This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Possible Google redirect, only some audio working, desktop changing ap

13 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

When you open the Control Panel, on the left panel > click on Other Control Panel Options. This should display the Java Icon.

Make sure you are in classic view as well

If that doesn't help, try JavaRa

Please download JavaRa to your desktop and unzip it to its own folder.
  • Run JavaRa.exe, pick the language of your choice and click Select. Then click Remove Older Versions
  • Accept any prompts.
  • Open JavaRa.exe again and select Search For Updates.
  • Select Update Using Oracle Java's Website then click Search and click on the Open Webpage button.
  • Scroll down to the Java SE Runtime Environment (JRE) option.
  • Download and install the latest Java Runtime Environment (JRE) version for your computer.(version 6, update 23)
I ran JavaRa and successfully installed the new Java version.

DDS logs:


DDS (Ver_10-12-12.02) - NTFSx86
Run by [removed] at 22:46:09.03 on Mon 14/02/2011
Internet Explorer: 7.0.5730.11 BrowserJavaVersion: 1.6.0_23
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2046.1224 [GMT 11:00]


============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
C:\WINDOWS\system32\svchost -k rpcss
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\iolo\System Mechanic Professional 6\IoloSGCtrl.exe
C:\Program Files\Google\Update\1.2.183.39\GoogleCrashHandler.exe
C:\Program Files\IObit\IObit Security 360\IS360srv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Program Files\Citrix\ICA Client\ssonsvr.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Canon\MyPrinter\BJMyPrt.exe
C:\Program Files\Logitech\Gaming Software\LWEMon.exe
C:\Program Files\iolo\System Mechanic Professional 6\SystemGuardAlerter.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Logitech\LWS\Webcam Software\LWS.exe
c:\program files\real\realplayer\RealPlay.exe
C:\Program Files\IObit\IObit Security 360\IS360tray.exe
C:\Program Files\iTunes\iTunesHelper.exe
c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Logitech\LWS\Webcam Software\CameraHelperShell.exe
C:\Program Files\Alwil Software\Avast5\avastUI.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\iolo\System Mechanic Professional 6\SMSystemAnalyzer.exe
C:\Program Files\iolo\System Mechanic Professional 6\PopupBlocker.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
C:\Program Files\Innovative Solutions\DriverMax\devices.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Documents and Settings\Chris Hazelman\Start Menu\Programs\Startup\Update Tool Notifier.exe
C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\ytbb.exe
C:\Program Files\Safari\Safari.exe
c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Safari\Safari.exe
\\?\C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Documents and Settings\Chris Hazelman\Desktop\dds.com
C:\WINDOWS\system32\wbem\wmiprvse.exe

