This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Strange things happening [Closed] [Solved]

11 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

C:\Documents and Settings\Home\My Documents\Laptop_Documents\MyDocuments\Downloads\fo-www6.exe probably a variant of Win32/Spy.VB.BOOHXUL trojan
C:\Documents and Settings\Home\My Documents\Laptop_Documents\MyDocuments\Downloads\Window_Washer_6.0_2005\fo-www6.exe probably a variant of Win32/Spy.VB.BOOHXUL trojan
F:\My_Documents_4\Downloads\YTDSetup.exe a variant of Win32/Bundled.Toolbar.Ask.D application


Delete these files.


Then we can do the cleanup - if you are facing any issues, report that immediately.

Delete junk with adwCleaner


Please download AdwCleaner to your desktop.


  • Run adwcleaner.exe.
  • Hit delete.
  • When the run is finished, it will open up a text file.
  • Please post its contents within your next reply.
  • You´ll find the log file at C:\AdwCleaner[S1].txt also.

SecurityCheck

Please download SecurityCheck: LINK1 LINK2

  • Save it to your desktop, start it and follow the instructions in the window.
  • After the scan finished the (checkup.txt) will open. Copy its content to your thread.
OK here's the AdwCleaner file…

——————————————-

# AdwCleaner v2.305 - Logfile created 07/16/2013 at 12:33:35
# Updated 11/07/2013 by Xplode
# Operating system : Microsoft Windows XP Service Pack 3 (32 bits)
# User : Home - STUDY
# Boot Mode : Normal
# Running from : C:\Documents and Settings\Home\Desktop\adwcleaner.exe
# Option [Delete]


***** [Services] *****


***** [Files / Folders] *****

Folder Deleted : C:\Documents and Settings\All Users\Application Data\Trymedia
Folder Deleted : C:\Documents and Settings\All Users\Application Data\Viewpoint
Folder Deleted : C:\Program Files\Viewpoint

***** [Registry] *****

Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Deleted : HKCU\Software\YahooPartnerToolbar
Key Deleted : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtl
Key Deleted : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtl.1
Key Deleted : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtlSecondary
Key Deleted : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtlSecondary.1
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{03F998B2-0E00-11D3-A498-00104B6EB52E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3BF72F68-72D8-461D-A884-329D936C5581}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{78E9D883-93CD-4072-BEF3-38EE581E2839}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{83AC1413-FCE4-4A46-9DD5-4F31F306E71F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6E4C89CF-3061-4EE4-B22A-B7A8AAEA5CB3}
Key Deleted : HKLM\Software\MetaStream
Key Deleted : HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{03F998B2-0E00-11D3-A498-00104B6EB52E}
Key Deleted : HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ViewpointMediaPlayer
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ViewpointMediaPlayer
Key Deleted : HKLM\Software\Viewpoint
Key Deleted : HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4}

***** [Internet Browsers] *****

-\\ Internet Explorer v8.0.6001.18702

Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - SearchMigratedDefaultName] = My Web Search –> hxxp://www.google.com
Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - SearchMigratedDefaultUrl] = hxxp://www.mywebsearch.com/jsp/cfg_redir2.jsp?id=ZU&fl=0&ptb=5gwcvK9KE3eV3suLgnoEUg&url=hxxp://edits.mywebsearch.com/toolbaredits/barsearch.jhtml&st=sb&searchfor={searchTerms} –> hxxp://www.google.com

-\\ Mozilla Firefox v21.0 (en-GB)

File : C:\Documents and Settings\Home\Application Data\Mozilla\Firefox\Profiles\phayyqil.default\prefs.js

[OK] File is clean.

*************************

AdwCleaner[S1].txt - [3502 octets] - [16/07/2013 12:33:35]

########## EOF - C:\AdwCleaner[S1].txt - [3562 octets] ##########



And now the Checkup.txt ……

————————————————–

Results of screen317's Security Check version 0.99.69
Windows XP Service Pack 3 x86
Internet Explorer 8
``````````````Antivirus/Firewall Check:``````````````
Windows Firewall Disabled!
ESET Online Scanner v3
Norton 360
`````````Anti-malware/Other Utilities Check:`````````
Gmer
Malwarebytes Anti-Malware version 1.75.0.1300
Eusing Free Registry Cleaner
Java 7 Update 25
Adobe Flash Player 11.7.700.202
Adobe Reader 9 Adobe Reader out of Date!
Adobe Reader 10.1.7 Adobe Reader out of Date!
Mozilla Firefox 21.0 Firefox out of Date!
````````Process Check: objlist.exe by Laurent````````
Norton ccSvcHst.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C:: 1%
````````````````````End of Log``````````````````````
Then your system is clean now! :)


Adobe Reader out of date

Your Adobe Reader is outdated. We will fix this.


  • Get the actual software from here. Important: Uncheck any optional software (for example Google Chrome, etc.) offered.
  • Run setup and follow the instructions.
  • Click upon Start–>control panel–>add/remove programs.
  • Search for and remove any older reader versions.




Mozilla Firefox out of date

Your Firefox browser is outdated. Please follow these instructions to update it:
  • Get the actual firefox from here.
  • Run setup and follow the instructions on your monitor.
  • Report any problems you have with the update.




Uninstall our tools using delfix

Please follow these steps in order:

  • In the case we used Defogger to turn off your CD emulation software. You can start it again and use the Enable button.
  • In the case we used Combofix. Deactivate your antivirus software once more, then rename the combofix.exe to uninstall.exe and run it one last time. You shall be noted that Combofix has been removed.
  • In any case please download delfix to your desktop.
    • Close all other programms and start delfix.
    • Please check all the boxes and run the tool.
    • delfix will now delete all found traces of our removal process
  • If there is still something left please delete it manualy.




How to protect yourself

  • System Updates
    Beeing up to date is very important. Please be sure to activate automatic updates in your control panel.
    Windows XP | Windows Vista |
    Windows 7 | windows 8
  • Protection
    What you need is one (not more) good virus scanner with backgroud protection. Additionally I recommend a special malwarescanner that you run from time to time.
    Personally I am using the avast! Antivirus Free Edition and Malwarebytes Anti-Malware. They offer you good protection for free use. But please remember: You get only the full protection if you use the payed versions of your security software.
  • Up to date Software
    Stay up to date with all the programs you use. Some of those really have to have an eye on are: your browser(s) including add-ons and plug-ins, Java, Flash Player, your virus scanner, and basically every software you use often. These link may help you to check:
    • Secunia Online Software Inspector - Checks if your software has updates available.
    • Filehippo Update Checkere - This tool also scans your computer for outdated software.
    • Mozilla: Check your plugins - The webpage will tell you if you have outdated plugins in your Firefox browser.
  • Backups
    There are chances for an emergency every day. So be prepared. Back up your data on a regular basis. If you burn it to DVDs from time to time, use a cloud-drive or a professional network backup system is your choice.
  • Brains
    It's no joke! You really need one of those things. :) It is very important not just to click anywhere it is colored or flashing while you surfing on the web. Do not click an OK button on any popping window without reading what it says. While installing software always choose the custom mode, read what those windows says and uncheck adware that will be installed along the software you want.
Hi Marius, Many thanks for you help and advise. Just been trying to run "Secunia Online Software Inspector" to check my software and get an error message. I have attached an image with the message. I have checked Java, I have uninstalled Java and downloaded and reinstalled Java, and I still get the same message. Is this a problem with the site or my PC? Thanks

Attachments:

Hi Marius, Been through the following steps twice now and get the same result……. Tested Java via your link. White box with Red cross in top left corner. Check the advise and went through these steps… » Enable Java through your Web browser » Enable Java through the Java Plug-in Control Panel » Clear Java Cache Went to Link - •Remove Older Versions To check if anything existed. Said to use Uninstall Tool. Ckicked on the Link in the middle of the window. Again White Box with Red cross in the top Left corner. Clicked on Link to Download Java. Downloaded Installer. Error saying Java is already installed, would I like to Reinstall. Said Yes. Setup installs and configures Java. Message comes up saying "You have successfully installed Java" One button to Close. Click the button. Get the another Error message. Tested Java via your link and still doesn't work.
Java runs in Firefox but doesn't in Internet Explorer. I don't usually use Firefox, my duaghter loaded it as she prefers it. Does this mean a problem with Internet explorer?
downlaod JavaRa from here: http://sourceforge.net/projects/javara/fil…load?source=dlp
Unzip the file to your desktop.
Run the tool, select your language and click ok.

Click on additional taks and place a checkmar to the following options:

Remove Useless JRE Files
Remove Startup Entry
Remove Sun Download Manager
Remove Java IE BHO

Hit OK.
When finished, click on "Remove older Versions".
Then, reboot your computer and downlad and install Java again.

Report.
Hi Marius, Many thanks for that. All working correctly now. Thanks for your knowledge and support. You guys are just great.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI