Hi
Strangely, there is mention of McAfee Shredder in the logs, but no McAfee in the programs list. Have you uninstalled that at some point?
You have no
anti-virus on your computer. It is important you install one now before we continue with your fix.
Check this out for a list of free AV scanners,
AVG is highly recommended.
I see that
Viewpoint Manager & Viewpoint Media Player is installed. Viewpoint, Viewpoint Manager, Viewpoint Media Player are Viewpoint components which are installed as a side effect of installing other software, most notably AOL and AOL Instant Messenger (AIM). Viewpoint Manager is responsible for managing and updating Viewpoint Media Player’s components. You can disable this using the Viewpoint Manager Control Panel found in the Windows Control Panel menu. By selecting
Disable auto‑updating for the Viewpoint Manager ‑‑ the player will no longer attempt to check for updates. Anything that is installed without your consent is suspect. Read what Viewpoint says and make your own decision.
To provide a satisfying consumer experience and to operate effectively, the Viewpoint Media Player periodically sends information to servers at Viewpoint. Each installation of the Viewpoint Media Player is identifiable to Viewpoint via a Customer Unique Identifier (CUID), an alphanumeric identifier embedded in the Viewpoint Media Player. The Viewpoint Media Player randomly generates the CUID during installation and uses it to indicate a unique installation of the product. A CUID is never connected to a user's name, email address, or other personal contact information. CUIDs are used for the sole purpose of filtering redundant information. Each of these information exchanges occurs anonymously.
Viewpoint Manager is considered as
foistware instead of malware since it is installed without user's approval but doesn't spy or do anything "bad". This may change, read
Viewpoint to Plunge Into Adware.
I recommend that you remove the Viewpoint products; however, decide for yourself. To uninstall the
the Viewpoint components (Viewpoint, Viewpoint Manager, Viewpoint Media Player):
- Click Start, point to Settings, and then click Control Panel.
- In Control Panel, double-click Add or Remove Programs.
- In Add or Remove Programs, highlight Viewpoint Manager , click Remove.
- Do the same for each Viewpoint component.
To enable the viewing of Hidden files follow these steps:
- Close all programs so that you are at your desktop.
- Double-click on the My Computer icon (or click Start, then select My Computer)
- Select the Tools menu and click Folder Options.
- After the new window appears select the View tab.
- Put a checkmark in the checkbox labeled Display the contents of system folders.
- Under the Hidden files and folders section select the radio button labeled Show hidden files and folders.
- Remove the checkmark from the checkbox labeled Hide file extensions for known file types.
- Remove the checkmark from the checkbox labeled Hide protected operating system files.
- Press the Apply button and then the OK button and shutdown My Computer.
Now your computer is configured to show all hidden files.
Download
Killbox
Open Killbox.exe
Check the following boxes:
Highlight all the entries in the quote box below and the
Copy them.
C:\WINDOWS\system32\geeda.dll
Then in Killbox, click File>>Paste from Clipboard
At this point the "All Files" button should be enabled so you can click it.
Click the "All Files" button.
Then click the
Red X …and for the confirmation message that will appear, you will need to click
Yes.
A second message will ask to Reboot now? You will need to click
Yes to allow the reboot.
Note: Killbox will let you know if a file does not exist.
If you have any issues with this method, you can copy and paste the lines one at a time into the Killbox top box. Then click the "Single File" button. Then click the
Red X …and for the confirmation message that will appear, you will need to click
Yes. A second message will ask to Reboot now? you will need to click
No until the last one at which time you click Yes to allow the Reboot.
Warning. Please note that this fix is specific for this poster and should not be used by anyone else:
1. Before we make changes to your registry, we need to make a back up of the key that we are going to work on:
To back up the key please do the following
- Copy the contents of the Code Box below to Notepad.
- Name the file export.bat
- Change the "Save as Type" to All Files
- and Save it on the desktop
regedit /e C:\export-run.reg "HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa"
Double-click the
export.bat file
The backup file will be placed in your C:\ directory as export-run.reg .
If there is a fatal error you can simply double click on the export-run.reg you just created to restore the registry to the state it was in before you began.
Warning. Do not click it except if I tell you to do so. Double clicking it will reintroduce the maleware to your computer and can have other unexpected effects.
2. Please do this:
- Copy the contents of the Code Box below to Notepad.
- Name the file as fix.reg
- Change the Save as Type to All Files
- and Save it on the desktop
REGEDIT4
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"Authentication Packages"=hex(7):6d,73,76,31,5f,30,00,00
Make sure there are
NO blank lines before REGEDIT4
Then
double-click on the
fix.reg file, and when it
prompts to merge say
yes.
Now post back with a new log from Deckards System Scanner.