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.bigpond.com
uInternet Settings,ProxyOverride = *.local
uURLSearchHooks: DeviceVM Url Search Hook: {0063bf63-bfff-4b8f-9d26-4267df7f17dd} - c:\windows\system32\dvmurl.dll
BHO: &Yahoo;! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\progra~1\yahoo!\companion\installs\cpn\yt.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Skype add-on for Internet Explorer: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.1.1309.3572\swg.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
BHO: SingleInstance Class: {fdad4da1-61a2-4fd8-9c17-86f7ac245081} - c:\progra~1\yahoo!\companion\installs\cpn\YTSingleInstance.dll
TB: Yahoo!7 Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\progra~1\yahoo!\companion\installs\cpn\yt.dll
uRun: [Registry Washer] "c:\program files\1-abc\registry washer\RGWStarter.exe"
uRun: [SMSystemAnalyzer] "c:\program files\iolo\system mechanic professional 6\SMSystemAnalyzer.exe"
uRun: [System Mechanic Popup Blocker] "c:\program files\iolo\system mechanic professional 6\PopupBlocker.exe"
uRun: [Google Update] "c:\documents and settings\chris hazelman\local settings\application data\google\update\GoogleUpdate.exe" /c
uRun: [DriverMax] "c:\program files\innovative solutions\drivermax\devices.exe" -agent
mRun: [SoundMan] SOUNDMAN.EXE
mRun: [AlcWzrd] ALCWZRD.EXE
mRun: [GEST] m‘|\ü
mRun: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
mRun: [CanonSolutionMenu] c:\program files\canon\solutionmenu\CNSLMAIN.exe /logon
mRun: [CanonMyPrinter] c:\program files\canon\myprinter\BJMyPrt.exe /logon
mRun: [NeroFilterCheck] c:\program files\common files\nero\lib\NeroCheck.exe
mRun: [Start WingMan Profiler] c:\program files\logitech\gaming software\LWEMon.exe /noui
mRun: [SystemGuardAlerter] "c:\program files\iolo\system mechanic professional 6\SystemGuardAlerter.exe"
mRun: [UVS12 Preload] c:\program files\corel\corel videostudio 12\uvPL.exe
mRun: [TkBellExe] "c:\program files\common files\real\update_ob\realsched.exe" -osboot
mRun: [ioloDelayModule] c:\program files\iolo\system mechanic professional 6\delay.exe
mRun: [LWS] c:\program files\logitech\lws\webcam software\LWS.exe -hide
mRun: [ATICustomerCare] "c:\program files\ati\aticustomercare\ATICustomerCare.exe"
mRun: [IObit Security 360] "c:\program files\iobit\iobit security 360\IS360tray.exe" /autostart
mRun: [StartCCC] "c:\program files\ati technologies\ati.ace\core-static\CLIStart.exe" MSRun
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [RTHDCPL] RTHDCPL.EXE
mRun: [avast5] "c:\program files\alwil software\avast5\avastUI.exe" /nogui
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 10.0\reader\Reader_sl.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRunOnce: [AvgUninstallURL] cmd.exe /c start http://www.avg.com/ww.special-uninstallati…t;ver=10.0.1204
dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
dRunOnce: [ShowDeskFix] regsvr32 /s /n /i:u shell32
StartupFolder: c:\docume~1\chrish~1\startm~1\programs\startup\corona~1.lnk - c:\program files\corona extra desktop widget\Corona Extra Desktop Widget.exe
StartupFolder: c:\documents and settings\chris hazelman\start menu\programs\startup\Update Tool Notifier.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\logite~1.lnk - c:\program files\logitech\setpoint\SetPoint.exe
IE: Add to Google Photos Screensa&ver; - c:\windows\system32\GPhotos.scr/200
IE: {d9288080-1baa-4bc4-9cf8-a92d743db949}
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1226469195843
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1226469162187
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
Name-Space Handler: ftp\DLA.IEClickMon - {A5A08E80-B472-11D2-89D1-0080C8C12A3A} - c:\progra~1\iolo\common\lib\URLSTO~1.DLL
Name-Space Handler: http\DLA.IEClickMon - {A5A08E80-B472-11D2-89D1-0080C8C12A3A} - c:\progra~1\iolo\common\lib\URLSTO~1.DLL
Notify: AtiExtEvent - Ati2evxx.dll
Notify: LBTWlgn - c:\program files\common files\logitech\bluetooth\LBTWlgn.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\chrish~1\applic~1\mozilla\firefox\profiles\4qpttr9n.default\
FF - prefs.js: browser.search.selectedEngine - Yahoo! Search
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Skype extension for Firefox: {AB2CE124-6272-4b12-94A9-7303C7397BD1} - c:\program files\mozilla firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
FF - Ext: Java Quick Starter: [removed] - c:\program files\java\jre6\lib\deploy\jqs\ff
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\DotNetAssistantExtension
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: Yahoo! Toolbar: {635abd67-4fe9-1b23-4f01-e679fa7484c1} - %profile%\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}

—- FIREFOX POLICIES —-
FF - user.js: yahoo.ytff.general.dontshowhpoffer - true

============= SERVICES / DRIVERS ===============

R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2011-2-12 294608]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2011-2-12 17744]
R2 avast! Antivirus;avast! Antivirus;c:\program files\alwil software\avast5\AvastSvc.exe [2011-2-12 40384]
R2 IS360service;IS360service;c:\program files\iobit\iobit security 360\is360srv.exe [2010-10-7 312152]
R3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdXP3.sys [2011-2-7 101904]
S2 gupdate1c9858a3908bda8;Google Update Service (gupdate1c9858a3908bda8);c:\program files\google\update\GoogleUpdate.exe [2009-2-3 133104]
S3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\drivers\wdcsam.sys [2008-5-6 11520]

=============== File Associations ===============

JSEFile=NOTEPAD.EXE %1

=============== Created Last 30 ================

2011-02-14 11:35:28 73728 —-a-w- c:\windows\system32\javacpl.cpl
2011-02-14 11:35:28 472808 —-a-w- c:\windows\system32\deployJava1.dll
2011-02-14 11:35:28 472808 —-a-w- c:\program files\mozilla firefox\plugins\npdeployJava1.dll
2011-02-14 05:08:12 ——– d—–w- c:\windows\hsperfdata_Chris Hazelman
2011-02-14 05:04:21 ——– d—–w- c:\docume~1\chrish~1\applic~1\updatetool
2011-02-14 05:02:10 ——– d—–w- C:\glassfishv3
2011-02-14 01:27:17 ——– d—–w- c:\docume~1\chrish~1\locals~1\applic~1\Western Digital
2011-02-11 19:28:33 38848 —-a-w- c:\windows\avastSS.scr
2011-02-11 19:28:29 ——– d—–w- c:\docume~1\alluse~1\applic~1\Alwil Software
2011-02-11 10:14:30 ——– d—–w- c:\program files\ESET
2011-02-10 09:22:10 439296 -c—-w- c:\windows\system32\dllcache\shimgvw.dll
2011-02-09 09:07:18 ——– d—–w- c:\docume~1\chrish~1\locals~1\applic~1\Codemasters
2011-02-08 05:51:24 89088 —-a-w- c:\windows\MBR.exe
2011-02-08 05:51:24 256512 —-a-w- c:\windows\PEV.exe
2011-02-08 05:51:24 161792 —-a-w- c:\windows\SWREG.exe
2011-02-07 00:11:12 ——– d—–w- c:\program files\VideoLAN
2011-02-06 13:18:09 101904 —-a-w- c:\windows\system32\drivers\AtihdXP3.sys
2011-02-06 13:02:03 ——– d—–w- c:\docume~1\chrish~1\locals~1\applic~1\Innovative Solutions
2011-02-06 13:02:03 ——– d—–w- c:\docume~1\alluse~1\applic~1\Innovative Solutions
2011-02-06 13:01:49 ——– d—–w- c:\program files\Innovative Solutions
2011-02-06 12:54:57 ——– d—–w- c:\program files\DriverGuide Toolkit
2011-02-06 07:39:29 38224 —-a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-02-06 07:39:25 20952 —-a-w- c:\windows\system32\drivers\mbam.sys
2011-01-31 09:05:25 ——– d—–w- c:\program files\iPod
2011-01-30 15:45:12 135568 —-a-w- c:\program files\mozilla firefox\plugins\nppdf32.dll
2011-01-30 15:45:12 135568 —-a-w- c:\program files\internet explorer\plugins\nppdf32.dll

==================== Find3M ====================

2011-01-21 14:44:37 439296 —-a-w- c:\windows\system32\shimgvw.dll
2011-01-07 14:09:02 290048 —-a-w- c:\windows\system32\atmfd.dll
2010-12-31 13:10:33 1854976 —-a-w- c:\windows\system32\win32k.sys
2010-12-22 12:34:28 301568 —-a-w- c:\windows\system32\kerberos.dll
2010-12-20 23:20:06 841216 —-a-w- c:\windows\system32\wininet.dll
2010-12-20 23:20:05 78336 —-a-w- c:\windows\system32\ieencode.dll
2010-12-20 23:20:05 1830912 —-a-w- c:\windows\system32\inetcpl.cpl
2010-12-20 23:20:05 17408 —-a-w- c:\windows\system32\corpol.dll
2010-12-20 17:26:00 730112 —-a-w- c:\windows\system32\lsasrv.dll
2010-12-20 12:48:23 389120 —-a-w- c:\windows\system32\html.iec
2010-12-09 15:15:09 718336 —-a-w- c:\windows\system32\ntdll.dll
2010-12-09 14:30:22 33280 —-a-w- c:\windows\system32\csrsrv.dll
2010-12-09 13:42:26 2148864 —-a-w- c:\windows\system32\ntoskrnl.exe
2010-12-09 13:07:07 2027008 —-a-w- c:\windows\system32\ntkrnlpa.exe
2010-12-02 03:35:18 4280320 —-a-w- c:\windows\system32\GPhotos.scr
2010-11-29 06:38:30 94208 —-a-w- c:\windows\system32\QuickTimeVR.qtx
2010-11-29 06:38:30 69632 —-a-w- c:\windows\system32\QuickTime.qts
2010-11-18 18:12:44 81920 —-a-w- c:\windows\system32\isign32.dll

============= FINISH: 22:47:05.71 ===============




UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_10-12-12.02)

Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 12/11/2008 6:01:46 AM
System Uptime: 14/02/2011 10:41:17 PM (0 hours ago)

Motherboard: Gigabyte Technology Co., Ltd. | | GA-MA770-S3
Processor: AMD Phenom™ 9550 Quad-Core Processor | Socket M2 | 2204/200mhz

==== Disk Partitions =========================

C: is FIXED (NTFS) - 466 GiB total, 169.941 GiB free.
D: is CDROM ()

==== Disabled Device Manager Items =============

Class GUID:
Description:
Device ID: ROOT\LEGACY_PNKBSTRA\0000
Manufacturer:
Name:
PNP Device ID: ROOT\LEGACY_PNKBSTRA\0000
Service:

==== System Restore Points ===================

RP568: 16/11/2010 8:58:11 PM - System Checkpoint
RP569: 17/11/2010 9:10:09 PM - System Checkpoint
RP570: 19/11/2010 4:17:24 PM - System Checkpoint
RP571: 23/11/2010 8:12:34 PM - System Checkpoint
RP572: 26/11/2010 1:32:08 PM - System Checkpoint
RP573: 27/11/2010 11:06:37 AM - Installed DirectX
RP574: 28/11/2010 7:35:05 PM - System Checkpoint
RP575: 29/11/2010 7:46:15 PM - System Checkpoint
RP576: 30/11/2010 7:52:06 PM - System Checkpoint
RP577: 3/12/2010 1:53:18 PM - System Checkpoint
RP578: 12/12/2010 9:46:08 AM - System Checkpoint
RP579: 14/12/2010 6:50:50 AM - System Checkpoint
RP580: 15/12/2010 7:57:13 PM - System Checkpoint
RP581: 17/12/2010 6:34:06 PM - Removed OpenOffice.org 3.0
RP582: 17/12/2010 11:37:38 PM - Software Distribution Service 3.0
RP583: 19/12/2010 6:55:47 PM - System Checkpoint
RP584: 20/12/2010 8:13:08 PM - System Checkpoint
RP585: 23/12/2010 7:47:30 PM - System Checkpoint
RP586: 24/12/2010 8:00:58 PM - System Checkpoint
RP587: 25/12/2010 12:01:19 AM - Installed DirectX
RP588: 26/12/2010 7:20:49 AM - System Checkpoint
RP589: 26/12/2010 9:35:17 PM - Installed DirectX
RP590: 27/12/2010 9:44:31 PM - System Checkpoint
RP591: 28/12/2010 10:02:30 PM - System Checkpoint
RP592: 30/12/2010 5:55:39 PM - System Checkpoint
RP593: 31/12/2010 7:31:12 PM - Software Distribution Service 3.0
RP594: 1/01/2011 8:27:26 PM - System Checkpoint
RP595: 3/01/2011 8:50:33 PM - System Checkpoint
RP596: 5/01/2011 10:53:47 PM - Software Distribution Service 3.0
RP597: 6/01/2011 11:35:35 PM - System Checkpoint
RP598: 7/01/2011 3:00:14 AM - Software Distribution Service 3.0
RP599: 8/01/2011 7:38:21 PM - System Checkpoint
RP600: 10/01/2011 10:40:38 AM - System Checkpoint
RP601: 11/01/2011 7:09:13 PM - System Checkpoint
RP602: 11/01/2011 11:32:41 PM - Installed Citrix Presentation Server Client
RP603: 13/01/2011 7:21:42 PM - System Checkpoint
RP604: 14/01/2011 12:04:26 AM - Software Distribution Service 3.0
RP605: 15/01/2011 6:26:51 PM - System Checkpoint
RP606: 15/01/2011 10:49:10 PM - Installed Microsoft Games for Windows - LIVE Redistributable
RP607: 15/01/2011 10:52:57 PM - Installed Windows Live ID Sign-in Assistant
RP608: 15/01/2011 10:53:15 PM - Installed Microsoft Games for Windows - LIVE Redistributable
RP609: 17/01/2011 9:00:04 AM - System Checkpoint
RP610: 24/01/2011 8:04:17 PM - System Checkpoint
RP611: 28/01/2011 5:50:23 PM - System Checkpoint
RP612: 31/01/2011 10:33:24 AM - System Checkpoint
RP613: 1/02/2011 7:41:28 PM - System Checkpoint
RP614: 3/02/2011 5:12:43 PM - System Checkpoint
RP615: 7/02/2011 12:18:00 AM - DMX_DriverMax Driver Installation
RP616: 7/02/2011 12:37:33 AM - DMX_DriverMax Driver Installation
RP617: 8/02/2011 4:51:48 PM - ComboFix created restore point
RP618: 8/02/2011 10:40:59 PM - Software Distribution Service 3.0
RP619: 9/02/2011 10:45:11 PM - System Checkpoint
RP620: 10/02/2011 10:42:02 PM - Software Distribution Service 3.0
RP621: 11/02/2011 11:28:26 PM - System Checkpoint
RP622: 12/02/2011 6:28:29 AM - avast! Free Antivirus Setup
RP623: 12/02/2011 5:24:43 PM - Removed Adobe Reader 8.2.6
RP624: 14/02/2011 9:22:42 AM - System Checkpoint
RP625: 14/02/2011 3:53:03 PM - Removed Java™ 6 Update 14
RP626: 14/02/2011 3:54:08 PM - Removed Java™ 6 Update 7
RP627: 14/02/2011 3:54:40 PM - Removed Java™ SE Runtime Environment 6 Update 1
RP628: 14/02/2011 10:35:04 PM - Installed Java™ 6 Update 23

==== Installed Programs ======================

1-abc.net Hard Drive Washer (Remove only)
1-abc.net Registry Washer (Remove only)
Adobe AIR
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Reader X (10.0.1)
Adobe Shockwave Player 11.5
Alien Shooter 2: Reloaded
Alien Swarm
AMD Processor Driver
America's Army Deploy Client
Apple Application Support
Apple Mobile Device Support
Apple Software Update
ASIO4ALL
Assassin's Creed
ATI AVIVO Codecs
ATI Catalyst Install Manager
ATI Catalyst Registration
ATI HYDRAVISION
ATI Parental Control & Encoder
ATI Problem Report Wizard
Audacity 1.2.6
avast! Free Antivirus
BigPond Broadband ADSL
BioShock
Bonjour
Braid (Version 1.009 from Greenhouse)
Brothers in Arms: Hell's Highway
Browser Configuration Utility
Call of Duty® 4 - Modern Warfare™ Demo
Camera Support Core Library
Camera Window DS
Camera Window DVC
Camera Window MC
CameraHelperMsi
Canon Camera Support Core Library
Canon Camera Window DS for ZoomBrowser EX
Canon Camera Window DVC for ZoomBrowser EX
Canon Camera Window for ZoomBrowser EX
Canon MovieEdit Task for ZoomBrowser EX
Canon MP Navigator EX 1.0
Canon MX300 series
Canon My Printer
Canon PhotoRecord
Canon RAW Image Task for ZoomBrowser EX
Canon RemoteCapture Task for ZoomBrowser EX
Canon Utilities Easy-PhotoPrint EX
Canon Utilities PhotoStitch 3.1
Canon Utilities Solution Menu
Canon ZoomBrowser EX
Catalyst Control Center - Branding
Catalyst Control Center Graphics Previews Common
Catalyst Control Center InstallProxy
ccc-core-static
ccc-utility
CCC Help English
CDDRV_Installer
Citrix Presentation Server Client
Command & Conquer Generals
Corel VideoStudio 12
Corona Extra Screen Saver
Critical Update for Windows Media Player 11 (KB959772)
Crysis WARHEAD®
Defense Grid: The Awakening
DiRT
DiRT 2
DOOM II: Hell on Earth
DriverGuide Toolkit
DriverMax 5
DVD Suite
Dyson v1.20
e-tax 2009
e-tax 2010
EA Download Manager
EA Download Manager UI
erLT
ESET Online Scanner v3
Fallout 3
Fallout 3 - The Garden of Eden Creation Kit
Frontlines: Fuel of War
FUEL
Google Chrome
Google Earth
Google Update Helper
Google Updater
Grand Theft Auto IV
GRID
Guild Wars
Half-Life 2
Half-Life 2: Episode One
Half-Life 2: Episode Two
Half-Life 2: Lost Coast
HiJackThis
HijackThis 2.0.2
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB2158563)
Hotfix for Windows XP (KB2443685)
Hotfix for Windows XP (KB942288-v3)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB961118)
Hotfix for Windows XP (KB970653-v3)
Hotfix for Windows XP (KB976098-v2)
Hotfix for Windows XP (KB979306)
Hotfix for Windows XP (KB981793)
IL-2 Sturmovik: 1946
IObit Security 360
iolo technologies' System Mechanic Professional 6
iTunes
Java Auto Updater
Java™ 6 Update 23
KhalInstallWrapper
Lead and Gold - Gangs of the Wild West
Left 4 Dead
Left 4 Dead 2
Left 4 Dead Demo
Live 7.0.3
Logitech Desktop Messenger
Logitech Gaming Software 5.04
Logitech SetPoint
Logitech Webcam Software
Logitech Webcam Software Driver Package
LOST PLANET TRIAL DX9
LWS Facebook
LWS Gallery
LWS Help_main
LWS Launcher
LWS Motion Detection
LWS Pictures And Video
LWS Video Mask Maker
LWS VideoEffects
LWS Webcam Software
LWS WLM Plugin
LWS YouTube Plugin
Mafia II - Demo
Malwarebytes' Anti-Malware
Master Levels for DOOM II
Media Player Codec Pack 3.2.0
MediaShow
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft Games for Windows - LIVE
Microsoft Games for Windows - LIVE Redistributable
Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
Microsoft Silverlight
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft XNA Framework Redistributable 2.0
Monster Trucks Nitro
Motherboard Monitor 5
MovieEdit Task
Mozilla Firefox (3.0.19)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
MSXML 4.0 SP2 Parser and SDK
MSXML 6 Service Pack 2 (KB954459)
Native Instruments Traktor DJ Studio 3
Nero 8 Essentials
neroxml
NI Service Center
NVIDIA PhysX
OpenAL
OpenOffice.org 3.2
Operation Flashpoint: Dragon Rising
Peggle Deluxe (remove only)
Peggle Extreme
Penumbra Overture
Penumbra: Black Plague
Penumbra: Requiem
PhotoNow! 1.0
Picasa 3
Plants vs. Zombies: Game of the Year
PopCap Browser Plugin
Portal
PowerDirector Express
PowerProducer
Presto! PageManager 7.15.16
PunkBuster Services
QuickTime
Rapture3D 2.3.26 Game
RAW Image Task 1.2
RealPlayer
REALTEK GbE & FE Ethernet PCI-E NIC Driver
Realtek High Definition Audio Driver
RealUpgrade 1.0
Reason Demo 3.0.4
RemoteCapture Task 1.1
RM to MP3 Converter 1.49
Rome - Total War - Gold Edition
S.T.A.L.K.E.R.: Shadow of Chernobyl
Safari
Security Update for CAPICOM (KB931906)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)
Security Update for Windows Internet Explorer 7 (KB2183461)
Security Update for Windows Internet Explorer 7 (KB2360131)
Security Update for Windows Internet Explorer 7 (KB2416400)
Security Update for Windows Internet Explorer 7 (KB2482017)
Security Update for Windows Internet Explorer 7 (KB938127-v2)
Security Update for Windows Internet Explorer 7 (KB956390)
Security Update for Windows Internet Explorer 7 (KB958215)
Security Update for Windows Internet Explorer 7 (KB960714)
Security Update for Windows Internet Explorer 7 (KB961260)
Security Update for Windows Internet Explorer 7 (KB963027)
Security Update for Windows Internet Explorer 7 (KB969897)
Security Update for Windows Internet Explorer 7 (KB972260)
Security Update for Windows Internet Explorer 7 (KB974455)
Security Update for Windows Internet Explorer 7 (KB976325)
Security Update for Windows Internet Explorer 7 (KB978207)
