OK, just run a new scan, not the fix and post the new log
mshta.exe virus! can you help pls TB-Psychotic or anyone? [Solved
Register to Remove
#32
Posted 22 June 2014 - 07:22 AM
still there
#33
Posted 22 June 2014 - 07:25 AM
still there
ok just saw your post I will scan with frst 64
attached is the latest frst fixlog
Attached Files
#34
Posted 22 June 2014 - 07:36 AM
here is the frst lof after a scan
Attached Files
#35
Posted 22 June 2014 - 07:45 AM
Looking over your new FRST , those entries have been removed and are gone
Lets check the actual file and see if its infected
The forum is staffed by volunteers who donate their time and expertise.
If you feel you have been helped, please consider a donation.
Find us on Facebook
Please LIKE and SHARE
Just a reminder that threads will be closed if no reply in 3 days.
#37
Posted 22 June 2014 - 09:00 AM
The file is fine and its needed by windows. Mshta showed up on your original DDS log, I would like you to run Combofix as its written by the same author and may pick up that virus
- Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools
The forum is staffed by volunteers who donate their time and expertise.
If you feel you have been helped, please consider a donation.
Find us on Facebook
Please LIKE and SHARE
Just a reminder that threads will be closed if no reply in 3 days.
#39
Posted 22 June 2014 - 10:07 AM
on a side note I wonder if you can help me. my wife has windows 8. she keeps getting the same pop ups - reg clean pro , clean your registry. we uninstall the program but it keeps coming back.
the pop ups pop up very frequently and are annoying.
can you help pls, suggest a good program to install to remove the pop ups
I have looked in the settings
she has Norton 360 but no other firewalls or antvirus.
my wife is thai and our 2 children do use her computer. when they download a program they want they may not always look at the boxes that pop up after, which asks do you want to install ask.com, or searchdial etc etc. I know it is important to read all these boxes carefully, but I don't think she does
any help pls with a program please? and I will ask her to be more careful when downloading
#40
Posted 22 June 2014 - 10:12 AM
Your system is fairly new so most new computers have a recovery console installed by the manufacturer
Registry:: [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SystemBooteHQ088Vh8yxWhinGduq9jR1yJP8FDAh2"=- "RegWriteeHQ088Vh8yxWhinGduq9jR1yJP8FDAh2"=- DDS:: uRun: [SystemBooteHQ088Vh8yxWhinGduq9jR1yJP8FDAh2] mshta.exe http://gbc.psiuyfbe....yJP8FDAh2&log=1 uRun: [RegWriteeHQ088Vh8yxWhinGduq9jR1yJP8FDAh2] mshta.exe http://gbc.psiuyfbe....uq9jR1yJP8FDAh2 uRunOnce: [RegWriteeHQ088Vh8yxWhinGduq9jR1yJP8FDAh2] mshta.exe http://gbc.psiuyfbe....uq9jR1yJP8FDAh2
The forum is staffed by volunteers who donate their time and expertise.
If you feel you have been helped, please consider a donation.
Find us on Facebook
Please LIKE and SHARE
Just a reminder that threads will be closed if no reply in 3 days.
Register to Remove
#41
Posted 22 June 2014 - 10:21 AM
Sorry, we crossed posts, what you need to do is start a new topic for your wifes computer, DDS may not run on Win 8 so have her download and run FRST and post the log also explaining her problems, you can do this for her no problem, just name the reply Wifes Computer. We can use FRST to uninstall and remove RegCleanPro
shopsave toolbar < CF also found this if you can I would uninstall it
The forum is staffed by volunteers who donate their time and expertise.
If you feel you have been helped, please consider a donation.
Find us on Facebook
Please LIKE and SHARE
Just a reminder that threads will be closed if no reply in 3 days.
#42
Posted 22 June 2014 - 11:11 AM
#43
Posted 22 June 2014 - 11:16 AM
sorry I cannot find shop save toolbar - I cannot search for it or find it on uninstall programs
thanks for reply for my wife. I will start a new topic maybe tomorrow.
Edited by kunash, 22 June 2014 - 11:17 AM.
#44
Posted 22 June 2014 - 11:17 AM
I no longer see mshta starting up in the new CF log, CF removed it, are you still getting those pop ups ?
The forum is staffed by volunteers who donate their time and expertise.
If you feel you have been helped, please consider a donation.
Find us on Facebook
Please LIKE and SHARE
Just a reminder that threads will be closed if no reply in 3 days.
#45
Posted 22 June 2014 - 11:29 AM
If you still have OTL on your desktop we can remove shop saver
:OTL :Services :Reg :Files c:\program files (x86)\shopsave toolbar ipconfig /flushdns /c :Commands [purity] [resethosts] [EMPTYJAVA] [emptytemp] [start explorer] [Reboot]
The forum is staffed by volunteers who donate their time and expertise.
If you feel you have been helped, please consider a donation.
Find us on Facebook
Please LIKE and SHARE
Just a reminder that threads will be closed if no reply in 3 days.
0 user(s) are reading this topic
0 members, 0 guests, 0 anonymous users