA/TrojanDownloader.GetCodec.gen trojan K:\LimeWire\Saved\love is on its way jonas (high bitrate).mp3 a variant of WMA/TrojanDownloader.GetCodec.gen trojan K:\LimeWire\Saved\patron tequila paridiso girls.wma probably a variant of Win32/Agent.KTQOACN trojan K:\LimeWire\Saved\saturday secret handshake.mp3 a variant of WMA/TrojanDownloader.GetCodec.gen trojan K:\LimeWire\Saved\thats just way we roll jonas (256k 44800).mp3 a variant of WMA/TrojanDownloader.GetCodec.gen trojan K:\LimeWire\Saved\tonight jonas brothers (256k 44800).mp3 a variant of WMA/TrojanDownloader.GetCodec.gen trojan K:\LimeWire\Saved\tonight jonas brothers.mp3 a variant of WMA/TrojanDownloader.GetCodec.gen trojan K:\LimeWire\Saved\turn_right_jonas_brothes.wma a variant of WMA/TrojanDownloader.GetCodec.gen trojan K:\LimeWire\Saved\video girl jonas brothers.mp3 a variant of WMA/TrojanDownloader.GetCodec.gen trojan K:\LimeWire\Saved\we like her clean drake lil new single.mp3 a variant of WMA/TrojanDownloader.GetCodec.gen trojan K:\LimeWire\Saved\we like her clean drake lil [new album].au a variant of WMA/TrojanDownloader.GetCodec.gen trojan K:\LimeWire\Saved\what up whats haapinin t i - high quality.mp3 a variant of WMA/TrojanDownloader.GetCodec.gen trojan K:\LimeWire\Incomplete\T-1010769-Janis Ian - Fly too high.mp3 a variant of WMA/TrojanDownloader.GetCodec.gen trojan K:\LimeWire\Incomplete\T-4820647-we like her clean drake lil new hottest single.snd a variant of WMA/TrojanDownloader.GetCodec.gen trojan K:\LimeWire\Incomplete\T-5121404-one time jusin bieber [new single].au a variant of WMA/TrojanDownloader.GetCodec.gen trojan K:\LimeWire\Incomplete\T-5285734-whatchu say jason derulo.mp3 a variant of WMA/TrojanDownloader.GetCodec.gen trojan

GLASERDJ,

It would appear that you make a habit of downloading pirated songs that are infected. If you continue this behavior, there is little point in trying to clean your system.

Double click on OTL

• Under the Custom Scans/Fixes box at the bottom, paste in the following
• Do Not copy the word CODE
• please note the fix starts with the :

:Processes
explorer.exe

:OTL

:Services

:Reg

:Files
C:\ProgramData\{4C35E33C-72B2-4623-82C4-FDB64E9FA0AB}\OFFLINE\mFileBagIDE.dll\bag\FFToolbar.xpi 
C:\Users\All Users\{4C35E33C-72B2-4623-82C4-FDB64E9FA0AB}\OFFLINE\mFileBagIDE.dll\bag\FFToolbar.xpi 
C:\Users\mom\Documents\FrostWire\Incomplete\T-1010769-Janis Ian - Fly too high.mp3 
C:\Users\mom\Documents\FrostWire\Saved\amerias suitheart fall out boy[256k quality].snd 
C:\Users\mom\Documents\FrostWire\Saved\hate is strong word plain ts.snd 
C:\Users\mom\Documents\FrostWire\Saved\love is on its way jonas (high bitrate).mp3 
C:\Users\mom\Documents\FrostWire\Saved\thats just way we roll jonas (256k 44800).mp3 
C:\Users\mom\Documents\FrostWire\Saved\tonight jonas brothers (256k 44800).mp3 
C:\Users\mom\Documents\FrostWire\Saved\tonight jonas brothers.mp3 
C:\Users\mom\Documents\FrostWire\Saved\video girl jonas brothers.mp3 
C:\Users\mom\Documents\FrostWire\Saved\what up whats haapinin t i - high quality.mp3 
C:\Users\mom\Music\Incomplete\T-1010769-Janis Ian - Fly too high.mp3 
C:\Users\mom\Music\Incomplete\T-4820647-we like her clean drake lil new hottest single.snd 
C:\Users\mom\Music\Incomplete\T-5121404-one time jusin bieber [new single].au 
C:\Users\mom\Music\Incomplete\T-5285734-whatchu say jason derulo.mp3 
C:\Users\mom\Music\Saved\amerias suitheart fall out boy[256k quality].snd 
C:\Users\mom\Music\Saved\every girl clean lil wayne hot new track.mp3 
C:\Users\mom\Music\Saved\hate is strong word plain ts.snd 
C:\Users\mom\Music\Saved\love is on its way jonas (high bitrate).mp3 
C:\Users\mom\Music\Saved\patron tequila paridiso girls.wma 
C:\Users\mom\Music\Saved\saturday secret handshake.mp3 
C:\Users\mom\Music\Saved\thats just way we roll jonas (256k 44800).mp3 
C:\Users\mom\Music\Saved\tonight jonas brothers (256k 44800).mp3 
C:\Users\mom\Music\Saved\tonight jonas brothers.mp3 
C:\Users\mom\Music\Saved\turn_right_jonas_brothes.wma 
C:\Users\mom\Music\Saved\video girl jonas brothers.mp3 
C:\Users\mom\Music\Saved\we like her clean drake lil new single.mp3 
C:\Users\mom\Music\Saved\we like her clean drake lil [new album].au 
C:\Users\mom\Music\Saved\what up whats haapinin t i - high quality.mp3 
K:\My Documents\FrostWire\Saved\amerias suitheart fall out boy[256k quality].snd 
K:\My Documents\FrostWire\Saved\hate is strong word plain ts.snd 
K:\My Documents\FrostWire\Saved\love is on its way jonas (high bitrate).mp3 
K:\My Documents\FrostWire\Saved\thats just way we roll jonas (256k 44800).mp3 
K:\My Documents\FrostWire\Saved\tonight jonas brothers (256k 44800).mp3 
K:\My Documents\FrostWire\Saved\tonight jonas brothers.mp3 
K:\My Documents\FrostWire\Saved\video girl jonas brothers.mp3 
K:\My Documents\FrostWire\Saved\what up whats haapinin t i - high quality.mp3 
K:\My Documents\FrostWire\Incomplete\T-1010769-Janis Ian - Fly too high.mp3 
K:\LimeWire\what up whats haapinin t i - high quality.mp3 
K:\LimeWire\Saved\amerias suitheart fall out boy[256k quality].snd 
K:\LimeWire\Saved\every girl clean lil wayne hot new track.mp3 
K:\LimeWire\Saved\hate is strong word plain ts.snd 
K:\LimeWire\Saved\love is on its way jonas (high bitrate).mp3 
K:\LimeWire\Saved\patron tequila paridiso girls.wma 
K:\LimeWire\Saved\saturday secret handshake.mp3 
K:\LimeWire\Saved\thats just way we roll jonas (256k 44800).mp3 
K:\LimeWire\Saved\tonight jonas brothers (256k 44800).mp3 
K:\LimeWire\Saved\tonight jonas brothers.mp3 
K:\LimeWire\Saved\turn_right_jonas_brothes.wma 
K:\LimeWire\Saved\video girl jonas brothers.mp3 
K:\LimeWire\Saved\we like her clean drake lil new single.mp3 
K:\LimeWire\Saved\we like her clean drake lil [new album].au 
K:\LimeWire\Saved\what up whats haapinin t i - high quality.mp3 
K:\LimeWire\Incomplete\T-1010769-Janis Ian - Fly too high.mp3 
K:\LimeWire\Incomplete\T-4820647-we like her clean drake lil new hottest single.snd 
K:\LimeWire\Incomplete\T-5121404-one time jusin bieber [new single].au 
K:\LimeWire\Incomplete\T-5285734-whatchu say jason derulo.mp3 

:Commands
[purity]
[emptytemp]
[start explorer]
[Reboot]

Then click the Run Fix button at the top

• Let the program run unhindered
• Please save the resulting log to be posted in your next reply.
• Reboot your computer

Please post the OTL log.

Ok. I didn't save the log. I was thinking something would pop up when I rebooted. So I did everything except save that log. What now?

Wait. Look what popped up when I opened OTL. Is this want you needed? All processes killed ========== PROCESSES ========== No active process named explorer.exe was found! ========== OTL ========== ========== SERVICES/DRIVERS ========== ========== REGISTRY ========== ========== FILES ========== C:\ProgramData\{4C35E33C-72B2-4623-82C4-FDB64E9FA0AB}\OFFLINE\mFileBagIDE.dll\bag\FFToolbar.xpi moved successfully. File\Folder C:\Users\All Users\{4C35E33C-72B2-4623-82C4-FDB64E9FA0AB}\OFFLINE\mFileBagIDE.dll\bag\FFToolbar.xpi not found. C:\Users\mom\Documents\FrostWire\Incomplete\T-1010769-Janis Ian - Fly too high.mp3 moved successfully. C:\Users\mom\Documents\FrostWire\Saved\amerias suitheart fall out boy[256k quality].snd moved successfully. C:\Users\mom\Documents\FrostWire\Saved\hate is strong word plain ts.snd moved successfully. C:\Users\mom\Documents\FrostWire\Saved\love is on its way jonas (high bitrate).mp3 moved successfully. C:\Users\mom\Documents\FrostWire\Saved\thats just way we roll jonas (256k 44800).mp3 moved successfully. C:\Users\mom\Documents\FrostWire\Saved\tonight jonas brothers (256k 44800).mp3 moved successfully. C:\Users\mom\Documents\FrostWire\Saved\tonight jonas brothers.mp3 moved successfully. C:\Users\mom\Documents\FrostWire\Saved\video girl jonas brothers.mp3 moved successfully. C:\Users\mom\Documents\FrostWire\Saved\what up whats haapinin t i - high quality.mp3 moved successfully. C:\Users\mom\Music\Incomplete\T-1010769-Janis Ian - Fly too high.mp3 moved successfully. C:\Users\mom\Music\Incomplete\T-4820647-we like her clean drake lil new hottest single.snd moved successfully. C:\Users\mom\Music\Incomplete\T-5121404-one time jusin bieber [new single].au moved successfully. C:\Users\mom\Music\Incomplete\T-5285734-whatchu say jason derulo.mp3 moved successfully. C:\Users\mom\Music\Saved\amerias suitheart fall out boy[256k quality].snd moved successfully. C:\Users\mom\Music\Saved\every girl clean lil wayne hot new track.mp3 moved successfully. C:\Users\mom\Music\Saved\hate is strong word plain ts.snd moved successfully. C:\Users\mom\Music\Saved\love is on its way jonas (high bitrate).mp3 moved successfully. C:\Users\mom\Music\Saved\patron tequila paridiso girls.wma moved successfully. C:\Users\mom\Music\Saved\saturday secret handshake.mp3 moved successfully. C:\Users\mom\Music\Saved\thats just way we roll jonas (256k 44800).mp3 moved successfully. C:\Users\mom\Music\Saved\tonight jonas brothers (256k 44800).mp3 moved successfully. C:\Users\mom\Music\Saved\tonight jonas brothers.mp3 moved successfully. C:\Users\mom\Music\Saved\turn_right_jonas_brothes.wma moved successfully. C:\Users\mom\Music\Saved\video girl jonas brothers.mp3 moved successfully. C:\Users\mom\Music\Saved\we like her clean drake lil new single.mp3 moved successfully. C:\Users\mom\Music\Saved\we like her clean drake lil [new album].au moved successfully. C:\Users\mom\Music\Saved\what up whats haapinin t i - high quality.mp3 moved successfully. K:\My Documents\FrostWire\Saved\amerias suitheart fall out boy[256k quality].snd moved successfully. K:\My Documents\FrostWire\Saved\hate is strong word plain ts.snd moved successfully. K:\My Documents\FrostWire\Saved\love is on its way jonas (high bitrate).mp3 moved successfully. K:\My Documents\FrostWire\Saved\thats just way we roll jonas (256k 44800).mp3 moved successfully. K:\My Documents\FrostWire\Saved\tonight jonas brothers (256k 44800).mp3 moved successfully. K:\My Documents\FrostWire\Saved\tonight jonas brothers.mp3 moved successfully. K:\My Documents\FrostWire\Saved\video girl jonas brothers.mp3 moved successfully. K:\My Documents\FrostWire\Saved\what up whats haapinin t i - high quality.mp3 moved successfully. K:\My Documents\FrostWire\Incomplete\T-1010769-Janis Ian - Fly too high.mp3 moved successfully. K:\LimeWire\what up whats haapinin t i - high quality.mp3 moved successfully. K:\LimeWire\Saved\amerias suitheart fall out boy[256k quality].snd moved successfully. K:\LimeWire\Saved\every girl clean lil wayne hot new track.mp3 moved successfully. K:\LimeWire\Saved\hate is strong word plain ts.snd moved successfully. K:\LimeWire\Saved\love is on its way jonas (high bitrate).mp3 moved successfully. K:\LimeWire\Saved\patron tequila paridiso girls.wma moved successfully. K:\LimeWire\Saved\saturday secret handshake.mp3 moved successfully. K:\LimeWire\Saved\thats just way we roll jonas (256k 44800).mp3 moved successfully. K:\LimeWire\Saved\tonight jonas brothers (256k 44800).mp3 moved successfully. K:\LimeWire\Saved\tonight jonas brothers.mp3 moved successfully. K:\LimeWire\Saved\turn_right_jonas_brothes.wma moved successfully. K:\LimeWire\Saved\video girl jonas brothers.mp3 moved successfully. K:\LimeWire\Saved\we like her clean drake lil new single.mp3 moved successfully. K:\LimeWire\Saved\we like her clean drake lil [new album].au moved successfully. K:\LimeWire\Saved\what up whats haapinin t i - high quality.mp3 moved successfully. K:\LimeWire\Incomplete\T-1010769-Janis Ian - Fly too high.mp3 moved successfully. K:\LimeWire\Incomplete\T-4820647-we like her clean drake lil new hottest single.snd moved successfully. K:\LimeWire\Incomplete\T-5121404-one time jusin bieber [new single].au moved successfully. K:\LimeWire\Incomplete\T-5285734-whatchu say jason derulo.mp3 moved successfully. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: mom ->Temp folder emptied: 302115 bytes ->Temporary Internet Files folder emptied: 201735 bytes ->Java cache emptied: 5400 bytes ->FireFox cache emptied: 33036329 bytes ->Google Chrome cache emptied: 76273734 bytes ->Flash cache emptied: 927 bytes User: Public User: RA Media Server ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32 (64bit) .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 77600334 bytes %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 32902 bytes %systemroot%\sysnative\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment folder emptied: 0 bytes RecycleBin emptied: 88338 bytes Total Files Cleaned = 179.00 mb OTL by OldTimer - Version 3.2.17.2 log created on 11102010_110846 Files\Folders moved on Reboot… File\Folder C:\Windows\temp\TMP0000006882E852D4B255E3ED not found! File\Folder C:\Windows\temp\WFV8A1F.tmp not found! Registry entries deleted on Reboot…

GLASERDJ,

Let's run one more scan. This program is fairly quick and you can keep it and run it from time to time.

Please download Malwarebytes' Anti-Malware to your desktop.

• Double-click mbam-setup.exe and follow the prompts to install the program.
• At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
• If an update is found, it will download and install the latest version.
• Once the program has loaded, select Perform quick scan, then click Scan.
• When the scan is complete, click OK, then Show Results to view the results.
• Be sure that everything is checked, and click Remove Selected.
• When completed, a log will open in Notepad. Please save it to a convenient location and post the results.
• Note: If you receive a notice that some of the items couldn't be removed, that they have been added to the delete on reboot list, please reboot (shut down your computer then restart it).

Also, please let me know how things are running now.

I already had malwarebytes. Here is the log. Found nothing. I did not reboot. Things do seem to be running smoother. Programs open and close much faster. So no more limewire or frostwire. Would assume that I tunes is ok….. Malwarebytes' Anti-Malware 1.46 www.malwarebytes.org Database version: 5092 Windows 6.0.6002 Service Pack 2 Internet Explorer 8.0.6001.18975 11/10/2010 3:08:27 PM mbam-log-2010-11-10 (15-08-27).txt Scan type: Quick scan Objects scanned: 161265 Time elapsed: 23 minute(s), 41 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected)

GLASERDJ,

I believe that there shouldn't be a problem with itunes.

I'd like to see one more scan just to look over and make sure I didn't miss anything. This tool makes no changes… just makes a log.

Please download DDS by sUBs from one of the following links and save it to your desktop.

• • DDS.scr
  • DDS.pif
• Disable any script blocking protection (How to Disable your Security Programs)
• Double click DDS icon to run the tool (may take up to 3 minutes to run)
• When done, DDS.txt will open.
• After a few moments, attach.txt will open in a second window.
• Save both reports to your desktop.

—————————————————

• Post the contents of the DDS.txt report in your next reply
• Attach the Attach.txt report to your post by scroling down to the Attachments area and then clicking Browse. Browse to where you saved the file, and click Open and the click UPLOAD.

dayam it. Nothing popped up. I'm going to a Ducks game.

Whoa…. nobody told me you were a duck fan… That changes everything.