Security Update for Windows Internet Explorer 7 (KB982381)
Security Update for Windows Media Player (KB2378111)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB968816)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player (KB975558)
Security Update for Windows Media Player (KB978695)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows XP (KB2079403)
Security Update for Windows XP (KB2115168)
Security Update for Windows XP (KB2121546)
Security Update for Windows XP (KB2160329)
Security Update for Windows XP (KB2229593)
Security Update for Windows XP (KB2259922)
Security Update for Windows XP (KB2279986)
Security Update for Windows XP (KB2286198)
Security Update for Windows XP (KB2296011)
Security Update for Windows XP (KB2296199)
Security Update for Windows XP (KB2347290)
Security Update for Windows XP (KB2360937)
Security Update for Windows XP (KB2387149)
Security Update for Windows XP (KB2393802)
Security Update for Windows XP (KB2419632)
Security Update for Windows XP (KB2423089)
Security Update for Windows XP (KB2436673)
Security Update for Windows XP (KB2440591)
Security Update for Windows XP (KB2443105)
Security Update for Windows XP (KB2476687)
Security Update for Windows XP (KB2478960)
Security Update for Windows XP (KB2478971)
Security Update for Windows XP (KB2479628)
Security Update for Windows XP (KB2483185)
Security Update for Windows XP (KB2485376)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB938464-v2)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB957095)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958690)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960715)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961371)
Security Update for Windows XP (KB961373)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB968537)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB969898)
Security Update for Windows XP (KB969947)
Security Update for Windows XP (KB970238)
Security Update for Windows XP (KB970430)
Security Update for Windows XP (KB971468)
Security Update for Windows XP (KB971486)
Security Update for Windows XP (KB971557)
Security Update for Windows XP (KB971633)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB971961)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973346)
Security Update for Windows XP (KB973354)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973525)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB975560)
Security Update for Windows XP (KB975561)
Security Update for Windows XP (KB975562)
Security Update for Windows XP (KB975713)
Security Update for Windows XP (KB977165)
Security Update for Windows XP (KB977816)
Security Update for Windows XP (KB977914)
Security Update for Windows XP (KB978037)
Security Update for Windows XP (KB978251)
Security Update for Windows XP (KB978262)
Security Update for Windows XP (KB978338)
Security Update for Windows XP (KB978542)
Security Update for Windows XP (KB978601)
Security Update for Windows XP (KB978706)
Security Update for Windows XP (KB979309)
Security Update for Windows XP (KB979482)
Security Update for Windows XP (KB979559)
Security Update for Windows XP (KB979683)
Security Update for Windows XP (KB979687)
Security Update for Windows XP (KB980195)
Security Update for Windows XP (KB980218)
Security Update for Windows XP (KB980232)
Security Update for Windows XP (KB980436)
Security Update for Windows XP (KB981322)
Security Update for Windows XP (KB981349)
Security Update for Windows XP (KB981852)
Security Update for Windows XP (KB981957)
Security Update for Windows XP (KB981997)
Security Update for Windows XP (KB982132)
Security Update for Windows XP (KB982214)
Security Update for Windows XP (KB982665)
Sid Meier's Civilization V - Demo
Silent Hunter III
Skype Toolbars
Skype™ 4.2
Software Update for Web Folders
Source SDK Base
Source SDK Base - Orange Box
Steam
Supreme Commander 2 - Demo
SyncBack
Team Fortress 2
The Ultimate DOOM
The Undergarden Demo
ToCA Race Driver 3
Trials 2: Second Edition
Unreal Tournament 3
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Windows Internet Explorer 7 (KB976749)
Update for Windows Internet Explorer 7 (KB980182)
Update for Windows XP (KB2141007)
Update for Windows XP (KB2345886)
Update for Windows XP (KB2467659)
Update for Windows XP (KB951072-v2)
Update for Windows XP (KB951978)
Update for Windows XP (KB955759)
Update for Windows XP (KB955839)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB971737)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
VCRedistSetup
VideoStudio
VLC media player 1.1.7
Vuze
Warhammer 40,000: Dawn of War II - Single-player Demo
Windows Driver Package - 2Wire (2WIREPCP) Net (09/18/2002 1.4.0.5)
Windows Driver Package - Atheros (arusb(Atheros)) Net (09/23/2008 3.0.0.131)
Windows Driver Package - NETGEAR (W8335XP) Net (02/22/2005 3.1.1.7)
Windows Driver Package - NETGEAR Inc. (RTLWUSB) Net (02/07/2007 5.1283.0207.2007)
Windows Driver Package - Thomson (USB_RNDIS) Net (02/16/2004 1.0.0.3)
Windows Feature Pack for Storage (32-bit) - IMAPI update for Blu-Ray
Windows Installer 3.1 (KB893803)
Windows Live ID Sign-in Assistant
Windows Live installer
Windows Media Format 11 runtime
Windows Media Player Firefox Plugin
Windows Presentation Foundation
Windows XP Service Pack 3
Wings of Prey Demo
WinRAR archiver
WinUtilities 9.96 Free Edition
World of Goo
World of Warcraft
Worms Reloaded Demo
Yahoo! Software Update
Yahoo!7 Messenger
Yahoo!7 Toolbar
Zombie Driver

==== Event Viewer Messages From Past Week ========

9/02/2011 5:40:04 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
9/02/2011 5:39:51 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service StiSvc with arguments "" in order to run the server: {A1F4E726-8CF1-11D1-BF92-0060081ED811}
9/02/2011 5:39:07 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service netman with arguments "" in order to run the server: {BA126AE5-2166-11D1-B1D0-00805FC1270E}
9/02/2011 5:09:44 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD AmdPPM FileDisk Fips IPSec mbmiodrvr MRxSmb NetBIOS NetBT RasAcd Rdbss Tcpip
9/02/2011 5:09:44 PM, error: Service Control Manager [7001] - The TCP/IP NetBIOS Helper service depends on the AFD service which failed to start because of the following error: A device attached to the system is not functioning.
9/02/2011 5:09:44 PM, error: Service Control Manager [7001] - The IPSEC Services service depends on the IPSEC driver service which failed to start because of the following error: A device attached to the system is not functioning.
9/02/2011 5:09:44 PM, error: Service Control Manager [7001] - The DNS Client service depends on the TCP/IP Protocol Driver service which failed to start because of the following error: A device attached to the system is not functioning.
9/02/2011 5:09:44 PM, error: Service Control Manager [7001] - The DHCP Client service depends on the NetBios over Tcpip service which failed to start because of the following error: A device attached to the system is not functioning.
9/02/2011 5:09:44 PM, error: Service Control Manager [7001] - The Bonjour Service service depends on the TCP/IP Protocol Driver service which failed to start because of the following error: A device attached to the system is not functioning.
9/02/2011 5:09:44 PM, error: Service Control Manager [7001] - The Apple Mobile Device service depends on the TCP/IP Protocol Driver service which failed to start because of the following error: A device attached to the system is not functioning.
8/02/2011 4:57:33 PM, error: Service Control Manager [7032] - The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Windows Management Instrumentation service, but this action failed with the following error: An instance of the service is already running.
8/02/2011 4:50:50 PM, error: Service Control Manager [7034] - The Yahoo! Updater service terminated unexpectedly. It has done this 1 time(s).
8/02/2011 4:50:50 PM, error: Service Control Manager [7034] - The Ulead Burning Helper service terminated unexpectedly. It has done this 1 time(s).
8/02/2011 4:50:50 PM, error: Service Control Manager [7034] - The PnkBstrB service terminated unexpectedly. It has done this 1 time(s).
8/02/2011 4:50:50 PM, error: Service Control Manager [7034] - The PnkBstrA service terminated unexpectedly. It has done this 1 time(s).
8/02/2011 4:50:50 PM, error: Service Control Manager [7034] - The Nero BackItUp Scheduler 3 service terminated unexpectedly. It has done this 1 time(s).
8/02/2011 4:50:50 PM, error: Service Control Manager [7034] - The Java Quick Starter service terminated unexpectedly. It has done this 1 time(s).
8/02/2011 4:50:50 PM, error: Service Control Manager [7034] - The IS360service service terminated unexpectedly. It has done this 1 time(s).
8/02/2011 4:50:50 PM, error: Service Control Manager [7034] - The iPod Service service terminated unexpectedly. It has done this 1 time(s).
8/02/2011 4:50:50 PM, error: Service Control Manager [7034] - The iolo System Guard service terminated unexpectedly. It has done this 1 time(s).
8/02/2011 4:50:50 PM, error: Service Control Manager [7034] - The Cyberlink RichVideo Service(CRVS) service terminated unexpectedly. It has done this 1 time(s).
8/02/2011 4:50:50 PM, error: Service Control Manager [7034] - The Bonjour Service service terminated unexpectedly. It has done this 1 time(s).
8/02/2011 4:50:50 PM, error: Service Control Manager [7034] - The Ati HotKey Poller service terminated unexpectedly. It has done this 1 time(s).
8/02/2011 4:50:50 PM, error: Service Control Manager [7034] - The Application Layer Gateway Service service terminated unexpectedly. It has done this 1 time(s).
8/02/2011 4:50:50 PM, error: Service Control Manager [7031] - The Windows Live ID Sign-in Assistant service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.
8/02/2011 4:50:50 PM, error: Service Control Manager [7031] - The Print Spooler service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
8/02/2011 4:50:50 PM, error: Service Control Manager [7031] - The Apple Mobile Device service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
8/02/2011 4:47:40 PM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the stisvc service.
8/02/2011 4:41:17 PM, error: Ftdisk [49] - Configuring the Page file for crash dump failed. Make sure there is a page file on the boot partition and that is large enough to contain all physical memory.
8/02/2011 4:41:17 PM, error: Ftdisk [45] - The system could not sucessfully load the crash dump driver.
14/02/2011 10:38:51 PM, error: Service Control Manager [7034] - The Process Monitor service terminated unexpectedly. It has done this 1 time(s).

==== End Of File ===========================


The PC is running much better now, no sign of the Google redirect problem and the gaming sound is now working fine. Also the desktop appearance is normal.

Anything else I need to do?

Cheers Chris.
Just need to do some housekeeping now.

Please do the following:

You can delete the DDS and GMER logs and programs from your desktop.


NEXT


Follow these steps to uninstall Combofix

  • Make sure your security programs are totally disabled.
  • Click START then RUN
  • Now copy/paste Combofix /uninstall into the runbox and click OK. Note the space between the ..X and the /U, it needs to be there.

[external image: Posted Image]



If there are any logs/tools remaining on your desktop > right click and delete them.


NEXT


Below I have included a number of recommendations for how to protect your computer against malware infections.

  • It is good security practice to change your passwords to all your online accounts on a fairly regular basis, this is especially true after an infection. Refer to this Microsoft article
    Strong passwords: How to create and use them
    Then consider a password keeper, to keep all your passwords safe.

  • Keep Windows updated by regularly checking their website at :
    http://windowsupdate.microsoft.com/
    This will ensure your computer has always the latest security updates available installed on your computer.

  • Make Internet Explorer more secure
    • Click Start > Run
    • Type Inetcpl.cpl & click OK
    • Click on the Security tab
    • Click Reset all zones to default level
    • Make sure the Internet Zone is selected & Click Custom level
    • In the ActiveX section, set the first two options ("Download signed and unsigned ActiveX controls) to "Prompt", and ("Initialize and Script ActiveX controls not marked as safe") to "Disable".
    • Next Click OK, then Apply button and then OK to exit the Internet Properties page.

  • Download TFC to your desktop
    • Close any open windows.
    • Double click the TFC icon to run the program
    • TFC will close all open programs itself in order to run,
    • Click the Start button to begin the process.
    • Allow TFC to run uninterrupted.
    • The program should not take long to finish it's job
    • Once its finished it should automatically reboot your machine,
    • if it doesn't, manually reboot to ensure a complete clean
    It's normal after running TFC cleaner that the PC will be slower to boot the first time.

  • WOT, Web of Trust, warns you about risky websites that try to scam visitors, deliver malware or send spam. Protect your computer against online threats by using WOT as your front-line layer of protection when browsing or searching in unfamiliar territory. WOT's color-coded icons show you ratings for 21 million websites, helping you avoid the dangerous sites:
    • Green to go
    • Yellow for caution
    • Red to stop
    WOT has an addon available for both Firefox and IE

  • Keep a backup of your important files - Now, more than ever, it's especially important to protect your digital files and memories. This article is full of good information on alternatives for home backup solutions.

  • ERUNT (Emergency Recovery Utility NT) allows you to keep a complete backup of your registry and restore it when needed. The standard registry backup options that come with Windows back up most of the registry but not all of it. ERUNT however creates a complete backup set, including the Security hive and user related sections. ERUNT is easy to use and since it creates a full backup, there are no options or choices other than to select the location of the backup files. The backup set includes a small executable that will launch the registry restore if needed.

  • In light of your recent issue, I'm sure you'd like to avoid any future infections. Please take a look at this well written article:
    PC Safety and Security–What Do I Need?.


**Be very wary with any security software that is advertised in popups or in other ways. They are not only usually of no use, but often have malware in them.

Thank you for your patience, and performing all of the procedures requested.

Please respond one last time so we can consider the thread resolved and close it, thank-you.
Hi, I've done all you requested and the system seems to be running very well indeed, compared to what it was previously. THANK YOU! Really comprehensive, patient, and easily understandable help! Regards, Chris.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI